last executing test programs: 49.961041177s ago: executing program 1 (id=382): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x800}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2408c843}, 0x0) 49.960816227s ago: executing program 1 (id=383): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10452, &(0x7f00000003c0)={[{@shortname_mixed}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@utf8}, {@shortname_lower}, {@utf8}, {@numtail}, {@rodir}, {@shortname_mixed}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@uni_xlate}, {@fat=@nocase}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@numtail}]}, 0x3, 0x291, &(0x7f00000004c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) 49.939892719s ago: executing program 1 (id=384): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000400)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x2) sched_setscheduler(r0, 0x1, &(0x7f00000004c0)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x24044054}, 0x4040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000005c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000600), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x0, 0x5004) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="1c00000022004106"], 0x1c}], 0x1}, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r4 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x6000001, 0x3032, 0xffffffffffffffff, 0x0) process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/149, 0x95}], 0x1, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/116, 0x74}], 0x1, 0x0) 46.954425242s ago: executing program 1 (id=391): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000011, &(0x7f0000000080)={[{@nolazytime}, {@noinit_itable}]}, 0x20, 0x5ed, &(0x7f0000000b00)="$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") 45.10062081s ago: executing program 1 (id=395): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x1, 0x7fd, 0xd, 0x8009}, 'syz0\x00', 0x40}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) socket$inet(0x2, 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000300), 0xfffffffffffffffd, 0x2e44) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f00000003c0)) 44.947996266s ago: executing program 1 (id=404): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', @multicast}) ioctl$int_in(r0, 0x5452, &(0x7f0000002c00)=0x5f7b) write$cgroup_devices(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="00000600bc5cb60128876360864666703a1ffe800000000000007938e778db265006fec31f25b38af9a4e80a70c8cac40104d7"], 0xffdd) 29.918513002s ago: executing program 32 (id=404): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', @multicast}) ioctl$int_in(r0, 0x5452, &(0x7f0000002c00)=0x5f7b) write$cgroup_devices(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="00000600bc5cb60128876360864666703a1ffe800000000000007938e778db265006fec31f25b38af9a4e80a70c8cac40104d7"], 0xffdd) 14.368743701s ago: executing program 2 (id=481): syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./bus\x00', 0x8, &(0x7f0000000a80), 0x5, 0x50c, &(0x7f0000002180)="$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") syz_mount_image$vfat(&(0x7f00000026c0), &(0x7f0000002700)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f0000002740)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xe, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) finit_module(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x1) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x4000087, 0x2, 0x0) quotactl_fd$Q_SYNC(r2, 0xffffffff80000101, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x804, &(0x7f0000000300)={[{@iocharset={'iocharset', 0x3d, 'cp861'}}, {@shortname_winnt}, {@utf8}, {@fat=@nocase}, {@fat=@dos1xfloppy}, {@shortname_mixed}, {@utf8}, {@uni_xlate}, {@utf8}, {@shortname_mixed}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '1251'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@fat=@umask={'umask', 0x3d, 0x7fff}}, {@utf8no}, {@rodir}]}, 0x1, 0x2a6, &(0x7f0000000400)="$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") openat(0xffffffffffffff9c, 0x0, 0x80000, 0x40) socket$inet_tcp(0x2, 0x1, 0x0) r3 = add_key(&(0x7f0000000200)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000001040)={r3}, 0x0, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000700)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pipe2(&(0x7f00000007c0)={0xffffffffffffffff}, 0x0) splice(r5, 0x0, r4, &(0x7f0000000800)=0x8000000000008008, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000002780)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000027c0)='./file0\x00', 0x4) 13.076700812s ago: executing program 0 (id=486): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}]}}, &(0x7f0000000300)=""/230, 0x3e, 0xe6, 0x1}, 0x28) 13.025178757s ago: executing program 0 (id=487): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000140)='lo\x00'}) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x880, &(0x7f0000000200)=ANY=[], 0x26, 0x367, &(0x7f0000000240)="$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") r2 = socket(0x28, 0x80000, 0x5) setsockopt$inet_mreq(r2, 0x0, 0x23, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x100000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setpriority(0x0, 0x0, 0x2a14b57) fcntl$lock(r2, 0x5, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c80)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000cc0), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$PROG_LOAD(0x5, 0x0, 0x0) setns(r4, 0x0) get_robust_list(r0, 0x0, 0x0) 12.797735021s ago: executing program 2 (id=489): socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000340), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000a20000/0x2000)=nil) fcntl$lock(r2, 0x5, &(0x7f0000000280)={0x0, 0x1, 0x8001, 0x4, r0}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x2, 0x40200003, 0x2, 0x2, 0x2000007, 0x8000}) 11.884154773s ago: executing program 2 (id=492): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x2f, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100)=0x100, 0x4) sendmmsg$inet(r1, &(0x7f0000000140)=[{{&(0x7f0000000180)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r0, r4, 0x25, 0x0, @void}, 0x10) r5 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={0xffffffffffffffff, 0x0, 0x0, 0x19, 0x0, &(0x7f0000001100)=""/25, 0x1, 0x0, 0x0, 0x0, &(0x7f0000001140), 0x0, 0x5, 0x0, 0x429}, 0x50) socket(0x2, 0xa, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0xa, 0x3, &(0x7f0000000e00)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x41}, [], {0x95, 0x0, 0x5a5}}, &(0x7f0000000e40)='GPL\x00', 0x5, 0xc3, &(0x7f0000000e80)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=@base={0xa, 0x4, 0x6, 0xff, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001040), 0x0, 0x619, r6}, 0x38) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000400)={'veth0_to_team\x00', &(0x7f0000000440)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x2000000, &(0x7f00000000c0)=ANY=[], 0x1, 0x20f, &(0x7f0000000600)="$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") futex(0x0, 0x5, 0x1, 0x0, 0x0, 0x7fffffff) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000005c0)={'veth0_to_team\x00', 0x800}) 10.812988642s ago: executing program 3 (id=494): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x164, &(0x7f0000000200)=ANY=[@ANYBLOB="120100007af28810d30b69055b00000000010902"], 0x0) ioctl$EVIOCRMFF(r0, 0xc0085504, &(0x7f0000000080)=0x77) 8.751342321s ago: executing program 3 (id=498): syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100300000008f003040540000102030109022400010101d00909040007020701030709050102ff0309"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 8.588797748s ago: executing program 5 (id=502): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x2, 0x1000, @loopback}, 0x1c) 8.587451228s ago: executing program 5 (id=503): keyctl$set_timeout(0xf, 0x0, 0xffffffffffffffff) 8.56640812s ago: executing program 5 (id=504): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES16], 0xff, 0x2b1, &(0x7f0000000100)="$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") syncfs(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000003c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000008c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000900), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000940)=0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./proc_mnt\x00', 0x1ff) socket(0x2, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newlink={0x40, 0x10, 0x439, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x4a25d, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}]}}}]}, 0x40}}, 0x0) 7.97114606s ago: executing program 3 (id=507): prlimit64(0x0, 0xe, &(0x7f0000005480)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000054c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000005500)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000005540)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000005580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000055c0)=@abs, 0x6e) syz_clone(0xa1209200, 0x0, 0x44, 0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000005640), 0x651, 0x0) recvmmsg(r1, &(0x7f0000005680), 0x4000087, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000040)=0xc, 0x4) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r3) write(r3, &(0x7f0000001b00)="66000000220047000500fc0f8980e8ff06006d20002b1ffec0906849199f90e90101c7bb0000d3e7ff0b317cfdc617ab685b77fa89b5843e9fb69ea04aab8950a19d1cb58605cc23e7c515927d846ba9769d3cd91cfc183ce736f56a28e5145ba2f94812237d", 0x66) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000001b80)=0x1000, 0x4) sendto(r3, &(0x7f0000001bc0)="120000001200e706017b00000000000000a1", 0x12, 0x2404c8d0, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000001cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001d00)}}], 0x1, 0x20000, 0x0) r5 = syz_mount_image$vfat(&(0x7f00000056c0), &(0x7f0000005700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x99c455, 0x0, 0x40, 0x0, &(0x7f0000005800)) syz_mount_image$vfat(&(0x7f0000005840), &(0x7f0000005880)='./file0\x00', 0x2018000, &(0x7f00000058c0)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES8, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0, @ANYRESDEC, @ANYRES16, @ANYRES64=r5], 0x1, 0x304, &(0x7f0000005940)="$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") syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES32=r4, @ANYRES64=r3], 0x3, 0x1521, &(0x7f0000000540)="$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") truncate(&(0x7f0000001a80)='./file1\x00', 0x400) open(&(0x7f0000001ac0)='./file1\x00', 0x109942, 0x6e) sync_file_range(r3, 0x4, 0x7f, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x1ff) 3.628872071s ago: executing program 4 (id=515): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000002c0), 0x19a, 0x0) recvmmsg(r2, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) statx(0xffffffffffffffff, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x800, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000540)={{}, {0x1, 