last executing test programs: 16.442514655s ago: executing program 0 (id=4500): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, &(0x7f00000001c0)) 16.347384267s ago: executing program 0 (id=4505): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}}, 0x0) 16.300333708s ago: executing program 0 (id=4507): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffe77, 0x0, 0x0, 0x0}, 0x400}], 0x28, 0x0, 0x0}) 16.277725039s ago: executing program 2 (id=4510): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3f}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @broadcast}, @IFLA_IPTUN_PROTO={0x5}]}}}]}, 0x48}}, 0x0) 16.187982361s ago: executing program 4 (id=4514): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x4a, 0x0, 0x84, 0xfffffffe}) open_tree(0xffffffffffffff9c, 0x0, 0x89901) 16.157664642s ago: executing program 0 (id=4516): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2041}, 0x10, 0x0) read$FUSE(r0, 0x0, 0x0) 16.092069233s ago: executing program 3 (id=4517): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) 16.091792703s ago: executing program 4 (id=4518): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x1, @loopback}, 0x10) 16.072764523s ago: executing program 0 (id=4519): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001400)=@newtaction={0xc8, 0x30, 0x25, 0x0, 0x0, {}, [{0xb4, 0x1, [@m_pedit={0xb0, 0x1, 0x0, 0x0, {{0xa}, {0x84, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x40, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_KEYS_EX={0xe, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc8}}, 0x0) 16.058434644s ago: executing program 2 (id=4520): setresuid(0xee00, 0xee00, 0x0) setresuid(0x0, 0x0, 0xffffffffffffffff) 16.009789855s ago: executing program 3 (id=4522): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002200000085000000a000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f4305", 0x0, 0x6f12, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 15.978271406s ago: executing program 4 (id=4523): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='secret\x00', &(0x7f0000000100)='AQAAAAAAAAAAAAAAABAAA=AAAAAAAAAAAAAAAA=/\x00', 0x0) 15.965894115s ago: executing program 0 (id=4524): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0xff7f, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) 15.917444147s ago: executing program 2 (id=4525): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) 15.802786679s ago: executing program 4 (id=4527): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="2c0000003900070101000000fbdbdf25047c000004008c801400018006000600803500000800", @ANYRES8=r0], 0x2c}, 0x1, 0x0, 0x0, 0x24000005}, 0x2400c004) 15.77944484s ago: executing program 2 (id=4528): r0 = socket(0x2b, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) 15.712853072s ago: executing program 4 (id=4529): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 15.647922813s ago: executing program 3 (id=4530): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000003580)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x7f, @mcast1, 0x2}, 0x1c, 0x0}}, {{&(0x7f0000000540)={0xa, 0x4e24, 0x2, @remote, 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="200000000000000029000000370000002100000000000000c20400000e33000024000000000000002900000032000000fe80000000000000000000000000003743"], 0x48}}], 0x2, 0x40000) 15.647786473s ago: executing program 2 (id=4531): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x1) 15.612585894s ago: executing program 3 (id=4532): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.611782414s ago: executing program 2 (id=4533): r0 = socket(0x1d, 0x2, 0x6) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000100)) 15.500246646s ago: executing program 3 (id=4534): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f00000013c0)='./file0\x00', 0x1000a05, &(0x7f0000000300)=ANY=[@ANYBLOB="66696c657365743d3030303030303030303030313032352c726f6f746469723d30303030303030303030303030303030303030332c706172746974696f6e3d30303030303030303030303030303030303030302c6769643d69676e6f7265006e6f6164696e6963622cde6661736b3d30303030303030303030303030303030303030343732302c62733d30303230303030303030303230303030303030362c6769643d69676e6f72652c12e7090021b0d36853f83b3237931f7bf54d593a4b0e2a94b2208a0318c4095a29b12750ca47c7a60cd523accdee2710fd9dc6171d154f9426ce2b8e251b"], 0x1, 0xc4d, &(0x7f0000001400)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x441, 0x14a) 15.459008887s ago: executing program 1 (id=4535): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='9p\x00', 0x0, &(0x7f0000000080)='trans=tcp,') 15.416512738s ago: executing program 4 (id=4536): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x2204000, &(0x7f0000000080)={[{@nobh}, {@errors_remount}, {@noblock_validity}]}, 0x1, 0x575, &(0x7f0000000d40)="$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") mount$bind(0x0, &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x13481, 0x0) 15.367718889s ago: executing program 1 (id=4537): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x70a, 0x183e, 0x32314258, 0x6, 0x4, [{0x8c, 0xf}, {0x4, 0x5}, {0x5, 0x5}, {0x400, 0x7fff}, {0x2, 0xffffff78}, {0x2e, 0xfdfd}, {0xffffdffb, 0x10}, {0xffff, 0x1f}], 0x9, 0x2, 0x2, 0x0, 0x6}}) 15.306862581s ago: executing program 3 (id=4538): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x160, 0x4c, 0x1a, 0x0, 0x25, 0x2f0, 0x258, 0x258, 0x2f0, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0xd229f37a77d4c83b}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'team_slave_1\x00'}}}, {{@uncond, 0x0, 0x160, 0x190, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @private1, @mcast1, @remote}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) 15.305990511s ago: executing program 1 (id=4539): r0 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000240)="4f15719932", 0x5}, {0x0}, {0x0}, {&(0x7f0000000500)="8f1e6433", 0x4}], 0x4, 0x4000001, 0xfffffffc) 15.256096582s ago: executing program 1 (id=4540): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x27}]}, 0x24}}, 0x0) 15.212815453s ago: executing program 1 (id=4541): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x15, 0x17, &(0x7f0000000880)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20000000}, {0x85, 0x0, 0x0, 0xa0}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llx, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9, 0xffff}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x2000000}}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.154981114s ago: executing program 1 (id=4542): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) 549.121528ms ago: executing program 32 (id=4524): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0xff7f, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) 518.918799ms ago: executing program 33 (id=4533): r0 = socket(0x1d, 0x2, 0x6) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000100)) 53.817659ms ago: executing program 34 (id=4542): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) 42.917979ms ago: executing program 35 (id=4538): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x160, 0x4c, 0x1a, 0x0, 0x25, 0x2f0, 0x258, 0x258, 0x2f0, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0xd229f37a77d4c83b}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'team_slave_1\x00'}}}, {{@uncond, 0x0, 0x160, 0x190, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @private1, @mcast1, @remote}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) 0s ago: executing program 36 (id=4536): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x2204000, &(0x7f0000000080)={[{@nobh}, {@errors_remount}, {@noblock_validity}]}, 0x1, 0x575, &(0x7f0000000d40)="$eJzs3d9rW1UcAPDvTZOt3abrQAb6IIU9OJlLt9YfE3yYj6LDgb7P0GZlNF1Gk461Dtwe9MUXGYKIA/EP8N3H4T/gXzHQwZBR9MGXym1uum5N0rRNm2g+H7jbOffc5txzz/2entObkACG1kT6Ty7i5Yj4Jok4vqksH1nhROO41Se3Z9ItibW1T/5MIsn2NY9Psv+PNjP5iF+/jDiT21pvbXllvlSplBez/GR94cZkbXnl7LWF0lx5rnx9anr6wlvTU+++83bP2vr65b+///jBBxe+PrX63c+PTtxL4mIcy8o2t2MP7mzOTMREdk0KcfG5A8/3oLJBkvT7BNiVkSzOC5GOAcdjJIt64P/vi4hYA4bSWCTiH4ZUcx7QXNs/XQeP9nFWcnAev99YAG1tf77xt5EYXV8bHVlNnlkZpevd8R7Un9bxyx/376Vb9O7vEADbunM3Is7l81vHvyQb/3bvXBfHPF+H8Q8OzoN0/vNGq/lPbmP+Ey3mP0dbxO5ubB//uUc9qKatdP73Xsv578ZDq/GRLPdCxNh4FJKr1yrldGx7MSJOR+Fwmu/0POfC6sO1dmWb53/pltbfnAs2rn3uUf7wsz8zW6qX9trupsd3I15pOf9NNvo/adH/6fW43GUdJ8v3X21X1rn9+2/tp4jXWvb/0ydaSefnk5Pr98Nk867Y6q+vTv7Wrv5+tz/t/yOd2z+ebH5eW9t5HT+O/lNuV7Z9+1vf/4eST9fTh7J9t0r1+uL5iEPJR1v3Tz392Wa+eXza/tOnOo9/re7/sYj4rMv2d1pJD0L/z+6o/3eeePjh5z+0qz9rfyE69v+b66nT2Z5uxr9uT3Av1w4AAAAAAAAGTS4ijkWSK26kc7lisfH+jpfiSK5SrdXPXK0uXZ+N9c/Kjkch13zSfbyRT5rvfxjflJ96Lj8dESci4tuRsfV8caZame134wEAAAAAAAAAAAAAAAAAAGBAHG3z+f/U7yP9Pjtg3/nKbxhe28Z/L77pCRhIu/39v9jj8wAOnvk/DC/xD8NL/MPwEv8wvMQ/DC/xD8NL/AMAAAAAAAAAAAAAAAAAAAAAAAAAAEBPXb50Kd3WVp/cnknzszeXl+arN8/OlmvzxYWlmeJMdfFGca5anauUizPVhe1er1Kt3jg/FUu3JuvlWn2ytrxyZaG6dL1+5dpCaa58pVw4kFYBAAAAAAAAAAAAAAAAAADAf0tteWW+VKmUFyUGOTG6T698Z++vk29TlCSNO6zfl26/E6NZJA3K+XSbSKLzMf0clQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgWf8GAAD//2LSLFM=") mount$bind(0x0, &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x13481, 0x0) kernel console output (not intermixed with test programs): 74.065908][ T27] audit: type=1326 audit(74.050:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8336 comm="syz.2.1718" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0f792a8 code=0x0 [ 74.134718][ T8335] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 74.137134][ T8335] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 74.138801][ T8335] REISERFS (device loop4): using ordered data mode [ 74.140949][ T8335] reiserfs: using flush barriers [ 74.148009][ T8335] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 74.158744][ T8316] (syz.0.1707,8316,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 74.163567][ T8316] (syz.0.1707,8316,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 74.171554][ T8316] JBD2: Ignoring recovery information on journal [ 74.177365][ T8335] REISERFS (device loop4): checking transaction log (loop4) [ 74.209228][ T8335] REISERFS (device loop4): Using r5 hash to sort names [ 74.210930][ T8335] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 74.267153][ T8316] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 74.336980][ T4338] ocfs2: Unmounting device (7,0) on (node local) [ 74.411364][ T8369] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1734'. [ 74.659378][ T8408] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 74.813165][ T8433] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1763'. [ 74.887444][ T8447] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 74.889175][ T8447] overlayfs: conflicting options: userxattr,redirect_dir=off [ 74.921919][ T8451] device netdevsim0 entered promiscuous mode [ 75.146871][ T8469] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 75.155539][ T8469] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 75.157176][ T8469] REISERFS (device loop2): using ordered data mode [ 75.158246][ T8469] reiserfs: using flush barriers [ 75.177276][ T8469] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 75.211417][ T8469] REISERFS (device loop2): checking transaction log (loop2) [ 75.223041][ T8469] REISERFS (device loop2): Using r5 hash to sort names [ 75.224398][ T8469] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 75.427955][ T8512] netlink: 'syz.1.1803': attribute type 8 has an invalid length. [ 75.429370][ T8512] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 75.589243][ T8532] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 2: comm syz.4.1814: lblock 2 mapped to illegal pblock 2 (length 1) [ 75.608223][ T8532] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 75.616440][ T8532] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 48: comm syz.4.1814: lblock 0 mapped to illegal pblock 48 (length 1) [ 75.620368][ T8532] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 75.622045][ T8532] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.1814: Failed to acquire dquot type 0 [ 75.640283][ T8548] nftables ruleset with unbound chain [ 75.662284][ T8532] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 75.673069][ T8537] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 75.674495][ T8537] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 75.675249][ T8532] EXT4-fs error (device loop4): ext4_evict_inode:281: inode #11: comm syz.4.1814: mark_inode_dirty error [ 75.678539][ T8532] EXT4-fs warning (device loop4): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 75.680935][ T8537] F2FS-fs (loop0): invalid crc value [ 75.683930][ T8532] EXT4-fs (loop4): 1 orphan inode deleted [ 75.684938][ T8532] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 75.707662][ T4390] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 75.712867][ T4390] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 75.714418][ T4390] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:5: Failed to release dquot type 0 [ 75.726316][ T8532] EXT4-fs (loop4): unmounting filesystem. [ 75.727934][ T8532] EXT4-fs error (device loop4): __ext4_get_inode_loc:4520: comm syz.4.1814: Invalid inode table block 1 in block_group 0 [ 75.733861][ T8537] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 75.753872][ T8537] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 75.755180][ T8537] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 75.756705][ T8532] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 75.762510][ T8532] EXT4-fs error (device loop4): ext4_quota_off:7147: inode #3: comm syz.4.1814: mark_inode_dirty error [ 75.764098][ T8537] fscrypt (loop0, inode 3): Error -61 getting encryption context [ 76.029717][ T8587] netlink: 'syz.1.1837': attribute type 21 has an invalid length. [ 76.031233][ T8587] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1837'. [ 76.043412][ T8587] netlink: 'syz.1.1837': attribute type 5 has an invalid length. [ 76.044821][ T8587] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1837'. [ 76.046534][ T8592] netlink: 'syz.2.1840': attribute type 10 has an invalid length. [ 76.121504][ T8592] team0: Port device geneve0 added [ 76.331271][ T8630] set_capacity_and_notify: 11 callbacks suppressed [ 76.331281][ T8630] loop1: detected capacity change from 0 to 8 [ 76.373231][ T8634] loop2: detected capacity change from 0 to 256 [ 76.375227][ T8634] exfat: Deprecated parameter 'utf8' [ 76.387246][ T8636] netlink: 'syz.0.1861': attribute type 10 has an invalid length. [ 76.393200][ T8634] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 76.409447][ T8610] loop4: detected capacity change from 0 to 32768 [ 76.432722][ T8610] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 76.434604][ T8610] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 76.438341][ T8610] BTRFS info (device loop4): using free space tree [ 76.495708][ T8636] team0: Port device geneve0 added [ 76.558731][ T8656] netlink: 'syz.3.1868': attribute type 10 has an invalid length. [ 76.582442][ T8656] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 76.689237][ T8682] loop3: detected capacity change from 0 to 256 [ 76.691581][ T8610] BTRFS info (device loop4): enabling ssd optimizations [ 76.720634][ T4335] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 76.847360][ T8694] loop1: detected capacity change from 0 to 1024 [ 76.871260][ T8694] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 76.889119][ T8674] loop2: detected capacity change from 0 to 32768 [ 76.928835][ T8694] EXT4-fs error (device loop1): ext4_generic_delete_entry:2729: inode #2: block 16: comm syz.1.1881: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1 [ 76.952292][ T8694] EXT4-fs error (device loop1) in ext4_delete_entry:2800: Corrupt filesystem [ 76.962757][ T8694] EXT4-fs warning (device loop1): ext4_rename_delete:3778: inode #2: comm syz.1.1881: Deleting old file: nlink 1, error=-117 [ 76.995517][ T8674] XFS (loop2): Mounting V5 Filesystem [ 77.015632][ T4857] EXT4-fs (loop1): unmounting filesystem. [ 77.071506][ T8674] XFS (loop2): Ending clean mount [ 77.176738][ T6247] XFS (loop2): Unmounting Filesystem [ 77.202161][ T8736] loop4: detected capacity change from 0 to 256 [ 77.209384][ T8736] FAT-fs (loop4): Directory bread(block 1285) failed [ 77.214665][ T8736] FAT-fs (loop4): Directory bread(block 1286) failed [ 77.216062][ T8736] FAT-fs (loop4): Directory bread(block 1287) failed [ 77.217383][ T8736] FAT-fs (loop4): Directory bread(block 1288) failed [ 77.228065][ T8736] FAT-fs (loop4): Directory bread(block 1285) failed [ 77.229431][ T8736] FAT-fs (loop4): Directory bread(block 1286) failed [ 77.236304][ T8736] FAT-fs (loop4): Directory bread(block 1287) failed [ 77.237560][ T8736] FAT-fs (loop4): Directory bread(block 1288) failed [ 77.238870][ T8736] FAT-fs (loop4): Directory bread(block 1285) failed [ 77.246746][ T8736] FAT-fs (loop4): Directory bread(block 1286) failed [ 77.300749][ T8746] netlink: 'syz.1.1900': attribute type 10 has an invalid length. [ 77.372057][ T8746] team0: Port device geneve0 added [ 77.381981][ T27] audit: type=1326 audit(77.360:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8751 comm="syz.4.1906" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb53792a8 code=0x0 [ 77.473478][ T8762] netlink: 'syz.0.1911': attribute type 1 has an invalid length. [ 77.514688][ T8769] loop4: detected capacity change from 0 to 256 [ 77.516189][ T8769] exfat: Deprecated parameter 'utf8' [ 77.538211][ T8771] device bridge_slave_1 left promiscuous mode [ 77.539421][ T8771] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.549406][ T8769] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 77.590424][ T8771] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 77.645693][ T8778] __nla_validate_parse: 5 callbacks suppressed [ 77.645703][ T8778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1917'. [ 77.698992][ T8784] netlink: 5236 bytes leftover after parsing attributes in process `syz.0.1920'. [ 77.767740][ T8794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1926'. [ 77.835469][ T8806] loop2: detected capacity change from 0 to 128 [ 77.893225][ T8812] loop0: detected capacity change from 0 to 1024 [ 77.945713][ T4390] hfsplus: b-tree write err: -5, ino 25 [ 77.947104][ T4390] hfsplus: b-tree write err: -5, ino 4 [ 77.948175][ T4390] hfsplus: b-tree write err: -5, ino 2 [ 78.045588][ T8825] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1939'. [ 78.096137][ T8825] team0: Port device geneve0 added [ 78.173212][ T8808] F2FS-fs (loop1): invalid crc value [ 78.178662][ T8828] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 78.182844][ T8808] F2FS-fs (loop1): Found nat_bits in checkpoint [ 78.202437][ T8808] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 78.205308][ T8808] F2FS-fs (loop1): Start checkpoint disabled! [ 78.214001][ T8828] ntfs3: loop2: Failed to load $Extend. [ 78.219787][ T8808] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 78.320308][ T8750] F2FS-fs (loop3): Invalid segment/section count (458783, 24 x 150994945) [ 78.322913][ T8750] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 78.327998][ T8750] F2FS-fs (loop3): invalid crc value [ 78.361392][ T8750] F2FS-fs (loop3): Found nat_bits in checkpoint [ 78.387971][ T8750] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 78.389405][ T8750] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 78.436781][ T8750] F2FS-fs (loop3): sanity_check_inode: inode (ino=7, mode=33261) should not have inline_data, run fsck to fix [ 78.553934][ T8871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1961'. [ 78.557652][ T8871] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1961'. [ 78.564156][ T8872] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 78.566065][ T8872] xt_CT: You must specify a L4 protocol and not use inversions on it [ 78.592074][ T8874] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1956'. [ 78.617644][ T8880] device veth1_macvtap left promiscuous mode [ 78.815537][ T8903] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #3: block 1: comm syz.2.1977: lblock 1 mapped to illegal pblock 1 (length 1) [ 78.819859][ T8903] Quota error (device loop2): write_blk: dquota write failed [ 78.821073][ T8903] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 78.822763][ T8903] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.1977: Failed to acquire dquot type 0 [ 78.833764][ T8903] EXT4-fs error (device loop2): ext4_free_blocks:6220: comm syz.2.1977: Freeing blocks not in datazone - block = 0, count = 4096 [ 78.838557][ T8903] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.1977: Invalid inode bitmap blk 0 in block_group 0 [ 78.841403][ T8903] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 78.843064][ T8903] EXT4-fs (loop2): 1 orphan inode deleted [ 78.844328][ T8903] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 78.852157][ T11] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 78.855060][ T11] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 78.858691][ T11] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:1: Failed to release dquot type 0 [ 78.870385][ T8823] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 78.905882][ T6247] EXT4-fs (loop2): unmounting filesystem. [ 79.270575][ T8958] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 79.285546][ T8958] ntfs3: loop3: Failed to load $Extend. [ 79.345913][ T8971] FAT-fs (loop4): Directory bread(block 64) failed [ 79.347021][ T8971] FAT-fs (loop4): Directory bread(block 65) failed [ 79.348160][ T8971] FAT-fs (loop4): Directory bread(block 66) failed [ 79.349351][ T8971] FAT-fs (loop4): Directory bread(block 67) failed [ 79.352296][ T8971] FAT-fs (loop4): Directory bread(block 68) failed [ 79.353556][ T8971] FAT-fs (loop4): Directory bread(block 69) failed [ 79.354730][ T8971] FAT-fs (loop4): Directory bread(block 70) failed [ 79.379027][ T8971] FAT-fs (loop4): Directory bread(block 71) failed [ 79.382075][ T8971] FAT-fs (loop4): Directory bread(block 72) failed [ 79.383462][ T8971] FAT-fs (loop4): Directory bread(block 73) failed [ 79.388350][ T8975] erofs: (device loop2): mounted with root inode @ nid 36. [ 79.417966][ T8949] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.1998 (8949) [ 79.439457][ T8949] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 79.447774][ T8949] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 79.449363][ T8949] BTRFS info (device loop0): force zlib compression, level 3 [ 79.464410][ T8949] BTRFS info (device loop0): turning on flush-on-commit [ 79.465784][ T8949] BTRFS info (device loop0): max_inline at 4096 [ 79.466917][ T8949] BTRFS info (device loop0): using free space tree [ 79.483723][ T8989] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2017'. [ 79.495986][ T8987] device bridge_slave_1 left promiscuous mode [ 79.498274][ T8987] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.554914][ T8987] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 79.567043][ T9005] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 79.641879][ T8949] BTRFS info (device loop0): enabling ssd optimizations [ 79.694560][ T4338] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 79.738713][ T9007] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.2021 (9007) [ 79.742598][ T9007] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 79.744439][ T9007] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 79.746236][ T9007] BTRFS info (device loop3): using free space tree [ 79.919448][ T9051] validate_nla: 2 callbacks suppressed [ 79.919460][ T9051] netlink: 'syz.0.2033': attribute type 2 has an invalid length. [ 79.969576][ T9007] BTRFS info (device loop3): enabling ssd optimizations [ 80.102366][ T4332] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 80.212177][ T9072] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2040'. [ 80.213824][ T9072] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2040'. [ 80.401742][ T9065] XFS (loop4): Mounting V5 Filesystem [ 80.477439][ T9106] ntfs: (device loop2): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 80.480944][ T9106] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 80.483496][ T9106] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 80.492404][ T9065] XFS (loop4): Ending clean mount [ 80.494726][ T9065] XFS (loop4): Quotacheck needed: Please wait. [ 80.506379][ T9065] XFS (loop4): Quotacheck: Done. [ 80.517346][ T9106] ntfs: volume version 3.1. [ 80.550330][ T4335] XFS (loop4): Unmounting Filesystem [ 80.571142][ T6247] ntfs: (device loop2): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 80.818424][ T9131] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 81.022038][ T9061] F2FS-fs (loop0): Test dummy encryption mode enabled [ 81.023558][ T9061] F2FS-fs (loop0): invalid crc value [ 81.083155][ T9120] XFS (loop1): Mounting V5 Filesystem [ 81.084822][ T9061] F2FS-fs (loop0): Found nat_bits in checkpoint [ 81.117104][ T9061] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 81.171815][ T9120] XFS (loop1): Ending clean mount [ 81.174243][ T9061] F2FS-fs (loop0): access invalid blkaddr:768 [ 81.175437][ T9061] CPU: 0 PID: 9061 Comm: syz.0.2037 Not tainted syzkaller #0 [ 81.176733][ T9061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 81.178441][ T9061] Call trace: [ 81.179030][ T9061] dump_backtrace+0x1c4/0x1f0 [ 81.179835][ T9061] show_stack+0x2c/0x3c [ 81.180520][ T9061] __dump_stack+0x30/0x40 [ 81.181221][ T9061] dump_stack_lvl+0xf4/0x15c [ 81.181993][ T9061] dump_stack+0x1c/0x5c [ 81.182744][ T9061] f2fs_is_valid_blkaddr+0x9c4/0xefc [ 81.183695][ T9061] f2fs_get_read_data_page+0x24c/0x60c [ 81.184688][ T9061] f2fs_find_data_page+0x1c4/0x520 [ 81.185628][ T9061] f2fs_empty_dir+0x10c/0x3d4 [ 81.186461][ T9061] fscrypt_ioctl_set_policy+0x4c4/0x5b0 [ 81.187457][ T9061] __f2fs_ioctl+0x26f0/0xabb4 [ 81.188308][ T9061] f2fs_ioctl+0x130/0x1b0 [ 81.189134][ T9061] __arm64_sys_ioctl+0x14c/0x1c8 [ 81.190085][ T9061] invoke_syscall+0x98/0x290 [ 81.190968][ T9061] el0_svc_common+0x13c/0x258 [ 81.191861][ T9061] do_el0_svc+0x5c/0x134 [ 81.192661][ T9061] el0_svc+0x58/0x128 [ 81.193478][ T9061] el0t_64_sync_handler+0x84/0xf0 [ 81.194465][ T9061] el0t_64_sync+0x18c/0x190 [ 81.202973][ T9120] XFS (loop1): Quotacheck needed: Please wait. [ 81.243620][ T9169] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 81.247688][ T9120] XFS (loop1): Quotacheck: Done. [ 81.275697][ T9171] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 81.278000][ T9171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.279387][ T9171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.319412][ T4857] XFS (loop1): Unmounting Filesystem [ 81.354624][ T9142] set_capacity_and_notify: 18 callbacks suppressed [ 81.354634][ T9142] loop2: detected capacity change from 0 to 32768 [ 81.378871][ T9142] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 81.381173][ T9142] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 81.392318][ T9142] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 81.395161][ T6849] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 81.396382][ T6849] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 81.408448][ T6849] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 12ms [ 81.410465][ T6849] gfs2: fsid=syz:syz.0: jid=0: Done [ 81.411382][ T9142] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 81.569693][ T9142] gfs2: fsid=syz:syz.0: found 1 quota changes [ 81.587362][ T9189] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 81.600274][ T9189] 8021q: adding VLAN 0 to HW filter on device bond2 [ 81.636545][ T9194] loop4: detected capacity change from 0 to 512 [ 81.662680][ T9194] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 81.664834][ T9194] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 81.666779][ T9194] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.2091: Failed to acquire dquot type 1 [ 81.675896][ T9194] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 81.684370][ T9194] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 81.691642][ T9194] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.2091: Failed to acquire dquot type 1 [ 81.709461][ T9194] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2091: bg 0: block 248: padding at end of block bitmap is not set [ 81.739815][ T9194] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 81.745314][ T9194] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 81.752528][ T6247] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 81.752528][ T6247] inode = 11 2339 [ 81.752528][ T6247] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 413 [ 81.755874][ T6247] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 81.757588][ T6247] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:6247 [syz-executor] gfs2_quota_sync+0x2cc/0x4e8 [ 81.759392][ T6247] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000201 s:0 p:0 [ 81.761984][ T9194] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 81.763772][ T9194] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.2091: Failed to acquire dquot type 1 [ 81.771592][ T6247] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 81.775379][ T9194] EXT4-fs (loop4): 1 orphan inode deleted [ 81.776562][ T9194] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 81.793239][ T6247] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 81.794825][ T6247] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 81.806759][ T4335] EXT4-fs (loop4): unmounting filesystem. [ 81.806827][ T6247] gfs2: fsid=syz:syz.0: File system withdrawn [ 81.818476][ T6247] CPU: 1 PID: 6247 Comm: syz-executor Not tainted syzkaller #0 [ 81.819898][ T6247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 81.821720][ T6247] Call trace: [ 81.822346][ T6247] dump_backtrace+0x1c4/0x1f0 [ 81.823185][ T6247] show_stack+0x2c/0x3c [ 81.823924][ T6247] __dump_stack+0x30/0x40 [ 81.824713][ T6247] dump_stack_lvl+0xf4/0x15c [ 81.825509][ T6247] dump_stack+0x1c/0x5c [ 81.826228][ T6247] gfs2_withdraw+0x9f8/0x1244 [ 81.827056][ T6247] gfs2_consist_inode_i+0xf8/0x114 [ 81.827950][ T6247] gfs2_inode_refresh+0x9a0/0xe64 [ 81.828895][ T6247] inode_go_instantiate+0x4c/0x68 [ 81.829842][ T6247] gfs2_instantiate+0x178/0x2b4 [ 81.830738][ T6247] gfs2_glock_wait+0x1b0/0x290 [ 81.831584][ T6247] gfs2_glock_nq+0x8bc/0x11c4 [ 81.832396][ T6247] do_sync+0x414/0xa68 [ 81.833109][ T6247] gfs2_quota_sync+0x2cc/0x4e8 [ 81.833970][ T6247] gfs2_sync_fs+0x50/0xc8 [ 81.834781][ T6247] sync_filesystem+0xe8/0x218 [ 81.835651][ T6247] generic_shutdown_super+0x74/0x32c [ 81.836570][ T6247] kill_block_super+0x78/0xe0 [ 81.837364][ T6247] gfs2_kill_sb+0xc4/0xd8 [ 81.838088][ T6247] deactivate_locked_super+0xb4/0x128 [ 81.839058][ T6247] deactivate_super+0xe4/0x104 [ 81.839890][ T6247] cleanup_mnt+0x3a8/0x430 [ 81.840659][ T6247] __cleanup_mnt+0x20/0x30 [ 81.841433][ T6247] task_work_run+0x1f4/0x280 [ 81.842270][ T6247] do_notify_resume+0x20f8/0x2c84 [ 81.843157][ T6247] el0_svc+0x98/0x128 [ 81.843854][ T6247] el0t_64_sync_handler+0x84/0xf0 [ 81.844770][ T6247] el0t_64_sync+0x18c/0x190 [ 81.939003][ T6247] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 81.944918][ T9218] random: crng reseeded on system resumption [ 81.945790][ T6247] CPU: 1 PID: 6247 Comm: syz-executor Not tainted syzkaller #0 [ 81.947337][ T6247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 81.949058][ T6247] Call trace: [ 81.949066][ T6247] dump_backtrace+0x1c4/0x1f0 [ 81.950640][ T6247] show_stack+0x2c/0x3c [ 81.951456][ T6247] __dump_stack+0x30/0x40 [ 81.952310][ T6247] dump_stack_lvl+0xf4/0x15c [ 81.953207][ T6247] dump_stack+0x1c/0x5c [ 81.954023][ T6247] gfs2_assert_warn_i+0x16c/0x26c [ 81.954989][ T6247] gfs2_quota_cleanup+0x444/0x640 [ 81.955911][ T6247] gfs2_put_super+0x1ec/0x744 [ 81.956776][ T6247] generic_shutdown_super+0x138/0x32c [ 81.957751][ T6247] kill_block_super+0x78/0xe0 [ 81.958602][ T6247] gfs2_kill_sb+0xc4/0xd8 [ 81.959420][ T6247] deactivate_locked_super+0xb4/0x128 [ 81.960436][ T6247] deactivate_super+0xe4/0x104 [ 81.961374][ T6247] cleanup_mnt+0x3a8/0x430 [ 81.962254][ T6247] __cleanup_mnt+0x20/0x30 [ 81.963126][ T6247] task_work_run+0x1f4/0x280 [ 81.964002][ T6247] do_notify_resume+0x20f8/0x2c84 [ 81.964895][ T6247] el0_svc+0x98/0x128 [ 81.965601][ T6247] el0t_64_sync_handler+0x84/0xf0 [ 81.966475][ T6247] el0t_64_sync+0x18c/0x190 [ 82.392399][ T9278] loop2: detected capacity change from 0 to 2048 [ 82.395132][ T9281] loop4: detected capacity change from 0 to 256 [ 82.413415][ T9278] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 82.669266][ T9324] loop2: detected capacity change from 0 to 256 [ 82.724976][ T9333] __nla_validate_parse: 7 callbacks suppressed [ 82.724986][ T9333] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2157'. [ 82.835001][ T9343] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2162'. [ 82.837143][ T9343] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2162'. [ 82.842770][ T9345] netlink: 'syz.0.2163': attribute type 10 has an invalid length. [ 82.952653][ T9335] loop3: detected capacity change from 0 to 32768 [ 82.974935][ T9335] ERROR: (device loop3): diAllocAG: error reading iag [ 82.974935][ T9335] [ 82.976662][ T9335] ialloc: diAlloc returned -5! [ 82.992210][ T9358] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 83.011008][ T9359] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2170'. [ 83.049602][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 83.270338][ T9385] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2183'. [ 83.289083][ T9353] loop0: detected capacity change from 0 to 32768 [ 83.317901][ T9353] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 83.324655][ T9353] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 83.327167][ T9391] loop2: detected capacity change from 0 to 256 [ 83.336578][ T9353] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 83.349012][ T6847] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 83.350531][ T6847] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 83.354187][ T9369] loop3: detected capacity change from 0 to 32768 [ 83.363290][ T9369] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.2175 (9369) [ 83.368203][ T9369] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 83.370436][ T6847] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 19ms [ 83.372379][ T9369] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 83.372799][ T6847] gfs2: fsid=syz:syz.0: jid=0: Done [ 83.374853][ T9353] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 83.375903][ T9369] BTRFS info (device loop3): turning off barriers [ 83.377132][ T9369] BTRFS info (device loop3): enabling auto defrag [ 83.383755][ T9369] BTRFS info (device loop3): force zlib compression, level 3 [ 83.388038][ T9369] BTRFS info (device loop3): enabling ssd optimizations [ 83.389423][ T9369] BTRFS info (device loop3): using spread ssd allocation scheme [ 83.391002][ T9369] BTRFS info (device loop3): using free space tree [ 83.491344][ T9353] gfs2: fsid=syz:syz.0: found 1 quota changes [ 83.553946][ T4338] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 83.553946][ T4338] inode = 11 2339 [ 83.553946][ T4338] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 413 [ 83.557246][ T4338] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 83.562382][ T4338] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:4338 [syz-executor] gfs2_quota_sync+0x2cc/0x4e8 [ 83.564237][ T4338] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 83.572072][ T4338] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 83.581414][ T4338] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 83.582880][ T4338] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 83.585262][ T4338] gfs2: fsid=syz:syz.0: File system withdrawn [ 83.586389][ T4338] CPU: 1 PID: 4338 Comm: syz-executor Not tainted syzkaller #0 [ 83.587699][ T4338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 83.589659][ T4338] Call trace: [ 83.590303][ T4338] dump_backtrace+0x1c4/0x1f0 [ 83.591198][ T4338] show_stack+0x2c/0x3c [ 83.591950][ T4338] __dump_stack+0x30/0x40 [ 83.592729][ T4338] dump_stack_lvl+0xf4/0x15c [ 83.593571][ T4338] dump_stack+0x1c/0x5c [ 83.594330][ T4338] gfs2_withdraw+0x9f8/0x1244 [ 83.595163][ T4338] gfs2_consist_inode_i+0xf8/0x114 [ 83.596052][ T4338] gfs2_inode_refresh+0x9a0/0xe64 [ 83.596955][ T4338] inode_go_instantiate+0x4c/0x68 [ 83.597824][ T4338] gfs2_instantiate+0x178/0x2b4 [ 83.598695][ T4338] gfs2_glock_wait+0x1b0/0x290 [ 83.599693][ T4338] gfs2_glock_nq+0x8bc/0x11c4 [ 83.600638][ T4338] do_sync+0x414/0xa68 [ 83.601412][ T4338] gfs2_quota_sync+0x2cc/0x4e8 [ 83.602258][ T4338] gfs2_sync_fs+0x50/0xc8 [ 83.603031][ T4338] sync_filesystem+0xe8/0x218 [ 83.603851][ T4338] generic_shutdown_super+0x74/0x32c [ 83.604750][ T4338] kill_block_super+0x78/0xe0 [ 83.605425][ T9421] loop4: detected capacity change from 0 to 4096 [ 83.605559][ T4338] gfs2_kill_sb+0xc4/0xd8 [ 83.607446][ T4338] deactivate_locked_super+0xb4/0x128 [ 83.608409][ T4338] deactivate_super+0xe4/0x104 [ 83.609282][ T4338] cleanup_mnt+0x3a8/0x430 [ 83.610069][ T4338] __cleanup_mnt+0x20/0x30 [ 83.610870][ T4338] task_work_run+0x1f4/0x280 [ 83.611685][ T4338] do_notify_resume+0x20f8/0x2c84 [ 83.612558][ T4338] el0_svc+0x98/0x128 [ 83.613299][ T4338] el0t_64_sync_handler+0x84/0xf0 [ 83.614204][ T4338] el0t_64_sync+0x18c/0x190 [ 83.628465][ T4338] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 83.633819][ T4338] CPU: 1 PID: 4338 Comm: syz-executor Not tainted syzkaller #0 [ 83.635060][ T4338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 83.636758][ T4338] Call trace: [ 83.637340][ T4338] dump_backtrace+0x1c4/0x1f0 [ 83.638170][ T4338] show_stack+0x2c/0x3c [ 83.638921][ T4338] __dump_stack+0x30/0x40 [ 83.639713][ T4338] dump_stack_lvl+0xf4/0x15c [ 83.640554][ T4338] dump_stack+0x1c/0x5c [ 83.641339][ T4338] gfs2_assert_warn_i+0x16c/0x26c [ 83.642291][ T4338] gfs2_quota_cleanup+0x444/0x640 [ 83.643246][ T4338] gfs2_put_super+0x1ec/0x744 [ 83.644143][ T4338] generic_shutdown_super+0x138/0x32c [ 83.645210][ T4338] kill_block_super+0x78/0xe0 [ 83.646107][ T4338] gfs2_kill_sb+0xc4/0xd8 [ 83.646930][ T4338] deactivate_locked_super+0xb4/0x128 [ 83.647884][ T4338] deactivate_super+0xe4/0x104 [ 83.648744][ T4338] cleanup_mnt+0x3a8/0x430 [ 83.649553][ T4338] __cleanup_mnt+0x20/0x30 [ 83.650362][ T4338] task_work_run+0x1f4/0x280 [ 83.651202][ T4338] do_notify_resume+0x20f8/0x2c84 [ 83.652098][ T4338] el0_svc+0x98/0x128 [ 83.652816][ T4338] el0t_64_sync_handler+0x84/0xf0 [ 83.653716][ T4338] el0t_64_sync+0x18c/0x190 [ 83.662671][ T9429] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2198'. [ 83.664070][ T9429] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2198'. [ 83.796420][ T9369] BTRFS info (device loop3: state M): not using spread ssd allocation scheme [ 83.797974][ T9369] BTRFS info (device loop3: state M): using spread ssd allocation scheme [ 83.859931][ T4332] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 84.118956][ T9432] XFS (loop2): Mounting V5 Filesystem [ 84.171113][ T9432] XFS (loop2): Ending clean mount [ 84.210246][ T9432] XFS (loop2): Metadata CRC error detected at xfs_rmapbt_read_verify+0x50/0x108, xfs_rmapbt block 0x14 [ 84.212581][ T9432] XFS (loop2): Unmount and run xfs_repair [ 84.213714][ T9432] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 84.214977][ T9432] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 84.216716][ T9432] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 80 ................ [ 84.218250][ T9432] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 84.250693][ T9432] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 84.251813][ T9499] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 84.252431][ T9432] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 84.255751][ T9432] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 84.276621][ T9432] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 84.278408][ T9432] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 84.280213][ T9432] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x18c/0x290" at daddr 0x14 len 4 error 74 [ 84.303275][ T9432] XFS (loop2): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x16ec/0x1fd4 (fs/xfs/libxfs/xfs_defer.c:580). Shutting down filesystem. [ 84.317221][ T9432] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 84.395531][ T6247] XFS (loop2): Unmounting Filesystem [ 84.441473][ T9521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2238'. [ 84.498748][ T9532] netlink: 1000 bytes leftover after parsing attributes in process `syz.4.2242'. [ 84.500704][ T9532] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2242'. [ 84.744937][ T11] hfsplus: bad catalog file entry [ 84.995735][ T9601] xt_hashlimit: max too large, truncated to 1048576 [ 85.236989][ T9621] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 85.293501][ T9640] No such timeout policy "syz1" [ 85.322475][ T9645] MINIX-fs: mounting file system with errors, running fsck is recommended [ 85.620180][ T9644] ERROR: (device loop2): diAllocAG: error reading iag [ 85.620180][ T9644] [ 85.624451][ T9673] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 85.626344][ T9644] ialloc: diAlloc returned -5! [ 85.756176][ T9685] netlink: 'syz.4.2316': attribute type 1 has an invalid length. [ 85.926748][ T9704] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 85.937215][ T9704] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 86.082538][ T9728] x_tables: unsorted underflow at hook 3 [ 86.106515][ T9732] random: crng reseeded on system resumption [ 86.287546][ T9755] overlayfs: missing 'lowerdir' [ 86.363118][ T9730] set_capacity_and_notify: 9 callbacks suppressed [ 86.363127][ T9730] loop1: detected capacity change from 0 to 32768 [ 86.370104][ T9730] [ 86.370104][ T9730] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 86.370104][ T9730] [ 86.386028][ T9730] ERROR: (device loop1): diWrite: ixpxd invalid [ 86.386028][ T9730] [ 86.398530][ T9730] ERROR: (device loop1): txAbort: [ 86.398530][ T9730] [ 86.429100][ T4857] [ 86.429100][ T4857] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 86.429100][ T4857] [ 86.442073][ T4857] [ 86.442073][ T4857] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 86.442073][ T4857] [ 86.617647][ T9757] loop4: detected capacity change from 0 to 32768 [ 86.624097][ T9757] [ 86.624097][ T9757] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 86.624097][ T9757] [ 86.667644][ T9757] [ 86.667644][ T9757] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 86.667644][ T9757] [ 86.671995][ T9801] loop0: detected capacity change from 0 to 256 [ 86.683513][ T9801] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011bf5, chksum : 0x8604b368, utbl_chksum : 0xe619d30d) [ 86.685754][ T9801] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 86.687467][ T9801] exFAT-fs (loop0): failed to load alloc-bitmap [ 86.688727][ T9801] exFAT-fs (loop0): failed to recognize exfat type [ 86.693657][ T9757] [ 86.693657][ T9757] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 86.693657][ T9757] [ 86.735579][ T4335] [ 86.735579][ T4335] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 86.735579][ T4335] [ 86.738794][ T4335] [ 86.738794][ T4335] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 86.738794][ T4335] [ 86.794756][ T9817] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 86.803847][ T9819] loop3: detected capacity change from 0 to 256 [ 86.837107][ T9824] kernel profiling enabled (shift: 7) [ 86.995969][ T9848] loop3: detected capacity change from 0 to 2048 [ 86.999136][ T9849] loop4: detected capacity change from 0 to 8 [ 87.003795][ T9849] Filesystem uses "unknown" compression. This is not supported [ 87.029155][ T9848] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 87.065447][ T9857] netlink: 'syz.0.2397': attribute type 21 has an invalid length. [ 87.072903][ T9848] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1376) has entry at pos 232 with incorrect tag 520 [ 87.183782][ T9877] loop1: detected capacity change from 0 to 65 [ 87.198296][ T9877] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway [ 87.245039][ T9884] sock: sock_timestamping_bind_phc: sock not bind to device [ 87.316574][ T9893] loop2: detected capacity change from 0 to 512 [ 87.396042][ T9893] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 87.409579][ T9882] loop3: detected capacity change from 0 to 32768 [ 87.428442][ T9895] loop4: detected capacity change from 0 to 8192 [ 87.445787][ T9893] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2414: bg 0: block 352: padding at end of block bitmap is not set [ 87.450426][ T9882] JBD2: Ignoring recovery information on journal [ 87.452281][ T9882] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75 [ 87.454365][ T9882] JBD2: bad block at offset 32 [ 87.493459][ T9893] __quota_error: 1 callbacks suppressed [ 87.493469][ T9893] Quota error (device loop2): write_blk: dquota write failed [ 87.496100][ T9895] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" [ 87.498413][ T9882] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 87.511090][ T9882] ocfs2: Unmounting device (7,3) on (node local) [ 87.530353][ T9893] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 87.538797][ T9893] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.2414: Failed to acquire dquot type 1 [ 87.648409][ T6247] EXT4-fs (loop2): unmounting filesystem. [ 87.691481][ T9928] netlink: 'syz.3.2429': attribute type 2 has an invalid length. [ 87.769284][ T9944] SET target dimension over the limit! [ 87.791819][ T9897] XFS (loop1): Mounting V5 Filesystem [ 87.861246][ T9897] XFS (loop1): Ending clean mount [ 87.888865][ T4857] XFS (loop1): Unmounting Filesystem [ 87.920637][ T9961] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 88.014206][ T9962] ntfs3: loop0: ino=3, Correct links count -> 2. [ 88.043974][ T9968] Trying to free block not in datazone [ 88.045096][ T9968] Trying to free block not in datazone [ 88.059518][ T9968] Trying to free block not in datazone [ 88.060464][ T9968] Trying to free block not in datazone [ 88.440614][T10024] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 88.498895][T10005] read_mapping_page failed! [ 88.500838][T10005] ERROR: (device loop3): txAbort: [ 88.500838][T10005] [ 88.596880][ T6247] EXT4-fs (loop2): unmounting filesystem. [ 88.670577][T10020] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.2469 (10020) [ 88.683108][T10020] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 88.684968][T10020] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 88.686467][T10020] BTRFS info (device loop4): using free space tree [ 88.711885][T10025] JBD2: Ignoring recovery information on journal [ 88.719962][T10025] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75 [ 88.732043][T10025] JBD2: bad block at offset 32 [ 88.757442][T10025] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 88.763896][T10025] ocfs2: Unmounting device (7,1) on (node local) [ 88.894667][T10020] BTRFS info (device loop4): enabling ssd optimizations [ 88.916592][T10071] __nla_validate_parse: 5 callbacks suppressed [ 88.916604][T10071] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2486'. [ 88.982732][ T4335] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 89.078137][T10083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2489'. [ 89.155833][T10097] netlink: 'syz.4.2495': attribute type 15 has an invalid length. [ 89.164606][T10098] x_tables: unsorted entry at hook 3 [ 89.246661][ T5689] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop4 scanned by udevd (5689) [ 89.269166][T10111] netlink: 'syz.1.2502': attribute type 30 has an invalid length. [ 89.640889][T10150] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 89.697424][T10145] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 89.698444][T10164] ieee802154 phy0 wpan0: encryption failed: -22 [ 89.699140][T10145] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 89.703165][ T6247] EXT4-fs (loop2): unmounting filesystem. [ 89.721816][T10145] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 89.725394][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 89.726519][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 89.748509][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 21ms [ 89.753193][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 89.754159][T10145] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 89.843627][T10145] gfs2: fsid=syz:syz.0: found 1 quota changes [ 89.867802][T10178] nft_compat: unsupported protocol 5 [ 89.905642][ T4335] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 89.928575][ T4335] CPU: 0 PID: 4335 Comm: syz-executor Not tainted syzkaller #0 [ 89.930096][ T4335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 89.931909][ T4335] Call trace: [ 89.932479][ T4335] dump_backtrace+0x1c4/0x1f0 [ 89.933311][ T4335] show_stack+0x2c/0x3c [ 89.934089][ T4335] __dump_stack+0x30/0x40 [ 89.934901][ T4335] dump_stack_lvl+0xf4/0x15c [ 89.935758][ T4335] dump_stack+0x1c/0x5c [ 89.936525][ T4335] gfs2_assert_warn_i+0x16c/0x26c [ 89.937376][ T4335] gfs2_quota_cleanup+0x444/0x640 [ 89.938375][ T4335] gfs2_make_fs_ro+0x36c/0x444 [ 89.939327][ T4335] gfs2_put_super+0x1dc/0x744 [ 89.940277][ T4335] generic_shutdown_super+0x138/0x32c [ 89.941362][ T4335] kill_block_super+0x78/0xe0 [ 89.942310][ T4335] gfs2_kill_sb+0xc4/0xd8 [ 89.943173][ T4335] deactivate_locked_super+0xb4/0x128 [ 89.944301][ T4335] deactivate_super+0xe4/0x104 [ 89.945353][ T4335] cleanup_mnt+0x3a8/0x430 [ 89.946304][ T4335] __cleanup_mnt+0x20/0x30 [ 89.947229][ T4335] task_work_run+0x1f4/0x280 [ 89.948207][ T4335] do_notify_resume+0x20f8/0x2c84 [ 89.949248][ T4335] el0_svc+0x98/0x128 [ 89.950007][ T4335] el0t_64_sync_handler+0x84/0xf0 [ 89.950982][ T4335] el0t_64_sync+0x18c/0x190 [ 89.951926][ C0] vkms_vblank_simulate: vblank timer overrun [ 90.033904][T10182] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 90.096827][T10174] XFS (loop2): Mounting V5 Filesystem [ 90.153809][T10174] XFS (loop2): Ending clean mount [ 90.193737][T10174] XFS (loop2): EXPERIMENTAL online scrub feature in use. Use at your own risk! [ 90.237071][ T6247] XFS (loop2): Unmounting Filesystem [ 90.316128][T10210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2547'. [ 90.474964][T10222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.486725][T10221] hfsplus: invalid length 1280 has been corrected to 255 [ 90.488122][T10221] hfsplus: invalid length 1280 has been corrected to 255 [ 90.592042][T10232] EXT4-fs: Ignoring removed bh option [ 90.629578][T10162] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 90.631082][T10162] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 90.634964][T10162] F2FS-fs (loop1): invalid crc value [ 90.659097][T10162] F2FS-fs (loop1): Found nat_bits in checkpoint [ 90.671394][T10232] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 90.717959][T10162] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 90.719277][T10162] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 90.753049][T10162] F2FS-fs (loop1): inaccessible inode: 1, run fsck to repair [ 90.770543][ T4335] EXT4-fs (loop4): unmounting filesystem. [ 90.784663][T10252] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2564'. [ 90.969040][T10273] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2584'. [ 90.996695][T10233] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 90.998672][T10233] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 91.001776][T10233] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 91.005780][ T7173] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 91.006957][ T7173] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 91.035912][ T7173] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 28ms [ 91.037326][ T7173] gfs2: fsid=syz:syz.0: jid=0: Done [ 91.038223][T10233] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 91.075310][T10286] x_tables: ip_tables: osf match: only valid for protocol 6 [ 91.206354][T10298] x_tables: duplicate entry at hook 4 [ 91.213433][T10233] gfs2: fsid=syz:syz.0: found 1 quota changes [ 91.294651][ T6247] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 91.297354][ T6247] CPU: 0 PID: 6247 Comm: syz-executor Not tainted syzkaller #0 [ 91.298861][ T6247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 91.300721][ T6247] Call trace: [ 91.301317][ T6247] dump_backtrace+0x1c4/0x1f0 [ 91.302193][ T6247] show_stack+0x2c/0x3c [ 91.302962][ T6247] __dump_stack+0x30/0x40 [ 91.303780][ T6247] dump_stack_lvl+0xf4/0x15c [ 91.304207][T10277] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 91.304645][ T6247] dump_stack+0x1c/0x5c [ 91.304658][ T6247] gfs2_assert_warn_i+0x16c/0x26c [ 91.308142][ T6247] gfs2_quota_cleanup+0x444/0x640 [ 91.309082][ T6247] gfs2_make_fs_ro+0x36c/0x444 [ 91.309937][ T6247] gfs2_put_super+0x1dc/0x744 [ 91.310764][ T6247] generic_shutdown_super+0x138/0x32c [ 91.311733][ T6247] kill_block_super+0x78/0xe0 [ 91.312578][ T6247] gfs2_kill_sb+0xc4/0xd8 [ 91.313358][ T6247] deactivate_locked_super+0xb4/0x128 [ 91.314324][ T6247] deactivate_super+0xe4/0x104 [ 91.315165][ T6247] cleanup_mnt+0x3a8/0x430 [ 91.315932][ T6247] __cleanup_mnt+0x20/0x30 [ 91.316700][ T6247] task_work_run+0x1f4/0x280 [ 91.317516][ T6247] do_notify_resume+0x20f8/0x2c84 [ 91.318401][ T6247] el0_svc+0x98/0x128 [ 91.319083][ T6247] el0t_64_sync_handler+0x84/0xf0 [ 91.319957][ T6247] el0t_64_sync+0x18c/0x190 [ 91.320747][ C0] vkms_vblank_simulate: vblank timer overrun [ 91.361031][T10310] device bond1 entered promiscuous mode [ 91.364178][T10310] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.423215][T10318] ALSA: mixer_oss: invalid OSS volume '”' [ 91.609120][T10335] device geneve3 entered promiscuous mode [ 91.626125][T10343] delete_channel: no stack [ 91.747286][T10362] random: crng reseeded on system resumption [ 91.761974][T10363] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (6) [ 91.858357][T10374] set_capacity_and_notify: 17 callbacks suppressed [ 91.858367][T10374] loop2: detected capacity change from 0 to 256 [ 91.918466][T10386] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 91.944772][T10390] ALSA: mixer_oss: invalid OSS volume '”' [ 92.006008][ T27] audit: type=1400 audit(91.990:10): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=10396 comm="syz.1.2634" [ 92.078778][T10405] loop1: detected capacity change from 0 to 4096 [ 92.102654][T10405] ntfs3: loop1: ino=3, Correct links count -> 2. [ 92.164475][T10420] ALSA: mixer_oss: invalid OSS volume '”' [ 92.194420][ T27] audit: type=1400 audit(92.180:11): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=10424 comm="syz.2.2649" [ 92.217081][T10427] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2650'. [ 92.275107][T10438] No such timeout policy "syz1" [ 92.629691][T10497] ieee802154 phy0 wpan0: encryption failed: -22 [ 92.638946][T10499] loop1: detected capacity change from 0 to 64 [ 92.774730][T10517] loop1: detected capacity change from 0 to 24 [ 92.775666][T10511] usb usb5: usbfs: interface 0 claimed by hub while 'syz.3.2691' sets config #1 [ 92.776164][T10517] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 92.790535][T10517] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 92.808653][T10517] VFS: Lookup of 'file0' in romfs loop1 would have caused loop [ 92.814604][T10519] SET target dimension over the limit! [ 92.862424][T10489] loop2: detected capacity change from 0 to 32768 [ 92.905634][T10489] find_entry called with index = 0 [ 92.907744][T10489] read_mapping_page failed! [ 92.908559][T10489] ERROR: (device loop2): txAbort: [ 92.908559][T10489] [ 92.963999][T10542] loop1: detected capacity change from 0 to 256 [ 92.995125][T10546] vivid-000: ================= START STATUS ================= [ 92.996574][T10546] vivid-000: Enable Output Cropping: true [ 92.997619][T10546] vivid-000: Enable Output Composing: true [ 92.998648][T10546] vivid-000: Enable Output Scaler: true [ 93.008365][T10542] FAT-fs (loop1): Directory bread(block 64) failed [ 93.015318][T10542] FAT-fs (loop1): Directory bread(block 65) failed [ 93.016531][T10542] FAT-fs (loop1): Directory bread(block 66) failed [ 93.017734][T10542] FAT-fs (loop1): Directory bread(block 67) failed [ 93.020346][T10546] vivid-000: Tx RGB Quantization Range: Automatic [ 93.021854][T10546] vivid-000: Transmit Mode: HDMI [ 93.023866][T10546] vivid-000: Display Present: true inactive [ 93.024674][T10550] openvswitch: netlink: Missing key (keys=40, expected=100) [ 93.030554][T10542] FAT-fs (loop1): Directory bread(block 68) failed [ 93.031702][T10542] FAT-fs (loop1): Directory bread(block 69) failed [ 93.035082][T10546] vivid-000: Hotplug Present: 0x00000001 [ 93.035994][T10546] vivid-000: RxSense Present: 0x00000001 [ 93.037015][T10546] vivid-000: EDID Present: 0x00000001 [ 93.037949][T10546] vivid-000: ================== END STATUS ================== [ 93.043334][T10542] FAT-fs (loop1): Directory bread(block 70) failed [ 93.044446][T10542] FAT-fs (loop1): Directory bread(block 71) failed [ 93.060959][T10542] FAT-fs (loop1): Directory bread(block 72) failed [ 93.062117][T10542] FAT-fs (loop1): Directory bread(block 73) failed [ 93.243766][T10549] loop2: detected capacity change from 0 to 32768 [ 93.248760][T10549] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 93.344899][T10582] ax25_connect(): syz.2.2726 uses autobind, please contact jreuter@yaina.de [ 93.381944][T10587] lo speed is unknown, defaulting to 1000 [ 93.406275][T10587] lo speed is unknown, defaulting to 1000 [ 93.419413][T10587] lo speed is unknown, defaulting to 1000 [ 93.488318][T10598] trusted_key: encrypted_key: keylen parameter is missing [ 93.511511][T10602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2736'. [ 93.515444][ T3901] lo speed is unknown, defaulting to 1000 [ 93.516824][T10587] infiniband syz1: set active [ 93.517817][T10587] infiniband syz1: added lo [ 93.544835][T10587] RDS/IB: syz1: added [ 93.548364][T10587] smc: adding ib device syz1 with port count 1 [ 93.554475][T10587] smc: ib device syz1 port 1 has pnetid [ 93.557143][T10607] loop1: detected capacity change from 0 to 1024 [ 93.558515][ T3901] lo speed is unknown, defaulting to 1000 [ 93.585077][T10610] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 93.585948][T10587] lo speed is unknown, defaulting to 1000 [ 93.626538][T10607] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 93.654752][T10587] lo speed is unknown, defaulting to 1000 [ 93.674440][T10587] lo speed is unknown, defaulting to 1000 [ 93.694641][T10587] lo speed is unknown, defaulting to 1000 [ 93.729201][T10587] lo speed is unknown, defaulting to 1000 [ 93.739385][ T4857] EXT4-fs (loop1): unmounting filesystem. [ 94.008133][T10660] netlink: 'syz.4.2763': attribute type 22 has an invalid length. [ 94.030158][T10660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2763'. [ 94.219257][T10683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2774'. [ 94.281810][T10691] loop4: detected capacity change from 0 to 512 [ 94.288709][T10654] loop3: detected capacity change from 0 to 40427 [ 94.312505][T10692] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 94.312754][T10654] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 94.320962][T10692] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 94.332947][T10654] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 94.336799][T10654] F2FS-fs (loop3): invalid crc value [ 94.338962][T10700] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 94.344743][ T4338] EXT4-fs (loop0): unmounting filesystem. [ 94.345207][T10691] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 94.368128][T10654] F2FS-fs (loop3): Found nat_bits in checkpoint [ 94.381470][T10691] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.2778: corrupted xattr block 33 [ 94.389333][T10691] EXT4-fs (loop4): Remounting filesystem read-only [ 94.395312][T10691] fscrypt (loop4, inode 15): Error -117 getting encryption context [ 94.400650][T10654] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 94.401932][T10654] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 94.420377][T10710] Unknown vers= option specified: 3.0/ [ 94.420377][T10710] [ 94.421762][T10710] CIFS: VFS: Unknown vers= option specified: 3.0/ [ 94.433743][ T4335] EXT4-fs (loop4): unmounting filesystem. [ 94.447957][T10713] IPv6: sit1: Disabled Multicast RS [ 94.707871][T10736] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2798'. [ 95.131618][T10796] netlink: 'syz.3.2826': attribute type 4 has an invalid length. [ 95.132940][T10796] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2826'. [ 95.234290][T10768] F2FS-fs (loop4): invalid crc value [ 95.262624][T10768] F2FS-fs (loop4): Found nat_bits in checkpoint [ 95.274503][T10768] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 95.292508][T10768] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 95.308975][T10768] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 95.315340][T10788] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 95.368497][ T5276] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 95.467780][T10795] blkno = 8ed2c, nblocks = 1 [ 95.468671][T10795] ERROR: (device loop2): dbFree: block to be freed is outside the map [ 95.468671][T10795] [ 95.477798][T10795] ERROR: (device loop2): remounting filesystem as read-only [ 95.479201][T10795] ialloc: diAlloc returned -17! [ 95.537277][T10816] erofs: (device loop3): mounted with root inode @ nid 36. [ 95.820152][T10856] xt_cgroup: xt_cgroup: no path or classid specified [ 95.823204][T10857] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2853'. [ 95.884758][T10863] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2857'. [ 95.917597][T10869] xt_HMARK: spi-set and port-set can't be combined [ 95.962065][T10875] netlink: 'syz.4.2862': attribute type 3 has an invalid length. [ 96.011546][T10839] F2FS-fs (loop2): Invalid log_blocksize (64), supports only 12 [ 96.012987][T10839] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 96.022395][T10839] F2FS-fs (loop2): invalid crc value [ 96.037346][T10839] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 96.057853][T10839] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 96.072369][T10839] F2FS-fs (loop2): Start checkpoint disabled! [ 96.080531][T10877] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 96.087601][T10839] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 96.089053][T10839] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 96.094631][T10839] F2FS-fs (loop2): switch discard_unit option is not allowed [ 96.097462][T10888] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 96.156095][T10895] netlink: 'syz.4.2871': attribute type 21 has an invalid length. [ 96.303127][ T4338] EXT4-fs (loop0): unmounting filesystem. [ 96.348132][T10900] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 96.734541][T10949] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2896'. [ 96.757744][T10920] F2FS-fs (loop3): invalid crc value [ 96.793938][T10920] F2FS-fs (loop3): Found nat_bits in checkpoint [ 96.805822][T10920] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 96.814140][T10957] device veth3 entered promiscuous mode [ 96.831935][T10920] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 96.864337][T10920] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 96.876489][T10914] XFS (loop4): Mounting V5 Filesystem [ 96.948621][T10914] XFS (loop4): Ending clean mount [ 96.963693][T10914] XFS (loop4): EXPERIMENTAL online scrub feature in use. Use at your own risk! [ 97.031067][ T4335] XFS (loop4): Unmounting Filesystem [ 97.047719][T10975] set_capacity_and_notify: 14 callbacks suppressed [ 97.047730][T10975] loop0: detected capacity change from 0 to 32768 [ 97.076735][T10975] read_mapping_page failed! [ 97.077732][T10975] ialloc: diAlloc returned -5! [ 97.425175][T10992] loop0: detected capacity change from 0 to 40427 [ 97.427319][T10992] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 97.428945][T10992] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 97.431618][T10992] F2FS-fs (loop0): invalid crc value [ 97.440498][T10992] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 97.474509][T10999] loop2: detected capacity change from 0 to 40427 [ 97.476880][T10992] F2FS-fs (loop0): Start checkpoint disabled! [ 97.489290][T10999] F2FS-fs (loop2): invalid crc value [ 97.491650][T10992] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 97.493037][T10992] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 97.516811][T10999] F2FS-fs (loop2): Found nat_bits in checkpoint [ 97.558199][T10992] syz.0.2912: attempt to access beyond end of device [ 97.558199][T10992] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 97.571434][T10999] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 97.615417][T10999] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 97.651203][T10999] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 97.662777][ T39] kworker/u4:2: attempt to access beyond end of device [ 97.662777][ T39] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 97.671806][T11047] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 97.744909][T11053] overlayfs: missing 'lowerdir' [ 97.808051][T11057] cgroup: noprefix used incorrectly [ 98.379396][T11153] netlink: 'syz.2.2990': attribute type 5 has an invalid length. [ 98.542049][T11174] loop0: detected capacity change from 0 to 1024 [ 98.569217][T11174] syz.0.3001: attempt to access beyond end of device [ 98.569217][T11174] loop0: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 98.572304][T11174] Buffer I/O error on dev loop0, logical block 458752, async page read [ 98.573861][T11174] syz.0.3001: attempt to access beyond end of device [ 98.573861][T11174] loop0: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 98.576095][T11174] Buffer I/O error on dev loop0, logical block 458752, async page read [ 98.614668][T11184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3007'. [ 