last executing test programs: 2m31.755918088s ago: executing program 4 (id=16): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000920000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000bc0)={r0, &(0x7f0000000a00)="da", 0x0}, 0x20) 2m31.545677968s ago: executing program 4 (id=18): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000e00)='./file1\x00', 0x2008410, &(0x7f0000000180)=ANY=[], 0x1, 0x5569, &(0x7f0000005a80)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) fstat(r0, &(0x7f00000000c0)) 2m29.322547099s ago: executing program 4 (id=41): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000340)) 2m28.605723695s ago: executing program 4 (id=49): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usb_connect$midi(0x0, 0xbd, &(0x7f00000003c0)=ANY=[@ANYBLOB="120101020000001044060f804000010203010902ab00010101200209040000060103303a0624020144040f2403000a0408010101020603029c06240207050609050d00080081b6051125010df0552f91ffb555f13d7eb3a44a09050604200002650404250100090500102000ff590005250101490905801020000204071025010c6d95655c0cab605266fc635f0905030320000604051425011065"], &(0x7f0000000380)={0x0, 0x0, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x1, [{0x0, 0x0}]}) 2m25.939422997s ago: executing program 4 (id=79): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000380)="$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") prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 2m24.973497445s ago: executing program 4 (id=93): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0xc084) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000480)) 2m9.899559984s ago: executing program 32 (id=93): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0xc084) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000480)) 19.386291777s ago: executing program 5 (id=1569): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3, 0x0, 0xf}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x26088888) close(0x3) 18.367364137s ago: executing program 5 (id=1582): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="009a3610008eecdef60ddb0700000b8f", 0x10) 18.127512739s ago: executing program 5 (id=1587): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000200)=r0) 18.033957134s ago: executing program 5 (id=1588): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000000c00)={[{@block_validity}, {@minixdf}, {@noblock_validity}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0xb}}, {@debug}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x48a, &(0x7f00000015c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x20, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 16.797224205s ago: executing program 5 (id=1605): syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x16, &(0x7f00000002c0)={[{@nobarrier}, {@noflushoncommit}, {@nossd}, {@commit={'commit', 0x3d, 0x3f}}, {@nodatasum}, {@nodiscard}, {@nobarrier}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@noacl}]}, 0x9, 0x5104, &(0x7f0000005480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x51) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000040)={0x1, 0x100000001, ['\x00']}) 16.033871503s ago: executing program 5 (id=1607): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 15.853524082s ago: executing program 33 (id=1607): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5.560127024s ago: executing program 0 (id=1693): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="57010000000000000000000000000800050000000000080008000000000008000400ac1414000800020001000000080001"], 0x4c}}, 0x0) 5.169969793s ago: executing program 0 (id=1699): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x200841a, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x553b, &(0x7f00000024c0)="$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") setresuid(0xee01, 0xee01, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) 3.791569861s ago: executing program 2 (id=1711): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000001200)=""/4096, 0xffffffb8}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 3.594796862s ago: executing program 2 (id=1712): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x394, &(0x7f0000000700)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) 2.793635521s ago: executing program 2 (id=1715): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 2.599012791s ago: executing program 2 (id=1716): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x800, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0085f95733019d784ca386da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc2d, &(0x7f00000001c0)="$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") rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file0/file0\x00') rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100)='.\x02\x00') 2.449643588s ago: executing program 0 (id=1717): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f0000000100)=ANY=[], 0xa, 0x234, &(0x7f0000000900)="$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") open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) rename(&(0x7f0000000440)='./bus\x00', &(0x7f00000003c0)='./file1\x00') 1.588319531s ago: executing program 2 (id=1722): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) lgetxattr(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000840)=@known='trusted.overlay.upper\x00', &(0x7f0000000f40)=""/184, 0x841) 1.224892889s ago: executing program 6 (id=1608): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r0, 0x110, 0x6, 0x0, &(0x7f00000003c0)) 1.062277077s ago: executing program 1 (id=1725): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0xfffd, @random="c0c13c2baeb6", 'syz_tun\x00'}}, 0x1e) sendmmsg$sock(r0, &(0x7f0000001dc0), 0x40000a6, 0x48850) 1.062109677s ago: executing program 3 (id=1726): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x9, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x28, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x1000, 0xffff, 0x0, 0x8000, 0x4, 0x8008, 0x400, 0x80, 0x3, 0x5, 0x6, 0x8, 0x4, 0x3, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e5, 0xc488, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xffffffff, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xf, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa5, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x7, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x4, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb3e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) pipe2(&(0x7f00000000c0), 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.061962807s ago: executing program 6 (id=1727): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x89) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x7f) 948.527413ms ago: executing program 3 (id=1728): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f00000000c0)=0xabb3, 0x4) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x1000, @multicast1}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000080)="08001efbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0x60000000}, 0x20048080) 843.378388ms ago: executing program 6 (id=1729): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, r1, 0x40810, 0x7}, [@IFLA_MTU={0x8, 0x4, 0x100}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40010) 765.580352ms ago: executing program 2 (id=1730): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[{@discard}, {@noload}]}, 0x64, 0x53f, &(0x7f0000000440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 756.173922ms ago: executing program 1 (id=1731): r0 = syz_io_uring_setup(0x762f, &(0x7f0000000140)={0x0, 0x114dd, 0x10, 0xffffffff, 0x320}, &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0/../file0\x00', 0xffffffffffffffff, 0x1000, 0x1}) io_uring_enter(r0, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) 721.282254ms ago: executing program 3 (id=1732): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r1, 0x3, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ipvlan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x4008000) 671.987646ms ago: executing program 1 (id=1733): r0 = socket(0x1e, 0x4, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000002c0)={0x2018}) 584.960081ms ago: executing program 0 (id=1734): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) 567.739912ms ago: executing program 3 (id=1735): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x8000, 0x0, @mcast1, 0x46}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="800037a88f13ce00", 0x8, 0x20008084, &(0x7f0000000180)={0xa, 0x0, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x989}, 0x1c) 480.552896ms ago: executing program 1 (id=1736): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x11}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc001}, 0x40000) 412.682379ms ago: executing program 6 (id=1737): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0x9, 0x2, 0x7, 0x401, 0x7, "33c8fe9aabb39b1191635c7aa1979e28ecc3e9"}) 296.665945ms ago: executing program 0 (id=1738): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x9, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x28, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x1000, 0xffff, 0x0, 0x8000, 0x4, 0x8008, 0x400, 0x80, 0x3, 0x5, 0x6, 0x8, 0x4, 0x3, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e5, 0xc488, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xffffffff, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xf, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa5, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x7, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x4, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb3e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) pipe2(&(0x7f00000000c0), 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 296.597295ms ago: executing program 3 (id=1739): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000002200)={0x20, r0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x12) 277.015146ms ago: executing program 1 (id=1740): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mq_notify(r0, 0x0) 238.688508ms ago: executing program 6 (id=1741): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0xfffd, @random="c0c13c2baeb6", 'syz_tun\x00'}}, 0x1e) sendmmsg$sock(r0, &(0x7f0000001dc0), 0x40000a6, 0x48850) 85.112896ms ago: executing program 3 (id=1742): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x394, &(0x7f0000000700)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) 35.310918ms ago: executing program 1 (id=1743): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x300c001, &(0x7f0000000000)={[{@noinit_itable}]}, 0x1, 0x516, &(0x7f0000000740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)={0x4033, 0x8, 0x6, 0xffffffffffffffff, 0x1, 0x5}) 27.212518ms ago: executing program 0 (id=1744): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x2c, r0, 0xb01, 0x1003, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 0s ago: executing program 6 (id=1745): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000003900)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs(r1, 0x0) kernel console output (not intermixed with test programs): 562] ? unlock_page+0x17c/0x1f0 [ 118.952847][ T5562] ? release_metapage+0x2f7/0xe10 [ 118.958193][ T5562] ? unlock_page+0x17c/0x1f0 [ 118.963035][ T5562] __get_metapage+0xbfa/0x1060 [ 118.968070][ T5562] dtSearch+0x5d5/0x2050 [ 118.972579][ T5562] jfs_symlink+0x851/0xfb0 [ 118.977115][ T5562] ? jfs_unlink+0xa00/0xa00 [ 118.982356][ T5562] ? make_kgid+0x660/0x660 [ 118.987174][ T5562] ? apparmor_path_symlink+0x1ac/0x230 [ 118.990701][ T5549] REISERFS (device loop1): checking transaction log (loop1) [ 118.992855][ T5562] ? lookup_one_qstr_excl+0x11c/0x240 [ 119.006616][ T5562] ? generic_permission+0x230/0x510 [ 119.012349][ T5562] ? inode_permission+0xef/0x480 [ 119.017607][ T5562] ? bpf_lsm_inode_symlink+0x5/0x10 [ 119.023109][ T5562] ? security_inode_symlink+0xb2/0x100 [ 119.029214][ T5562] vfs_symlink+0x247/0x3d0 [ 119.033783][ T5562] do_symlinkat+0x1ab/0x6b0 [ 119.038644][ T5562] ? vfs_symlink+0x3d0/0x3d0 [ 119.043809][ T5562] ? getname_flags+0x1fe/0x500 [ 119.046288][ T5549] REISERFS (device loop1): Using tea hash to sort names [ 119.048708][ T5562] __x64_sys_symlink+0x7a/0x90 [ 119.048746][ T5562] do_syscall_64+0x4c/0xa0 [ 119.048768][ T5562] ? clear_bhb_loop+0x30/0x80 [ 119.070161][ T5562] ? clear_bhb_loop+0x30/0x80 [ 119.074876][ T5562] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 119.080803][ T5562] RIP: 0033:0x7f154d9cf799 [ 119.085434][ T5562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.105178][ T5562] RSP: 002b:00007f154bc08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 119.107796][ T5549] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 119.114077][ T5562] RAX: ffffffffffffffda RBX: 00007f154dc49090 RCX: 00007f154d9cf799 [ 119.114103][ T5562] RDX: 0000000000000000 RSI: 0000200000000cc0 RDI: 000020000000a900 [ 119.114116][ T5562] RBP: 00007f154da65c99 R08: 0000000000000000 R09: 0000000000000000 [ 119.114129][ T5562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.114141][ T5562] R13: 00007f154dc49128 R14: 00007f154dc49090 R15: 00007ffeaa681578 [ 119.114173][ T5562] [ 119.114223][ C1] vkms_vblank_simulate: vblank timer overrun [ 119.174126][ C1] vkms_vblank_simulate: vblank timer overrun [ 119.191348][ T5568] netlink: 16 bytes leftover after parsing attributes in process `syz.0.523'. [ 119.557506][ T5577] loop3: detected capacity change from 0 to 1024 [ 119.611389][ T5562] bread failed! [ 119.736735][ T5577] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.528: Invalid block bitmap block 0 in block_group 0 [ 119.789053][ T5577] Quota error (device loop3): write_blk: dquota write failed [ 119.796606][ T5577] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 119.928743][ T5577] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.528: Failed to acquire dquot type 0 [ 119.938140][ T5594] loop1: detected capacity change from 0 to 1024 [ 119.978897][ T5577] EXT4-fs error (device loop3): ext4_free_blocks:6232: comm syz.3.528: Freeing blocks not in datazone - block = 0, count = 4096 [ 120.040808][ T5577] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.528: Invalid inode bitmap blk 0 in block_group 0 [ 120.070871][ T9] Quota error (device loop3): remove_tree: Getting block too big (0 >= 8) [ 120.098532][ T5577] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 120.127917][ T5594] hfsplus: walked past end of dir [ 120.128240][ T9] EXT4-fs error (device loop3): ext4_release_dquot:6270: comm kworker/u4:0: Failed to release dquot type 0 [ 120.178229][ T5577] EXT4-fs (loop3): 1 orphan inode deleted [ 120.184776][ T5577] EXT4-fs (loop3): mounted filesystem without journal. Opts: €; ,errors=continue. Quota mode: writeback. [ 120.450393][ T5606] loop5: detected capacity change from 0 to 256 [ 120.629848][ T5614] loop0: detected capacity change from 0 to 1024 [ 120.658135][ T5606] FAT-fs (loop5): Directory bread(block 64) failed [ 120.688742][ T5606] FAT-fs (loop5): Directory bread(block 65) failed [ 120.717707][ T5606] FAT-fs (loop5): Directory bread(block 66) failed [ 120.746261][ T5606] FAT-fs (loop5): Directory bread(block 67) failed [ 120.757207][ T5606] FAT-fs (loop5): Directory bread(block 68) failed [ 120.771058][ T5606] FAT-fs (loop5): Directory bread(block 69) failed [ 120.819315][ T5606] FAT-fs (loop5): Directory bread(block 70) failed [ 120.826558][ T5606] FAT-fs (loop5): Directory bread(block 71) failed [ 120.839089][ T5614] EXT4-fs (loop0): Ignoring removed orlov option [ 120.845898][ T5614] EXT4-fs (loop0): Invalid want_extra_isize 9 [ 120.887597][ T5606] FAT-fs (loop5): Directory bread(block 72) failed [ 120.894297][ T5606] FAT-fs (loop5): Directory bread(block 73) failed [ 121.289987][ T5649] loop2: detected capacity change from 0 to 164 [ 121.295953][ T5648] netlink: 256 bytes leftover after parsing attributes in process `syz.3.558'. [ 121.341319][ T5648] netlink: 64 bytes leftover after parsing attributes in process `syz.3.558'. [ 121.378517][ T5649] rock: directory entry would overflow storage [ 121.402516][ T5649] rock: sig=0x4543, size=28, remaining=18 [ 121.415604][ T5651] loop0: detected capacity change from 0 to 128 [ 121.495677][ T5651] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 121.594502][ T5651] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 121.782153][ T5659] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 121.822251][ C0] Illegal XDP return value 16128, expect packet loss! [ 121.892743][ T5659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 121.969278][ T5659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 122.071959][ T5659] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 122.108993][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 122.314601][ T5677] netlink: 876 bytes leftover after parsing attributes in process `syz.3.572'. [ 122.377696][ T5677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.572'. [ 122.457767][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 122.761144][ T5698] loop3: detected capacity change from 0 to 1024 [ 122.893036][ T5710] loop1: detected capacity change from 0 to 256 [ 122.938718][ T5710] exfat: Deprecated parameter 'namecase' [ 122.944670][ T5710] exfat: Deprecated parameter 'utf8' [ 123.089705][ T5714] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 123.103932][ T5710] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 123.249387][ T1278] hfsplus: b-tree write err: -5, ino 25 [ 123.258684][ T1278] hfsplus: b-tree write err: -5, ino 4 [ 123.281378][ T1278] hfsplus: b-tree write err: -5, ino 2 [ 123.306075][ T1278] hfsplus: b-tree write err: -5, ino 17 [ 123.313604][ T5720] netlink: 4 bytes leftover after parsing attributes in process `syz.5.592'. [ 123.375843][ T5720] netlink: 48 bytes leftover after parsing attributes in process `syz.5.592'. [ 123.574190][ T5722] EXT4-fs (loop2): 1 truncate cleaned up [ 123.587769][ T5722] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 123.815063][ T5740] set_capacity_and_notify: 1 callbacks suppressed [ 123.815086][ T5740] loop5: detected capacity change from 0 to 256 [ 123.971382][ T5726] loop3: detected capacity change from 0 to 256 [ 124.068843][ T5747] loop0: detected capacity change from 0 to 2048 [ 124.085325][ T5726] exfat: Deprecated parameter 'utf8' [ 124.115991][ T5726] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 124.142507][ T5726] exFAT-fs (loop3): failed to load alloc-bitmap [ 124.157624][ T5726] exFAT-fs (loop3): failed to recognize exfat type [ 124.183604][ T5747] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 124.489032][ T5750] loop3: detected capacity change from 0 to 1024 [ 124.564726][ T5752] netlink: 16 bytes leftover after parsing attributes in process `syz.5.605'. [ 124.628436][ T5750] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 124.727287][ T5750] EXT4-fs warning (device loop3): empty_inline_dir:1862: bad inline directory (dir #12) - no `..' [ 125.045450][ T5744] loop2: detected capacity change from 0 to 32768 [ 125.109549][ T5744] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.602 (5744) [ 125.172940][ T5767] loop1: detected capacity change from 0 to 64 [ 125.239186][ T5744] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 125.298126][ T5744] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 125.300207][ T5771] netlink: 80 bytes leftover after parsing attributes in process `syz.3.615'. [ 125.308858][ T5771] vcan0: MTU too low for tipc bearer [ 125.308898][ T5771] tipc: Enabling of bearer rejected, failed to enable media [ 125.371059][ T5744] BTRFS info (device loop2): use zstd compression, level 3 [ 125.428909][ T5774] loop0: detected capacity change from 0 to 64 [ 125.466569][ T5744] BTRFS info (device loop2): using free space tree [ 125.543923][ T5744] BTRFS info (device loop2): has skinny extents [ 125.744175][ T5778] loop3: detected capacity change from 0 to 8192 [ 125.765264][ T7] kernel write not supported for file /283/net/rt_cache (pid: 7 comm: kworker/0:0) [ 125.835380][ T5778] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 125.848519][ T5778] REISERFS (device loop3): using ordered data mode [ 125.871285][ T5778] reiserfs: using flush barriers [ 125.923575][ T5778] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 125.950605][ T5810] loop5: detected capacity change from 0 to 256 [ 126.032134][ T5778] REISERFS (device loop3): checking transaction log (loop3) [ 126.041733][ T5744] BTRFS info (device loop2): enabling ssd optimizations [ 126.643896][ T5778] REISERFS (device loop3): Using tea hash to sort names [ 126.686122][ T5778] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 127.011296][ T5829] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 127.146625][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.215623][ T5834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.634'. [ 127.250656][ T5836] loop1: detected capacity change from 0 to 512 [ 127.554866][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 127.639930][ T5836] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 127.731707][ T5836] ext4 filesystem being mounted at /151/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.188755][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 128.451313][ T5875] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 128.478058][ T5875] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.573135][ T1107] Process accounting resumed [ 128.658222][ T5882] Process accounting resumed [ 128.888245][ T154] hfsplus: b-tree write err: -5, ino 25 [ 128.894790][ T154] hfsplus: b-tree write err: -5, ino 4 [ 128.990199][ T154] hfsplus: b-tree write err: -5, ino 2 [ 129.136146][ T5907] program syz.0.655 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.567681][ T5853] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 129.759408][ T5943] set_capacity_and_notify: 3 callbacks suppressed [ 129.759429][ T5943] loop5: detected capacity change from 0 to 256 [ 129.807609][ T5853] usb 1-1: Using ep0 maxpacket: 32 [ 129.919289][ T5943] FAT-fs (loop5): Directory bread(block 64) failed [ 129.927819][ T5853] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 129.940135][ T5853] usb 1-1: config 0 has no interface number 0 [ 129.952697][ T5943] FAT-fs (loop5): Directory bread(block 65) failed [ 129.977772][ T5943] FAT-fs (loop5): Directory bread(block 66) failed [ 130.017587][ T5943] FAT-fs (loop5): Directory bread(block 67) failed [ 130.034120][ T5943] FAT-fs (loop5): Directory bread(block 68) failed [ 130.067142][ T5943] FAT-fs (loop5): Directory bread(block 69) failed [ 130.085359][ T5943] FAT-fs (loop5): Directory bread(block 70) failed [ 130.115718][ T5943] FAT-fs (loop5): Directory bread(block 71) failed [ 130.127831][ T5853] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 130.141325][ T5943] FAT-fs (loop5): Directory bread(block 72) failed [ 130.144015][ T5853] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.155312][ T5943] FAT-fs (loop5): Directory bread(block 73) failed [ 130.170657][ T5853] usb 1-1: Product: syz [ 130.180855][ T5853] usb 1-1: Manufacturer: syz [ 130.192274][ T5853] usb 1-1: SerialNumber: syz [ 130.210046][ T5853] usb 1-1: config 0 descriptor?? [ 130.260012][ T5853] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 130.392583][ T5959] loop2: detected capacity change from 0 to 256 [ 130.504819][ T5853] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 130.520931][ T5961] sock: sock_timestamping_bind_phc: sock not bind to device [ 130.573204][ T5853] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 130.765651][ T5967] loop2: detected capacity change from 0 to 8 [ 130.898044][ T5967] SQUASHFS error: Failed to read block 0xe000000000001ea: -5 [ 130.916749][ T5967] unable to read xattr id index table [ 131.017538][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 131.062374][ T13] usb 1-1: USB disconnect, device number 3 [ 131.105434][ T13] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 131.154628][ T13] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 131.212259][ T13] quatech2 1-1:0.51: device disconnected [ 131.291816][ T5963] loop1: detected capacity change from 0 to 32768 [ 131.443254][ T5963] XFS (loop1): Mounting V5 Filesystem [ 131.553620][ T5983] binder: 5982:5983 ioctl c0306201 2000000001c0 returned -14 [ 131.606734][ T5965] loop5: detected capacity change from 0 to 40427 [ 131.608276][ T5987] loop0: detected capacity change from 0 to 64 [ 131.618825][ T5963] XFS (loop1): Ending clean mount [ 131.643638][ T5986] loop3: detected capacity change from 0 to 2048 [ 131.692701][ T5967] loop2: detected capacity change from 0 to 32768 [ 131.694146][ T5965] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x1ffff [ 131.750085][ T5965] F2FS-fs (loop5): inline encryption not supported [ 131.762297][ T5987] Trying to free block not in datazone [ 131.764176][ T5988] Trying to free block not in datazone [ 131.796266][ T4187] XFS (loop1): Unmounting Filesystem [ 131.814777][ T5967] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.686 (5967) [ 131.815055][ T5965] F2FS-fs (loop5): invalid crc value [ 131.838125][ T5986] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 131.909349][ T5965] F2FS-fs (loop5): Found nat_bits in checkpoint [ 131.978674][ T5988] minix_free_inode: bit 5 already cleared [ 132.126669][ T5967] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 132.171394][ T5967] BTRFS info (device loop2): setting nodatasum [ 132.210113][ T5967] BTRFS info (device loop2): force zlib compression, level 3 [ 132.224772][ T5965] F2FS-fs (loop5): Start checkpoint disabled! [ 132.254121][ T5967] BTRFS info (device loop2): ignoring bad roots [ 132.287647][ T5967] BTRFS info (device loop2): unrecognized rescue option 'ignoremetacsums' [ 132.296850][ T5965] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 132.331526][ T5967] BTRFS error (device loop2): unrecognized rescue value ignoremetacsums [ 132.431675][ T5967] BTRFS error (device loop2): open_ctree failed: -22 [ 132.647980][ T5994] loop3: detected capacity change from 0 to 4096 [ 132.686253][ T5994] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 132.762584][ T9] attempt to access beyond end of device [ 132.762584][ T9] loop5: rw=2049, want=40976, limit=40427 [ 133.314175][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.322605][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.327542][ T5853] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 133.567629][ T5853] usb 3-1: Using ep0 maxpacket: 32 [ 133.687980][ T5853] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 133.696999][ T5853] usb 3-1: config 0 has no interface number 0 [ 133.907791][ T5853] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 133.917684][ T5853] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.925977][ T5853] usb 3-1: Product: syz [ 133.930811][ T5853] usb 3-1: Manufacturer: syz [ 133.935584][ T5853] usb 3-1: SerialNumber: syz [ 133.987582][ T5853] usb 3-1: config 0 descriptor?? [ 134.039437][ T5853] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 134.153386][ T6035] loop1: detected capacity change from 0 to 256 [ 134.177837][ T7] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 134.206725][ T6035] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 134.264086][ T6035] exFAT-fs (loop1): hint_cluster is invalid (17) [ 134.280396][ T5853] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 134.307353][ T5853] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 134.598758][ T7] usb 6-1: config index 0 descriptor too short (expected 65298, got 18) [ 134.619585][ T7] usb 6-1: config 0 has too many interfaces: 230, using maximum allowed: 32 [ 134.647477][ T7] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 230 [ 134.658479][ T6043] [U] ÿÿ [ 134.732484][ T13] usb 3-1: USB disconnect, device number 2 [ 134.747551][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 134.760223][ T13] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 134.798182][ T13] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 134.833241][ T13] quatech2 3-1:0.51: device disconnected [ 134.888937][ T7] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 134.909379][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.927469][ T7] usb 6-1: Product: syz [ 134.932317][ T7] usb 6-1: Manufacturer: syz [ 134.942516][ T7] usb 6-1: SerialNumber: syz [ 134.959801][ T7] usb 6-1: config 0 descriptor?? [ 135.148829][ T6041] loop1: detected capacity change from 0 to 40427 [ 135.166640][ T6041] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x1ffff [ 135.185145][ T6041] F2FS-fs (loop1): invalid crc value [ 135.201311][ T6041] F2FS-fs (loop1): Found nat_bits in checkpoint [ 135.226377][ T6044] loop0: detected capacity change from 0 to 40427 [ 135.278056][ T7] usb 6-1: ignoring: probably an ADSL modem [ 135.291236][ T6044] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x1ffff [ 135.305032][ T6044] F2FS-fs (loop0): inline encryption not supported [ 135.316674][ T6041] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 135.347727][ T6044] F2FS-fs (loop0): invalid crc value [ 135.379875][ T6044] F2FS-fs (loop0): Found nat_bits in checkpoint [ 135.526904][ T6044] F2FS-fs (loop0): Start checkpoint disabled! [ 135.537709][ T6044] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 135.579523][ T6054] loop3: detected capacity change from 0 to 64 [ 135.705837][ T6054] Trying to free block not in datazone [ 135.744860][ T6055] Trying to free block not in datazone [ 135.768163][ T7] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 135.795569][ T7] usb 6-1: USB disconnect, device number 3 [ 135.801973][ T6055] minix_free_inode: bit 5 already cleared [ 135.904339][ T1278] attempt to access beyond end of device [ 135.904339][ T1278] loop0: rw=2049, want=40976, limit=40427 [ 136.154116][ T6059] loop1: detected capacity change from 0 to 2048 [ 136.242199][ T6059] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 136.306054][ T6061] loop3: detected capacity change from 0 to 256 [ 136.379737][ T6061] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 136.396583][ T6065] loop5: detected capacity change from 0 to 256 [ 136.516854][ T6065] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 136.518120][ T6061] exFAT-fs (loop3): hint_cluster is invalid (17) [ 136.568336][ T6065] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 136.628132][ T6071] loop1: detected capacity change from 0 to 22 [ 136.658402][ T6065] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 136.732692][ T6071] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 136.795323][ T6071] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 136.955752][ T6078] netlink: 'syz.0.735': attribute type 4 has an invalid length. [ 137.599198][ T6098] loop5: detected capacity change from 0 to 4096 [ 137.712580][ T6098] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 137.953358][ T6092] loop3: detected capacity change from 0 to 32768 [ 138.076939][ T6092] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 138.121668][ T6092] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad chain 1280 [ 138.163286][ T6090] loop1: detected capacity change from 0 to 32768 [ 138.220309][ T6092] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 138.245233][ T6092] OCFS2: File system is now read-only. [ 138.261759][ T6092] (syz.3.741,6092,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 138.277176][ T6092] (syz.3.741,6092,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 138.285917][ T6092] (syz.3.741,6092,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 138.295645][ T6092] (syz.3.741,6092,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 138.312812][ T6092] (syz.3.741,6092,1):ocfs2_claim_new_inode:2226 ERROR: status = -30 [ 138.314006][ T6090] XFS (loop1): Mounting V5 Filesystem [ 138.323561][ T6092] (syz.3.741,6092,1):ocfs2_claim_new_inode:2241 ERROR: status = -30 [ 138.335591][ T6092] (syz.3.741,6092,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 138.343559][ T6092] (syz.3.741,6092,1):ocfs2_mknod:385 ERROR: status = -30 [ 138.352174][ T6092] (syz.3.741,6092,1):ocfs2_mknod:502 ERROR: status = -30 [ 138.362566][ T6092] (syz.3.741,6092,1):ocfs2_create:676 ERROR: status = -30 [ 138.422975][ T4188] ocfs2: Unmounting device (7,3) on (node local) [ 138.442573][ T6090] XFS (loop1): Ending clean mount [ 138.460859][ T6090] XFS (loop1): Quotacheck needed: Please wait. [ 138.563512][ T6090] XFS (loop1): Quotacheck: Done. [ 138.708714][ T4187] XFS (loop1): Unmounting Filesystem [ 139.167537][ T5853] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 139.419307][ T6124] XFS (loop0): Mounting V5 Filesystem [ 139.537745][ T5853] usb 4-1: config index 0 descriptor too short (expected 65298, got 18) [ 139.544320][ T6124] XFS (loop0): Ending clean mount [ 139.558865][ T5853] usb 4-1: config 0 has too many interfaces: 230, using maximum allowed: 32 [ 139.572774][ T5853] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 230 [ 139.718974][ T4184] XFS (loop0): Unmounting Filesystem [ 139.737916][ T5853] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 139.777740][ T5853] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.811084][ T5853] usb 4-1: Product: syz [ 139.819136][ T5853] usb 4-1: Manufacturer: syz [ 139.827876][ T5853] usb 4-1: SerialNumber: syz [ 139.928942][ T6143] netlink: 8 bytes leftover after parsing attributes in process `syz.5.756'. [ 139.942941][ T5853] usb 4-1: config 0 descriptor?? [ 139.951102][ T6143] netlink: 'syz.5.756': attribute type 1 has an invalid length. [ 140.207693][ T5853] usb 4-1: ignoring: probably an ADSL modem [ 140.380539][ T6157] set_capacity_and_notify: 1 callbacks suppressed [ 140.380559][ T6157] loop1: detected capacity change from 0 to 8 [ 140.663086][ T5853] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 