0x2}, [{0x2, 0x6}], {0x4, 0x3}, [], {0x10, 0x2}, {0x20, 0x6}}, 0x2c, 0x2) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x80082, 0x0) write$vga_arbiter(r4, 0x0, 0xf) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000640)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000000680)='cgroup2\x00', 0x0) fsmount(r5, 0x1, 0x3) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) mlockall(0x7) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r0, 0x0, 0x0) 2.763624329s ago: executing program 4 (id=516): recvfrom$binder_report(0xffffffffffffffff, &(0x7f0000000300)={""/44, 0x0, ""/12, 0x0}, 0x80, 0x3100, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x3, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000280)='./file0\x00', 0x210018, &(0x7f00000002c0)=ANY=[@ANYRES8, @ANYRES32, @ANYRESDEC], 0x1, 0x392, &(0x7f00000006c0)="$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") timerfd_settime(0xffffffffffffffff, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xa, 0x101, 0x7fdf, 0xff}, 0x50) syz_emit_ethernet(0x36, &(0x7f0000000480)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x4, 0x4, 0x401, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18}, 0x50) 2.633408963s ago: executing program 0 (id=517): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r2}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180107, r2}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000001, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 2.630543733s ago: executing program 5 (id=518): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2a2840, &(0x7f0000000000)={[{@grpquota}, {@nombcache}]}, 0x3, 0xbbc, &(0x7f0000002700)="$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") prlimit64(0x0, 0xe, &(0x7f00000032c0)={0xa, 0x400000000008d}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x74, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f00000001c0)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000300)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x7fff, 0x41, &(0x7f0000000340), 0x0, 0x0, 0x9, 0xffffffff, 0x5, 0x6, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000003300)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000003340)=0x2) mmap(&(0x7f00000c2000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x9a5ed000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000033c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000003400)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000034c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x1d, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/devices/system/cpu/cpuidle/current_governor\x00', 0x2, 0x0) write(r3, 0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0x13) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f00000c2000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='net/packet\x00') socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000003880)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) 2.629807853s ago: executing program 3 (id=519): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x181002, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000580)='bridge_slave_1\x00', 0x10) r5 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e20, 0x400, @loopback, 0x7}, 0x1c) listen(r5, 0xb) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) 2.528948273s ago: executing program 4 (id=520): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a, 0x0, 0x0, 0x0, 0x59041}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0xf}, @IFLA_BR_PRIORITY={0x6, 0x6, 0xc45}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000851}, 0x0) 2.528744483s ago: executing program 2 (id=521): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {0x1}]}]}}, &(0x7f0000000300)=""/230, 0x3e, 0xe6, 0x1}, 0x28) 2.183826388s ago: executing program 2 (id=522): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002400128009000100626f6e64", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 2.122002745s ago: executing program 4 (id=523): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file1\x00', 0x1000804, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xff, 0x28e, &(0x7f0000000500)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800010, &(0x7f0000000080), 0x1, 0x4b9, &(0x7f0000000840)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x4020000) prlimit64(0x0, 0xe, &(0x7f0000000dc0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000e00)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000e40)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000e80)=0x7) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x890c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000ec0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000f00)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000f80), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000fc0), 0x4000087, 0x2, 0x0) listen(0xffffffffffffffff, 0x39b3) syz_mount_image$fuse(0x0, &(0x7f0000001000)='./bus\x00', 0x3000440, 0x0, 0xff, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r5, 0x0, 0x0, 0x0, 0x0, 0x0) quotactl$Q_GETQUOTA(0x2000000, 0x0, 0xee01, 0x0) 1.912884956s ago: executing program 2 (id=524): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2008000, &(0x7f00000003c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b723f64329787434c6c9f891d2e309efaf1d4e529e1f13e98ceedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a4185614ce67df4870bff796357ee95fffb99cde9"], 0x1, 0x2bc, &(0x7f0000000500)="$eJzs3U9rY1UUAPDz0uQ1QxftwpUIvsUs3Fims3VhBqkgdqVk4R/QwZmBoQkDDQRGxTArP4ELF34Pd+4FN34DwYVLdw5SuPLeS5NMkkmmHdMO5ffb9HLuOe/em3fbFMK7+fKN/vG9R4MHT779I9rtLBqd6MTTLPaiEWfSWAAA18LTlOLvC72/NxubmhMAsFkz7/+t56RsL4be3fS0AIAN+viTTz+8c3R0+FFRtCP63w+7WdQ/6/47D+Jh9OJ+3IrdOJ1+FpBS3X7/g6PDaBalvbjZHw27ZWX/i98mqXlU9QexG3vL6w+K2kz9aNis/vPIsoiHnXIit2M3XluoL/sPby+pj24eb7XHiyzH34/d+P2reBS9uFd9pjEd/7s8ivfSD/9881mZXNZno2F3u8qbSluXfW8AAAAAAAAAAAAAAAAAAAAAALi+9ouJvbjZL0P1+TvdrdOqf/+Z/up8nUbVX9dnEXnVmDsfaJTip7PzdW4VRZGyOn9yvs+NZrzejOaVLRwAAAAAAAAAAAAAAAAAAABeIYPHXx/f7fXun/wvjfFD/pPH+i96nc5M5M1Ynbx9rrFia5xeznU+5+DXz/uTSLmIi0x+2CoiVs25tRC5Uc5n/ZX/TSmlLIt4udvUepGx1jR2VueUL/AvP+68fXw3W/cats9u3M+zXXmcDB7P3dPIVg96+kwknWv75Sty8vGOeaHr7LzkL9E7f9aDjSPZmlW0ZiKtcSOet/3a59rPl/c3CAAAAAAAAAAAAAAAAAAAqE0f+l3S+WRlaWNjkwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACASzb9/v9pIxYic41R/FUVL89JKY0mkTxOBle9RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK6//wIAAP//qWdtxQ==") r0 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x101042, 0x15) gettid() timer_create(0x1, 0x0, &(0x7f0000000c40)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000cc0), 0x0) fchownat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) truncate(&(0x7f0000001980)='./file1\x00', 0x3f1880f) r2 = syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000108c0d020140000102030109021200010160"], 0x0) syz_usb_connect$cdc_ecm(0x5, 0x4f, &(0x7f0000000a40)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d, 0x1, 0x1, 0x6, 0x70, 0x3, "", [{{0x9, 0x4, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0x2, {{0x7, 0x24, 0x6, 0x0, 0x0, "76f3"}, {0x5, 0x24, 0x0, 0xd23}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x7fff, 0x800, 0xb}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x6, 0x5, 0x42}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xf9, 0x64, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$uac3(r2, 0x0, 0x0) syz_usb_control_io$uac3(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$uac2(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x81d}}}, 0x0) 1.133771675s ago: executing program 3 (id=525): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0xe, &(0x7f0000000000)={[{@nomblk_io_submit}, {@mblk_io_submit}]}, 0x3, 0x450, &(0x7f0000000240)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbbttoUtLQX7+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwL/Y0k053V5GBXFB302/y221kHAq4MbfgzdpdfqE6As7qv5Vj8yFmleptwyv+2nqYh4/9y/32VbDOY5BABAk5+y8c/z7cZ/aTzUUO6+fG1oMiLuj4jtEfFAROyIiAcjamUfjohHNlh/6yLJ+vFPerGnwG5SNv57JV/bah7/FaO/mCzluW21+MvJkWOVpX35azId5U1Zfq5LHT+/8cfXnY41jv+yLau/GAvm7bg4tqn5nMX51flbibnRpfMRu8baxZ9cXwlIImJnROzqsY5jz/6wp9OxG8ffRR/WmarfRzxTv/7noiX+QtJ9fXL2nqgs7Zst7or1fvv9wjud6t9Q/Okth7tOdv3vbXv/X49/Mmlcr13ZeB0X/vqy45ym1/t/PHmvlh7P930yv7p6ai5iPDlcb3Tj/v1r5xb5onwW//Te9v1/e6y9ErsjIruJH42IxyLi8bztT0TEkxGxt0v8v77+1Ie9xz9YWfyLG7r+a4nxaN3TPlE6/suPTZVOrov/Wvfrf7CWms733Mz73820q7e7GQAAAO4+aURsjSSduZ5O05mZ+vfld0SkleWV1eeOLH98crH+G4HJiLR40jXR8Dx0Lp/W1/PnI6L+1YLi+IH8ufG3pc21/MzCcmVx2MHDiNvSof9n/i4Nu3XAwPm9Fowu/R9Gl/4Po0v/h9HVpv9vHkY7gNuv3ef/Z0NoB3D7tfR/y34wQsz/YXTp/zC69H8YSSub48Y/ku+aKP5Sj6ff4Yksst5Oj/LQGz/QRKR3RDPu2ET5Lu8XQ3tLAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Kv/AgAA//8Cwduc") prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() mount$9p_unix(0x0, &(0x7f00000001c0)='\x00', &(0x7f0000000740), 0x80842, &(0x7f0000000900)=ANY=[]) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000740), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000780)=0x2) recvmmsg(r1, &(0x7f00000007c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./my_debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000840)='./my_debugfs\x00', &(0x7f0000000880)='debugfs\x00', 0x0, 0x0) r3 = socket(0x2, 0x3, 0xa) setrlimit(0xa, &(0x7f00000007c0)={0xf, 0x2}) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) r4 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./my_debugfs/usb/devices\x00', 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGSKNS(r5, 0x894c, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) read(r4, 0x0, 0xfffffc69) 1.08593185s ago: executing program 5 (id=526): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2a2840, &(0x7f0000000000)={[{@grpquota}, {@nombcache}]}, 0x3, 0xbbc, &(0x7f0000002700)="$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") prlimit64(0x0, 0xe, &(0x7f00000032c0)={0xa, 0x400000000008d}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x74, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000300)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x7fff, 0x41, &(0x7f0000000340), 0x0, 0x0, 0x9, 0xffffffff, 0x5, 0x6, 0x0}) 1.024979346s ago: executing program 0 (id=527): write(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000700)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000780)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000007c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000008c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000900), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000940)=0x2) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) close_range(r4, 0xffffffffffffffff, 0x2) r5 = syz_clone3(&(0x7f0000000a00)={0x180801400, &(0x7f0000000a80), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x64) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000000040)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) sendmsg$inet(r6, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_retopts={{0x10}}], 