98.624579][T11149] loop4: detected capacity change from 0 to 32768 [ 98.637382][T11149] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.2989 (11149) [ 98.673451][T11191] overlayfs: './file0' not a directory [ 98.683645][T11149] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 98.685545][T11149] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 98.687048][T11149] BTRFS info (device loop4): enabling disk space caching [ 98.688418][T11149] BTRFS info (device loop4): force clearing of disk cache [ 98.699579][T11149] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 98.701312][T11149] BTRFS info (device loop4): use zstd compression, level 3 [ 98.702527][T11149] BTRFS info (device loop4): disk space caching is enabled [ 98.837094][T11226] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3022'. [ 98.838649][T11226] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 98.978005][T11149] BTRFS info (device loop4): enabling ssd optimizations [ 98.983087][T11149] BTRFS info (device loop4): rebuilding free space tree [ 98.987636][T11149] BTRFS info (device loop4): disabling free space tree [ 98.988899][T11149] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 99.004720][T11149] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 99.112829][T11264] x_tables: unsorted underflow at hook 2 [ 99.124093][ T4335] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 99.206554][ T5430] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 11 /dev/loop4 scanned by udevd (5430) [ 99.259077][T11284] vhci_hcd: invalid port number 253 [ 99.260423][T11284] vhci_hcd: invalid port number 253 [ 99.368833][T11300] loop1: detected capacity change from 0 to 512 [ 99.406389][T11300] EXT4-fs error (device loop1): ext4_orphan_get:1409: inode #15: comm syz.1.3054: casefold flag without casefold feature [ 99.409215][T11300] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.3054: couldn't read orphan inode 15 (err -117) [ 99.428854][T11300] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 99.464212][T11308] loop0: detected capacity change from 0 to 64 [ 99.549299][ T4857] EXT4-fs (loop1): unmounting filesystem. [ 99.661744][T11295] loop4: detected capacity change from 0 to 32768 [ 99.727613][T11295] XFS (loop4): Mounting V5 Filesystem [ 99.772951][T11295] XFS (loop4): Ending clean mount [ 99.777547][T11295] XFS: no-recovery mounts must be read-only. [ 99.798451][ T4335] XFS (loop4): Unmounting Filesystem [ 100.001292][T11359] netlink: 'syz.0.3078': attribute type 15 has an invalid length. [ 100.122417][T11370] loop0: detected capacity change from 0 to 4096 [ 100.127198][T11370] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 100.186568][T11383] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3089'. [ 100.198520][T11382] loop2: detected capacity change from 0 to 256 [ 100.205770][T11382] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 100.227782][T11387] vhci_hcd: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 100.248294][T11391] bpf: Bad value for 'mode' [ 100.336222][T11399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3097'. [ 100.459540][T11420] CIFS mount error: No usable UNC path provided in device string! [ 100.459540][T11420] [ 100.461516][T11420] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 100.489820][T11422] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 100.826785][T11468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3132'. [ 100.939403][T11480] xt_HMARK: proto mask must be zero with L3 mode [ 101.086429][T11469] (syz.1.3130,11469,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 101.092655][T11469] (syz.1.3130,11469,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 101.113492][T11469] JBD2: Ignoring recovery information on journal [ 101.116254][T11495] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 101.207089][T11469] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 101.240922][T11505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3149'. [ 101.263950][T11495] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 101.264436][T11438] F2FS-fs (loop2): Invalid segment/section count (458783, 24 x 150994945) [ 101.267026][T11438] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 101.291751][T11438] F2FS-fs (loop2): invalid crc value [ 101.311952][T11438] F2FS-fs (loop2): Found nat_bits in checkpoint [ 101.330451][T11438] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 101.331782][T11438] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 101.376054][ T4857] ocfs2: Unmounting device (7,1) on (node local) [ 101.409194][T11517] overlayfs: unrecognized mount option "\" or missing value [ 101.608393][T11538] netlink: 'syz.4.3165': attribute type 1 has an invalid length. [ 101.617032][T11538] netlink: 216 bytes leftover after parsing attributes in process `syz.4.3165'. [ 101.618631][T11538] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3165'. [ 101.726986][T11552] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 101.815885][T11568] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 102.083419][T11559] set_capacity_and_notify: 8 callbacks suppressed [ 102.083432][T11559] loop1: detected capacity change from 0 to 32768 [ 102.090914][T11559] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 102.110806][T11603] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3195'. [ 102.124424][T11603] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3195'. [ 102.126087][T11603] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3195'. [ 102.142266][ T5689] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 102.178015][T11611] loop4: detected capacity change from 0 to 1024 [ 102.215252][T11611] hfsplus: invalid file type 0177755 for inode 17 [ 102.355643][ T6847] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 102.357106][ T6847] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 102.365923][ T6847] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 102.367281][ T6847] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 102.368595][ T6847] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 102.386844][ T6847] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 102.455812][T11642] loop1: detected capacity change from 0 to 2048 [ 102.473148][T11642] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 102.491447][T11645] loop4: detected capacity change from 0 to 1764 [ 102.529188][T11645] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 102.564531][T11621] loop2: detected capacity change from 0 to 32768 [ 102.622742][T11621] XFS (loop2): Mounting V5 Filesystem [ 102.700860][T11621] XFS (loop2): Ending clean mount [ 102.706861][T11621] XFS (loop2): Quotacheck needed: Please wait. [ 102.739621][T11621] XFS (loop2): Quotacheck: Done. [ 102.756408][T11647] loop0: detected capacity change from 0 to 32768 [ 102.761656][T11647] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 102.763381][T11647] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 102.767134][T11647] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 102.769180][ T5870] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 102.770498][ T5870] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 102.784613][ T5870] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 14ms [ 102.786034][ T5870] gfs2: fsid=syz:syz.0: jid=0: Done [ 102.786937][T11647] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 102.789948][T11647] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 102.789948][T11647] inode = 0 2340 [ 102.789948][T11647] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 409 [ 102.793454][T11647] gfs2: fsid=syz:syz.0: G: s:SH n:2/924 f:qobnN t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 102.795403][T11647] gfs2: fsid=syz:syz.0: H: s:SH f:AH e:0 p:11647 [syz.0.3217] inode_permission+0x1d0/0x3c0 [ 102.797295][T11647] gfs2: fsid=syz:syz.0: I: n:0/2340 t:4 f:0x00 d:0x00000200 s:0 p:0 [ 102.798760][T11647] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 102.806830][ T6247] XFS (loop2): Unmounting Filesystem [ 102.809767][T11647] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 102.811312][T11647] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 102.812492][T11647] gfs2: fsid=syz:syz.0: File system withdrawn [ 102.813484][T11647] CPU: 1 PID: 11647 Comm: syz.0.3217 Not tainted syzkaller #0 [ 102.814743][T11647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 102.816448][T11647] Call trace: [ 102.816999][T11647] dump_backtrace+0x1c4/0x1f0 [ 102.817804][T11647] show_stack+0x2c/0x3c [ 102.818566][T11647] __dump_stack+0x30/0x40 [ 102.819398][T11647] dump_stack_lvl+0xf4/0x15c [ 102.820181][T11647] dump_stack+0x1c/0x5c [ 102.820912][T11647] gfs2_withdraw+0x9f8/0x1244 [ 102.821758][T11647] gfs2_consist_inode_i+0xf8/0x114 [ 102.822694][T11647] gfs2_inode_refresh+0x9a0/0xe64 [ 102.823630][T11647] inode_go_instantiate+0x4c/0x68 [ 102.824530][T11647] gfs2_instantiate+0x178/0x2b4 [ 102.825390][T11647] gfs2_glock_wait+0x1b0/0x290 [ 102.826229][T11647] gfs2_glock_nq+0x8bc/0x11c4 [ 102.827062][T11647] gfs2_permission+0x288/0x468 [ 102.827940][T11647] inode_permission+0x1d0/0x3c0 [ 102.828816][T11647] may_open+0x274/0x3b8 [ 102.829511][T11647] path_openat+0x1e98/0x27a0 [ 102.830315][T11647] do_filp_open+0x198/0x38c [ 102.831117][T11647] do_sys_openat2+0x134/0x3fc [ 102.831956][T11647] __arm64_sys_openat+0x11c/0x150 [ 102.832845][T11647] invoke_syscall+0x98/0x290 [ 102.833633][T11647] el0_svc_common+0x13c/0x258 [ 102.834466][T11647] do_el0_svc+0x5c/0x134 [ 102.835201][T11647] el0_svc+0x58/0x128 [ 102.835919][T11647] el0t_64_sync_handler+0x84/0xf0 [ 102.836798][T11647] el0t_64_sync+0x18c/0x190 [ 102.858053][T11649] loop3: detected capacity change from 0 to 32768 [ 102.882412][T11649] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.3218 (11649) [ 102.902252][T11649] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 102.904100][T11649] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 102.916215][T11669] fido_id[11669]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 102.917575][T11649] BTRFS info (device loop3): enabling auto defrag [ 102.927675][T11649] BTRFS info (device loop3): force clearing of disk cache [ 102.928973][T11649] BTRFS info (device loop3): disabling log replay at mount time [ 102.933030][T11681] binder: 11680:11681 ioctl c00c6211 0 returned -14 [ 102.943470][T11649] BTRFS info (device loop3): turning on async discard [ 102.944692][T11649] BTRFS info (device loop3): setting nodatacow, compression disabled [ 102.946122][T11649] BTRFS info (device loop3): turning off async discard [ 102.947325][T11649] BTRFS info (device loop3): disabling free space tree [ 102.948594][T11649] BTRFS info (device loop3): disabling tree log [ 102.968861][T11649] BTRFS info (device loop3): enabling disk space caching [ 102.984330][T11649] BTRFS info (device loop3): disk space caching is enabled [ 103.025982][T11698] xt_TCPMSS: Only works on TCP SYN packets [ 103.087310][T11703] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3237'. [ 103.091650][T11703] netlink: 'syz.0.3237': attribute type 1 has an invalid length. [ 103.225768][ T4332] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 103.390884][T11746] 9pnet_fd: p9_fd_create_tcp (11746): problem binding to privport [ 103.468913][T11758] netlink: 'syz.0.3259': attribute type 1 has an invalid length. [ 103.599162][T11773] loop2: detected capacity change from 0 to 256 [ 103.604444][T11779] netlink: zone id is out of range [ 103.605543][T11779] netlink: zone id is out of range [ 103.606431][T11779] netlink: zone id is out of range [ 103.607303][T11779] netlink: zone id is out of range [ 103.613617][T11779] netlink: zone id is out of range [ 103.614562][T11779] netlink: zone id is out of range [ 103.615534][T11779] netlink: zone id is out of range [ 103.616239][T11773] exfat: Deprecated parameter 'namecase' [ 103.617517][T11773] exfat: Deprecated parameter 'utf8' [ 103.622138][T11773] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d) [ 103.629814][T11779] netlink: zone id is out of range [ 103.794583][T11801] loop3: detected capacity change from 0 to 256 [ 103.796226][T11801] exfat: Deprecated parameter 'namecase' [ 103.797245][T11801] exfat: Deprecated parameter 'namecase' [ 103.861101][T11801] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 103.878122][T11815] net_ratelimit: 14 callbacks suppressed [ 103.878135][T11815] netlink: zone id is out of range [ 103.880358][T11815] netlink: zone id is out of range [ 103.881330][T11815] netlink: zone id is out of range [ 103.882308][T11815] netlink: zone id is out of range [ 103.883537][T11815] netlink: zone id is out of range [ 103.884624][T11815] netlink: zone id is out of range [ 103.887739][T11815] netlink: zone id is out of range [ 103.888574][T11815] netlink: zone id is out of range [ 103.919169][T11815] netlink: zone id is out of range [ 103.926369][T11815] netlink: zone id is out of range [ 104.264541][T11877] loop0: detected capacity change from 0 to 1024 [ 104.266050][T11877] EXT4-fs: Ignoring removed bh option [ 104.341505][T11877] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 104.410420][ T4338] EXT4-fs (loop0): unmounting filesystem. [ 104.588472][T11923] netlink: 'syz.3.3339': attribute type 27 has an invalid length. [ 104.831932][T11902] XFS (loop1): Mounting V5 Filesystem [ 104.873784][T11902] XFS (loop1): Ending clean mount [ 104.882833][T11902] XFS (loop1): EXPERIMENTAL online scrub feature in use. Use at your own risk! [ 104.949398][ T4857] XFS (loop1): Unmounting Filesystem [ 105.050827][T11963] XFS (loop0): Mounting V5 Filesystem [ 105.117119][T11963] XFS (loop0): Ending clean mount [ 105.120023][T11963] XFS (loop0): Quotacheck needed: Please wait. [ 105.135296][T11963] XFS (loop0): Quotacheck: Done. [ 105.190657][ T4338] XFS (loop0): Unmounting Filesystem [ 105.203678][T11999] exfat: Deprecated parameter 'namecase' [ 105.204811][T11999] exfat: Deprecated parameter 'namecase' [ 105.222829][T11999] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 105.370672][T12018] netlink: 'syz.4.3378': attribute type 1 has an invalid length. [ 105.372362][T12018] __nla_validate_parse: 3 callbacks suppressed [ 105.372371][T12018] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3378'. [ 105.387265][T12022] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3381'. [ 105.611006][T12056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3398'. [ 105.893480][T12094] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.958591][T12105] netlink: 'syz.4.3422': attribute type 21 has an invalid length. [ 105.960261][T12105] netlink: 'syz.4.3422': attribute type 4 has an invalid length. [ 106.106814][T12076] F2FS-fs (loop1): invalid crc value [ 106.116932][T12076] F2FS-fs (loop1): Found nat_bits in checkpoint [ 106.122971][T12130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3433'. [ 106.137702][T12076] F2FS-fs (loop1): Start checkpoint disabled! [ 106.152283][T12076] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 106.162599][T12076] F2FS-fs (loop1): disabling checkpoint not compatible with read-only [ 106.414654][T12126] jfs_strtoUCS: char2uni returned -22. [ 106.415741][T12126] charset = cp932, char = 0xfc [ 106.514216][T12171] ipt_ECN: cannot use operation on non-tcp rule [ 106.593628][T12168] EXT4-fs: inline encryption not supported [ 106.608731][T12168] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 106.643010][T12168] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=884ec098, mo2=0002] [ 106.656926][T12168] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 106.690174][T12185] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 106.862466][ T4335] EXT4-fs (loop4): unmounting filesystem. [ 106.903710][T12205] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[4338] was attempted by "ci2-linux-6-1-kasan-arm64/syz-executor exec"[12205] [ 106.928354][T12208] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3464'. [ 106.954347][T12210] device sit0 left promiscuous mode [ 106.960444][T12210] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 106.962132][T12210] device nlmon0 left promiscuous mode [ 106.965612][T12214] Soft offlining pfn 0x13f5f9 at process virtual address 0x20ff9000 [ 106.970500][T12210] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 106.971901][T12210] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 106.978460][T12214] Memory failure: 0x13f5f9: unhandlable page. [ 107.003958][T12210] device gre1 left promiscuous mode [ 