140.698991][ T5853] usb 4-1: USB disconnect, device number 3 [ 141.266374][ T6161] loop5: detected capacity change from 0 to 32768 [ 141.288205][ T6179] loop3: detected capacity change from 0 to 512 [ 141.375525][ T6161] XFS (loop5): Mounting V5 Filesystem [ 141.496325][ T6161] XFS (loop5): Ending clean mount [ 141.536032][ T6161] XFS (loop5): Quotacheck needed: Please wait. [ 141.636223][ T6194] loop2: detected capacity change from 0 to 256 [ 141.649722][ T6179] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 141.672484][ T6175] loop0: detected capacity change from 0 to 32768 [ 141.683055][ T6179] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.698522][ T6161] XFS (loop5): Quotacheck: Done. [ 141.721518][ T6179] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #2: comm syz.3.774: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 141.756374][ T6179] EXT4-fs (loop3): Remounting filesystem read-only [ 141.785161][ T6175] [ 141.785161][ T6175] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 141.785161][ T6175] [ 141.812893][ T6194] FAT-fs (loop2): Directory bread(block 64) failed [ 141.817978][ T6175] [ 141.817978][ T6175] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 141.817978][ T6175] [ 141.847560][ T6194] FAT-fs (loop2): Directory bread(block 65) failed [ 141.895799][ T6175] [ 141.895799][ T6175] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 141.895799][ T6175] [ 141.897322][ T4877] XFS (loop5): Unmounting Filesystem [ 141.970988][ T6194] FAT-fs (loop2): Directory bread(block 66) failed [ 142.035402][ T6194] FAT-fs (loop2): Directory bread(block 67) failed [ 142.069148][ T6194] FAT-fs (loop2): Directory bread(block 68) failed [ 142.113775][ T6194] FAT-fs (loop2): Directory bread(block 69) failed [ 142.123566][ T6197] [ 142.123566][ T6197] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 142.123566][ T6197] [ 142.153565][ T6194] FAT-fs (loop2): Directory bread(block 70) failed [ 142.216585][ T6194] FAT-fs (loop2): Directory bread(block 71) failed [ 142.235240][ T6194] FAT-fs (loop2): Directory bread(block 72) failed [ 142.270188][ T4184] [ 142.270188][ T4184] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 142.270188][ T4184] [ 142.293579][ T4184] [ 142.293579][ T4184] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 142.293579][ T4184] [ 142.317546][ T6194] FAT-fs (loop2): Directory bread(block 73) failed [ 142.417997][ T5841] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.450353][ T5841] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 142.651098][ T6211] loop3: detected capacity change from 0 to 4096 [ 142.770870][ T6211] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 142.817984][ T6215] fido_id[6215]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 142.840611][ T6211] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 142.914988][ T6211] ntfs: (device loop3): map_mft_record_page(): Mft record 0xa is corrupt. Run chkdsk. [ 142.966380][ T6211] ntfs: (device loop3): map_mft_record(): Failed with error code 5. [ 143.014241][ T6211] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 143.104338][ T6211] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 143.190289][ T6211] ntfs: volume version 3.1. [ 143.195059][ T6211] ntfs: (device loop3): ntfs_read_locked_inode(): Found compressed data but compression is disabled due to cluster size (65536) > 4kiB. [ 143.253153][ T6234] netlink: 'syz.1.792': attribute type 21 has an invalid length. [ 143.276622][ T6211] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 143.337655][ T6211] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 143.809916][ T6261] loop2: detected capacity change from 0 to 256 [ 144.380260][ T6292] loop0: detected capacity change from 0 to 128 [ 144.408217][ T6294] loop3: detected capacity change from 0 to 64 [ 144.422549][ T6297] netlink: 8 bytes leftover after parsing attributes in process `syz.5.822'. [ 144.491094][ T6292] FAT-fs (loop0): Directory bread(block 524322) failed [ 144.536391][ T6299] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 144.544895][ T6292] FAT-fs (loop0): Directory bread(block 524323) failed [ 144.567658][ T6292] FAT-fs (loop0): Directory bread(block 524324) failed [ 144.575273][ T6292] FAT-fs (loop0): Directory bread(block 524325) failed [ 144.610258][ T6299] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 144.625577][ T6292] FAT-fs (loop0): Directory bread(block 524326) failed [ 144.648052][ T6292] FAT-fs (loop0): Directory bread(block 524327) failed [ 144.687920][ T6292] FAT-fs (loop0): Directory bread(block 524328) failed [ 144.694877][ T6292] FAT-fs (loop0): Directory bread(block 524329) failed [ 144.772720][ T6292] FAT-fs (loop0): Directory bread(block 524322) failed [ 144.798084][ T6292] FAT-fs (loop0): Directory bread(block 524323) failed [ 145.431262][ T6325] loop1: detected capacity change from 0 to 2048 [ 145.538707][ T6325] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 145.652412][ T6333] loop2: detected capacity change from 0 to 512 [ 145.727006][ T6331] loop0: detected capacity change from 0 to 4096 [ 145.822889][ T6335] loop3: detected capacity change from 0 to 4096 [ 145.929021][ T6333] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.841: invalid indirect mapped block 256 (level 2) [ 145.991957][ T6305] loop5: detected capacity change from 0 to 32768 [ 146.001062][ T6333] EXT4-fs (loop2): 2 truncates cleaned up [ 146.006972][ T6333] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 146.008272][ T6338] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 146.084912][ T6335] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 146.126412][ T6335] ntfs3: loop3: Failed to load $Extend. [ 146.127460][ T6331] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 146.211561][ T6305] XFS (loop5): Mounting V5 Filesystem [ 146.436406][ T6331] Remounting filesystem read-only [ 146.472681][ T4188] ntfs3: loop3: ntfs_sync_fs r=9 failed, -22. [ 146.483775][ T4188] ntfs3: loop3: ntfs_evict_inode r=9 failed, -22. [ 146.520049][ T6305] XFS (loop5): Ending clean mount [ 146.580379][ T4184] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 146.813220][ T4877] XFS (loop5): Unmounting Filesystem [ 146.829074][ T6361] loop3: detected capacity change from 0 to 1024 [ 147.151584][ T1168] hfsplus: b-tree write err: -5, ino 25 [ 147.172277][ T1168] hfsplus: b-tree write err: -5, ino 4 [ 147.182750][ T1168] hfsplus: b-tree write err: -5, ino 2 [ 147.215695][ T1168] hfsplus: b-tree write err: -5, ino 22 [ 147.338551][ T6353] loop1: detected capacity change from 0 to 32768 [ 147.388899][ T6353] XFS: attr2 mount option is deprecated. [ 147.590506][ T6353] XFS (loop1): Mounting V5 Filesystem [ 147.743367][ T6400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.863'. [ 147.792417][ T6353] XFS (loop1): Ending clean mount [ 147.841392][ T6353] XFS (loop1): Quotacheck needed: Please wait. [ 148.016806][ T6353] XFS (loop1): Quotacheck: Done. [ 148.219506][ T4187] XFS (loop1): Unmounting Filesystem [ 148.481772][ T6423] loop2: detected capacity change from 0 to 65 [ 148.560215][ T6396] loop0: detected capacity change from 0 to 32768 [ 148.580002][ T6423] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway [ 149.304640][ T6456] loop5: detected capacity change from 0 to 512 [ 149.394133][ T6456] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 149.471728][ T6457] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000007,inode_readahead_blks=0x0000000000080000,quota,,errors=continue. Quota mode: writeback. [ 149.516678][ T6456] EXT4-fs (loop5): 1 truncate cleaned up [ 149.529160][ T6456] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 149.540916][ T6457] ext4 filesystem being mounted at /198/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 149.616459][ T6456] EXT4-fs error (device loop5): ext4_get_parent:1910: comm syz.5.890: inode #2: comm syz.5.890: iget: illegal inode # [ 149.995377][ T6467] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 150.063325][ T6467] hpfs: filesystem error: improperly stopped [ 150.126443][ T6467] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 150.138053][ T6467] hpfs: You really don't want any checks? You are crazy... [ 150.146431][ T6467] hpfs: hpfs_map_sector(): read error [ 150.185377][ T6471] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 150.192198][ T6467] hpfs: code page support is disabled [ 150.252838][ T6467] hpfs: hpfs_map_4sectors(): unaligned read [ 150.271294][ T6471] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.284006][ T6467] hpfs: hpfs_map_4sectors(): unaligned read [ 150.323268][ T6467] hpfs: filesystem error: unable to find root dir [ 150.552030][ T6459] set_capacity_and_notify: 3 callbacks suppressed [ 150.552051][ T6459] loop3: detected capacity change from 0 to 32768 [ 150.679758][ T6484] netlink: 24 bytes leftover after parsing attributes in process `syz.5.905'. [ 150.710921][ T6464] loop0: detected capacity change from 0 to 32768 [ 150.760742][ T6488] loop2: detected capacity change from 0 to 64 [ 150.859242][ T6459] XFS (loop3): Mounting V5 Filesystem [ 151.001331][ T6494] loop5: detected capacity change from 0 to 4096 [ 151.049325][ T6459] XFS (loop3): Ending clean mount [ 151.091671][ T6494] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 151.329970][ T4188] XFS (loop3): Unmounting Filesystem [ 151.461600][ T6511] netlink: 'syz.1.913': attribute type 2 has an invalid length. [ 151.484328][ T6511] netlink: 84 bytes leftover after parsing attributes in process `syz.1.913'. [ 151.682687][ T6519] netlink: 28 bytes leftover after parsing attributes in process `syz.0.914'. [ 151.706442][ T6519] netlink: 28 bytes leftover after parsing attributes in process `syz.0.914'. [ 151.728404][ T6516] netlink: 28 bytes leftover after parsing attributes in process `syz.0.914'. [ 151.917112][ T6522] loop0: detected capacity change from 0 to 256 [ 152.000851][ T6522] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x246dc941, utbl_chksum : 0xe619d30d) [ 152.593781][ T6548] netlink: 16 bytes leftover after parsing attributes in process `syz.2.939'. [ 152.601319][ T6549] loop3: detected capacity change from 0 to 512 [ 152.734605][ T6549] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000007,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 152.767811][ T6549] ext4 filesystem being mounted at /192/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 152.918666][ T6549] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 152.937722][ T5841] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 153.104211][ T6561] loop3: detected capacity change from 0 to 64 [ 153.186810][ T6547] loop0: detected capacity change from 0 to 32768 [ 153.208930][ T5841] usb 6-1: Using ep0 maxpacket: 8 [ 153.367630][ T5841] usb 6-1: unable to get BOS descriptor or descriptor too short [ 153.404095][ T6542] loop1: detected capacity change from 0 to 32768 [ 153.419540][ T6567] loop3: detected capacity change from 0 to 1024 [ 153.425284][ T6547] ERROR: (device loop0): dbAlloc: unable to allocate blocks [ 153.425284][ T6547] [ 153.458270][ T6567] EXT4-fs (loop3): Ignoring removed orlov option [ 153.476178][ T6567] EXT4-fs (loop3): Invalid want_extra_isize 9 [ 153.477746][ T5841] usb 6-1: config 7 has an invalid interface number: 45 but max is 0 [ 153.500736][ T5841] usb 6-1: config 7 has no interface number 0 [ 153.534946][ T5841] usb 6-1: config 7 interface 45 has no altsetting 0 [ 153.560631][ T6542] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 153.637717][ T5837] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 153.707191][ T4187] ocfs2: Unmounting device (7,1) on (node local) [ 153.717822][ T5841] usb 6-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=52.85 [ 153.727099][ T5841] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.766549][ T5841] usb 6-1: Product: syz [ 153.787002][ T5841] usb 6-1: Manufacturer: syz [ 153.823714][ T5841] usb 6-1: SerialNumber: syz [ 153.907519][ T5837] usb 3-1: Using ep0 maxpacket: 32 [ 154.011743][ T6584] QAT: Invalid ioctl 21531 [ 154.183861][ T5841] pegasus 6-1:7.45: Missing or invalid endpoints [ 154.191025][ T5837] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 154.227946][ T5837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.245140][ T5841] usb 6-1: USB disconnect, device number 4 [ 154.251444][ T5837] usb 3-1: Product: syz [ 154.281018][ T5837] usb 3-1: Manufacturer: syz [ 154.306265][ T5837] usb 3-1: SerialNumber: syz [ 154.341355][ T5837] usb 3-1: config 0 descriptor?? [ 154.400183][ T5837] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 154.412293][ T5837] dvb-usb: bulk message failed: -22 (4/0) [ 154.429401][ T5837] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 154.442704][ T5837] dvb-usb: bulk message failed: -22 (5/0) [ 154.449076][ T5837] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 154.480019][ T5837] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 154.517908][ T5837] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 154.530396][ T5837] usb 3-1: media controller created [ 154.611742][ T6565] dvb-usb: bulk message failed: -22 (7/0) [ 154.613285][ T5837] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 154.628136][ T6565] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 154.649441][ T6565] ttusb2: i2c transfer failed. [ 154.752804][ T6608] netlink: 120 bytes leftover after parsing attributes in process `syz.5.956'. [ 154.764109][ T5837] usb 3-1: selecting invalid altsetting 3 [ 154.770022][ T6608] netlink: 16 bytes leftover after parsing attributes in process `syz.5.956'. [ 154.788909][ T5837] ttusb2: set interface to alts=3 failed [ 154.812988][ T6605] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 154.934584][ T6605] EXT4-fs (loop3): 1 truncate cleaned up [ 154.944728][ T6605] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,auto_da_alloc=0x0000000000000eb0,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,inode_readahead_blks=0x0000000004000000,noquota,,errors=continue. Quota mode: none. [ 154.966618][ T5837] DVB: Unable to find symbol tda10086_attach() [ 155.033160][ T5837] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 155.116781][ T6605] EXT4-fs (loop3): re-mounted. Opts: journal_ioprio=0x0000000000000004,usrjquota="data=ordered,noload,noinit_itable,grpjquota="init_itable=0x0000000000000009,jqfmt=vfsold,noblock_validity,. Quota mode: writeback. [ 155.157637][ T5837] dvb-usb: bulk message failed: -22 (4/0) [ 155.163601][ T5837] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 155.209739][ T6624] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 155.236352][ T5837] dvb-usb: bulk message failed: -22 (5/0) [ 155.262506][ T5837] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 155.283962][ T5837] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 155.307115][ T6624] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 155.363384][ T5837] usb 3-1: USB disconnect, device number 3 [ 155.445215][ T154] hfsplus: b-tree write err: -5, ino 25 [ 155.446465][ T6628] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 155.470760][ T154] hfsplus: b-tree write err: -5, ino 4 [ 155.476409][ T154] hfsplus: b-tree write err: -5, ino 2 [ 155.530174][ T5837] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 155.541537][ T154] hfsplus: b-tree write err: -5, ino 22 [ 155.545706][ T6628] hpfs: filesystem error: improperly stopped [ 155.580335][ T6628] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 155.596668][ T6628] hpfs: You really don't want any checks? You are crazy... [ 155.617880][ T6631] netlink: 16 bytes leftover after parsing attributes in process `syz.1.978'. [ 155.667824][ T6628] hpfs: hpfs_map_sector(): read error [ 155.673480][ T6628] hpfs: code page support is disabled [ 155.757678][ T6628] hpfs: hpfs_map_4sectors(): unaligned read [ 155.783844][ T6628] hpfs: hpfs_map_4sectors(): unaligned read [ 155.807716][ T6628] hpfs: filesystem error: unable to find root dir [ 155.909639][ T6643] netlink: 96 bytes leftover after parsing attributes in process `syz.2.970'. [ 156.864310][ T6680] set_capacity_and_notify: 6 callbacks suppressed [ 156.864333][ T6680] loop2: detected capacity change from 0 to 8192 [ 156.994587][ T6680] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 157.007822][ T6680] REISERFS (device loop2): using ordered data mode [ 157.014685][ T6680] reiserfs: using flush barriers [ 157.078442][ T6680] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 157.201551][ T6680] REISERFS (device loop2): checking transaction log (loop2) [ 157.208160][ T6707] loop0: detected capacity change from 0 to 1024 [ 157.259568][ T6680] REISERFS (device loop2): Using tea hash to sort names [ 157.259915][ T6680] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 157.335001][ T6707] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002] [ 157.335107][ T6707] System zones: 0-1, 3-12 [ 157.346747][ T6707] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_dev=0x0000000000000007,debug,nodioread_nolock,min_batch_time=0x0000000000000006,debug_want_extra_isize=0x0000000000000080,grpquota,nodelalloc,jqfmt=vfsv1,norecovery,,errors=continue. Quota mode: writeback. [ 157.391064][ C0] vkms_vblank_simulate: vblank timer overrun [ 157.419575][ T6718] loop1: detected capacity change from 0 to 128 [ 157.518726][ T6722] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1008'. [ 157.551570][ T6718] EXT4-fs (loop1): Ignoring removed nobh option [ 157.565693][ T6722] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1008'. [ 157.591942][ T6718] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,abort,,errors=continue. Quota mode: none. [ 157.688890][ T6718] ext4 filesystem being mounted at /229/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 157.827259][ T6734] loop2: detected capacity change from 0 to 1024 [ 158.145721][ T6755] netlink: 876 bytes leftover after parsing attributes in process `syz.1.1020'. [ 158.175112][ T6755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1020'. [ 158.212617][ T154] hfsplus: b-tree write err: -5, ino 25 [ 158.228202][ T154] hfsplus: b-tree write err: -5, ino 4 [ 158.254741][ T154] hfsplus: b-tree write err: -5, ino 2 [ 158.269701][ T154] hfsplus: b-tree write err: -5, ino 22 [ 158.670643][ T6783] loop1: detected capacity change from 0 to 1024 [ 158.682166][ T6784] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 158.808569][ T6791] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1038'. [ 158.837737][ T6791] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1038'. [ 158.918192][ T4632] hfsplus: b-tree write err: -5, ino 25 [ 158.924133][ T4632] hfsplus: b-tree write err: -5, ino 4 [ 158.948676][ T4632] hfsplus: b-tree write err: -5, ino 2 [ 158.969516][ T4632] hfsplus: b-tree write err: -5, ino 17 [ 159.137819][ T1326] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 159.417648][ T1326] usb 4-1: Using ep0 maxpacket: 8 [ 159.597840][ T1326] usb 4-1: unable to get BOS descriptor or descriptor too short [ 159.636367][ T6807] loop5: detected capacity change from 0 to 2048 [ 159.671013][ T6807] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 159.702969][ T6807] attempt to access beyond end of device [ 159.702969][ T6807] loop5: rw=524288, want=33554432, limit=2048 [ 159.719235][ T6789] loop0: detected capacity change from 0 to 32768 [ 159.723147][ T6808] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 159.751941][ T1326] usb 4-1: config 7 has an invalid interface number: 45 but max is 0 [ 159.774389][ T6807] attempt to access beyond end of device [ 159.774389][ T6807] loop5: rw=0, want=33554432, limit=2048 [ 159.778435][ T1326] usb 4-1: config 7 has no interface number 0 [ 159.821888][ T1326] usb 4-1: config 7 interface 45 has no altsetting 0 [ 159.832447][ T6807] NILFS (loop5): I/O error reading meta-data file (ino=6, block-offset=3) [ 159.976874][ T6810] loop1: detected capacity change from 0 to 2048 [ 160.047193][ T6816] loop2: detected capacity change from 0 to 256 [ 160.054217][ T1326] usb 4-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=52.85 [ 160.067595][ T1326] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.086553][ T1326] usb 4-1: Product: syz [ 160.092144][ T1326] usb 4-1: Manufacturer: syz [ 160.097084][ T1326] usb 4-1: SerialNumber: syz [ 160.170963][ T6810] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 160.187574][ T6820] __nla_validate_parse: 1 callbacks suppressed [ 160.194455][ T6820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1051'. [ 160.257890][ T6820] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1051'. [ 160.438180][ T1326] pegasus 4-1:7.45: Missing or invalid endpoints [ 160.492102][ T1326] usb 4-1: USB disconnect, device number 4 [ 160.656429][ T6832] loop1: detected capacity change from 0 to 256 [ 160.698450][ T6832] exfat: Deprecated parameter 'utf8' [ 160.765025][ T6832] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 161.076695][ T6842] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002] [ 161.087829][ T6842] System zones: 0-1, 3-12 [ 161.170737][ T6842] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_dev=0x0000000000000007,debug,nodioread_nolock,min_batch_time=0x0000000000000006,debug_want_extra_isize=0x0000000000000080,grpquota,nodelalloc,jqfmt=vfsv1,norecovery,,errors=continue. Quota mode: writeback. [ 161.197340][ C0] vkms_vblank_simulate: vblank timer overrun [ 161.361159][ T6860] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1065'. [ 161.735063][ T6866] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 161.767722][ T6866] ext4 filesystem being mounted at /151/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.189165][ T6880] set_capacity_and_notify: 4 callbacks suppressed [ 162.189186][ T6880] loop5: detected capacity change from 0 to 512 [ 162.200502][ T6881] loop1: detected capacity change from 0 to 1024 [ 162.386152][ T6880] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 162.397769][ T6880] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.432781][ T6875] loop3: detected capacity change from 0 to 32768 [ 162.448625][ T9] hfsplus: b-tree write err: -5, ino 25 [ 162.454887][ T9] hfsplus: b-tree write err: -5, ino 4 [ 162.484725][ T6875] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.1073 (6875) [ 162.500950][ T9] hfsplus: b-tree write err: -5, ino 2 [ 162.714397][ T6875] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 162.747202][ T6875] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 162.771302][ T6897] netlink: 'syz.2.1095': attribute type 2 has an invalid length. [ 162.826777][ T6901] loop0: detected capacity change from 0 to 64 [ 162.835933][ T6875] BTRFS info (device loop3): use zstd compression, level 3 [ 162.844106][ T6897] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1095'. [ 162.865626][ T6875] BTRFS info (device loop3): using free space tree [ 162.919824][ T6875] BTRFS info (device loop3): has skinny extents [ 163.226754][ T6930] loop1: detected capacity change from 0 to 256 [ 163.247497][ T6875] BTRFS info (device loop3): enabling ssd optimizations [ 163.442224][ T6930] FAT-fs (loop1): Directory bread(block 64) failed [ 163.473592][ T6930] FAT-fs (loop1): Directory bread(block 65) failed [ 163.497093][ T6930] FAT-fs (loop1): Directory bread(block 66) failed [ 163.532364][ T6930] FAT-fs (loop1): Directory bread(block 67) failed [ 163.579969][ T6930] FAT-fs (loop1): Directory bread(block 68) failed [ 163.586937][ T6930] FAT-fs (loop1): Directory bread(block 69) failed [ 163.653650][ T6930] FAT-fs (loop1): Directory bread(block 70) failed [ 163.706506][ T6930] FAT-fs (loop1): Directory bread(block 71) failed [ 163.756474][ T6930] FAT-fs (loop1): Directory bread(block 72) failed [ 163.770671][ T6930] FAT-fs (loop1): Directory bread(block 73) failed [ 164.237191][ T6948] loop5: detected capacity change from 0 to 64 [ 164.689727][ T6965] loop3: detected capacity change from 0 to 64 [ 164.942346][ T6980] loop2: detected capacity change from 0 to 128 [ 165.049573][ T6976] loop0: detected capacity change from 0 to 4096 [ 165.064640][ T6980] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 165.091948][ T6980] hpfs: filesystem error: improperly stopped [ 165.112758][ T6980] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 165.124325][ T6980] hpfs: You really don't want any checks? You are crazy... [ 165.146980][ T6980] hpfs: hpfs_map_sector(): read error [ 165.162323][ T6980] hpfs: code page support is disabled [ 165.192999][ T6990] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 165.221075][ T6980] hpfs: hpfs_map_4sectors(): unaligned read [ 165.237519][ T6980] hpfs: hpfs_map_4sectors(): unaligned read [ 165.248688][ T6980] hpfs: filesystem error: unable to find root dir [ 165.434818][ T4184] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 165.498335][ T4184] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 165.592834][ T7001] sg_write: data in/out 327680/1 bytes for SCSI command 0xf0-- guessing data in; [ 165.592834][ T7001] program syz.0.1121 not setting count and/or reply_len properly [ 165.613507][ T6999] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1122'. [ 165.662037][ T6999] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1122'. [ 165.984894][ T7014] loop1: detected capacity change from 0 to 512 [ 166.078530][ T7016] exfat: Deprecated parameter 'utf8' [ 166.131453][ T7016] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 166.228885][ T7014] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 166.336497][ T7014] ext4 filesystem being mounted at /256/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.504506][ T7014] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz.1.1128: invalid size [ 166.650293][ T7014] EXT4-fs (loop1): Remounting filesystem read-only [ 166.674703][ T7027] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 166.736095][ T7027] attempt to access beyond end of device [ 166.736095][ T7027] loop3: rw=524288, want=33554432, limit=2048 [ 166.776734][ T7034] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 166.858519][ T7027] attempt to access beyond end of device [ 166.858519][ T7027] loop3: rw=0, want=33554432, limit=2048 [ 166.955859][ T7012] ERROR: (device loop2): diRead: i_ino != di_number [ 166.955859][ T7012] [ 167.007788][ T7027] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=3) [ 167.413644][ T7052] set_capacity_and_notify: 4 callbacks suppressed [ 167.413664][ T7052] loop0: detected capacity change from 0 to 512 [ 167.540496][ T7052] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.1143: inode has both inline data and extents flags [ 167.581728][ T7052] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1143: couldn't read orphan inode 15 (err -117) [ 167.649989][ T7052] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 168.072407][ T7065] loop5: detected capacity change from 0 to 16 [ 168.205218][ T7065] erofs: (device loop5): mounted with root inode @ nid 36. [ 168.305064][ T7065] erofs: (device loop5): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 168.370558][ T7065] erofs: (device loop5): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 168.380706][ T7055] loop2: detected capacity change from 0 to 32768 [ 168.434373][ T7065] erofs: (device loop5): z_erofs_readpage: failed to read, err [-95] [ 168.484319][ T26] audit: type=1800 audit(1774432136.462:3): pid=7065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1149" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 168.528117][ T7047] loop3: detected capacity change from 0 to 32768 [ 168.596567][ T7047] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 scanned by syz.3.1140 (7047) [ 168.729454][ C1] vkms_vblank_simulate: vblank timer overrun [ 168.769249][ T7047] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 168.804611][ T7047] BTRFS info (device loop3): enabling ssd optimizations [ 168.808597][ T7092] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1157'. [ 168.826349][ T7093] sg_write: data in/out 327680/1 bytes for SCSI command 0xf0-- guessing data in; [ 168.826349][ T7093] program syz.2.1159 not setting count and/or reply_len properly [ 168.846977][ T7047] BTRFS info (device loop3): not using ssd optimizations [ 168.863595][ T7092] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1157'. [ 168.897315][ T7047] BTRFS info (device loop3): turning off barriers [ 168.936033][ T7047] BTRFS info (device loop3): using free space tree [ 169.012801][ T7047] BTRFS info (device loop3): has skinny extents [ 169.398546][ T5854] Process accounting resumed [ 169.415128][ T7095] loop1: detected capacity change from 0 to 32768 [ 169.475699][ T7095] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.1161 (7095) [ 169.559448][ T7120] Process accounting resumed [ 169.677735][ T7095] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 169.727752][ T7095] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 169.781038][ T7095] BTRFS info (device loop1): use zstd compression, level 3 [ 169.818324][ T7108] loop0: detected capacity change from 0 to 32768 [ 169.825393][ T7095] BTRFS info (device loop1): using free space tree [ 169.864912][ T7108] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.1165 (7108) [ 169.878937][ T7095] BTRFS info (device loop1): has skinny extents [ 170.101388][ T7099] loop2: detected capacity change from 0 to 32768 [ 170.189735][ T7099] ERROR: (device loop2): diWrite: ixpxd invalid [ 170.189735][ T7099] [ 170.206609][ T7099] ERROR: (device loop2): remounting filesystem as read-only [ 170.216411][ T7099] ERROR: (device loop2): txCommit: [ 170.216411][ T7099] [ 170.248506][ T7099] ERROR: (device loop2): dbAlloc: the hint is outside the map [ 170.248506][ T7099] [ 170.262468][ T7099] ialloc: diAlloc returned -5! [ 170.352289][ T7108] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 170.370390][ T7108] BTRFS info (device loop0): force zlib compression, level 3 [ 170.382707][ T7095] BTRFS info (device loop1): enabling ssd optimizations [ 170.400688][ T7108] BTRFS info (device loop0): force clearing of disk cache [ 170.427800][ T7108] BTRFS info (device loop0): setting nodatasum [ 170.434263][ T7108] BTRFS info (device loop0): allowing degraded mounts [ 170.487796][ T7108] BTRFS info (device loop0): enabling disk space caching [ 170.495024][ T7108] BTRFS info (device loop0): disk space caching is enabled [ 170.550755][ T7108] BTRFS info (device loop0): has skinny extents [ 170.609424][ T7166] loop3: detected capacity change from 0 to 16 [ 170.690547][ T7166] erofs: (device loop3): mounted with root inode @ nid 36. [ 171.085030][ T7183] loop2: detected capacity change from 0 to 512 [ 171.234629][ T7183] EXT4-fs (loop2): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 171.311106][ T7183] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.428857][ T7108] BTRFS info (device loop0): clearing free space tree [ 171.446016][ T7108] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 171.448721][ T7183] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz.2.1170: invalid size [ 171.467176][ T7108] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 171.536732][ T7183] EXT4-fs (loop2): Remounting filesystem read-only [ 171.871026][ T7108] BTRFS info (device loop0): balance: start -susage=8589934849,limit=1 [ 171.872501][ T7202] device macsec2 entered promiscuous mode [ 171.960955][ T7206] loop2: detected capacity change from 0 to 512 [ 172.014120][ T7108] BTRFS info (device loop0): relocating block group 1048576 flags system [ 172.046834][ T7206] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.1177: inode has both inline data and extents flags [ 172.112857][ T7206] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1177: couldn't read orphan inode 15 (err -117) [ 172.145862][ T7108] BTRFS info (device loop0): balance: ended with status: 0 [ 172.280652][ T7206] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 172.300555][ T5847] Process accounting resumed [ 172.384321][ T7209] Process accounting resumed [ 173.486894][ T7243] loop3: detected capacity change from 0 to 2048 [ 173.608797][ T7243] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 173.766162][ T7253] loop0: detected capacity change from 0 to 512 [ 173.853449][ T7229] loop1: detected capacity change from 0 to 32768 [ 173.979976][ T7253] EXT4-fs (loop0): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 174.034925][ T7229] XFS (loop1): Mounting V5 Filesystem [ 174.034972][ T7253] ext4 filesystem being mounted at /241/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.078113][ T7271] loop2: detected capacity change from 0 to 1024 [ 174.240170][ T7271] hfsplus: invalid length 32517 has been corrected to 255 [ 174.272897][ T7253] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #12: comm syz.0.1200: invalid size [ 174.328695][ T7271] hfsplus: invalid length 32517 has been corrected to 255 [ 174.353264][ T7229] XFS (loop1): Ending clean mount [ 174.388860][ T7253] EXT4-fs (loop0): Remounting filesystem read-only [ 174.569530][ T4187] XFS (loop1): Unmounting Filesystem [ 174.591170][ T7267] loop3: detected capacity change from 0 to 32768 [ 174.659481][ T7283] netlink: 364 bytes leftover after parsing attributes in process `syz.5.1210'. [ 174.698758][ T7283] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 174.924492][ T7267] ERROR: (device loop3): diWrite: ixpxd invalid [ 174.924492][ T7267] [ 174.977011][ T7267] ERROR: (device loop3): remounting filesystem as read-only [ 175.037115][ T7267] ERROR: (device loop3): txCommit: [ 175.037115][ T7267] [ 175.063356][ T7267] ERROR: (device loop3): dbAlloc: the hint is outside the map [ 175.063356][ T7267] [ 175.084404][ T7267] ialloc: diAlloc returned -5! [ 175.239969][ T7304] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1232'. [ 175.287058][ T7304] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1232'. [ 175.631620][ T7314] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1212'. [ 175.663116][ T7316] loop2: detected capacity change from 0 to 512 [ 175.767938][ T7316] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 175.834975][ T7316] EXT4-fs (loop2): 1 truncate cleaned up [ 175.907475][ T7316] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 176.003280][ T7311] loop5: detected capacity change from 0 to 32768 [ 176.039376][ T7333] netlink: 364 bytes leftover after parsing attributes in process `syz.3.1230'. [ 176.077711][ T7333] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 176.112156][ T7316] EXT4-fs error (device loop2): ext4_get_parent:1910: comm syz.2.1225: inode #2: comm syz.2.1225: iget: illegal inode # [ 176.127619][ T7311] ERROR: (device loop5): dbAlloc: unable to allocate blocks [ 176.127619][ T7311] [ 176.333750][ T7343] loop0: detected capacity change from 0 to 64 [ 176.783480][ T7355] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1243'. [ 176.793191][ T7357] mkiss: ax0: crc mode is auto. [ 176.860426][ T7353] loop0: detected capacity change from 0 to 4096 [ 176.997921][ T7353] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 177.225255][ T7363] loop3: detected capacity change from 0 to 128 [ 177.343124][ T7363] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 177.445339][ T7363] hpfs: filesystem error: improperly stopped [ 177.453770][ T7363] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 177.467815][ T7363] hpfs: You really don't want any checks? You are crazy... [ 177.478037][ T7363] hpfs: hpfs_map_sector(): read error [ 177.483683][ T7363] hpfs: code page support is disabled [ 177.494420][ T7363] hpfs: hpfs_map_4sectors(): unaligned read [ 177.515076][ T7363] hpfs: hpfs_map_4sectors(): unaligned read [ 177.521820][ T7363] hpfs: filesystem error: unable to find root dir [ 177.547618][ T7365] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 177.563944][ T7365] REISERFS (device loop1): using ordered data mode [ 177.577653][ T7365] reiserfs: using flush barriers [ 177.593280][ T7365] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 177.678977][ T7365] REISERFS (device loop1): checking transaction log (loop1) [ 177.795301][ T7365] REISERFS (device loop1): Using r5 hash to sort names [ 177.860265][ T7365] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 178.413071][ T7389] mkiss: ax0: crc mode is auto. [ 178.521268][ T7367] [ 178.521268][ T7367] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 178.521268][ T7367] [ 178.610931][ T7367] [ 178.610931][ T7367] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 178.610931][ T7367] [ 178.663777][ T7367] [ 178.663777][ T7367] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 178.663777][ T7367] [ 178.721882][ T7396] set_capacity_and_notify: 4 callbacks suppressed [ 178.721903][ T7396] loop5: detected capacity change from 0 to 128 [ 178.789137][ T7394] [ 178.789137][ T7394] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 178.789137][ T7394] [ 178.932867][ T4185] [ 178.932867][ T4185] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 178.932867][ T4185] [ 178.958897][ T4185] [ 178.958897][ T4185] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 178.958897][ T4185] [ 178.976978][ T7396] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c01c, mo2=0002] [ 179.045895][ T7396] System zones: 1-3, 19-19, 35-36 [ 179.063746][ T7387] loop1: detected capacity change from 0 to 32768 [ 179.083437][ T7387] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.1255 (7387) [ 179.100813][ T7396] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,debug,,errors=continue. Quota mode: none. [ 179.180731][ T7396] ext4 filesystem being mounted at /195/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 179.283062][ T7387] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 179.343287][ T7387] BTRFS info (device loop1): force zlib compression, level 3 [ 179.387445][ T7387] BTRFS info (device loop1): force clearing of disk cache [ 179.426410][ T7401] loop0: detected capacity change from 0 to 2048 [ 179.427825][ T7387] BTRFS info (device loop1): setting nodatasum [ 179.434860][ T7396] EXT4-fs warning (device loop5): verify_group_input:147: Cannot add at group 25 (only 1 groups) [ 179.467716][ T7387] BTRFS info (device loop1): allowing degraded mounts [ 179.475712][ T7387] BTRFS info (device loop1): enabling disk space caching [ 179.525952][ T7401] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 179.530464][ T7387] BTRFS info (device loop1): disk space caching is enabled [ 179.584668][ T7391] loop3: detected capacity change from 0 to 32768 [ 179.592543][ T7387] BTRFS info (device loop1): has skinny extents [ 179.600705][ T7401] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 179.704888][ T7409] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1262'. [ 179.792417][ T7391] XFS (loop3): Mounting V5 Filesystem [ 180.012069][ T7439] loop2: detected capacity change from 0 to 256 [ 180.028834][ T7439] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 180.086658][ T7387] BTRFS info (device loop1): clearing free space tree [ 180.095982][ T7391] XFS (loop3): Ending clean mount [ 180.117315][ T7387] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 180.133380][ T7387] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 180.258298][ T4188] XFS (loop3): Unmounting Filesystem [ 180.534789][ T7387] BTRFS info (device loop1): balance: start -susage=8589934849,limit=1 [ 180.593643][ T7387] BTRFS info (device loop1): relocating block group 1048576 flags system [ 180.803409][ T7387] BTRFS info (device loop1): balance: ended with status: 0 [ 180.940236][ T7464] loop0: detected capacity change from 0 to 24 [ 181.034904][ T7464] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 181.123251][ T7464] VFS: Can't find a romfs filesystem on dev loop0. [ 181.123251][ T7464] [ 181.258387][ T7468] loop2: detected capacity change from 0 to 128 [ 181.314691][ T7470] loop5: detected capacity change from 0 to 256 [ 181.386878][ T7468] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c01c, mo2=0002] [ 181.415120][ T7468] System zones: 1-3, 19-19, 35-36 [ 181.417227][ T7470] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 181.531755][ T7468] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,debug,,errors=continue. Quota mode: none. [ 181.547852][ T7468] ext4 filesystem being mounted at /270/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 181.634557][ T7468] EXT4-fs warning (device loop2): verify_group_input:147: Cannot add at group 25 (only 1 groups) [ 181.694809][ T7481] loop1: detected capacity change from 0 to 64 [ 182.006231][ T7485] loop0: detected capacity change from 0 to 4096 [ 182.085372][ T7485] EXT4-fs (loop0): Test dummy encryption mode enabled [ 182.113025][ T7485] EXT4-fs (loop0): Ignoring removed orlov option [ 182.195115][ T7485] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,nodelalloc,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 182.420094][ T7501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1295'. [ 182.454340][ T26] audit: type=1800 audit(1774432150.432:4): pid=7485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1288" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 182.834199][ T7487] JBD2: Ignoring recovery information on journal [ 182.887698][ T154] hfsplus: b-tree write err: -5, ino 25 [ 182.893881][ T154] hfsplus: b-tree write err: -5, ino 4 [ 182.934249][ T154] hfsplus: b-tree write err: -5, ino 2 [ 182.941840][ T7487] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 183.159754][ T7525] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 183.174094][ T7532] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1304'. [ 183.263818][ T7525] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 183.370477][ T4877] ocfs2: Unmounting device (7,5) on (node local) [ 183.370632][ T7525] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 183.403397][ T7525] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 183.461275][ T7534] EXT4-fs (loop0): orphan cleanup on readonly fs [ 183.567609][ T7534] EXT4-fs error (device loop0): ext4_quota_enable:6438: comm syz.0.1305: Bad quota inum: 2, type: 2 [ 183.618649][ T7534] EXT4-fs warning (device loop0): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 183.698534][ T7534] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 183.733206][ T7534] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,noblock_validity,min_batch_time=0x0000000000000514,grpjquota=,stripe=0x0000000000000007,journal_ioprio=0x0000000000000001,grpid,,errors=continue. Quota mode: writeback. [ 183.768161][ T7552] xt_hashlimit: max too large, truncated to 1048576 [ 183.818366][ T7552] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 183.824448][ T7548] set_capacity_and_notify: 4 callbacks suppressed [ 183.824467][ T7548] loop2: detected capacity change from 0 to 4096 [ 183.836743][ T7543] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 183.898078][ T7548] EXT4-fs (loop2): Test dummy encryption mode enabled [ 183.915721][ T7548] EXT4-fs (loop2): Ignoring removed orlov option [ 183.922708][ T7543] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 184.008074][ T7543] EXT4-fs (loop5): 1 truncate cleaned up [ 184.014211][ T7543] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,usrjquota="data=ordered,noload,noinit_itable,grpjquota="init_itable=0x0000000000000009,jqfmt=vfsold,noblock_validity,,errors=continue. Quota mode: writeback. [ 184.061186][ T7548] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,nodelalloc,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 184.091361][ T7543] EXT4-fs (loop5): re-mounted. Opts: journal_ioprio=0x0000000000000004,usrjquota="data=ordered,noload,noinit_itable,grpjquota="init_itable=0x0000000000000009,jqfmt=vfsold,noblock_validity,. Quota mode: writeback. [ 184.290470][ T26] audit: type=1800 audit(1774432152.272:5): pid=7548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1309" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 184.476730][ T7579] loop3: detected capacity change from 0 to 256 [ 184.569359][ T7579] exfat: Deprecated parameter 'utf8' [ 184.575423][ T7579] exfat: Deprecated parameter 'utf8' [ 184.641786][ T7579] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 184.668828][ T7585] team0: Device gtp0 is of different type [ 184.909591][ T7579] exFAT-fs (loop3): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 185.056703][ T7593] loop0: detected capacity change from 0 to 8192 [ 185.058663][ T7595] exFAT-fs (loop3): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 185.185233][ T7593] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 185.242729][ T7593] REISERFS (device loop0): using ordered data mode [ 185.250257][ T7593] reiserfs: using flush barriers [ 185.302994][ T7593] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 185.407927][ T7593] REISERFS (device loop0): checking transaction log (loop0) [ 185.500515][ T7612] loop2: detected capacity change from 0 to 512 [ 185.532419][ T7612] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 185.653797][ T7614] loop1: detected capacity change from 0 to 2048 [ 185.670762][ T7612] EXT4-fs (loop2): 1 truncate cleaned up [ 185.676573][ T7612] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,auto_da_alloc=0x0000000000000eb0,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,inode_readahead_blks=0x0000000004000000,noquota,,errors=continue. Quota mode: none. [ 185.766159][ T7581] loop5: detected capacity change from 0 to 32768 [ 185.803295][ T7614] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 185.825628][ T7614] exFAT-fs (loop1): invalid boot record signature [ 185.843397][ T7614] exFAT-fs (loop1): failed to read boot sector [ 185.856346][ T7614] exFAT-fs (loop1): failed to recognize exfat type [ 185.877681][ T7612] EXT4-fs (loop2): re-mounted. Opts: journal_ioprio=0x0000000000000004,usrjquota="data=ordered,noload,noinit_itable,grpjquota="init_itable=0x0000000000000009,jqfmt=vfsold,noblock_validity,. Quota mode: writeback. [ 185.879584][ T7581] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.1320 (7581) [ 185.929108][ T7593] REISERFS (device loop0): Using tea hash to sort names [ 185.968093][ T7593] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 186.143978][ T7622] loop1: detected capacity change from 0 to 1024 [ 186.213053][ T7581] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 186.241779][ T7622] EXT4-fs (loop1): Ignoring removed orlov option [ 186.262590][ T7581] BTRFS info (device loop5): force zlib compression, level 3 [ 186.300956][ T7622] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 186.317446][ T7581] BTRFS info (device loop5): force clearing of disk cache [ 186.324808][ T7581] BTRFS info (device loop5): setting nodatasum [ 186.378413][ T7581] BTRFS info (device loop5): allowing degraded mounts [ 186.405686][ T7622] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a814c018, mo2=0002] [ 186.416505][ T7581] BTRFS info (device loop5): enabling disk space caching [ 186.437520][ T7581] BTRFS info (device loop5): disk space caching is enabled [ 186.444807][ T7581] BTRFS info (device loop5): has skinny extents [ 186.452855][ T7622] System zones: 0-1, 3-12 [ 186.459159][ T7622] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,mblk_io_submit,debug,,errors=continue. Quota mode: writeback. [ 186.909281][ T7581] BTRFS info (device loop5): clearing free space tree [ 186.928429][ T7581] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 186.965715][ T7581] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 187.009493][ T7673] loop0: detected capacity change from 0 to 64 [ 187.245687][ T7581] BTRFS info (device loop5): balance: start -susage=8589934849,limit=1 [ 187.319455][ T7581] BTRFS info (device loop5): relocating block group 1048576 flags system [ 187.443239][ T7581] BTRFS info (device loop5): balance: ended with status: 0 [ 187.614285][ T7693] loop3: detected capacity change from 0 to 2048 [ 187.793159][ T7693] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 188.051377][ T7710] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1364'. [ 188.070736][ T7678] loop2: detected capacity change from 0 to 32768 [ 188.198513][ T7706] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1376) has entry where CRC length (32) does not match entry length (24) [ 188.299473][ T7678] JBD2: Ignoring recovery information on journal [ 188.473710][ T7715] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 188.527756][ T7678] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 188.608056][ T7715] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 188.626093][ T7715] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 188.727334][ T7715] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 188.939296][ T4185] ocfs2: Unmounting device (7,2) on (node local) [ 189.114291][ T7739] xt_hashlimit: max too large, truncated to 1048576 [ 189.169481][ T7740] set_capacity_and_notify: 1 callbacks suppressed [ 189.169502][ T7740] loop1: detected capacity change from 0 to 512 [ 189.258601][ T7737] team0: Device gtp0 is of different type [ 189.279742][ T7740] EXT4-fs (loop1): Test dummy encryption mode enabled [ 189.302195][ T7740] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 189.452839][ T7740] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.1373: bad orphan inode 131083 [ 189.478273][ T7740] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,journal_dev=0x0000000000000002,,errors=continue. Quota mode: none. [ 189.638349][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 189.638396][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 189.708899][ T7764] netlink: 'syz.0.1380': attribute type 4 has an invalid length. [ 189.779703][ T7764] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1380'. [ 190.101665][ T7783] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 190.233930][ T7788] loop1: detected capacity change from 0 to 256 [ 190.358421][ T7788] exfat: Deprecated parameter 'utf8' [ 190.363809][ T7788] exfat: Deprecated parameter 'utf8' [ 190.401401][ T7801] loop3: detected capacity change from 0 to 512 [ 190.525681][ T7788] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 190.544086][ T7801] EXT4-fs (loop3): Test dummy encryption mode enabled [ 190.571786][ T7801] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 190.660176][ T7788] exFAT-fs (loop1): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 190.696084][ T7801] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.1392: bad orphan inode 131083 [ 190.716899][ T7801] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,journal_dev=0x0000000000000002,,errors=continue. Quota mode: none. [ 190.818019][ T7788] exFAT-fs (loop1): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 190.831049][ T7779] loop0: detected capacity change from 0 to 32768 [ 190.865251][ T7809] loop5: detected capacity change from 0 to 64 [ 190.973852][ T7817] loop2: detected capacity change from 0 to 1024 [ 190.984747][ T7809] hfs: request for non-existent node 24 in B*Tree [ 190.994349][ T7779] XFS (loop0): Mounting V5 Filesystem [ 191.009898][ T7809] hfs: request for non-existent node 24 in B*Tree [ 191.135668][ T7822] loop1: detected capacity change from 0 to 2048 [ 191.229500][ T7822] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 191.277805][ T7779] XFS (loop0): Ending clean mount [ 191.296600][ T7779] XFS (loop0): Quotacheck needed: Please wait. [ 191.369442][ T7822] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 1376) has entry where CRC length (32) does not match entry length (24) [ 191.520558][ T7779] XFS (loop0): Quotacheck: Done. [ 191.605153][ T26] audit: type=1800 audit(1774432159.582:6): pid=7779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1386" name="file1" dev="loop0" ino=6150 res=0 errno=0 [ 191.717676][ T7150] Bluetooth: hci0: command 0x0406 tx timeout [ 191.723802][ T7150] Bluetooth: hci1: command 0x0406 tx timeout [ 191.737629][ T5847] Bluetooth: hci2: command 0x0406 tx timeout [ 191.779611][ T7150] Bluetooth: hci3: command 0x0406 tx timeout [ 191.853533][ T7844] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1409'. [ 192.006579][ T7846] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1411'. [ 192.075843][ T7840] loop5: detected capacity change from 0 to 8192 [ 192.083417][ T4184] XFS (loop0): Unmounting Filesystem [ 192.210122][ T7840] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 192.257077][ T7840] REISERFS (device loop5): using ordered data mode [ 192.263841][ T7840] reiserfs: using flush barriers [ 192.286801][ T7840] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 192.477953][ T7840] REISERFS (device loop5): checking transaction log (loop5) [ 192.515232][ T7840] REISERFS (device loop5): Using r5 hash to sort names [ 192.531556][ T7840] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 192.603731][ T7840] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 193.060829][ T7875] netlink: 19 bytes leftover after parsing attributes in process `syz.3.1425'. [ 193.105365][ T7877] device ip6gretap0 entered promiscuous mode [ 193.127142][ T7879] loop0: detected capacity change from 0 to 8 [ 193.136571][ T7877] device ip6gretap0 left promiscuous mode [ 193.321797][ T7883] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1423'. [ 193.463575][ T7861] loop2: detected capacity change from 0 to 32768 [ 193.675837][ T7900] comedi comedi3: pcl812: I/O port conflict (0x8001,16) [ 194.555662][ T7932] set_capacity_and_notify: 2 callbacks suppressed [ 194.555683][ T7932] loop0: detected capacity change from 0 to 256 [ 194.693396][ T7932] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x190b464b, utbl_chksum : 0xe619d30d) [ 194.755504][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.762012][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.840699][ T7932] exFAT-fs (loop0): error, broken FAT chain. [ 194.878104][ T7932] exFAT-fs (loop0): Filesystem has been set read-only [ 194.898337][ T7932] exFAT-fs (loop0): error, failed to bmap (inode : ffff888062a58e60 iblock : 0, err : -5) [ 194.932055][ T7932] exFAT-fs (loop0): error, broken FAT chain. [ 194.955306][ T7932] exFAT-fs (loop0): Filesystem has been set read-only [ 194.974331][ T7932] exFAT-fs (loop0): error, failed to bmap (inode : ffff888062a58e60 iblock : 0, err : -5) [ 194.995018][ T7932] exFAT-fs (loop0): error, broken FAT chain. [ 195.015338][ T7932] exFAT-fs (loop0): error, failed to bmap (inode : ffff888062a58e60 iblock : 1, err : -5) [ 195.068951][ T7932] exFAT-fs (loop0): error, broken FAT chain. [ 195.075200][ T7932] exFAT-fs (loop0): error, failed to bmap (inode : ffff888062a58e60 iblock : 2, err : -5) [ 195.114949][ T7917] loop2: detected capacity change from 0 to 32768 [ 195.121911][ T7932] exFAT-fs (loop0): error, broken FAT chain. [ 195.156337][ T7932] exFAT-fs (loop0): error, failed to bmap (inode : ffff888062a58e60 iblock : 3, err : -5) [ 195.248796][ T7917] XFS (loop2): Mounting V5 Filesystem [ 195.267504][ T7932] exFAT-fs (loop0): error, broken FAT chain. [ 195.273662][ T7932] exFAT-fs (loop0): error, failed to bmap (inode : ffff888062a58e60 iblock : 4, err : -5) [ 195.398067][ T7932] exFAT-fs (loop0): error, broken FAT chain. [ 195.414884][ T7917] XFS (loop2): Ending clean mount [ 195.446502][ T7932] exFAT-fs (loop0): error, failed to bmap (inode : ffff888062a58e60 iblock : 5, err : -5) [ 195.470221][ T7936] loop5: detected capacity change from 0 to 32768 [ 195.481597][ T7932] exFAT-fs (loop0): error, broken FAT chain. [ 195.488503][ T7932] exFAT-fs (loop0): error, failed to bmap (inode : ffff888062a58e60 iblock : 6, err : -5) [ 195.500911][ T7956] loop1: detected capacity change from 0 to 2048 [ 195.507676][ T7932] exFAT-fs (loop0): error, broken FAT chain. [ 195.507761][ T7932] exFAT-fs (loop0): error, failed to bmap (inode : ffff888062a58e60 iblock : 7, err : -5) [ 195.507804][ T7932] exFAT-fs (loop0): error, broken FAT chain. [ 195.507820][ T7932] exFAT-fs (loop0): error, failed to bmap (inode : ffff888062a58e60 iblock : 0, err : -5) [ 195.507847][ T7932] exFAT-fs (loop0): error, broken FAT chain. [ 195.507865][ T7932] exFAT-fs (loop0): error, broken FAT chain. [ 195.507883][ T7932] exFAT-fs (loop0): error, broken FAT chain. [ 195.507902][ T7932] exFAT-fs (loop0): error, broken FAT chain. [ 195.507920][ T7932] exFAT-fs (loop0): error, broken FAT chain. [ 195.507938][ T7932] exFAT-fs (loop0): error, broken FAT chain. [ 195.507956][ T7932] exFAT-fs (loop0): error, broken FAT chain. [ 195.559600][ T26] audit: type=1800 audit(1774432163.492:7): pid=7932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1450" name="file0" dev="loop0" ino=1048738 res=0 errno=0 [ 195.606426][ T4185] XFS (loop2): Unmounting Filesystem [ 195.673748][ T7956] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 195.808612][ T7965] loop0: detected capacity change from 0 to 128 [ 195.859162][ T7936] XFS (loop5): Mounting V5 Filesystem [ 195.882233][ T7965] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 196.024914][ T4184] sysv_free_block: flc_count > flc_size [ 196.039061][ T7970] openvswitch: netlink: Actions may not be safe on all matching packets [ 196.056520][ T4184] sysv_free_block: flc_count > flc_size [ 196.074872][ T4184] sysv_free_block: flc_count > flc_size [ 196.080999][ T4184] sysv_free_block: flc_count > flc_size [ 196.109700][ T4184] sysv_free_block: flc_count > flc_size [ 196.115806][ T4184] sysv_free_block: flc_count > flc_size [ 196.149926][ T4184] sysv_free_block: flc_count > flc_size [ 196.182597][ T4184] sysv_free_block: flc_count > flc_size [ 196.209895][ T4184] sysv_free_block: flc_count > flc_size [ 196.215607][ T4184] sysv_free_block: flc_count > flc_size [ 196.223510][ T7936] XFS (loop5): Ending clean mount [ 196.239186][ T4184] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 196.286387][ T7936] XFS (loop5): Quotacheck needed: Please wait. [ 196.406816][ T7936] XFS (loop5): Quotacheck: Done. [ 196.426103][ T7974] loop3: detected capacity change from 0 to 8192 [ 196.491542][ T7974] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 196.515409][ T7974] REISERFS (device loop3): using ordered data mode [ 196.518967][ T4877] XFS (loop5): Unmounting Filesystem [ 196.522706][ T7974] reiserfs: using flush barriers [ 196.547207][ T7974] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 196.585277][ T7974] REISERFS (device loop3): checking transaction log (loop3) [ 196.618763][ T7974] REISERFS (device loop3): Using r5 hash to sort names [ 196.626043][ T7974] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 196.660560][ T7981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1460'. [ 196.733933][ T7974] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 197.155547][ T7989] loop0: detected capacity change from 0 to 2048 [ 197.367245][ T7989] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 197.401590][ T7992] loop3: detected capacity change from 0 to 256 [ 197.521183][ T7992] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x190b464b, utbl_chksum : 0xe619d30d) [ 197.593095][ T7992] exFAT-fs (loop3): error, broken FAT chain. [ 197.626070][ T7992] exFAT-fs (loop3): Filesystem has been set read-only [ 197.654202][ T7992] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805e9e3560 iblock : 0, err : -5) [ 197.757585][ T7992] exFAT-fs (loop3): Filesystem has been set read-only [ 197.794774][ T7992] exFAT-fs (loop3): error, broken FAT chain. [ 197.828112][ T7992] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805e9e3560 iblock : 0, err : -5) [ 197.849372][ T7985] loop2: detected capacity change from 0 to 32768 [ 197.857226][ T7992] exFAT-fs (loop3): error, broken FAT chain. [ 197.876875][ T7992] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805e9e3560 iblock : 1, err : -5) [ 197.929636][ T7985] JBD2: Ignoring recovery information on journal [ 197.949003][ T7992] exFAT-fs (loop3): error, broken FAT chain. [ 197.955161][ T7992] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805e9e3560 iblock : 2, err : -5) [ 197.966168][ T7992] exFAT-fs (loop3): error, broken FAT chain. [ 197.972430][ T7992] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805e9e3560 iblock : 3, err : -5) [ 197.983975][ T7992] exFAT-fs (loop3): error, broken FAT chain. [ 197.993204][ T7992] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805e9e3560 iblock : 4, err : -5) [ 198.005661][ T7992] exFAT-fs (loop3): error, broken FAT chain. [ 198.012303][ T7992] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805e9e3560 iblock : 5, err : -5) [ 198.022625][ T7992] exFAT-fs (loop3): error, broken FAT chain. [ 198.030054][ T7992] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805e9e3560 iblock : 6, err : -5) [ 198.040767][ T7992] exFAT-fs (loop3): error, broken FAT chain. [ 198.046968][ T7992] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805e9e3560 iblock : 7, err : -5) [ 198.057920][ T7992] exFAT-fs (loop3): error, broken FAT chain. [ 198.064228][ T7992] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805e9e3560 iblock : 0, err : -5) [ 198.074867][ T7992] exFAT-fs (loop3): error, broken FAT chain. [ 198.083205][ T7992] exFAT-fs (loop3): error, broken FAT chain. [ 198.090303][ T7992] exFAT-fs (loop3): error, broken FAT chain. [ 198.097260][ T7992] exFAT-fs (loop3): error, broken FAT chain. [ 198.098558][ T7985] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 198.107327][ T7992] exFAT-fs (loop3): error, broken FAT chain. [ 198.141402][ T7992] exFAT-fs (loop3): error, broken FAT chain. [ 198.162691][ T7992] exFAT-fs (loop3): error, broken FAT chain. [ 198.194446][ T26] audit: type=1800 audit(1774432166.172:8): pid=7992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1470" name="file0" dev="loop3" ino=1048739 res=0 errno=0 [ 198.726058][ T4185] ocfs2: Unmounting device (7,2) on (node local) [ 198.913613][ T8044] loop5: detected capacity change from 0 to 8 [ 199.295381][ T8055] damon: kdamond (8055) starts [ 199.306253][ T8055] damon-va: Failed to get three regions of target 18446612684182487040 [ 199.343021][ T8055] damon-va: Failed to get three regions of target 18446612684182487040 [ 199.343345][ T8049] ntfs3: Unknown parameter 'ÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 199.498060][ T8049] binder: Bad value for 'stats' [ 199.891779][ T8041] set_capacity_and_notify: 1 callbacks suppressed [ 199.891798][ T8041] loop1: detected capacity change from 0 to 32768 [ 200.083888][ T8041] XFS (loop1): Mounting V5 Filesystem [ 200.254759][ T8094] loop3: detected capacity change from 0 to 256 [ 200.281415][ T8041] XFS (loop1): Ending clean mount [ 200.307342][ T8041] XFS (loop1): Quotacheck needed: Please wait. [ 200.388643][ T8041] XFS (loop1): Quotacheck: Done. [ 200.422785][ T8059] loop5: detected capacity change from 0 to 32768 [ 200.448437][ T26] audit: type=1800 audit(1774432168.432:9): pid=8041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1491" name="file1" dev="loop1" ino=6150 res=0 errno=0 [ 200.498094][ T8094] FAT-fs (loop3): Directory bread(block 64) failed [ 200.540685][ T8094] FAT-fs (loop3): Directory bread(block 65) failed [ 200.569906][ T8059] JBD2: Ignoring recovery information on journal [ 200.626128][ T8094] FAT-fs (loop3): Directory bread(block 66) failed [ 200.691833][ T8094] FAT-fs (loop3): Directory bread(block 67) failed [ 200.699007][ T8094] FAT-fs (loop3): Directory bread(block 68) failed [ 200.706411][ T8094] FAT-fs (loop3): Directory bread(block 69) failed [ 200.716170][ T8094] FAT-fs (loop3): Directory bread(block 70) failed [ 200.731292][ T8094] FAT-fs (loop3): Directory bread(block 71) failed [ 200.739405][ T8094] FAT-fs (loop3): Directory bread(block 72) failed [ 200.746645][ T8094] FAT-fs (loop3): Directory bread(block 73) failed [ 200.895858][ T4187] XFS (loop1): Unmounting Filesystem [ 200.897240][ T8059] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 201.269971][ T4877] ocfs2: Unmounting device (7,5) on (node local) [ 201.318241][ T8074] loop0: detected capacity change from 0 to 32768 [ 201.552501][ T8074] XFS (loop0): Mounting V5 Filesystem [ 201.663959][ T8100] loop2: detected capacity change from 0 to 32768 [ 201.747062][ T8074] XFS (loop0): Ending clean mount [ 202.089694][ T4184] XFS (loop0): Unmounting Filesystem [ 203.312268][ T8132] loop1: detected capacity change from 0 to 32768 [ 203.576883][ T8169] loop0: detected capacity change from 0 to 512 [ 203.670021][ T8146] loop3: detected capacity change from 0 to 32768 [ 203.742028][ T8169] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1544: invalid indirect mapped block 10 (level 1) [ 203.751351][ T8142] loop2: detected capacity change from 0 to 32768 [ 203.786949][ T8146] XFS (loop3): Mounting V5 Filesystem [ 203.838899][ T8169] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1544: invalid indirect mapped block 8 (level 1) [ 203.901436][ T8186] Cannot find add_set index 46338 as target [ 203.924302][ T8146] XFS (loop3): Ending clean mount [ 203.938619][ T8142] XFS: attr2 mount option is deprecated. [ 204.016339][ T8146] XFS (loop3): Quotacheck needed: Please wait. [ 204.042627][ T8169] EXT4-fs (loop0): 1 truncate cleaned up [ 204.068873][ T8142] XFS (loop2): Mounting V5 Filesystem [ 204.133545][ T8169] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 204.264430][ T8142] XFS (loop2): Ending clean mount [ 204.340073][ T8146] XFS (loop3): Quotacheck: Done. [ 204.346523][ T8142] XFS (loop2): Quotacheck needed: Please wait. [ 204.489936][ T8142] XFS (loop2): Quotacheck: Done. [ 204.648063][ T4188] XFS (loop3): Unmounting Filesystem [ 204.830570][ T4185] XFS (loop2): Unmounting Filesystem [ 205.639495][ T8208] loop1: detected capacity change from 0 to 32768 [ 205.740340][ T8231] loop3: detected capacity change from 0 to 1024 [ 205.760066][ T8214] loop5: detected capacity change from 0 to 32768 [ 205.950068][ T4239] hfsplus: b-tree write err: -5, ino 25 [ 205.993952][ T8243] loop0: detected capacity change from 0 to 2048 [ 206.011974][ T4239] hfsplus: b-tree write err: -5, ino 4 [ 206.018306][ T4239] hfsplus: b-tree write err: -5, ino 2 [ 206.028252][ T8208] XFS (loop1): Mounting V5 Filesystem [ 206.108530][ T8243] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 206.160215][ T8243] UDF-fs: Scanning with blocksize 512 failed [ 206.171789][ T8243] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 206.224881][ T8208] XFS (loop1): Ending clean mount [ 206.454021][ T4187] XFS (loop1): Unmounting Filesystem [ 206.524113][ T8252] loop0: detected capacity change from 0 to 1024 [ 206.972486][ T8267] loop0: detected capacity change from 0 to 256 [ 207.240533][ T8276] loop2: detected capacity change from 0 to 1024 [ 207.501109][ T8284] loop5: detected capacity change from 0 to 512 [ 207.552273][ T1168] hfsplus: b-tree write err: -5, ino 25 [ 207.576795][ T8287] loop3: detected capacity change from 0 to 512 [ 207.584112][ T1168] hfsplus: b-tree write err: -5, ino 4 [ 207.615976][ T1168] hfsplus: b-tree write err: -5, ino 2 [ 207.641821][ T8284] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c198, mo2=0002] [ 207.695468][ T8289] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 207.707839][ T8284] System zones: 1-12 [ 207.718837][ T8289] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 207.726189][ T8289] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 207.738017][ T8289] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 207.744652][ T8289] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 207.752218][ T8289] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 207.761104][ T8289] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 207.765730][ T8284] EXT4-fs error (device loop5): ext4_iget_extra_inode:4566: inode #15: comm syz.5.1588: corrupted in-inode xattr [ 207.808459][ T8287] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1589: inode has both inline data and extents flags [ 