0x10}, 0x200000e0) ioprio_set$pid(0x1, r5, 0x4000) ppoll(&(0x7f0000000ac0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 156.297754ms ago: executing program 4 (id=528): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x80}, {0xc, 0x90, 0x1ad}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0x49}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000803}, 0x4000000) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x81) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x9) socket$packet(0x11, 0x2, 0x300) timer_create(0x0, 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x7f) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @random="af4e6a961c0b", @void, {@ipv4={0x800, @comp={{0x6, 0x4, 0x3, 0x38, 0x1c, 0x65, 0x0, 0x40, 0x6c, 0x0, @empty, @empty, {[@noop]}}, {0x2c, 0x0, 0x4d4}}}}}, 0x0) 142.170055ms ago: executing program 0 (id=529): r0 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r0, &(0x7f00000008c0)="800034ca269bb73c", 0x8, 0x0, &(0x7f0000000900)={0xa, 0xfffd, 0xc8, @mcast2}, 0x1c) 98.56236ms ago: executing program 5 (id=530): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="c1010000000000407f04ffff00000000000109022d0001000000000904000002030000000921000000012218000905810300000000000905020308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x18, {[@global=@item_4={0x3, 0x1, 0x5, "16bd4505"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_012={0x2, 0x1, 0x1, '\x00\x00'}, @main=@item_012={0x0, 0x0, 0xb}, @main=@item_012={0x1, 0x0, 0x9, "01"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_4={0x3, 0x0, 0x9, "1a9f653b"}, @global=@item_012={0x1, 0x1, 0x1, '\b'}, @main=@item_012={0x1, 0x0, 0x2, "e8"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000180)={0x2, 0x100}) 56.990154ms ago: executing program 3 (id=531): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x18, 0x0, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) readv(0xffffffffffffffff, 0x0, 0x0) unshare(0x22020400) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r2, 0x1, 0x800000000f, &(0x7f0000000180)=0x7, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000001c0)={0xa, 0xce22, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) listen(r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f00000004c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/power/disk\x00', 0x1, 0x0) listen(r3, 0x9) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000200)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000240)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r4, 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='net/tcp6\x00') preadv(r5, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/200, 0xc8}], 0x1, 0x91, 0x2) 34.523357ms ago: executing program 0 (id=532): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys\x00', 0x1ed) r0 = syz_create_resource$futex(&(0x7f0000000000)) futex(r0, 0x80, 0x0, &(0x7f0000000040), 0x0, 0x1) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000440)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/bus/acpi/uevent\x00', 0x1, 0x0) gettid() socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000004c0)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000006c0)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000700), 0x80002c1, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000740), &(0x7f0000000780)='./file1\x00', 0x2a00091, &(0x7f00000007c0)=ANY=[@ANYRES64=0x0, @ANYRES32=r2, @ANYRESHEX, @ANYRES32, @ANYBLOB="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", @ANYRES32], 0x55, 0x1c6, &(0x7f0000001800)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./file2\x00', 0x80000, 0x82) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xa, 0xfff2}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffff1b65}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4040050) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000001b40)=[{{&(0x7f0000001b80)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000001bc0)=[@ip_retopts={{0x34, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x6, 0x1, 0x0, [{@broadcast, 0x401}, {@multicast1}]}, @rr={0x7, 0xf, 0xc, [@empty, @dev={0xac, 0x14, 0x14, 0x2f}, @broadcast]}]}}}], 0x38}}], 0x1, 0x4000080) read$FUSE(r3, &(0x7f0000001c40)={0x2020}, 0x2020) 0s ago: executing program 4 (id=533): r0 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000800)={'batadv_slave_0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000840)={0x0, 0x7005}, 0x4) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000880)={@private0, r1}, 0x14) sendto$inet6(r0, &(0x7f00000008c0)="800034ca269bb73c", 0x8, 0x0, &(0x7f0000000900)={0xa, 0xfffd, 0xc8, @mcast2}, 0x1c) kernel console output (not intermixed with test programs): T4467] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 35.535795][ T4347] Bluetooth: hci3: command 0x041b tx timeout [ 35.537061][ T4347] Bluetooth: hci1: command 0x041b tx timeout [ 35.538331][ T4347] Bluetooth: hci0: command 0x041b tx timeout [ 35.538785][ T4467] BTRFS info (device loop1): use lzo compression, level 0 [ 35.541034][ T4467] BTRFS info (device loop1): turning on flush-on-commit [ 35.582187][ T4467] BTRFS info (device loop1): enabling auto defrag [ 35.583627][ T4467] BTRFS info (device loop1): max_inline at 4096 [ 35.585023][ T4467] BTRFS info (device loop1): using free space tree [ 35.590103][ T4485] loop4: detected capacity change from 0 to 40427 [ 35.595386][ T4485] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 35.596880][ T4485] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 35.612245][ T4341] Bluetooth: hci2: command 0x041b tx timeout [ 35.613574][ T4341] Bluetooth: hci4: command 0x041b tx timeout [ 35.627348][ T4485] F2FS-fs (loop4): invalid crc value [ 35.628558][ T4485] F2FS-fs (loop4): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 35.643477][ T4485] F2FS-fs (loop4): Found nat_bits in checkpoint [ 35.663658][ T4485] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 35.665200][ T4485] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 35.675540][ T4485] syz.4.16: attempt to access beyond end of device [ 35.675540][ T4485] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 35.732396][ T4481] loop2: detected capacity change from 0 to 32768 [ 35.740926][ T4481] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.10 (4481) [ 35.759297][ T4481] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 35.761630][ T4481] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 35.767218][ T4481] BTRFS info (device loop2): enabling auto defrag [ 35.768548][ T4481] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 35.770426][ T4481] BTRFS info (device loop2): force zstd compression, level 3 [ 35.783749][ T4481] BTRFS info (device loop2): force clearing of disk cache [ 35.785165][ T4481] BTRFS info (device loop2): disabling log replay at mount time [ 35.797594][ T4481] BTRFS info (device loop2): turning on async discard [ 35.799027][ T4481] BTRFS info (device loop2): setting nodatacow [ 35.800272][ T4481] BTRFS info (device loop2): enabling disk space caching [ 35.801749][ T4481] BTRFS info (device loop2): disabling disk space caching [ 35.803849][ T4481] BTRFS info (device loop2): disabling tree log [ 35.804979][ T4481] BTRFS info (device loop2): enabling disk space caching [ 35.806241][ T4481] BTRFS info (device loop2): disk space caching is enabled [ 35.827752][ T4524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.829619][ T4524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.865892][ T4467] BTRFS info (device loop1): enabling ssd optimizations [ 35.886051][ T4494] loop3: detected capacity change from 0 to 40427 [ 35.897136][ T4494] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 35.898549][ T4494] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 35.904031][ T4331] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 35.909937][ T4494] F2FS-fs (loop3): invalid crc value [ 35.911025][ T4494] F2FS-fs (loop3): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 35.937745][ T4494] F2FS-fs (loop3): Found nat_bits in checkpoint [ 35.946097][ T4415] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 35.964251][ T4494] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 35.965516][ T4494] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 36.036518][ T4334] BTRFS info (device loop2: state E): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 36.070785][ T4323] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by udevd (4323) [ 36.119589][ T4567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.121448][ T4567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.132679][ T4415] usb 1-1: config 2 has an invalid interface number: 151 but max is 0 [ 36.134550][ T4415] usb 1-1: config 2 has no interface number 0 [ 36.135748][ T4415] usb 1-1: config 2 interface 151 has no altsetting 0 [ 36.139237][ T4415] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0020, bcdDevice=e3.47 [ 36.141493][ T4415] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.147573][ T4415] usb 1-1: Product: syz [ 36.148479][ T4415] usb 1-1: Manufacturer: syz [ 36.149469][ T4415] usb 1-1: SerialNumber: syz [ 36.194720][ T4569] device-mapper: thin: Data device (ram5) discard unsupported: Disabling discard passdown. [ 36.255652][ T4561] loop3: detected capacity change from 0 to 32768 [ 36.284522][ T4561] XFS (loop3): Mounting V5 Filesystem [ 36.304911][ T4561] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 36.324055][ T4561] XFS (loop3): Starting recovery (logdev: internal) [ 36.344948][ T4567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.346764][ T4567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.365801][ T4561] XFS (loop3): Ending recovery (logdev: internal) [ 36.384711][ T4590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.394539][ T4590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.401770][ T4332] XFS (loop3): Unmounting Filesystem [ 36.507355][ T4589] loop4: detected capacity change from 0 to 40427 [ 36.510179][ T4589] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 36.511517][ T4589] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 36.515822][ T4589] F2FS-fs (loop4): invalid crc value [ 36.517035][ T4589] F2FS-fs (loop4): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 36.525078][ T4589] F2FS-fs (loop4): Found nat_bits in checkpoint [ 36.539736][ T4589] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 36.541956][ T4589] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 36.550522][ T4589] syz.4.33: attempt to access beyond end of device [ 36.550522][ T4589] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 36.658843][ T4595] loop4: detected capacity change from 0 to 512 [ 36.666321][ T4595] EXT4-fs (loop4): invalid journal inode [ 36.667578][ T4595] EXT4-fs (loop4): can't get journal size [ 36.696326][ T4595] EXT4-fs (loop4): 1 truncate cleaned up [ 36.697748][ T4595] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 36.716808][ T4342] EXT4-fs (loop4): unmounting filesystem. [ 