107.005253][T12210] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 107.013868][T12210] device bond1 left promiscuous mode [ 107.028664][T12174] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 107.033534][T12174] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 107.064079][T12174] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 107.066204][ T7173] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 107.067366][ T7173] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 107.084206][ T7173] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 16ms [ 107.091516][ T7173] gfs2: fsid=syz:syz.0: jid=0: Done [ 107.092515][T12174] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 107.095283][T12174] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 107.095283][T12174] inode = 0 2340 [ 107.095283][T12174] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 409 [ 107.105663][T12174] gfs2: fsid=syz:syz.0: G: s:SH n:2/924 f:qobnN t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 107.107150][T12174] gfs2: fsid=syz:syz.0: H: s:SH f:AH e:0 p:12174 [syz.1.3454] inode_permission+0x1d0/0x3c0 [ 107.108953][T12174] gfs2: fsid=syz:syz.0: I: n:0/2340 t:4 f:0x00 d:0x00000200 s:0 p:0 [ 107.123735][T12174] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 107.125372][T12174] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 107.126842][T12174] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 107.132700][T12174] gfs2: fsid=syz:syz.0: File system withdrawn [ 107.133840][T12174] CPU: 0 PID: 12174 Comm: syz.1.3454 Not tainted syzkaller #0 [ 107.135246][T12174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 107.137128][T12174] Call trace: [ 107.137753][T12174] dump_backtrace+0x1c4/0x1f0 [ 107.138644][T12174] show_stack+0x2c/0x3c [ 107.139426][T12174] __dump_stack+0x30/0x40 [ 107.140320][T12174] dump_stack_lvl+0xf4/0x15c [ 107.141250][T12174] dump_stack+0x1c/0x5c [ 107.142086][T12174] gfs2_withdraw+0x9f8/0x1244 [ 107.143001][T12174] gfs2_consist_inode_i+0xf8/0x114 [ 107.143872][T12174] gfs2_inode_refresh+0x9a0/0xe64 [ 107.144810][T12174] inode_go_instantiate+0x4c/0x68 [ 107.145700][T12174] gfs2_instantiate+0x178/0x2b4 [ 107.146579][T12174] gfs2_glock_wait+0x1b0/0x290 [ 107.147427][T12174] gfs2_glock_nq+0x8bc/0x11c4 [ 107.148233][T12174] gfs2_permission+0x288/0x468 [ 107.149074][T12174] inode_permission+0x1d0/0x3c0 [ 107.149936][T12174] may_open+0x274/0x3b8 [ 107.150688][T12174] path_openat+0x1e98/0x27a0 [ 107.151484][T12174] do_filp_open+0x198/0x38c [ 107.152286][T12174] do_sys_openat2+0x134/0x3fc [ 107.153126][T12174] __arm64_sys_openat+0x11c/0x150 [ 107.153991][T12174] invoke_syscall+0x98/0x290 [ 107.154798][T12174] el0_svc_common+0x13c/0x258 [ 107.155632][T12174] do_el0_svc+0x5c/0x134 [ 107.156402][T12174] el0_svc+0x58/0x128 [ 107.157110][T12174] el0t_64_sync_handler+0x84/0xf0 [ 107.157997][T12174] el0t_64_sync+0x18c/0x190 [ 107.390409][T12257] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3493'. [ 107.450622][T12263] xt_TCPMSS: Only works on TCP SYN packets [ 107.542169][T12272] usb usb8: check_ctrlrecip: process 12272 (syz.2.3502) requesting ep 01 but needs 81 [ 107.543986][T12272] usb usb8: usbfs: process 12272 (syz.2.3502) did not claim interface 0 before use [ 107.564363][T12241] set_capacity_and_notify: 10 callbacks suppressed [ 107.564372][T12241] loop3: detected capacity change from 0 to 32768 [ 107.578155][T12268] loop4: detected capacity change from 0 to 4096 [ 107.628517][T12283] loop2: detected capacity change from 0 to 512 [ 107.691955][T12241] XFS (loop3): Mounting V5 Filesystem [ 107.713383][T12283] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 107.744893][T12241] XFS (loop3): Ending clean mount [ 107.778294][ T6247] EXT4-fs (loop2): unmounting filesystem. [ 107.813213][T12309] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3515'. [ 107.815040][T12309] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3515'. [ 107.816744][T12241] XFS (loop3): EXPERIMENTAL online scrub feature in use. Use at your own risk! [ 107.890237][ T4332] XFS (loop3): Unmounting Filesystem [ 108.165315][ T9] nvme nvme1: rdma_resolve_route failed (-110). [ 108.169173][T12331] nvme nvme1: rdma connection establishment failed (-19) [ 108.344345][T12356] netlink: 'syz.4.3537': attribute type 21 has an invalid length. [ 108.352383][T12356] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3537'. [ 108.354093][T12356] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3537'. [ 108.391276][T12342] virtio_blk virtio1: 1/0/0 default/read/poll queues [ 108.406737][T12342] virtio_blk virtio1: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 108.414720][T12362] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 108.422575][T12362] vhci_hcd: invalid port number 255 [ 108.423550][T12362] vhci_hcd: invalid port number 255 [ 108.518145][T12370] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 108.637310][T12390] loop3: detected capacity change from 0 to 16 [ 108.648847][T12390] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 108.723760][T12398] netlink: 'syz.4.3557': attribute type 22 has an invalid length. [ 108.728176][ T27] audit: type=1400 audit(108.710:12): apparmor="DENIED" operation="change_onexec" info="label not found" error=-22 profile="unconfined" name="&" pid=12401 comm="syz.1.3560" [ 108.993529][T12445] syz.2.3578: attempt to access beyond end of device [ 108.993529][T12445] loop2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 108.996032][T12445] syz.2.3578: attempt to access beyond end of device [ 108.996032][T12445] loop2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 108.998338][T12445] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 109.019117][T12445] syz.2.3578: attempt to access beyond end of device [ 109.019117][T12445] loop2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 109.029119][T12445] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 109.036577][T12445] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 109.037981][T12445] UDF-fs: Scanning with blocksize 512 failed [ 109.064963][T12445] syz.2.3578: attempt to access beyond end of device [ 109.064963][T12445] loop2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 109.075158][T12445] syz.2.3578: attempt to access beyond end of device [ 109.075158][T12445] loop2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 109.077375][T12445] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 109.090804][T12445] syz.2.3578: attempt to access beyond end of device [ 109.090804][T12445] loop2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 109.093006][T12445] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 109.094617][T12445] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 109.095922][T12445] UDF-fs: Scanning with blocksize 1024 failed [ 109.097160][T12445] syz.2.3578: attempt to access beyond end of device [ 109.097160][T12445] loop2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 109.126996][T12445] syz.2.3578: attempt to access beyond end of device [ 109.126996][T12445] loop2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 109.147783][T12445] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 109.151091][T12445] syz.2.3578: attempt to access beyond end of device [ 109.151091][T12445] loop2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 109.153729][T12445] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 109.161389][T12445] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 109.168661][T12445] UDF-fs: Scanning with blocksize 2048 failed [ 109.180290][T12445] syz.2.3578: attempt to access beyond end of device [ 109.180290][T12445] loop2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 109.182725][T12445] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 109.184475][T12445] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 109.204282][T12445] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 109.205641][T12445] UDF-fs: Scanning with blocksize 4096 failed [ 109.206617][T12445] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 109.478939][T12477] loop2: detected capacity change from 0 to 32768 [ 109.509018][T12477] jfs_strtoUCS: char2uni returned -22. [ 109.516152][T12477] charset = cp932, char = 0xfc [ 109.777184][T12510] netlink: 'syz.3.3613': attribute type 10 has an invalid length. [ 109.779058][T12510] batman_adv: batadv0: Adding interface: virt_wifi0 [ 109.794869][T12510] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.799296][T12510] batman_adv: batadv0: Not using interface virt_wifi0 (retrying later): interface not active [ 109.856791][T12502] loop1: detected capacity change from 0 to 32768 [ 109.874034][T12505] loop2: detected capacity change from 0 to 32768 [ 109.896427][T12505] JBD2: Ignoring recovery information on journal [ 109.897573][T12502] ERROR: (device loop1): diAllocAG: ipimap->i_size is wrong [ 109.897573][T12502] [ 109.908394][T12502] ERROR: (device loop1): remounting filesystem as read-only [ 109.909926][T12502] ialloc: diAlloc returned -5! [ 109.949159][T12440] loop0: detected capacity change from 0 to 131072 [ 109.953336][T12440] F2FS-fs (loop0): Invalid log sectorsize (67108873) [ 109.954549][T12440] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 109.960044][T12440] F2FS-fs (loop0): invalid crc value [ 109.998140][T12505] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 110.004587][T12440] F2FS-fs (loop0): Found nat_bits in checkpoint [ 110.023207][T12440] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 110.024859][T12440] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 110.031431][T12440] F2FS-fs (loop0): sanity_check_inode: inode (ino=4, mode=1773) should not have inline_dentry, run fsck to fix [ 110.152688][T12505] OCFS2: ERROR (device loop2): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 110.152728][T12505] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 110.157708][T12505] OCFS2: Returning error to the calling process. [ 110.158873][T12505] (syz.2.3610,12505,0):ocfs2_calc_xattr_init:642 ERROR: status = -117 [ 110.163208][T12505] (syz.2.3610,12505,0):ocfs2_mknod:334 ERROR: status = -117 [ 110.164804][T12505] (syz.2.3610,12505,0):ocfs2_mknod:502 ERROR: status = -117 [ 110.166209][T12505] (syz.2.3610,12505,0):ocfs2_mkdir:659 ERROR: status = -117 [ 110.232963][ T6247] ocfs2: Unmounting device (7,2) on (node local) [ 110.461879][T12586] loop3: detected capacity change from 0 to 2048 [ 110.483470][T12586] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.500396][T12591] net_ratelimit: 13 callbacks suppressed [ 110.500406][T12591] ip_tables: iptables: counters copy to user failed while replacing table [ 110.572177][ T4342] Bluetooth: hci0: command 0x080f tx timeout [ 110.608111][T12601] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 110.697578][T12617] __nla_validate_parse: 5 callbacks suppressed [ 110.697589][T12617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3663'. [ 110.756556][T12626] netlink: 6692 bytes leftover after parsing attributes in process `syz.0.3667'. [ 110.762064][T12627] loop1: detected capacity change from 0 to 1024 [ 110.763841][T12627] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 110.772565][T12627] EXT4-fs error (device loop1): ext4_get_journal_inode:5762: inode #32: comm syz.1.3668: iget: special inode unallocated [ 110.774843][T12627] EXT4-fs (loop1): no journal found [ 110.775730][T12627] EXT4-fs (loop1): can't get journal size [ 110.788351][T12627] EXT4-fs (loop1): filesystem is read-only [ 110.789367][T12627] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 110.882795][ T4857] EXT4-fs (loop1): unmounting filesystem. [ 111.041385][T12650] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 111.059746][T12621] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 111.061229][T12621] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 111.063238][T12621] F2FS-fs (loop2): invalid crc_offset: 33558524 [ 111.074905][T12650] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 449: comm syz.0.3680: Attempting to read directory block (449) that is past i_size (460032) [ 111.093099][T12621] F2FS-fs (loop2): Found nat_bits in checkpoint [ 111.107320][T12668] ipt_CLUSTERIP: Please specify an interface name [ 111.157590][ T4338] EXT4-fs (loop0): unmounting filesystem. [ 111.172589][T12621] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 111.173886][T12621] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 111.260059][T12683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3692'. [ 111.264086][T12683] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 111.292308][ T4336] Bluetooth: hci4: command 0x2016 tx timeout [ 111.344553][T12693] erofs: (device loop4): mounted with root inode @ nid 36. [ 111.447421][T12706] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 111.475306][T12711] netlink: 'syz.4.3705': attribute type 8 has an invalid length. [ 111.628941][T12730] CIFS: bad ip= option (.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð) [ 111.885783][T12763] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 111.906725][T12724] XFS (loop2): Mounting V5 Filesystem [ 111.966033][T12724] XFS (loop2): Ending clean mount [ 112.005538][ T6247] XFS (loop2): Unmounting Filesystem [ 112.107893][T12787] netlink: 'syz.0.3738': attribute type 3 has an invalid length. [ 112.315028][T12806] netlink: 'syz.0.3746': attribute type 4 has an invalid length. [ 112.317792][T12806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3746'. [ 112.411477][T12817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3752'. [ 112.416553][T12817] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3752'. [ 112.567333][T12828] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 112.610155][T12828] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 449: comm syz.2.3758: Attempting to read directory block (449) that is past i_size (460032) [ 112.621634][T12836] set_capacity_and_notify: 7 callbacks suppressed [ 112.621642][T12836] loop1: detected capacity change from 0 to 4096 [ 112.624498][T12836] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 112.688359][ T6247] EXT4-fs (loop2): unmounting filesystem. [ 112.797595][T12844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3764'. [ 112.885702][T12860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3772'. [ 112.887351][T12860] netlink: 62 bytes leftover after parsing attributes in process `syz.0.3772'. [ 112.960300][T12865] SET target dimension over the limit! [ 112.997419][T12874] netlink: 'syz.2.3779': attribute type 12 has an invalid length. [ 113.045597][T12880] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 113.077213][T12883] loop4: detected capacity change from 0 to 64 [ 113.096487][T12891] random: crng reseeded on system resumption [ 113.195911][T12898] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 113.233753][T12910] xt_CT: You must specify a L4 protocol and not use inversions on it [ 113.278207][T12916] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3799'. [ 113.414378][T12932] loop3: detected capacity change from 0 to 8 [ 113.533554][T12948] xt_hashlimit: max too large, truncated to 1048576 [ 113.545309][T12947] loop3: detected capacity change from 0 to 2048 [ 113.554027][T12947] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 113.589757][T12950] netlink: 'syz.4.3816': attribute type 3 has an invalid length. [ 113.645587][T12958] xt_ipcomp: unknown flags 2 [ 114.223050][T12925] loop0: detected capacity change from 0 to 131072 [ 114.260316][T12925] F2FS-fs (loop0): Found nat_bits in checkpoint [ 114.279697][T12925] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 114.289093][T12925] F2FS-fs (loop0): list inode (7) has corrupted xattr [ 114.383986][ T27] audit: type=1326 audit(114.370:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13031 comm="syz.1.3856" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff877792a8 code=0x0 [ 114.404635][T13036] loop2: detected capacity change from 0 to 64 [ 114.537895][T13050] loop1: detected capacity change from 0 to 1764 [ 114.739312][T13076] loop1: detected capacity change from 0 to 8 [ 114.873231][T13025] loop3: detected capacity change from 0 to 32768 [ 114.891181][T13025] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 114.892526][T13025] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 114.978485][T13025] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 114.984328][ T5862] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 114.985604][ T5862] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 115.028845][ T5862] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 43ms [ 115.034198][ T5862] gfs2: fsid=syz:syz.0: jid=0: Done [ 115.037703][T13025] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 115.062680][T13104] netlink: 'syz.1.3888': attribute type 3 has an invalid length. [ 115.270879][T13123] netlink: 'syz.1.3897': attribute type 10 has an invalid length. [ 115.366402][T13135] loop3: detected capacity change from 0 to 64 [ 115.546769][T13156] netlink: 'syz.3.3910': attribute type 21 has an invalid length. [ 115.616404][T13166] netlink: 'syz.4.3918': attribute type 21 has an invalid length. [ 115.624842][T13166] netlink: 'syz.4.3918': attribute type 1 has an invalid length. [ 115.673935][T13174] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 115.675954][T13174] device batadv0 left promiscuous mode [ 115.690914][T13174] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 115.692427][T13174] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 115.717549][T13174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge1: link becomes ready [ 115.719000][T13174] device gre1 left promiscuous mode [ 115.726855][T13174] device erspan1 left promiscuous mode [ 115.728080][T13174] device veth3 left promiscuous mode [ 115.846664][T13193] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 115.854821][T13193] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 115.855324][T13199] __nla_validate_parse: 8 callbacks suppressed [ 115.855337][T13199] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3935'. [ 115.860657][T13193] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 115.862635][T13193] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 115.865115][T13193] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 115.867792][T13193] ntfs: volume version 3.1. [ 115.869477][T13193] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 115.888732][T13193] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 115.895220][T13193] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 115.897525][T13193] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 116.003302][T13218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3944'. [ 116.097211][T13232] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 116.301329][ T4336] Bluetooth: hci1: unexpected subevent 0x03 length: 30 > 9 [ 116.305596][T13269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3969'. [ 116.354705][T13275] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3971'. [ 116.446497][T13289] lo speed is unknown, defaulting to 1000 [ 116.447743][T13289] lo speed is unknown, defaulting to 1000 [ 116.449300][T13289] lo speed is unknown, defaulting to 1000 [ 116.468964][T13289] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 116.477488][T13294] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 116.487034][T13294] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 116.488502][T13294] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 116.519448][T13294] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 116.539308][T13289] lo speed is unknown, defaulting to 1000 [ 116.541283][T13289] lo speed is unknown, defaulting to 1000 [ 116.544797][T13289] lo speed is unknown, defaulting to 1000 [ 116.546090][T13289] lo speed is unknown, defaulting to 1000 [ 116.548514][T13289] lo speed is unknown, defaulting to 1000 [ 116.702897][T13321] netlink: 33024 bytes leftover after parsing attributes in process `syz.4.3995'. [ 116.765448][T13330] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3997'. [ 116.840650][T13337] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4003'. [ 116.895414][T13342] validate_nla: 1 callbacks suppressed [ 116.895425][T13342] netlink: 'syz.4.4006': attribute type 2 has an invalid length. [ 116.897830][T13342] netlink: 'syz.4.4006': attribute type 8 has an invalid length. [ 116.899194][T13342] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4006'. [ 117.075729][T13323] XFS (loop1): Mounting V5 Filesystem [ 117.120105][T13323] XFS (loop1): Ending clean mount [ 117.122696][T13323] XFS (loop1): Quotacheck needed: Please wait. [ 117.166792][T13323] XFS (loop1): Quotacheck: Done. [ 117.214657][T13378] infiniband syz1: set active [ 117.224539][T13378] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 117.232035][T13378] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 117.237989][T13378] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 117.270912][ T5862] lo speed is unknown, defaulting to 1000 [ 117.288325][ T4857] XFS (loop1): Unmounting Filesystem [ 117.385020][T13396] netlink: 'syz.2.4029': attribute type 48 has an invalid length. [ 117.486056][T13408] netlink: 'syz.2.4034': attribute type 1 has an invalid length. [ 117.537748][T13415] xt_connbytes: Forcing CT accounting to be enabled [ 117.575185][T13325] delete_channel: no stack [ 117.814579][T13447] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 117.816903][T13447] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 117.835940][T13447] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 117.852174][T13447] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 118.087048][T13489] netlink: 'syz.4.4073': attribute type 2 has an invalid length. [ 118.102854][T13489] netlink: 'syz.4.4073': attribute type 1 has an invalid length. [ 118.211085][T13498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4077'. [ 118.270623][T13505] siw: device registration error -23 [ 118.288206][T13484] set_capacity_and_notify: 7 callbacks suppressed [ 118.288216][T13484] loop2: detected capacity change from 0 to 32768 [ 118.310342][T13484] XFS (loop2): Mounting V5 Filesystem [ 118.359378][T13484] XFS (loop2): Ending clean mount [ 118.369054][T13484] XFS (loop2): Quotacheck needed: Please wait. [ 118.403022][T13484] XFS (loop2): Quotacheck: Done. [ 118.416011][T13520] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 118.418077][T13520] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 118.419429][T13520] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 118.461055][T13520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge1: link becomes ready [ 118.512686][ T6247] XFS (loop2): Unmounting Filesystem [ 118.589193][T13534] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4094'. [ 118.897591][T13561] loop1: detected capacity change from 0 to 4096 [ 118.947859][T13561] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 118.996579][T13475] loop0: detected capacity change from 0 to 131072 [ 119.006146][T13475] F2FS-fs (loop0): invalid crc value [ 119.014102][ T4857] ntfs3: loop1: ntfs_evict_inode r=3 failed, -22. [ 119.015675][ T4857] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 119.016966][ T4857] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 119.040130][T13475] F2FS-fs (loop0): Found nat_bits in checkpoint [ 119.072832][T13475] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 119.077584][T13475] F2FS-fs (loop0): Corrupted max_depth of 3: 16842753 [ 119.180116][T13586] loop1: detected capacity change from 0 to 256 [ 119.196195][T13586] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dea2b4, utbl_chksum : 0xe619d30d) [ 119.440528][T13609] tc_dump_action: action bad kind [ 119.626036][T13626] loop0: detected capacity change from 0 to 256 [ 119.693558][T13634] loop3: detected capacity change from 0 to 512 [ 119.709394][T13634] EXT2-fs (loop3): nobh option not supported [ 119.715760][T13634] EXT2-fs (loop3): warning: mounting ext3 filesystem as ext2 [ 119.758532][T13644] loop2: detected capacity change from 0 to 2048 [ 119.780449][T13647] netlink: 'syz.4.4147': attribute type 1 has an invalid length. [ 119.787398][T13651] netlink: 'syz.3.4146': attribute type 39 has an invalid length. [ 119.794527][T13644] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 120.024535][T13685] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 120.025842][T13685] IPv6: NLM_F_CREATE should be set when creating new route [ 120.027125][T13685] IPv6: NLM_F_CREATE should be set when creating new route [ 120.028377][T13685] IPv6: NLM_F_CREATE should be set when creating new route [ 120.038509][T13687] x_tables: unsorted entry at hook 2 [ 120.083877][T13695] loop2: detected capacity change from 0 to 512 [ 120.085464][T13695] EXT4-fs: Ignoring removed bh option [ 120.126532][T13695] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e00ce01c, mo2=0002] [ 120.127910][T13695] System zones: 1-12 [ 120.145765][T13700] loop3: detected capacity change from 0 to 512 [ 120.153106][T13695] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #15: comm syz.2.4171: inode has both inline data and extents flags [ 120.166591][T13695] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.4171: couldn't read orphan inode 15 (err -117) [ 120.191649][T13695] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 120.219040][T13711] netlink: 'syz.1.4176': attribute type 21 has an invalid length. [ 120.224949][T13700] EXT4-fs error (device loop3): ext4_orphan_get:1435: comm syz.3.4172: bad orphan inode 13 [ 120.226687][T13700] ext4_test_bit(bit=12, block=4) = 1 [ 120.230284][T13700] is_bad_inode(inode)=0 [ 120.231022][T13700] NEXT_ORPHAN(inode)=0 [ 120.231753][T13700] max_ino=32 [ 120.232397][T13700] i_nlink=1 [ 120.233000][T13700] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 120.250494][T13712] loop0: detected capacity change from 0 to 64 [ 120.255514][ T6247] EXT4-fs (loop2): unmounting filesystem. [ 120.264680][T13712] hfs: unable to locate alternate MDB [ 120.267119][T13712] hfs: continuing without an alternate MDB [ 120.268792][T13700] EXT4-fs warning (device loop3): dx_probe:845: inode #2: comm syz.3.4172: Hash code is SIPHASH, but hash not in dirent [ 120.280243][T13700] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.4172: Corrupt directory, running e2fsck is recommended [ 120.282879][T13700] EXT4-fs warning (device loop3): dx_probe:845: inode #2: comm syz.3.4172: Hash code is SIPHASH, but hash not in dirent [ 120.305428][T13700] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.4172: Corrupt directory, running e2fsck is recommended [ 120.307620][T13700] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #2: block 13: comm syz.3.4172: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=0, rec_len=6, size=1024 fake=0 [ 120.355690][ T4332] EXT4-fs (loop3): unmounting filesystem. [ 120.607354][T13744] 9pnet: Could not find request transport: 0xffffffffffffffff [ 120.803502][T13772] __ntfs_error: 7 callbacks suppressed [ 120.803513][T13772] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 120.806523][T13772] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 120.817979][T13772] ntfs: volume version 3.1. [ 120.824071][T13772] ntfs: (device loop4): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 120.828365][T13772] ntfs: (device loop4): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 120.838442][T13772] ntfs: (device loop4): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 120.986223][T13766] (syz.0.4201,13766,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 120.988772][T13766] (syz.0.4201,13766,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 121.014928][T13766] (syz.0.4201,13766,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 121.018543][T13766] JBD2: Ignoring recovery information on journal [ 121.029173][T13803] __nla_validate_parse: 6 callbacks suppressed [ 121.029184][T13803] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4219'. [ 121.156955][T13766] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 121.160944][T13824] erofs: (device loop2): mounted with root inode @ nid 36. [ 121.183053][T13766] (syz.0.4201,13766,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC. [ 121.190095][T13766] (syz.0.4201,13766,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae [ 121.196521][T13766] (syz.0.4201,13766,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 121.202858][T13766] (syz.0.4201,13766,0):ocfs2_quota_read:201 ERROR: status = -5 [ 121.205995][T13766] Quota error (device loop0): find_next_id: Can't read quota tree block 5 [ 121.207714][T13766] (syz.0.4201,13766,0):ocfs2_get_next_id:909 ERROR: status = -5 [ 121.254210][ T4338] ocfs2: Unmounting device (7,0) on (node local) [ 121.329334][ T27] audit: type=1800 audit(121.310:14): pid=13821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.4.4223" name="/newroot/906/bus" dev="tmpfs" ino=4634 res=0 errno=0 [ 121.345084][T13844] netlink: 'syz.3.4235': attribute type 3 has an invalid length. [ 121.346665][T13844] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4235'. [ 121.418215][T13855] exfat: Deprecated parameter 'utf8' [ 121.434461][T13855] exfat: Deprecated parameter 'namecase' [ 121.457632][T13855] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 121.565149][T13876] IPv6: NLM_F_CREATE should be specified when creating new route [ 121.566796][T13876] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4249'. [ 121.638420][T13879] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[13882] was attempted by "ci2-linux-6-1-kasan-arm64/syz-executor exec"[13879] [ 121.779757][T13907] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 1000000 out of range (51000000..2150000000) [ 122.134037][T13966] xt_time: unknown flags 0x18 [ 122.147529][T13967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4296'. [ 122.156108][T13967] netlink: 'syz.2.4296': attribute type 1 has an invalid length. [ 122.157790][T13967] netlink: 'syz.2.4296': attribute type 2 has an invalid length. [ 122.169890][T13967] netlink: 'syz.2.4296': attribute type 1 has an invalid length. [ 122.241843][T13983] xt_TCPMSS: Only works on TCP SYN packets [ 122.368454][T14003] erofs: (device loop4): mounted with root inode @ nid 36. [ 122.645451][T14045] IPVS: length: 96 != 8 [ 122.709240][T14052] netlink: 'syz.4.4335': attribute type 1 has an invalid length. [ 122.717585][T14052] netlink: 'syz.4.4335': attribute type 3 has an invalid length. [ 122.719201][T14052] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4335'. [ 122.725724][T14052] NCSI netlink: No device for ifindex 2986344450 [ 122.727247][T14056] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 122.806253][T14058] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 122.823451][T14058] fscrypt (loop1, inode 12): Error -61 getting encryption context [ 122.854941][T14031] XFS: ikeep mount option is deprecated. [ 122.897901][ T4857] EXT4-fs (loop1): unmounting filesystem. [ 122.933462][T14031] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 122.935128][T14031] XFS (loop3): Mounting V5 Filesystem [ 122.946354][T14089] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4344'. [ 122.982803][T14031] XFS (loop3): Ending clean mount [ 122.984391][T14031] XFS (loop3): Quotacheck needed: Please wait. [ 123.021313][T14031] XFS (loop3): Quotacheck: Done. [ 123.081757][ T4332] XFS (loop3): Unmounting Filesystem [ 123.263919][T14131] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4360'. [ 123.309240][T14136] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4362'. [ 123.318791][T14138] set_capacity_and_notify: 10 callbacks suppressed [ 123.318798][T14138] loop1: detected capacity change from 0 to 1024 [ 123.367656][T14143] loop0: detected capacity change from 0 to 2048 [ 123.412735][ T11] hfsplus: b-tree write err: -5, ino 8 [ 123.462548][T14143] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 123.528890][ T4338] EXT4-fs (loop0): unmounting filesystem. [ 123.575163][T14156] loop2: detected capacity change from 0 to 4096 [ 123.582989][T14156] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 123.584995][T14146] loop4: detected capacity change from 0 to 32768 [ 123.586585][T14146] XFS: noikeep mount option is deprecated. [ 123.587585][T14146] XFS: ikeep mount option is deprecated. [ 123.596867][T14156] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 123.624178][T14158] loop1: detected capacity change from 0 to 4096 [ 123.635429][T14158] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 123.665074][T14146] XFS (loop4): Mounting V5 Filesystem [ 123.665593][T14158] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 123.688742][ T6247] EXT4-fs (loop2): unmounting filesystem. [ 123.723545][T14146] XFS (loop4): Ending clean mount [ 123.744061][T14181] set match dimension is over the limit! [ 123.787974][ T39] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22. [ 123.789327][ T4857] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 