207.863278][ T8301] loop0: detected capacity change from 0 to 2048 [ 207.889808][ T8284] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1588: couldn't read orphan inode 15 (err -117) [ 207.915376][ T8301] NILFS (loop0): invalid segment: Inconsistency found [ 207.923553][ T8284] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,minixdf,noblock_validity,lazytime,noauto_da_alloc,block_validity,init_itable=0x000000000000000b,debug,usrjquota=,nolazytime,norecovery,,errors=continue. Quota mode: none. [ 207.961118][ T8287] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1589: couldn't read orphan inode 15 (err -117) [ 207.996962][ T8301] NILFS (loop0): trying rollback from an earlier position [ 208.032977][ T8287] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 208.064136][ T8301] NILFS (loop0): recovery complete [ 208.373251][ T8284] overlayfs: upper fs needs to support d_type. [ 208.574076][ T4877] EXT4-fs error (device loop5): ext4_iget_extra_inode:4566: inode #15: comm syz-executor: corrupted in-inode xattr [ 208.651860][ T4877] EXT4-fs error (device loop5): ext4_iget_extra_inode:4566: inode #15: comm syz-executor: corrupted in-inode xattr [ 208.777810][ T4233] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 209.017548][ T4233] usb 4-1: Using ep0 maxpacket: 8 [ 209.068018][ T8311] XFS: attr2 mount option is deprecated. [ 209.074642][ T8309] XFS (loop2): Mounting V5 Filesystem [ 209.124772][ T8311] XFS (loop0): Mounting V5 Filesystem [ 209.137734][ T4233] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 209.164680][ T4233] usb 4-1: config 2 has no interface number 0 [ 209.166581][ T8309] XFS (loop2): Ending clean mount [ 209.191723][ T4233] usb 4-1: config 2 interface 31 has no altsetting 0 [ 209.208320][ T8309] XFS (loop2): Quotacheck needed: Please wait. [ 209.244976][ T8311] XFS (loop0): Ending clean mount [ 209.273594][ T8311] XFS (loop0): Quotacheck needed: Please wait. [ 209.319195][ T4632] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.388978][ T4233] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 209.408762][ T4233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.417682][ T4233] usb 4-1: Product: syz [ 209.429354][ T4233] usb 4-1: Manufacturer: syz [ 209.442696][ T4233] usb 4-1: SerialNumber: syz [ 209.462891][ T8311] XFS (loop0): Quotacheck: Done. [ 209.472762][ T8309] XFS (loop2): Quotacheck: Done. [ 209.617169][ T4184] XFS (loop0): Unmounting Filesystem [ 209.618504][ T4632] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.791082][ T4185] XFS (loop2): Unmounting Filesystem [ 209.798870][ T4632] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.047212][ T8350] EXT4-fs (loop1): bad geometry: first data block 0 is beyond end of filesystem (0) [ 210.171007][ T4233] ch9200: probe of 4-1:2.31 failed with error -22 [ 210.247095][ T4233] usb 4-1: USB disconnect, device number 5 [ 210.299823][ T4632] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.125234][ T8347] chnl_net:caif_netlink_parms(): no params data found [ 211.189915][ T8380] comedi comedi3: rti802: a I/O base address must be specified [ 211.437132][ T8391] set_capacity_and_notify: 3 callbacks suppressed [ 211.437151][ T8391] loop3: detected capacity change from 0 to 1024 [ 211.451197][ T8387] loop0: detected capacity change from 0 to 512 [ 211.541503][ T8387] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.1625: inode has both inline data and extents flags [ 211.576807][ T8360] loop1: detected capacity change from 0 to 32768 [ 211.603747][ T8347] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.612140][ T8387] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1625: couldn't read orphan inode 15 (err -117) [ 211.637924][ T8387] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 211.659283][ T8347] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.738028][ T8347] device bridge_slave_0 entered promiscuous mode [ 211.773508][ T8360] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1618 (8360) [ 211.846801][ T8347] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.858921][ T8347] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.961789][ T8347] device bridge_slave_1 entered promiscuous mode [ 212.104275][ T8360] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 212.107633][ T4233] Bluetooth: hci5: command 0x0409 tx timeout [ 212.153283][ T8401] loop3: detected capacity change from 0 to 2048 [ 212.167970][ T8360] BTRFS info (device loop1): turning off barriers [ 212.198354][ T8360] BTRFS info (device loop1): setting nodatasum [ 212.204692][ T8360] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 212.263251][ T8360] BTRFS info (device loop1): use zstd compression, level 3 [ 212.285904][ T8360] BTRFS info (device loop1): using free space tree [ 212.300909][ T8366] loop2: detected capacity change from 0 to 40427 [ 212.327613][ T8360] BTRFS info (device loop1): has skinny extents [ 212.335550][ T8401] NILFS (loop3): invalid segment: Inconsistency found [ 212.353465][ T8401] NILFS (loop3): trying rollback from an earlier position [ 212.416245][ T8401] NILFS (loop3): recovery complete [ 212.429563][ T8347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.435000][ T8413] loop0: detected capacity change from 0 to 1024 [ 212.473204][ T8366] F2FS-fs (loop2): Found nat_bits in checkpoint [ 212.503693][ T8347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.577844][ T8366] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 212.784027][ T8436] loop0: detected capacity change from 0 to 2048 [ 212.797928][ T4185] attempt to access beyond end of device [ 212.797928][ T4185] loop2: rw=2049, want=45104, limit=40427 [ 212.816369][ T8347] team0: Port device team_slave_0 added [ 212.887293][ T8347] team0: Port device team_slave_1 added [ 213.018337][ T8438] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 213.019457][ T8347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.099956][ T8347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.319847][ T8347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.015159][ T8457] loop0: detected capacity change from 0 to 1024 [ 214.188201][ T5847] Bluetooth: hci5: command 0x041b tx timeout [ 214.468200][ T8347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.475658][ T8347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.603667][ T8475] loop2: detected capacity change from 0 to 2048 [ 214.606121][ T8347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.714659][ T8474] netdevsim netdevsim0: Firmware load for '/../file0' refused, path contains '..' component [ 214.736383][ T8475] NILFS (loop2): invalid segment: Inconsistency found [ 214.753735][ T8475] NILFS (loop2): trying rollback from an earlier position [ 214.812523][ T8475] NILFS (loop2): recovery complete [ 214.892456][ T8347] device hsr_slave_0 entered promiscuous mode [ 214.951578][ T8347] device hsr_slave_1 entered promiscuous mode [ 214.979469][ T8347] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.987187][ T8347] Cannot create hsr debugfs directory [ 215.320412][ T8465] loop3: detected capacity change from 0 to 32768 [ 215.419576][ T8465] [ 215.419576][ T8465] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 215.419576][ T8465] [ 215.465250][ T8465] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 0 [ 215.465250][ T8465] [ 215.492737][ T8504] netlink: 'syz.1.1652': attribute type 3 has an invalid length. [ 215.526869][ T8504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1652'. [ 215.554936][ T8505] hfs: unable to locate alternate MDB [ 215.565206][ T8505] hfs: continuing without an alternate MDB [ 215.578032][ T8465] ERROR: (device loop3): remounting filesystem as read-only [ 215.585667][ T8465] JFS: Invalid stbl[1] = -128 for inode 2, block = 0 [ 216.160617][ T4632] device hsr_slave_0 left promiscuous mode [ 216.207618][ T4632] device hsr_slave_1 left promiscuous mode [ 216.229796][ T4632] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.258422][ T4632] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.268143][ T5843] Bluetooth: hci5: command 0x040f tx timeout [ 216.280978][ T8532] hfs: unable to locate alternate MDB [ 216.290716][ T4632] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.318517][ T8532] hfs: continuing without an alternate MDB [ 216.328811][ T4632] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.353699][ T4632] device bridge_slave_1 left promiscuous mode [ 216.375196][ T4632] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.441039][ T4632] device bridge_slave_0 left promiscuous mode [ 216.455960][ T4632] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.566867][ T4632] device veth1_macvtap left promiscuous mode [ 216.600099][ T4632] device veth0_macvtap left promiscuous mode [ 216.624341][ T4632] device veth1_vlan left promiscuous mode [ 216.645961][ T4632] device veth0_vlan left promiscuous mode [ 216.864635][ T8542] set_capacity_and_notify: 2 callbacks suppressed [ 216.864660][ T8542] loop3: detected capacity change from 0 to 32768 [ 216.980885][ T8535] loop0: detected capacity change from 0 to 32768 [ 217.303163][ T4632] team0 (unregistering): Port device team_slave_1 removed [ 217.308218][ T4233] Bluetooth: hci4: command 0x0406 tx timeout [ 217.320268][ T4632] team0 (unregistering): Port device team_slave_0 removed [ 217.343300][ T4632] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.367029][ T4632] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.500749][ T4632] bond0 (unregistering): Released all slaves [ 217.627086][ T8544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1669'. [ 217.743638][ T8347] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 217.808905][ T8347] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 217.867221][ T8347] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 217.941912][ T8347] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 218.049016][ T8571] loop3: detected capacity change from 0 to 512 [ 218.103835][ T8571] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 218.146452][ T8571] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 218.183828][ T5843] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 218.215929][ T8576] loop0: detected capacity change from 0 to 256 [ 218.223261][ T8347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.232159][ T8571] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.1681: Invalid block bitmap block 0 in block_group 0 [ 218.286765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 218.287968][ T8571] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 218.296096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 218.311939][ T8576] exfat: Deprecated parameter 'namecase' [ 218.319303][ T8347] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.327617][ T8576] exfat: Deprecated parameter 'utf8' [ 218.331644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 218.358724][ T4233] Bluetooth: hci5: command 0x0419 tx timeout [ 218.367233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 218.376715][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.384088][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.388048][ T8576] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 218.421962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 218.441397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 218.457933][ T8571] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.1681: attempt to clear invalid blocks 983261 len 1 [ 218.498406][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 218.525060][ T8571] EXT4-fs error (device loop3): __ext4_get_inode_loc:4327: comm syz.3.1681: Invalid inode table block 0 in block_group 0 [ 218.549792][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.557473][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.577673][ T5843] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 218.597695][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.616190][ T8571] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 218.627079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 218.654787][ T5843] usb 2-1: config 0 descriptor?? [ 218.674312][ T8571] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 218.688383][ T8571] EXT4-fs error (device loop3): __ext4_get_inode_loc:4327: comm syz.3.1681: Invalid inode table block 0 in block_group 0 [ 218.720508][ T5843] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 218.727732][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 218.769436][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 218.778703][ T8571] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 218.799295][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 218.813932][ T8571] EXT4-fs error (device loop3): ext4_truncate:4279: inode #11: comm syz.3.1681: mark_inode_dirty error [ 218.838752][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 218.855262][ T8571] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 218.878328][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 218.898366][ T8571] EXT4-fs error (device loop3): __ext4_get_inode_loc:4327: comm syz.3.1681: Invalid inode table block 0 in block_group 0 [ 218.912178][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 218.945741][ T8571] EXT4-fs (loop3): 1 truncate cleaned up [ 218.956924][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 218.963897][ T8571] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,journal_dev=0x0000000000000002,noblock_validity,,errors=continue. Quota mode: none. [ 219.011964][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 219.121175][ T8595] loop0: detected capacity change from 0 to 256 [ 219.158045][ T5843] gspca_stv06xx: I2C: Read error writing address: -71 [ 219.180688][ T8347] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 219.208098][ T8595] exfat: Deprecated parameter 'utf8' [ 219.213557][ T8595] exfat: Deprecated parameter 'utf8' [ 219.235413][ T5843] usb 2-1: USB disconnect, device number 4 [ 219.243868][ T8347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 219.283314][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 219.300651][ T8595] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb14608cb, utbl_chksum : 0xe619d30d) [ 219.328499][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 219.343127][ T8573] loop2: detected capacity change from 0 to 32768 [ 219.774573][ T8607] genirq: Flags mismatch irq 3. 00000000 (das16m1) vs. 00000000 (pcl812) [ 219.999842][ T8613] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1693'. [ 220.190988][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 220.207721][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 220.251638][ T8347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.342050][ T8628] loop2: detected capacity change from 0 to 256 [ 220.514669][ T8628] exfat: Deprecated parameter 'utf8' [ 220.551086][ T8628] exfat: Deprecated parameter 'utf8' [ 220.689896][ T8628] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb14608cb, utbl_chksum : 0xe619d30d) [ 220.709903][ T8641] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.1702'. [ 220.960158][ T8649] loop3: detected capacity change from 0 to 512 [ 221.116598][ T8649] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 221.184573][ T8649] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 221.262400][ T8649] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2002e01c, mo2=0006] [ 221.307596][ T8649] System zones: 0-2, 18-18, 34-35 [ 221.317218][ T8649] EXT4-fs (loop3): mounted filesystem without journal. Opts: noinit_itable,,errors=continue. Quota mode: none. [ 221.439233][ T8667] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1709'. [ 221.461976][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 221.492430][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 221.581029][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 221.609262][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 221.661265][ T8347] device veth0_vlan entered promiscuous mode [ 221.690720][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 221.716876][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 221.773046][ T8347] device veth1_vlan entered promiscuous mode [ 221.895711][ T8675] loop2: detected capacity change from 0 to 256 [ 221.920598][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 221.939428][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 221.985872][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 222.038749][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 222.092849][ T8347] device veth0_macvtap entered promiscuous mode [ 222.101075][ T8675] FAT-fs (loop2): Directory bread(block 64) failed [ 222.137688][ T8675] FAT-fs (loop2): Directory bread(block 65) failed [ 222.141584][ T8630] loop0: detected capacity change from 0 to 40427 [ 222.145196][ T8347] device veth1_macvtap entered promiscuous mode [ 222.158443][ T8675] FAT-fs (loop2): Directory bread(block 66) failed [ 222.192490][ T8675] FAT-fs (loop2): Directory bread(block 67) failed [ 222.215621][ T8675] FAT-fs (loop2): Directory bread(block 68) failed [ 222.217866][ T8630] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 222.262789][ T8659] loop1: detected capacity change from 0 to 32768 [ 222.271154][ T8630] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 222.279911][ T8675] FAT-fs (loop2): Directory bread(block 69) failed [ 222.280030][ T8675] FAT-fs (loop2): Directory bread(block 70) failed [ 222.280067][ T8675] FAT-fs (loop2): Directory bread(block 71) failed [ 222.280143][ T8675] FAT-fs (loop2): Directory bread(block 72) failed [ 222.280186][ T8675] FAT-fs (loop2): Directory bread(block 73) failed [ 222.292876][ T8347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.343989][ T8347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.421574][ T8347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.423365][ T8630] F2FS-fs (loop0): Found nat_bits in checkpoint [ 222.441920][ T8347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.457552][ T8347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.470309][ T8347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.482350][ T8347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.541783][ T8347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.573775][ T8347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.625492][ T8347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.657815][ T8347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.667173][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 222.679073][ T8630] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 222.686855][ T8630] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 222.748403][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 222.818116][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 222.866178][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 222.882065][ T8687] loop2: detected capacity change from 0 to 2048 [ 222.899944][ T8347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.956295][ T8347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.977565][ T8347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.997413][ T8347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.027438][ T8347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.047416][ T8347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.061711][ T8691] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1719'. [ 223.067453][ T8347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.097766][ T8347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.117517][ T8347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.147454][ T8347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.153067][ T8693] loop3: detected capacity change from 0 to 1024 [ 223.174323][ T8347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.195466][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 223.209637][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 223.251618][ T8687] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 223.291520][ T8347] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.302951][ T8347] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.312195][ T8693] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,bsddf,jqfmt=vfsold,debug_want_extra_isize=0x0000000000000080,lazytime,acl,stripe=0x0000000000000010,noquota,init_itable,,errors=continue. Quota mode: none. [ 223.327496][ T8347] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.337641][ C1] vkms_vblank_simulate: vblank timer overrun [ 223.356962][ T8347] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.428009][ T8698] UDF-fs: error (device loop2): udf_rename: failed to find renamed entry again in directory (ino 1376) [ 223.630246][ T4624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.651586][ T4624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.791344][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 223.855997][ T4624] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.910193][ T4624] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.951221][ T6821] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 224.007619][ T8708] netlink: 'syz.3.1721': attribute type 1 has an invalid length. [ 224.112473][ T8713] loop2: detected capacity change from 0 to 1024 [ 224.120939][ T8714] loop0: detected capacity change from 0 to 64 [ 224.225527][ T8714] attempt to access beyond end of device [ 224.225527][ T8714] loop0: rw=0, want=1026, limit=64 [ 224.268763][ T8714] Buffer I/O error on dev loop0, logical block 512, async page read [ 224.292022][ T8713] EXT4-fs (loop2): Ignoring removed orlov option [ 224.354821][ T8714] attempt to access beyond end of device [ 224.354821][ T8714] loop0: rw=0, want=113154, limit=64 [ 224.390371][ T8713] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 224.411684][ T8714] Buffer I/O error on dev loop0, logical block 56576, async page read [ 224.716592][ T8739] team0: Cannot enslave team device to itself [ 224.761634][ T8739] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 224.898092][ T8739] syz.6.1729 (8739) used greatest stack depth: 19440 bytes left [ 224.973357][ T8750] loop2: detected capacity change from 0 to 512 [ 225.168428][ T8750] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 225.176766][ T8750] System zones: 0-2, 18-18, 34-34 [ 225.262382][ T8750] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1730: bg 0: block 248: padding at end of block bitmap is not set [ 225.324846][ T8750] Quota error (device loop2): write_blk: dquota write failed [ 225.328726][ T8769] loop3: detected capacity change from 0 to 256 [ 225.368507][ T8750] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 225.415706][ T8771] loop1: detected capacity change from 0 to 512 [ 225.435328][ T8750] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.1730: Failed to acquire dquot type 1 [ 225.453549][ T8769] FAT-fs (loop3): Directory bread(block 64) failed [ 225.481180][ T27] INFO: task syz-executor:4186 blocked for more than 143 seconds. [ 225.499124][ T27] Not tainted syzkaller #0 [ 225.518563][ T8769] FAT-fs (loop3): Directory bread(block 65) failed [ 225.525420][ T8769] FAT-fs (loop3): Directory bread(block 66) failed [ 225.526920][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 225.543105][ T8750] EXT4-fs (loop2): ext4_process_orphan: truncating inode 13 to 1050 bytes [ 225.557916][ T8769] FAT-fs (loop3): Directory bread(block 67) failed [ 225.567960][ T8769] FAT-fs (loop3): Directory bread(block 68) failed [ 225.580137][ T27] task:syz-executor state:D stack:21168 pid: 4186 ppid: 1 flags:0x00004004 [ 225.595714][ T8769] FAT-fs (loop3): Directory bread(block 69) failed [ 225.612596][ T8750] EXT4-fs (loop2): 1 truncate cleaned up [ 225.613020][ T27] Call Trace: [ 225.622323][ T8769] FAT-fs (loop3): Directory bread(block 70) failed [ 225.629862][ T8750] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,noload,,errors=continue. Quota mode: writeback. [ 225.639389][ T27] [ 225.649658][ T8769] FAT-fs (loop3): Directory bread(block 71) failed [ 225.665422][ T27] __schedule+0x11ef/0x43c0 [ 225.671671][ T8750] ext4 filesystem being mounted at /351/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.678113][ T27] ? verify_lock_unused+0x140/0x140 [ 225.697586][ T8769] FAT-fs (loop3): Directory bread(block 72) failed [ 225.722582][ T27] ? mark_lock+0x94/0x320 [ 225.724989][ T8769] FAT-fs (loop3): Directory bread(block 73) failed [ 225.734971][ T27] ? release_firmware_map_entry+0x190/0x190 [ 225.755546][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 225.781941][ T27] ? lock_chain_count+0x20/0x20 [ 225.800306][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 225.825267][ T27] schedule+0x11b/0x1e0 [ 225.833604][ T27] io_schedule+0x7c/0xd0 [ 225.841448][ T27] wait_on_page_bit_common+0x83b/0xe50 [ 225.847292][ T27] ? wait_on_page_bit+0x50/0x50 [ 225.852882][ T27] ? rcu_lock_release+0x20/0x20 [ 225.864900][ T27] truncate_inode_pages_range+0xa24/0xfe0 [ 225.873846][ T27] ? invalidate_inode_page+0x360/0x360 [ 225.884978][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 225.892808][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 225.901317][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 225.906961][ T27] evict+0x4dc/0x8d0 [ 225.911440][ T27] ? proc_nr_inodes+0x320/0x320 [ 225.916554][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 225.922573][ T27] evict_inodes+0x60c/0x6a0 [ 225.927682][ T27] ? __dentry_kill+0x530/0x650 [ 225.932585][ T27] ? clear_inode+0x150/0x150 [ 225.937307][ T27] generic_shutdown_super+0x93/0x300 [ 225.943806][ T27] kill_block_super+0x7c/0xe0 [ 225.949928][ T27] deactivate_locked_super+0x93/0xf0 [ 225.955390][ T27] cleanup_mnt+0x42d/0x4e0 [ 225.961599][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 225.967131][ T27] task_work_run+0x125/0x1a0 [ 225.972534][ T27] exit_to_user_mode_loop+0x10f/0x130 [ 225.978744][ T27] exit_to_user_mode_prepare+0xee/0x180 [ 225.984569][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 225.990881][ T27] do_syscall_64+0x58/0xa0 [ 225.995466][ T27] ? clear_bhb_loop+0x30/0x80 [ 226.001588][ T27] ? clear_bhb_loop+0x30/0x80 [ 226.006746][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 226.015682][ T27] RIP: 0033:0x7faa35cf99d7 [ 226.021137][ T27] RSP: 002b:00007ffd6eb2f1b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 226.030387][ T27] RAX: 0000000000000000 RBX: 00007faa35d8e050 RCX: 00007faa35cf99d7 [ 226.039082][ T27] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd6eb2f270 [ 226.048033][ T27] RBP: 00007ffd6eb2f270 R08: 00007ffd6eb30270 R09: 00000000ffffffff [ 226.056337][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd6eb30300 [ 226.066214][ T27] R13: 00007faa35d8e050 R14: 00000000000139c0 R15: 00007ffd6eb30340 [ 226.075002][ T27] [ 226.086885][ T27] [ 226.086885][ T27] Showing all locks held in the system: [ 226.098629][ T27] 1 lock held by khungtaskd/27: [ 226.104339][ T27] #0: ffffffff8c31eaa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 226.140918][ T27] 2 locks held by kworker/u4:4/1278: [ 226.146705][ T27] 2 locks held by getty/3949: [ 226.150045][ T8771] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 226.172455][ T27] #0: ffff88802c5a6098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 226.180348][ T8771] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 226.198152][ T27] #1: ffffc900025e62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5df/0x1a70 [ 226.208758][ T27] 2 locks held by syz-executor/4185: [ 226.214354][ T27] #0: ffff88802035fd18 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf9/0x7d0 [ 226.215086][ T8771] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2002e01c, mo2=0006] [ 226.224299][ T27] #1: ffff88814767c468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 226.242278][ T27] 1 lock held by syz-executor/4186: [ 226.247686][ T27] #0: ffff88805dd6a0e0 (&type->s_umount_key#53){+.+.}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 226.258626][ T27] 2 locks held by syz-executor/4188: [ 226.269769][ T27] #0: ffff888020364518 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf9/0x7d0 [ 226.297013][ T8771] System zones: 0-2, 18-18, 34-35 [ 226.302937][ T27] #1: ffff88814767f468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 226.333594][ T8771] EXT4-fs (loop1): mounted filesystem without journal. Opts: noinit_itable,,errors=continue. Quota mode: none. [ 226.367587][ T27] 3 locks held by kworker/u4:7/4632: [ 226.373882][ T27] #0: ffff888016dcd938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 226.396350][ T27] #1: ffffc900033b7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 226.406948][ T27] #2: ffffffff8c323430 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0xa1/0x4c0 [ 226.420798][ T27] 3 locks held by kworker/0:20/7477: [ 226.432105][ T27] #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 226.454181][ T27] #1: ffffc90003c4fd00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 226.467620][ T27] #2: ffffffff8c323528 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3a5/0x750 [ 226.479765][ T27] 2 locks held by dhcpcd/8789: [ 226.484974][ T27] #0: ffff888077818120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x35/0xda0 [ 226.495327][ T27] #1: ffffffff8c323528 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2d1/0x750 [ 226.506930][ T27] 3 locks held by dhcpcd-run-hook/8797: [ 226.550504][ T27] [ 226.580358][ T27] ============================================= [ 226.580358][ T27] [ 226.617201][ T27] NMI backtrace for cpu 0 [ 226.621612][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 226.629055][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 226.639418][ T27] Call Trace: [ 226.642901][ T27] [ 226.645861][ T27] dump_stack_lvl+0x188/0x250 [ 226.650559][ T27] ? show_regs_print_info+0x20/0x20 [ 226.655766][ T27] ? load_image+0x400/0x400 [ 226.660892][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 226.666364][ T27] ? nmi_cpu_backtrace+0x1b2/0x3d0 [ 226.671674][ T27] nmi_cpu_backtrace+0x3a2/0x3d0 [ 226.676625][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 226.682980][ T27] ? _printk+0xda/0x130 [ 226.687152][ T27] ? load_image+0x400/0x400 [ 226.692013][ T27] ? load_image+0x400/0x400 [ 226.696612][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 226.702697][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 226.708697][ T27] watchdog+0xe0f/0xe50 [ 226.713116][ T27] kthread+0x436/0x520 [ 226.717321][ T27] ? hungtask_pm_notify+0x40/0x40 [ 226.722550][ T27] ? kthread_blkcg+0xd0/0xd0 [ 226.727324][ T27] ret_from_fork+0x1f/0x30 [ 226.731844][ T27] [ 226.736419][ T27] Sending NMI from CPU 0 to CPUs 1: [ 226.742396][ C1] NMI backtrace for cpu 1 [ 226.742412][ C1] CPU: 1 PID: 1168 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 226.742429][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 226.742438][ C1] Workqueue: bat_events batadv_nc_worker [ 226.742462][ C1] RIP: 0010:__rcu_read_lock+0x2d/0x50 [ 226.742483][ C1] Code: 8b 1d 97 f3 9c 7e 48 81 c3 3c 04 00 00 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 11 ff 03 8b 03 <3d> 00 00 00 40 7d 02 5b c3 0f 0b eb fa 89 d9 80 e1 07 80 c1 03 38 [ 226.742495][ C1] RSP: 0018:ffffc900046d7bd0 EFLAGS: 00000202 [ 226.742508][ C1] RAX: 0000000000000001 RBX: ffff88802145dd7c RCX: dffffc0000000000 [ 226.742518][ C1] RDX: 0000000000000000 RSI: ffffffff8a2b3a20 RDI: ffffffff8a79f980 [ 226.742529][ C1] RBP: ffff888061d0f340 R08: ffffffff8d89e36f R09: 1ffffffff1b13c6d [ 226.742539][ C1] R10: dffffc0000000000 R11: fffffbfff1b13c6e R12: 0000000000000288 [ 226.742550][ C1] R13: ffff88807a8fd440 R14: ffff8880740f8c80 R15: ffff888061d0f350 [ 226.742561][ C1] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 226.742574][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 226.742585][ C1] CR2: 0000555c9bf01950 CR3: 0000000062d18000 CR4: 00000000003506e0 [ 226.742601][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 226.742611][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 226.742620][ C1] Call Trace: [ 226.742626][ C1] [ 226.742632][ C1] batadv_nc_worker+0xc4/0x5c0 [ 226.742651][ C1] process_one_work+0x85f/0x1010 [ 226.742674][ C1] ? worker_detach_from_pool+0x240/0x240 [ 226.742688][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 226.742707][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 226.742723][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 226.742737][ C1] ? wq_worker_running+0x97/0x170 [ 226.742752][ C1] worker_thread+0xaa6/0x1290 [ 226.742772][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 226.742787][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 226.742806][ C1] kthread+0x436/0x520 [ 226.742819][ C1] ? rcu_lock_release+0x20/0x20 [ 226.742832][ C1] ? kthread_blkcg+0xd0/0xd0 [ 226.742846][ C1] ret_from_fork+0x1f/0x30 [ 226.742876][ C1] [ 226.773548][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 226.978050][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 226.985883][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 226.996158][ T27] Call Trace: [ 226.999567][ T27] [ 227.002529][ T27] dump_stack_lvl+0x188/0x250 [ 227.007251][ T27] ? show_regs_print_info+0x20/0x20 [ 227.012596][ T27] ? load_image+0x400/0x400 [ 227.017458][ T27] panic+0x2e5/0x810 [ 227.021678][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 227.027366][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 227.032105][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 227.038252][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 227.044472][ T27] watchdog+0xe4e/0xe50 [ 227.048791][ T27] kthread+0x436/0x520 [ 227.053102][ T27] ? hungtask_pm_notify+0x40/0x40 [ 227.058346][ T27] ? kthread_blkcg+0xd0/0xd0 [ 227.063199][ T27] ret_from_fork+0x1f/0x30 [ 227.067942][ T27] [ 227.071635][ T27] Kernel Offset: disabled [ 227.076217][ T27] Rebooting in 86400 seconds..