36.776172][ T4415] dvb-usb: found a 'Elgato EyeTV Dtt Dlx PD378S' in warm state. [ 36.780479][ T4415] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 36.784964][ T4415] dvbdev: DVB: registering new adapter (Elgato EyeTV Dtt Dlx PD378S) [ 36.786535][ T4415] usb 1-1: media controller created [ 36.790180][ T4415] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 36.835290][ T4415] DVB: Unable to find symbol dib7000p_attach() [ 36.836600][ T4415] dvb-usb: no frontend was attached by 'Elgato EyeTV Dtt Dlx PD378S' [ 36.838526][ T4415] Registered IR keymap rc-dib0700-rc5 [ 36.858190][ T4601] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 36.861474][ T4601] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 36.877523][ T4601] BTRFS info (device loop4): enabling auto defrag [ 36.879473][ T4601] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 36.882632][ T4601] BTRFS info (device loop4): force zstd compression, level 3 [ 36.884086][ T4601] BTRFS info (device loop4): force clearing of disk cache [ 36.890448][ T4601] BTRFS info (device loop4): disabling log replay at mount time [ 36.892414][ T4601] BTRFS info (device loop4): turning on async discard [ 36.893768][ T4601] BTRFS info (device loop4): setting nodatacow [ 36.894968][ T4601] BTRFS info (device loop4): enabling disk space caching [ 36.896340][ T4601] BTRFS info (device loop4): disabling disk space caching [ 36.918319][ T4601] BTRFS info (device loop4): disabling tree log [ 36.919683][ T4601] BTRFS info (device loop4): enabling disk space caching [ 36.921177][ T4601] BTRFS info (device loop4): disk space caching is enabled [ 36.956591][ T4613] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.965141][ T4613] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 36.970283][ T4603] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 36.971791][ T4603] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 36.977232][ T4415] dib0700: ir protocol setup failed [ 36.978678][ T4415] dvb-usb: could not initialize remote control. [ 36.979926][ T4415] dvb-usb: Elgato EyeTV Dtt Dlx PD378S successfully initialized and connected. [ 36.984852][ T4415] usb 1-1: USB disconnect, device number 2 [ 36.988948][ T4603] F2FS-fs (loop3): invalid crc value [ 36.990215][ T4603] F2FS-fs (loop3): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 36.994238][ T4613] EXT4-fs (loop1): 1 truncate cleaned up [ 36.995642][ T4613] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 37.000747][ T4415] dvb-usb: Elgato EyeTV Dtt Dlx PD378S successfully deinitialized and disconnected. [ 37.016810][ T4603] F2FS-fs (loop3): Found nat_bits in checkpoint [ 37.031709][ T4603] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 37.038390][ T4603] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 37.125275][ T4342] BTRFS info (device loop4: state E): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 37.298307][ T4653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.300206][ T4653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.335120][ T4655] EXT4-fs (loop3): invalid journal inode [ 37.336401][ T4655] EXT4-fs (loop3): can't get journal size [ 37.344678][ T4655] EXT4-fs (loop3): 1 truncate cleaned up [ 37.358505][ T4655] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 37.420588][ T4645] XFS (loop2): Mounting V5 Filesystem [ 37.422536][ T4332] EXT4-fs (loop3): unmounting filesystem. [ 37.473179][ T4645] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 37.486837][ T4331] EXT4-fs (loop1): unmounting filesystem. [ 37.504819][ T4645] XFS (loop2): Starting recovery (logdev: internal) [ 37.515696][ T4645] XFS (loop2): Ending recovery (logdev: internal) [ 37.564410][ T4664] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 37.565966][ T4664] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 37.568396][ T4334] XFS (loop2): Unmounting Filesystem [ 37.568652][ T4664] F2FS-fs (loop3): invalid crc value [ 37.570728][ T4664] F2FS-fs (loop3): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 37.583237][ T4664] F2FS-fs (loop3): Found nat_bits in checkpoint [ 37.591000][ T4664] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 37.593287][ T4664] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 37.598504][ T4664] syz.3.47: attempt to access beyond end of device [ 37.598504][ T4664] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 37.612325][ T4347] Bluetooth: hci0: command 0x040f tx timeout [ 37.613597][ T4347] Bluetooth: hci1: command 0x040f tx timeout [ 37.614933][ T4347] Bluetooth: hci3: command 0x040f tx timeout [ 37.637823][ T4677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.639721][ T4677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.692286][ T4341] Bluetooth: hci4: command 0x040f tx timeout [ 37.693655][ T4341] Bluetooth: hci2: command 0x040f tx timeout [ 37.716276][ T4652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.718206][ T4652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.755761][ T4681] device-mapper: thin: Data device (ram7) discard unsupported: Disabling discard passdown. [ 37.772404][ T4415] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 37.850104][ T4677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.855338][ T4677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.905190][ T4687] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 37.907415][ T4687] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 37.911780][ T4687] F2FS-fs (loop3): invalid crc value [ 37.913141][ T4687] F2FS-fs (loop3): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 37.920176][ T4687] F2FS-fs (loop3): Found nat_bits in checkpoint [ 37.928549][ T4687] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 37.930091][ T4687] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 37.972297][ T4415] usb 1-1: Using ep0 maxpacket: 32 [ 37.978335][ T4415] usb 1-1: config 3 has an invalid interface number: 8 but max is 0 [ 37.979971][ T4415] usb 1-1: config 3 has no interface number 0 [ 37.981337][ T4415] usb 1-1: config 3 interface 8 has no altsetting 0 [ 37.995600][ T4415] usb 1-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=6d.d0 [ 37.997570][ T4415] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.002180][ T4415] usb 1-1: Product: syz [ 38.003919][ T4415] usb 1-1: Manufacturer: syz [ 38.004861][ T4415] usb 1-1: SerialNumber: syz [ 38.020424][ T4702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.020565][ T4700] EXT4-fs (loop3): invalid journal inode [ 38.022704][ T4702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.026468][ T4700] EXT4-fs (loop3): can't get journal size [ 38.028758][ T4700] EXT4-fs (loop3): 1 truncate cleaned up [ 38.030510][ T4700] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 38.047652][ T4332] EXT4-fs (loop3): unmounting filesystem. [ 38.088336][ T4707] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 38.091970][ T4707] EXT4-fs (loop3): 1 truncate cleaned up [ 38.097003][ T4707] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 38.215519][ T4415] usb 1-1: bad CDC descriptors [ 38.218680][ T4415] usb 1-1: USB disconnect, device number 3 [ 38.281921][ T4332] EXT4-fs (loop3): unmounting filesystem. [ 38.299161][ T4713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.301593][ T4713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.305456][ T4713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.307324][ T4713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.487578][ T4715] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 38.489073][ T4715] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 38.494653][ T4721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.496769][ T4715] F2FS-fs (loop1): invalid crc value [ 38.497676][ T4721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.498180][ T4715] F2FS-fs (loop1): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 38.508521][ T4715] F2FS-fs (loop1): Found nat_bits in checkpoint [ 38.520557][ T4715] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 38.524529][ T4715] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 38.530307][ T4715] syz.1.63: attempt to access beyond end of device [ 38.530307][ T4715] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 38.556174][ T4726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.559894][ T4726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.745144][ T4735] EXT4-fs (loop0): invalid journal inode [ 38.746539][ T4735] EXT4-fs (loop0): can't get journal size [ 38.750935][ T4735] EXT4-fs (loop0): 1 truncate cleaned up [ 38.752505][ T4735] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 38.766815][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 38.775287][ T4726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.777384][ T4726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.779625][ T4726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.781457][ T4726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.798828][ T4726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.800643][ T4726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.811302][ T4726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.813547][ T4726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.836992][ T4744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.839628][ T4744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.848586][ T4743] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 38.861238][ T4743] EXT4-fs (loop3): 1 truncate cleaned up [ 38.862815][ T4743] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 38.915705][ T4738] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.71 (4738) [ 38.928092][ T4738] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 38.930382][ T4738] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 38.939617][ T4738] BTRFS info (device loop0): setting nodatasum [ 38.940872][ T4738] BTRFS info (device loop0): force zlib compression, level 3 [ 38.948207][ T4738] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 38.962474][ T4738] BTRFS info (device loop0): use lzo compression, level 0 [ 38.964016][ T4738] BTRFS info (device loop0): turning on flush-on-commit [ 38.965505][ T4738] BTRFS info (device loop0): enabling auto defrag [ 38.967071][ T4738] BTRFS info (device loop0): max_inline at 4096 [ 38.968451][ T4738] BTRFS info (device loop0): using free space tree [ 39.023409][ T4332] EXT4-fs (loop3): unmounting filesystem. [ 39.037289][ T4757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.042250][ T4757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.085203][ T4738] BTRFS info (device loop0): enabling ssd optimizations [ 39.098976][ T4773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.102213][ T4333] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 39.105162][ T4773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.109215][ T4773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.113752][ T4773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.116663][ T4773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.119301][ T4773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.122518][ T4773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.124920][ T4773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.127814][ T4773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.131215][ T4773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.308444][ T4779] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 39.309989][ T4779] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 39.314459][ T4779] F2FS-fs (loop0): invalid crc value [ 39.315827][ T4779] F2FS-fs (loop0): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 39.339771][ T4779] F2FS-fs (loop0): Found nat_bits in checkpoint [ 39.352836][ T4784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.355844][ T4784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.357581][ T4779] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 39.359374][ T4779] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 39.365357][ T4779] syz.0.80: attempt to access beyond end of device [ 39.365357][ T4779] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 39.387704][ T4786] EXT4-fs (loop1): invalid journal inode [ 39.389032][ T4786] EXT4-fs (loop1): can't get journal size [ 39.401693][ T4786] EXT4-fs (loop1): 1 truncate cleaned up [ 39.406048][ T4786] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 39.420021][ T4331] EXT4-fs (loop1): unmounting filesystem. [ 39.454199][ T4791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.456382][ T4791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.460788][ T4791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.463543][ T4791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.566140][ T4796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.567916][ T4796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.611714][ T4799] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 39.616544][ T4799] EXT4-fs (loop0): 1 truncate cleaned up [ 39.618240][ T4799] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 39.665873][ T4791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.667962][ T4791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.692117][ T4347] Bluetooth: hci3: command 0x0419 tx timeout [ 39.692660][ T4341] Bluetooth: hci1: command 0x0419 tx timeout [ 39.693622][ T4347] Bluetooth: hci0: command 0x0419 tx timeout [ 39.766765][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 39.772265][ T4338] Bluetooth: hci2: command 0x0419 tx timeout [ 39.784956][ T4341] Bluetooth: hci4: command 0x0419 tx timeout [ 39.801037][ T4804] set_capacity_and_notify: 16 callbacks suppressed [ 39.801044][ T4804] loop3: detected capacity change from 0 to 32768 [ 39.813285][ T4804] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.89 (4804) [ 39.817031][ T4804] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 39.821008][ T4804] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 39.825479][ T4804] BTRFS info (device loop3): setting nodatasum [ 39.826851][ T4804] BTRFS info (device loop3): force zlib compression, level 3 [ 39.828356][ T4804] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 39.830318][ T4804] BTRFS info (device loop3): use lzo compression, level 0 [ 39.831645][ T4804] BTRFS info (device loop3): turning on flush-on-commit [ 39.834099][ T4804] BTRFS info (device loop3): enabling auto defrag [ 39.835421][ T4804] BTRFS info (device loop3): max_inline at 4096 [ 39.836768][ T4804] BTRFS info (device loop3): using free space tree [ 39.920859][ T4807] loop0: detected capacity change from 0 to 32768 [ 39.927258][ T4807] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.90 (4807) [ 39.930992][ T4828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.936536][ T4804] BTRFS info (device loop3): enabling ssd optimizations [ 39.941320][ T4807] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 39.944953][ T4807] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 39.947037][ T4807] BTRFS info (device loop0): enabling auto defrag [ 39.948751][ T4807] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 39.954786][ T4828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.955011][ T4807] BTRFS info (device loop0): force zstd compression, level 3 [ 39.961191][ T4332] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 39.963835][ T4807] BTRFS info (device loop0): force clearing of disk cache [ 39.965450][ T4807] BTRFS info (device loop0): disabling log replay at mount time [ 39.967255][ T4807] BTRFS info (device loop0): turning on async discard [ 39.968748][ T4807] BTRFS info (device loop0): setting nodatacow [ 39.970164][ T4807] BTRFS info (device loop0): enabling disk space caching [ 39.971079][ T4796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.977379][ T4796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.982168][ T4807] BTRFS info (device loop0): disabling disk space caching [ 39.983737][ T4807] BTRFS info (device loop0): disabling tree log [ 39.985105][ T4807] BTRFS info (device loop0): enabling disk space caching [ 39.986616][ T4807] BTRFS info (device loop0): disk space caching is enabled [ 40.045813][ T4835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.049874][ T4835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.108905][ T4333] BTRFS info (device loop0: state E): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 40.175333][ T4854] loop0: detected capacity change from 0 to 512 [ 40.180353][ T4796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.181024][ T4854] EXT4-fs (loop0): invalid journal inode [ 40.183236][ T4796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.187876][ T4796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.191337][ T4854] EXT4-fs (loop0): can't get journal size [ 40.191443][ T4796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.199155][ T4854] EXT4-fs (loop0): 1 truncate cleaned up [ 40.200666][ T4854] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 40.216706][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 40.333159][ T4858] loop0: detected capacity change from 0 to 40427 [ 40.339258][ T4858] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 40.340685][ T4858] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 40.353493][ T4858] F2FS-fs (loop0): invalid crc value [ 40.354559][ T4858] F2FS-fs (loop0): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 40.359291][ T4858] F2FS-fs (loop0): Found nat_bits in checkpoint [ 40.369965][ T4858] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 40.371595][ T4858] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 40.377403][ T4858] syz.0.95: attempt to access beyond end of device [ 40.377403][ T4858] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 40.396682][ T4796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.398712][ T4796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.610943][ T4874] loop2: detected capacity change from 0 to 512 [ 40.615206][ T4874] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 40.627261][ T4874] EXT4-fs (loop2): 1 truncate cleaned up [ 40.628624][ T4874] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 40.756250][ T4334] EXT4-fs (loop2): unmounting filesystem. [ 40.763438][ T4851] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 40.777072][ T4879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.779433][ T4879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.943269][ T4851] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.945445][ T4851] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.947389][ T4851] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 40.949909][ T4851] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 40.952515][ T4851] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.955770][ T4851] usb 1-1: config 0 descriptor?? [ 41.017671][ T4883] loop4: detected capacity change from 0 to 32768 [ 41.026203][ T4883] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.104 (4883) [ 41.030295][ T4883] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 41.033028][ T4883] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 41.033400][ T4870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.034751][ T4883] BTRFS info (device loop4): setting nodatasum [ 41.037000][ T4870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.037942][ T4883] BTRFS info (device loop4): force zlib compression, level 3 [ 41.041055][ T4883] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 41.043390][ T4883] BTRFS info (device loop4): use lzo compression, level 0 [ 41.044861][ T4883] BTRFS info (device loop4): turning on flush-on-commit [ 41.046379][ T4883] BTRFS info (device loop4): enabling auto defrag [ 41.047800][ T4883] BTRFS info (device loop4): max_inline at 4096 [ 41.049358][ T4883] BTRFS info (device loop4): using free space tree [ 41.105944][ T4883] BTRFS info (device loop4): enabling ssd optimizations [ 41.121554][ T4342] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 41.248267][ T4870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.250365][ T4870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.300745][ T4907] loop4: detected capacity change from 0 to 32768 [ 41.303277][ T4907] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.106 (4907) [ 41.308594][ T4907] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 41.310897][ T4907] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 41.313263][ T4907] BTRFS info (device loop4): enabling auto defrag [ 41.314849][ T4907] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 41.316790][ T4907] BTRFS info (device loop4): force zstd compression, level 3 [ 41.318113][ T4907] BTRFS info (device loop4): force clearing of disk cache [ 41.319564][ T4907] BTRFS info (device loop4): disabling log replay at mount time [ 41.321132][ T4907] BTRFS info (device loop4): turning on async discard [ 41.322792][ T4907] BTRFS info (device loop4): setting nodatacow [ 41.324132][ T4907] BTRFS info (device loop4): enabling disk space caching [ 41.325836][ T4907] BTRFS info (device loop4): disabling disk space caching [ 41.327486][ T4907] BTRFS info (device loop4): disabling tree log [ 41.328833][ T4907] BTRFS info (device loop4): enabling disk space caching [ 41.330229][ T4907] BTRFS info (device loop4): disk space caching is enabled [ 41.348316][ T4342] BTRFS info (device loop4: state E): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 41.371061][ T4851] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x2 [ 41.373473][ T4851] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 41.378154][ T4851] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 41.408402][ T4928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.410252][ T4928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.532675][ T4930] loop4: detected capacity change from 0 to 40427 [ 41.539874][ T4930] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 41.541385][ T4930] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 41.549380][ T4930] F2FS-fs (loop4): invalid crc value [ 41.550566][ T4930] F2FS-fs (loop4): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 41.553749][ T4930] F2FS-fs (loop4): Found nat_bits in checkpoint [ 41.568839][ T4930] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 41.570279][ T4930] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 41.622848][ T4928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.624756][ T4928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.627452][ T4928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.630153][ T4928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.634190][ T4851] usb 1-1: USB disconnect, device number 4 [ 41.635282][ T4928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.637217][ T4928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.701242][ T4938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.704184][ T4938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.806324][ T4936] loop4: detected capacity change from 0 to 40427 [ 41.809274][ T4936] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 41.810919][ T4936] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 41.821609][ T4936] F2FS-fs (loop4): invalid crc value [ 41.822944][ T4936] F2FS-fs (loop4): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 41.833534][ T4936] F2FS-fs (loop4): Found nat_bits in checkpoint [ 41.841699][ T4936] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 41.843814][ T4936] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 41.888967][ T4947] loop3: detected capacity change from 0 to 512 [ 41.907654][ T4947] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 41.921379][ T4947] EXT4-fs (loop3): 1 truncate cleaned up [ 41.925831][ T4947] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 41.968915][ T4952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.971632][ T4952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.074748][ T4332] EXT4-fs (loop3): unmounting filesystem. [ 42.220961][ T4956] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.116 (4956) [ 42.239244][ T4956] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 42.243517][ T4956] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 42.245407][ T4956] BTRFS info (device loop3): setting nodatasum [ 42.246729][ T4956] BTRFS info (device loop3): force zlib compression, level 3 [ 42.248422][ T4956] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 42.251082][ T4961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.260780][ T4961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.263030][ T4956] BTRFS info (device loop3): use lzo compression, level 0 [ 42.264777][ T4956] BTRFS info (device loop3): turning on flush-on-commit [ 42.266146][ T4956] BTRFS info (device loop3): enabling auto defrag [ 42.267548][ T4956] BTRFS info (device loop3): max_inline at 4096 [ 42.268944][ T4956] BTRFS info (device loop3): using free space tree [ 42.295711][ T4958] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.117 (4958) [ 42.307690][ T4958] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 42.310640][ T4958] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 42.313259][ T4958] BTRFS info (device loop0): enabling auto defrag [ 42.314690][ T4958] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 42.317062][ T4958] BTRFS info (device loop0): force zstd compression, level 3 [ 42.318674][ T4958] BTRFS info (device loop0): force clearing of disk cache [ 42.320309][ T4958] BTRFS info (device loop0): disabling log replay at mount time [ 42.322345][ T4958] BTRFS info (device loop0): turning on async discard [ 42.323626][ T4958] BTRFS info (device loop0): setting nodatacow [ 42.324953][ T4958] BTRFS info (device loop0): enabling disk space caching [ 42.326406][ T4958] BTRFS info (device loop0): disabling disk space caching [ 42.328060][ T4958] BTRFS info (device loop0): disabling tree log [ 42.329636][ T4958] BTRFS info (device loop0): enabling disk space caching [ 42.331267][ T4958] BTRFS info (device loop0): disk space caching is enabled [ 42.336093][ T4956] BTRFS info (device loop3): enabling ssd optimizations [ 42.373453][ T4332] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 42.440650][ T4990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.450149][ T4990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.503378][ T5001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.506074][ T5001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.520934][ T4985] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 42.522959][ T4985] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 42.525286][ T4985] F2FS-fs (loop1): invalid crc value [ 42.526420][ T4985] F2FS-fs (loop1): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 42.531157][ T4985] F2FS-fs (loop1): Found nat_bits in checkpoint [ 42.545834][ T4333] BTRFS info (device loop0: state E): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 42.561667][ T4985] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 42.569552][ T4985] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 42.739179][ T5008] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 42.740697][ T5008] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 42.743935][ T5008] F2FS-fs (loop0): invalid crc value [ 42.745038][ T5008] F2FS-fs (loop0): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 42.754958][ T5008] F2FS-fs (loop0): Found nat_bits in checkpoint [ 42.763667][ T5008] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 42.764936][ T5008] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 42.790381][ T5016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.811021][ T5016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.817745][ T5016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.820852][ T5016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.851848][ T5020] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 42.857807][ T5020] EXT4-fs (loop1): 1 truncate cleaned up [ 42.859178][ T5020] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 42.978480][ T5026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.981414][ T5026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.015477][ T4331] EXT4-fs (loop1): unmounting filesystem. [ 43.093885][ T4775] rxe_eth0 speed is unknown, defaulting to 1000 [ 43.151637][ T5030] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.130 (5030) [ 43.164313][ T5030] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 43.168126][ T5030] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 43.170073][ T5030] BTRFS info (device loop4): setting nodatasum [ 43.171417][ T5030] BTRFS info (device loop4): force zlib compression, level 3 [ 43.182994][ T4410] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 43.184476][ T5030] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 43.188872][ T5030] BTRFS info (device loop4): use lzo compression, level 0 [ 43.190306][ T5030] BTRFS info (device loop4): turning on flush-on-commit [ 43.191674][ T5030] BTRFS info (device loop4): enabling auto defrag [ 43.203352][ T5030] BTRFS info (device loop4): max_inline at 4096 [ 43.204641][ T5030] BTRFS info (device loop4): using free space tree [ 43.267676][ T5030] BTRFS info (device loop4): enabling ssd optimizations [ 43.282697][ T4342] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 43.364127][ T4410] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.366416][ T4410] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 43.369232][ T4410] usb 1-1: config 0 interface 0 has no altsetting 0 [ 43.372335][ T4410] usb 1-1: New USB device found, idVendor=17ef, idProduct=61ae, bcdDevice= 0.00 [ 43.373864][ T4410] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.379077][ T4410] usb 1-1: config 0 descriptor?? [ 43.524051][ T5083] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 43.525675][ T5083] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 43.528107][ T5083] F2FS-fs (loop4): invalid crc value [ 43.529562][ T5083] F2FS-fs (loop4): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 43.536576][ T5083] F2FS-fs (loop4): Found nat_bits in checkpoint [ 43.545123][ T5083] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 43.546828][ T5083] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 43.634326][ T5091] exfat: Deprecated parameter 'utf8' [ 43.635740][ T5091] exfat: Deprecated parameter 'namecase' [ 43.641657][ T5091] exfat: Deprecated parameter 'namecase' [ 43.647558][ T5091] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 43.717111][ T5093] EXT4-fs (loop4): invalid journal inode [ 43.720075][ T5093] EXT4-fs (loop4): can't get journal size [ 43.750020][ T5093] EXT4-fs (loop4): 1 truncate cleaned up [ 43.751515][ T5093] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 43.766095][ T4342] EXT4-fs (loop4): unmounting filesystem. [ 43.788995][ T4410] input: HID 17ef:61ae as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:17EF:61AE.0002/input/input4 [ 43.864088][ T5098] Zero length message leads to an empty skb [ 44.068432][ T5026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.071130][ T5026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.083985][ T4410] hid-generic 0003:17EF:61AE.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 17ef:61ae] on usb-dummy_hcd.0-1/input0 [ 44.084714][ T5026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.088987][ T5026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.107578][ T5026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.109426][ T5026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.286509][ T5106] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 44.304418][ T5106] EXT4-fs (loop2): 1 truncate cleaned up [ 44.306150][ T5106] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 44.587934][ T4334] EXT4-fs (loop2): unmounting filesystem. [ 44.736981][ T5110] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.141 (5110) [ 44.752205][ T5110] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 44.755033][ T5110] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 44.757665][ T5110] BTRFS info (device loop1): setting nodatasum [ 44.763996][ T5110] BTRFS info (device loop1): force zlib compression, level 3 [ 44.767165][ T5110] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 44.770152][ T5110] BTRFS info (device loop1): use lzo compression, level 0 [ 44.781039][ T5110] BTRFS info (device loop1): turning on flush-on-commit [ 44.784842][ T5110] BTRFS info (device loop1): enabling auto defrag [ 44.787636][ T5110] BTRFS info (device loop1): max_inline at 4096 [ 44.791089][ T5110] BTRFS info (device loop1): using free space tree [ 44.827550][ T5126] set_capacity_and_notify: 11 callbacks suppressed [ 44.827558][ T5126] loop2: detected capacity change from 0 to 512 [ 44.837424][ T5126] EXT4-fs (loop2): invalid journal inode [ 44.840613][ T5126] EXT4-fs (loop2): can't get journal size [ 44.853252][ T5126] EXT4-fs (loop2): 1 truncate cleaned up [ 44.854926][ T5126] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 44.881911][ T5116] loop3: detected capacity