123.791169][ T4857] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 123.792512][ T4857] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 123.793775][ T4335] XFS (loop4): Unmounting Filesystem [ 123.795329][ T5139] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22. [ 123.796882][ T4857] ntfs3: loop1: ntfs_evict_inode r=3 failed, -22. [ 123.838883][T14198] netlink: 'syz.3.4386': attribute type 27 has an invalid length. [ 124.053511][T14219] netlink: 'syz.0.4396': attribute type 4 has an invalid length. [ 124.054974][T14219] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4396'. [ 124.070770][T14219] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 124.324563][T14253] netlink: 'syz.2.4412': attribute type 1 has an invalid length. [ 124.580951][T14297] binder: 14294 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 124.580975][T14297] binder: 14294:14297 ioctl c018620c 20000140 returned -22 [ 124.589031][T14302] IPv6: sit2: Disabled Multicast RS [ 124.641905][T14299] netlink: 'syz.0.4435': attribute type 26 has an invalid length. [ 124.643678][T14305] netlink: 'syz.1.4438': attribute type 6 has an invalid length. [ 124.645098][T14305] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.4438'. [ 124.729579][ T4336] Bluetooth: hci0: command 0x0c1a tx timeout [ 124.747426][T14317] loop3: detected capacity change from 0 to 1024 [ 124.798835][ T11] hfsplus: b-tree write err: -5, ino 8 [ 124.838392][T14332] loop3: detected capacity change from 0 to 1764 [ 125.218346][T14347] loop4: detected capacity change from 0 to 32768 [ 125.329381][T14396] loop3: detected capacity change from 0 to 512 [ 125.337460][T14396] EXT4-fs: Ignoring removed nomblk_io_submit option [ 125.356926][T14396] EXT4-fs: Ignoring removed nomblk_io_submit option [ 125.365983][T14396] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 125.395441][T14402] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 125.417611][T14396] EXT4-fs (loop3): 1 truncate cleaned up [ 125.418665][T14396] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 125.427436][T14405] loop0: detected capacity change from 0 to 512 [ 125.454256][T14405] EXT4-fs: Ignoring removed bh option [ 125.460501][ T4332] EXT4-fs (loop3): unmounting filesystem. [ 125.465321][T14387] ERROR: (device loop2): diAllocBit: iag inconsistent [ 125.465321][T14387] [ 125.486488][T14387] ialloc: diAlloc returned -5! [ 125.507498][T14405] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 125.507553][T14405] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 125.507563][T14405] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.4485: Corrupt directory, running e2fsck is recommended [ 125.508659][T14405] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 125.508919][T14405] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.4485: corrupted in-inode xattr [ 125.509105][T14405] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.4485: couldn't read orphan inode 15 (err -117) [ 125.513334][T14405] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 125.565347][T14405] EXT4-fs error (device loop0): ext4_xattr_set_entry:1619: inode #2: comm syz.0.4485: corrupted xattr entries [ 125.569891][T14414] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 125.607178][ T4335] EXT4-fs (loop4): unmounting filesystem. [ 125.628286][ T4338] EXT4-fs (loop0): unmounting filesystem. [ 125.695422][T14430] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 125.698531][ T27] audit: type=1400 audit(125.680:15): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=14435 comm="syz.1.4498" [ 125.725050][T14430] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 125.817034][ T325] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 125.818673][ T4335] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 125.823659][ T4335] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 125.824981][ T4335] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 125.830538][ T325] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 125.832530][ T4335] ntfs3: loop4: ntfs_evict_inode r=3 failed, -22. [ 125.855022][T14455] xt_socket: unknown flags 0x4c [ 125.888846][T14457] binder: 14457:14456 cannot find target node [ 125.897693][T14457] binder: 14456:14457 transaction call to 0:0 failed 1/29189/-22, size -393-0 line 3062 [ 125.899915][T14457] binder: 14456:14457 ioctl c0306201 20000140 returned -14 [ 125.914219][ T24] binder: undelivered TRANSACTION_ERROR: 29189 [ 125.937223][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.938422][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.996630][T14469] IPv6: sit1: Disabled Multicast RS [ 126.268232][T14490] IPv6: sit2: Disabled Multicast RS [ 126.403104][T14495] openvswitch: netlink: Missing key (keys=48, expected=2000) [ 126.558202][T14499] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 126.617385][T14499] Quota error (device loop4): do_check_range: Getting dqdh_next_free 2741 out of range 0-6 [ 126.633730][T14499] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 126.646950][T14499] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.4529: Failed to acquire dquot type 0 [ 126.762788][T14511] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 126.772660][T14511] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 126.798118][T14511] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned lenght of impUse field [ 141.289754][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 141.736614][ T4339] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 141.739239][ T4339] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 141.744260][ T4339] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 141.746863][ T4339] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 141.748360][ T4339] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 141.750173][ T4339] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 141.766721][ T4336] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 141.770481][ T4336] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 141.772307][ T4336] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 141.773937][ T4336] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 141.775480][ T4336] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 141.776884][ T4336] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 142.256886][ T4339] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 142.261418][ T4339] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 142.263249][ T4339] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 142.264919][ T4339] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 142.266488][ T4339] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 142.267878][ T4339] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 142.301216][ T4342] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 142.304311][ T4342] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 142.306103][ T4342] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 142.307677][ T4342] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 142.309160][ T4342] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 142.312826][ T4342] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 142.381381][ T4336] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 142.384485][ T4336] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 142.386257][ T4336] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 142.387938][ T4336] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 142.389553][ T4336] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 142.393207][ T4336] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 143.769545][ T4336] Bluetooth: hci5: command 0x0409 tx timeout [ 143.849567][ T4336] Bluetooth: hci6: command 0x0409 tx timeout [ 144.329641][ T4336] Bluetooth: hci8: command 0x0409 tx timeout [ 144.331492][ T4336] Bluetooth: hci7: command 0x0409 tx timeout [ 144.409615][ T4329] Bluetooth: hci9: command 0x0409 tx timeout [ 145.849526][ T4329] Bluetooth: hci5: command 0x041b tx timeout [ 145.929781][ T4336] Bluetooth: hci6: command 0x041b tx timeout [ 146.410380][ T4329] Bluetooth: hci7: command 0x041b tx timeout [ 146.411364][ T4329] Bluetooth: hci8: command 0x041b tx timeout [ 146.489610][ T4336] Bluetooth: hci9: command 0x041b tx timeout [ 147.929521][ T4329] Bluetooth: hci5: command 0x040f tx timeout [ 148.009517][ T4336] Bluetooth: hci6: command 0x040f tx timeout [ 148.119484][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 22s! [aoe_tx0:2065] [ 148.120958][ C1] Modules linked in: [ 148.121677][ C1] irq event stamp: 63949135 [ 148.122528][ C1] hardirqs last enabled at (63949134): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 148.124523][ C1] hardirqs last disabled at (63949135): [] el1_interrupt+0x24/0x54 [ 148.126304][ C1] softirqs last enabled at (1810): [] local_bh_enable+0x10/0x34 [ 148.127993][ C1] softirqs last disabled at (1814): [] local_bh_disable+0x10/0x34 [ 148.129669][ C1] CPU: 1 PID: 2065 Comm: aoe_tx0 Not tainted syzkaller #0 [ 148.131001][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 148.132833][ C1] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 148.134254][ C1] pc : _raw_spin_unlock_irqrestore+0x58/0xac [ 148.135355][ C1] lr : _raw_spin_unlock_irqrestore+0x48/0xac [ 148.136459][ C1] sp : ffff800026e77860 [ 148.137206][ C1] x29: ffff800026e77860 x28: 1fffe0001b2c08c0 x27: dfff800000000000 [ 148.138673][ C1] x26: ffff0000d9604600 x25: ffff0000ce1e0fd0 x24: ffff0000c34ab0b0 [ 148.140157][ C1] x23: 0000000000000020 x22: 0000000000000002 x21: ffff0000ce1e0c30 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 148.141602][ C1] x20: ffff80001c957c90 x19: 0000000000000000 x18: 1fffe00033e7217e [ 148.143050][ C1] x17: 0000000000000000 x16: ffff8000082dd25c x15: 000000000004ffff [ 148.144468][ C1] x14: 0000000000000001 x13: 1ffff0000392af92 x12: 0000000000000000 [ 148.145921][ C1] x11: ff0080000a977920 x10: 0000000000000003 x9 : 0000000000000080 [ 148.147285][ C1] x8 : 00000000000000c0 x7 : ffff80000b468490 x6 : 0000000000000000 [ 148.148674][ C1] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 [ 148.150116][ C1] x2 : 0000000000000002 x1 : ffff800011cfdc80 x0 : ffff80018a09a000 [ 148.151550][ C1] Call trace: [ 148.152154][ C1] _raw_spin_unlock_irqrestore+0x58/0xac [ 148.153191][ C1] uart_write+0x3a0/0x7d8 [ 148.153979][ C1] handle_tx+0x1e4/0x600 [ 148.154758][ C1] caif_xmit+0x108/0x150 [ 148.155494][ C1] dev_hard_start_xmit+0x234/0x8c8 [ 148.156358][ C1] __dev_queue_xmit+0x1590/0x3154 [ 148.157240][ C1] tx+0xa0/0x1c8 [ 148.157857][ C1] kthread+0x178/0x344 [ 148.158598][ C1] kthread+0x254/0x2e0 [ 148.159257][ C1] ret_from_fork+0x10/0x20 [ 148.160021][ C1] Kernel panic - not syncing: softlockup: hung tasks [ 148.161140][ C1] CPU: 1 PID: 2065 Comm: aoe_tx0 Tainted: G L syzkaller #0 [ 148.162639][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 148.164359][ C1] Call trace: [ 148.164940][ C1] dump_backtrace+0x1c4/0x1f0 [ 148.165773][ C1] show_stack+0x2c/0x3c [ 148.166520][ C1] __dump_stack+0x30/0x40 [ 148.167266][ C1] dump_stack_lvl+0xf4/0x15c [ 148.168063][ C1] dump_stack+0x1c/0x5c [ 148.168784][ C1] panic+0x2f8/0x7ac [ 148.169462][ C1] softlockup_fn+0x0/0x120 [ 148.170249][ C1] __hrtimer_run_queues+0x414/0xc58 [ 148.171171][ C1] hrtimer_interrupt+0x294/0xb28 [ 148.172036][ C1] arch_timer_handler_virt+0x74/0x88 [ 148.172990][ C1] handle_percpu_devid_irq+0x17c/0x358 [ 148.173992][ C1] generic_handle_domain_irq+0xe4/0x154 [ 148.174963][ C1] gic_handle_irq+0x70/0x1d8 [ 148.175742][ C1] call_on_irq_stack+0x30/0x48 [ 148.176556][ C1] do_interrupt_handler+0xd4/0x138 [ 148.177410][ C1] el1_interrupt+0x34/0x54 [ 148.178135][ C1] el1h_64_irq_handler+0x18/0x24 [ 148.178947][ C1] el1h_64_irq+0x64/0x68 [ 148.179668][ C1] _raw_spin_unlock_irqrestore+0x58/0xac [ 148.180656][ C1] uart_write+0x3a0/0x7d8 [ 148.181469][ C1] handle_tx+0x1e4/0x600 [ 148.182200][ C1] caif_xmit+0x108/0x150 [ 148.183005][ C1] dev_hard_start_xmit+0x234/0x8c8 [ 148.183856][ C1] __dev_queue_xmit+0x1590/0x3154 [ 148.184692][ C1] tx+0xa0/0x1c8 [ 148.185311][ C1] kthread+0x178/0x344 [ 148.186055][ C1] kthread+0x254/0x2e0 [ 148.186796][ C1] ret_from_fork+0x10/0x20 [ 148.187599][ C1] SMP: stopping secondary CPUs [ 148.188461][ C1] Kernel Offset: disabled [ 148.189218][ C1] CPU features: 0x0a0000,000f0097,a65bfea7 [ 148.190242][ C1] Memory Limit: none [ 148.202413][ C1] [ 148.202850][ C1] ================================ [ 148.203794][ C1] WARNING: inconsistent lock state [ 148.204718][ C1] syzkaller #0 Tainted: G L [ 148.205781][ C1] -------------------------------- [ 148.206690][ C1] inconsistent {HARDIRQ-ON-W} -> {IN-HARDIRQ-W} usage. [ 148.207905][ C1] aoe_tx0/2065 [HC1[1]:SC0[2]:HE0:SE0] takes: [ 148.209002][ C1] ffff8000153e14b8 (efi_rt_lock){?...}-{2:2}, at: virt_efi_set_variable_nonblocking+0x74/0x16c [ 148.210733][ C1] {HARDIRQ-ON-W} state was registered at: [ 148.211702][ C1] lock_acquire+0x20c/0x638 [ 148.212486][ C1] _raw_spin_lock+0x54/0x6c [ 148.213268][ C1] efi_call_rts+0x3c8/0x9d8 [ 148.214009][ C1] process_one_work+0x7e4/0x13bc [ 148.214842][ C1] worker_thread+0x8cc/0xfe8 [ 148.215651][ C1] kthread+0x254/0x2e0 [ 148.216392][ C1] ret_from_fork+0x10/0x20 [ 148.217174][ C1] irq event stamp: 63949135 [ 148.217938][ C1] hardirqs last enabled at (63949134): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 148.219756][ C1] hardirqs last disabled at (63949135): [] el1_interrupt+0x24/0x54 [ 148.221282][ C1] softirqs last enabled at (1810): [] local_bh_enable+0x10/0x34 [ 148.222886][ C1] softirqs last disabled at (1814): [] local_bh_disable+0x10/0x34 [ 148.224541][ C1] [ 148.224541][ C1] other info that might help us debug this: [ 148.225916][ C1] Possible unsafe locking scenario: [ 148.225916][ C1] [ 148.227241][ C1] CPU0 [ 148.227833][ C1] ---- [ 148.228400][ C1] lock(efi_rt_lock); [ 148.229139][ C1] [ 148.229760][ C1] lock(efi_rt_lock); [ 148.230514][ C1] [ 148.230514][ C1] *** DEADLOCK *** [ 148.230514][ C1] [ 148.231972][ C1] 4 locks held by aoe_tx0/2065: [ 148.232977][ C1] #0: ffff8000155774a0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 148.234895][ C1] #1: ffff0000f47de0d8 (_xmit_CAIF#2){+...}-{2:2}, at: __dev_queue_xmit+0x10b8/0x3154 [ 148.236744][ C1] #2: ffff800015577440 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 148.238511][ C1] #3: ffff80001745f908 (&psinfo->buf_lock){....}-{2:2}, at: pstore_dump+0x188/0x828 [ 148.240157][ C1] [ 148.240157][ C1] stack backtrace: [ 148.241178][ C1] CPU: 1 PID: 2065 Comm: aoe_tx0 Tainted: G L syzkaller #0 [ 148.242661][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 148.244388][ C1] Call trace: [ 148.244928][ C1] dump_backtrace+0x1c4/0x1f0 [ 148.245716][ C1] show_stack+0x2c/0x3c [ 148.246390][ C1] __dump_stack+0x30/0x40 [ 148.247141][ C1] dump_stack_lvl+0xf4/0x15c [ 148.247915][ C1] dump_stack+0x1c/0x5c [ 148.248640][ C1] print_usage_bug+0x4c0/0x6dc [ 148.249482][ C1] mark_lock_irq+0x858/0xab8 [ 148.250301][ C1] mark_lock+0x224/0x320 [ 148.251070][ C1] __lock_acquire+0xa60/0x6634 [ 148.251889][ C1] lock_acquire+0x20c/0x638 [ 148.252678][ C1] _raw_spin_lock+0x54/0x6c [ 148.253465][ C1] virt_efi_set_variable_nonblocking+0x74/0x16c [ 148.254504][ C1] efivar_set_variable_locked+0x1d0/0x204 [ 148.255457][ C1] efi_pstore_write+0x2a8/0x3b4 [ 148.256246][ C1] pstore_dump+0x5b8/0x828 [ 148.256979][ C1] kmsg_dump+0x174/0x264 [ 148.257703][ C1] panic+0x384/0x7ac [ 148.258363][ C1] softlockup_fn+0x0/0x120 [ 148.259120][ C1] __hrtimer_run_queues+0x414/0xc58 [ 148.260018][ C1] hrtimer_interrupt+0x294/0xb28 [ 148.260878][ C1] arch_timer_handler_virt+0x74/0x88 [ 148.261790][ C1] handle_percpu_devid_irq+0x17c/0x358 [ 148.262707][ C1] generic_handle_domain_irq+0xe4/0x154 [ 148.263651][ C1] gic_handle_irq+0x70/0x1d8 [ 148.264399][ C1] call_on_irq_stack+0x30/0x48 [ 148.265201][ C1] do_interrupt_handler+0xd4/0x138 [ 148.266084][ C1] el1_interrupt+0x34/0x54 [ 148.266877][ C1] el1h_64_irq_handler+0x18/0x24 [ 148.267737][ C1] el1h_64_irq+0x64/0x68 [ 148.268481][ C1] _raw_spin_unlock_irqrestore+0x58/0xac [ 148.269474][ C1] uart_write+0x3a0/0x7d8 [ 148.270229][ C1] handle_tx+0x1e4/0x600 [ 148.271133][ C1] caif_xmit+0x108/0x150 [ 148.271847][ C1] dev_hard_start_xmit+0x234/0x8c8 [ 148.272700][ C1] __dev_queue_xmit+0x1590/0x3154 [ 148.273634][ C1] tx+0xa0/0x1c8 [ 148.274224][ C1] kthread+0x178/0x344 [ 148.274937][ C1] kthread+0x254/0x2e0 [ 148.275648][ C1] ret_from_fork+0x10/0x20 [ 148.539251][ C1] Rebooting in 86400 seconds..