change from 0 to 40427 [ 44.884055][ T5116] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 44.885744][ T5116] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 44.890896][ T5116] F2FS-fs (loop3): invalid crc value [ 44.893190][ T5116] F2FS-fs (loop3): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 44.898886][ T5116] F2FS-fs (loop3): Found nat_bits in checkpoint [ 44.908317][ T5116] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 44.910007][ T5116] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 44.945784][ T4334] EXT4-fs (loop2): unmounting filesystem. [ 44.980274][ T5110] BTRFS info (device loop1): enabling ssd optimizations [ 45.008230][ T4331] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 45.054564][ T5154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.150'. [ 45.098293][ T5159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.099984][ T5159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.235018][ T5168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.236875][ T5168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.244261][ T5168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.246482][ T5168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.337048][ T5159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.339721][ T5159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.457456][ T5168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.459333][ T5168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.534028][ T5161] loop4: detected capacity change from 0 to 131072 [ 45.587870][ T5161] F2FS-fs (loop4): Test dummy encryption mode enabled [ 45.589796][ T5161] F2FS-fs (loop4): invalid crc value [ 45.614992][ T5161] F2FS-fs (loop4): Found nat_bits in checkpoint [ 45.627769][ T5161] F2FS-fs (loop4): access invalid blkaddr:0 [ 45.629042][ T5161] CPU: 0 PID: 5161 Comm: syz.4.155 Not tainted syzkaller #0 [ 45.630508][ T5161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 45.632625][ T5161] Call trace: [ 45.633407][ T5161] dump_backtrace+0x1c4/0x1f0 [ 45.634517][ T5161] show_stack+0x2c/0x3c [ 45.635511][ T5161] __dump_stack+0x30/0x40 [ 45.636473][ T5161] dump_stack_lvl+0xf4/0x15c [ 45.637488][ T5161] dump_stack+0x1c/0x5c [ 45.638423][ T5161] f2fs_is_valid_blkaddr+0x9c4/0xefc [ 45.639628][ T5161] sanity_check_extent_cache+0x14c/0x2d0 [ 45.640973][ T5161] f2fs_iget+0x2d60/0x47b0 [ 45.641964][ T5161] f2fs_fill_super+0x398c/0x57bc [ 45.643143][ T5161] mount_bdev+0x264/0x35c [ 45.644089][ T5161] f2fs_mount+0x44/0x58 [ 45.645040][ T5161] legacy_get_tree+0xd8/0x174 [ 45.646114][ T5161] vfs_get_tree+0x90/0x278 [ 45.647172][ T5161] do_new_mount+0x228/0x818 [ 45.648112][ T5161] path_mount+0x5ac/0xe6c [ 45.649119][ T5161] __arm64_sys_mount+0x4a0/0x5a0 [ 45.650293][ T5161] invoke_syscall+0x98/0x290 [ 45.651362][ T5161] el0_svc_common+0x13c/0x258 [ 45.652479][ T5161] do_el0_svc+0x5c/0x134 [ 45.653475][ T5161] el0_svc+0x58/0x12c [ 45.654421][ T5161] el0t_64_sync_handler+0x84/0xf0 [ 45.655603][ T5161] el0t_64_sync+0x18c/0x190 [ 45.658635][ T5161] F2FS-fs (loop4): sanity_check_extent_cache: inode (ino=3) extent info [0, 0, 4128768] is incorrect, run fsck to fix [ 45.659391][ T5163] loop3: detected capacity change from 0 to 131072 [ 45.663104][ T5161] F2FS-fs (loop4): Failed to read root inode [ 45.675155][ T5163] F2FS-fs (loop3): invalid crc value [ 45.677999][ T5163] F2FS-fs (loop3): Found nat_bits in checkpoint [ 45.686424][ T5163] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 45.780268][ T5183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.783989][ T5183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.898607][ T5186] ubi0: attaching mtd0 [ 45.900554][ T5186] ubi0: scanning is finished [ 45.901774][ T5186] ubi0: empty MTD device detected [ 45.929165][ T4410] usb 1-1: USB disconnect, device number 5 [ 45.996071][ T5186] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 45.997878][ T5186] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 45.999520][ T5186] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 46.001145][ T5186] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 46.007234][ T5186] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 46.009221][ T5186] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 46.021243][ T5191] loop1: detected capacity change from 0 to 2048 [ 46.026135][ T5186] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 578456798 [ 46.028302][ T5186] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 46.031017][ T5192] ubi0: background thread "ubi_bgt0d" started, PID 5192 [ 46.058650][ T5187] loop2: detected capacity change from 0 to 32768 [ 46.071897][ T5187] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.160 (5187) [ 46.075047][ T5191] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 46.077020][ T5191] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 46.078301][ T5191] loop1: p1 p2 p3 [ 46.078301][ T5191] p1: [ 46.078615][ T5194] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.079900][ T5191] loop1: p1 size 16779263 extends beyond EOD, truncated [ 46.086542][ T5187] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 46.086667][ T5191] loop1: p2 size 458752 extends beyond EOD, truncated [ 46.088776][ T5187] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 46.092867][ T5191] loop1: p3 start 3036741376 is beyond EOD, truncated [ 46.115032][ T5187] BTRFS info (device loop2): setting nodatasum [ 46.116382][ T5187] BTRFS info (device loop2): force zlib compression, level 3 [ 46.118109][ T5187] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 46.119976][ T5187] BTRFS info (device loop2): use lzo compression, level 0 [ 46.121514][ T5187] BTRFS info (device loop2): turning on flush-on-commit [ 46.123695][ T5187] BTRFS info (device loop2): enabling auto defrag [ 46.125160][ T5187] BTRFS info (device loop2): max_inline at 4096 [ 46.126389][ T5187] BTRFS info (device loop2): using free space tree [ 46.147062][ T5208] loop0: detected capacity change from 0 to 256 [ 46.217782][ T5214] 8021q: adding VLAN 0 to HW filter on device bond2 [ 46.226415][ T5187] BTRFS info (device loop2): enabling ssd optimizations [ 46.230855][ T4324] udevd[4324]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 46.243833][ T4628] udevd[4628]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 46.269614][ T5218] loop1: detected capacity change from 0 to 4096 [ 46.271438][ T4334] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 46.291550][ T5218] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 46.335487][ T5218] ntfs3: loop1: ino=5, mi_enum_attr [ 46.364970][ T5218] ntfs3: loop1: ino=5, "/" mi_enum_attr [ 46.542070][ T4410] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 46.833005][ T4410] usb 1-1: Using ep0 maxpacket: 32 [ 47.368052][ T4410] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.370412][ T4410] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.373603][ T4410] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 47.375359][ T4410] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.413218][ T5225] loop3: detected capacity change from 0 to 40427 [ 47.418004][ T5225] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 47.419412][ T5225] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 47.435496][ T4410] usb 1-1: config 0 descriptor?? [ 47.437520][ T4410] hub 1-1:0.0: USB hub found [ 47.451316][ T5225] F2FS-fs (loop3): invalid crc value [ 47.457026][ T5225] F2FS-fs (loop3): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 47.490089][ T5225] F2FS-fs (loop3): Found nat_bits in checkpoint [ 47.516302][ T5225] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 47.518106][ T5225] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 47.640301][ T4410] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 47.647925][ T5231] loop1: detected capacity change from 0 to 32768 [ 47.779746][ T5252] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.851024][ T5259] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 47.861923][ T5264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.871630][ T5264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.897755][ T5264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.902919][ T5264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.904832][ T4332] EXT4-fs (loop3): unmounting filesystem. [ 47.909305][ T5268] exfat: Deprecated parameter 'utf8' [ 47.914040][ T5268] exfat: Deprecated parameter 'namecase' [ 47.915307][ T5268] exfat: Deprecated parameter 'namecase' [ 47.917715][ T5264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.920193][ T5264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.924154][ T5268] exfat: Deprecated parameter 'utf8' [ 47.931949][ T5264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.935625][ T5264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.938999][ T5268] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 48.045433][ T4410] hid-generic 0003:046D:C31C.0003: unknown main item tag 0x0 [ 48.051372][ T4410] hid-generic 0003:046D:C31C.0003: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 48.132916][ T5270] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 48.135210][ T5270] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 48.137766][ T5270] F2FS-fs (loop3): invalid crc value [ 48.139080][ T5270] F2FS-fs (loop3): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 48.145439][ T5270] F2FS-fs (loop3): Found nat_bits in checkpoint [ 48.154023][ T5270] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 48.155650][ T5270] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 48.276100][ T5283] ext4: Unknown parameter 'seclabel' [ 48.316415][ T4628] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 48.414136][ T5264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.416585][ T5264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.724348][ T5286] EXT4-fs (loop3): 1 truncate cleaned up [ 48.725756][ T5286] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 48.853413][ T5294] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.925874][ T5221] usb 1-1: reset high-speed USB device number 6 using dummy_hcd [ 49.917295][ T4332] EXT4-fs (loop3): unmounting filesystem. [ 50.335880][ T5336] set_capacity_and_notify: 5 callbacks suppressed [ 50.335900][ T5336] loop4: detected capacity change from 0 to 256 [ 50.372004][ C0] sched: RT throttling activated [ 50.396645][ T5336] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 50.572231][ T4410] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 50.645633][ T5353] ubi: mtd0 is already attached to ubi0 [ 50.746206][ T5360] loop3: detected capacity change from 0 to 32768 [ 50.758686][ T5360] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.219 (5360) [ 50.768247][ T5360] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 50.770399][ T5360] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 50.772913][ T5360] BTRFS info (device loop3): setting nodatasum [ 50.774245][ T5360] BTRFS info (device loop3): force zlib compression, level 3 [ 50.775895][ T5360] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 50.777942][ T5360] BTRFS info (device loop3): use lzo compression, level 0 [ 50.779786][ T5360] BTRFS info (device loop3): turning on flush-on-commit [ 50.781358][ T5360] BTRFS info (device loop3): enabling auto defrag [ 50.783551][ T5360] BTRFS info (device loop3): max_inline at 4096 [ 50.784830][ T5360] BTRFS info (device loop3): using free space tree [ 50.793163][ T5360] BTRFS info (device loop3): enabling ssd optimizations [ 50.810367][ T4332] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 51.217351][ T4547] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 51.371052][ T5384] loop3: detected capacity change from 0 to 32768 [ 51.433255][ T5390] loop4: detected capacity change from 0 to 40427 [ 51.434943][ T5396] loop3: detected capacity change from 0 to 512 [ 51.442965][ T5396] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 51.453775][ T5390] F2FS-fs (loop4): invalid crc value [ 51.462625][ T5396] EXT4-fs (loop3): 1 truncate cleaned up [ 51.464234][ T5396] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 51.481538][ T5390] F2FS-fs (loop4): Found nat_bits in checkpoint [ 51.510431][ T5406] netlink: 'syz.1.230': attribute type 3 has an invalid length. [ 51.530102][ T5390] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 51.583563][ T4342] syz-executor: attempt to access beyond end of device [ 51.583563][ T4342] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 51.970713][ T5410] loop1: detected capacity change from 0 to 32768 [ 51.980103][ T5410] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.231 (5410) [ 51.985391][ T5410] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 51.987816][ T5410] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 51.990190][ T5410] BTRFS info (device loop1): setting nodatasum [ 51.991762][ T5410] BTRFS info (device loop1): force zlib compression, level 3 [ 51.996344][ T5410] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 51.998419][ T5410] BTRFS info (device loop1): use lzo compression, level 0 [ 52.000144][ T5410] BTRFS info (device loop1): turning on flush-on-commit [ 52.001964][ T5410] BTRFS info (device loop1): enabling auto defrag [ 52.014593][ T5410] BTRFS info (device loop1): max_inline at 4096 [ 52.018212][ T5410] BTRFS info (device loop1): using free space tree [ 52.088484][ T4332] EXT4-fs (loop3): unmounting filesystem. [ 52.111874][ T5428] loop4: detected capacity change from 0 to 256 [ 52.119925][ T5433] loop3: detected capacity change from 0 to 256 [ 52.121781][ T5433] exfat: Deprecated parameter 'utf8' [ 52.122967][ T5428] exfat: Deprecated parameter 'utf8' [ 52.124225][ T5428] exfat: Deprecated parameter 'namecase' [ 52.128695][ T5428] exfat: Deprecated parameter 'namecase' [ 52.129098][ T5433] exfat: Deprecated parameter 'namecase' [ 52.131258][ T5433] exfat: Deprecated parameter 'namecase' [ 52.144513][ T5410] BTRFS info (device loop1): enabling ssd optimizations [ 52.146178][ T5428] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 52.148103][ T5433] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 52.228925][ T4331] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 53.026105][ T5450] loop2: detected capacity change from 0 to 512 [ 53.029424][ T5452] loop3: detected capacity change from 0 to 1024 [ 53.040356][ T5452] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 53.041362][ T5450] EXT4-fs (loop2): invalid journal inode [ 53.050480][ T5452] EXT4-fs (loop3): can't mount with commit=1, fs mounted w/o journal [ 53.051094][ T5450] EXT4-fs (loop2): can't get journal size [ 53.066989][ T5450] EXT4-fs (loop2): 1 truncate cleaned up [ 53.068652][ T5450] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 53.106122][ T4334] EXT4-fs (loop2): unmounting filesystem. [ 53.169207][ T5466] FAT-fs (loop4): "posix" option is obsolete, not supported now [ 53.192320][ T5467] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 53.206024][ T5467] EXT4-fs (loop3): 1 truncate cleaned up [ 53.207674][ T5467] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 54.543379][ T5477] rxe_eth0 speed is unknown, defaulting to 1000 [ 54.572670][ T5221] usb 1-1: device descriptor read/all, error -110 [ 54.575609][ T5479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.586613][ T5479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.625225][ T5485] ext4: Unknown parameter 'seclabel' [ 54.655603][ T4324] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 54.729520][ T5221] usb 1-1: reset high-speed USB device number 6 using dummy_hcd [ 54.753350][ T5490] EXT4-fs (loop2): invalid journal inode [ 54.754579][ T5490] EXT4-fs (loop2): can't get journal size [ 54.766682][ T5490] EXT4-fs (loop2): 1 truncate cleaned up [ 54.768007][ T5490] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 54.841916][ T5492] Cannot find add_set index 0 as target [ 55.073225][ T5492] EXT4-fs (loop4): 1 truncate cleaned up [ 55.074642][ T5492] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 55.094432][ T4334] EXT4-fs (loop2): unmounting filesystem. [ 55.097027][ T4332] EXT4-fs (loop3): unmounting filesystem. [ 55.152783][ T5221] usb 1-1: device descriptor read/64, error -32 [ 56.003333][ T4342] EXT4-fs (loop4): unmounting filesystem. [ 56.093407][ T5503] set_capacity_and_notify: 5 callbacks suppressed [ 56.093416][ T5503] loop3: detected capacity change from 0 to 64 [ 56.105509][ T5503] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 56.152154][ T5221] usb 1-1: reset high-speed USB device number 6 using dummy_hcd [ 56.182373][ T5221] usb 1-1: device descriptor read/8, error -32 [ 56.219996][ T5520] loop1: detected capacity change from 0 to 512 [ 56.239479][ T5520] EXT4-fs (loop1): invalid journal inode [ 56.240749][ T5520] EXT4-fs (loop1): can't get journal size [ 56.411122][ T5520] EXT4-fs (loop1): 1 truncate cleaned up [ 56.412939][ T5520] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 56.462234][ T4331] EXT4-fs (loop1): unmounting filesystem. [ 56.470423][ T5525] loop3: detected capacity change from 0 to 40427 [ 56.477940][ T5525] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 56.479474][ T5525] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 56.493925][ T5525] F2FS-fs (loop3): invalid crc value [ 56.495154][ T5525] F2FS-fs (loop3): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 56.861300][ T5221] usb 1-1: reset high-speed USB device number 6 using dummy_hcd [ 56.880857][ T5525] F2FS-fs (loop3): Found nat_bits in checkpoint [ 56.892433][ T5221] usb 1-1: device descriptor read/8, error -32 [ 56.896430][ T5525] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 56.897985][ T5525] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 56.913058][ T5533] loop2: detected capacity change from 0 to 256 [ 56.915188][ T5533] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 57.013934][ T4926] usb 1-1: USB disconnect, device number 6 [ 57.317817][ T5542] loop0: detected capacity change from 0 to 256 [ 57.336554][ T5542] exfat: Deprecated parameter 'namecase' [ 57.337865][ T5542] exfat: Deprecated parameter 'namecase' [ 57.357755][ T5542] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xef5d2b8f, utbl_chksum : 0xe619d30d) [ 57.419036][ T5544] loop1: detected capacity change from 0 to 64 [ 57.449328][ T5544] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 57.809607][ T5562] loop1: detected capacity change from 0 to 512 [ 57.822590][ T5562] EXT4-fs (loop1): invalid journal inode [ 57.823789][ T5562] EXT4-fs (loop1): can't get journal size [ 57.826120][ T5560] loop4: detected capacity change from 0 to 512 [ 57.831838][ T5562] EXT4-fs (loop1): 1 truncate cleaned up [ 57.834470][ T5562] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 57.837986][ T5560] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 57.855002][ T5560] EXT4-fs (loop4): 1 truncate cleaned up [ 57.856452][ T5560] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 57.947103][ T4331] EXT4-fs (loop1): unmounting filesystem. [ 57.989091][ T5570] loop1: detected capacity change from 0 to 64 [ 58.008510][ T5570] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 58.400153][ T5567] loop2: detected capacity change from 0 to 40427 [ 58.432672][ T5578] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 58.446100][ T5578] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 58.449333][ T5567] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 58.450751][ T5567] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 58.455637][ T5578] EXT4-fs error (device loop1): __ext4_iget:5135: inode #8: block 1803188595: comm syz.1.284: invalid block [ 58.458889][ T5567] F2FS-fs (loop2): invalid crc value [ 58.460036][ T5567] F2FS-fs (loop2): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 58.469465][ T5578] EXT4-fs (loop1): no journal found [ 58.470582][ T5578] EXT4-fs (loop1): can't get journal size [ 58.485791][ T5567] F2FS-fs (loop2): Found nat_bits in checkpoint [ 58.500336][ T5578] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 58.507650][ T5567] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 58.509138][ T5567] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 58.612345][ T4331] EXT4-fs (loop1): unmounting filesystem. [ 58.669996][ T5596] netlink: 'syz.2.289': attribute type 4 has an invalid length. [ 58.671553][ T5596] netlink: 17 bytes leftover after parsing attributes in process `syz.2.289'. [ 58.677515][ T5595] EXT4-fs (loop0): invalid journal inode [ 58.682244][ T5595] EXT4-fs (loop0): can't get journal size [ 58.693355][ T5595] EXT4-fs (loop0): 1 truncate cleaned up [ 58.698744][ T4342] EXT4-fs (loop4): unmounting filesystem. [ 58.719343][ T5603] exfat: Deprecated parameter 'utf8' [ 58.720567][ T5603] exfat: Deprecated parameter 'namecase' [ 58.721823][ T5603] exfat: Deprecated parameter 'namecase' [ 58.726169][ T5595] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 58.748548][ T5605] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 58.750109][ T5605] overlayfs: failed to set xattr on upper [ 58.751698][ T5605] overlayfs: ...falling back to index=off,metacopy=off. [ 58.759674][ T5605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.764477][ T5605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.781219][ T5603] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 58.801195][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 59.194748][ T5620] exfat: Deprecated parameter 'utf8' [ 59.195911][ T5620] exfat: Deprecated parameter 'namecase' [ 59.197288][ T5620] exfat: Deprecated parameter 'namecase' [ 59.201564][ T5620] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 59.232551][ T5614] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 59.314171][ T5614] ntfs3: loop1: ino=5, mi_enum_attr [ 59.321920][ T5614] ntfs3: loop1: ino=5, "/" mi_enum_attr [ 59.329415][ T5626] process 'syz.0.304' launched './file0' with NULL argv: empty string added [ 59.698139][ T5631] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 59.720944][ T5631] EXT4-fs (loop4): 1 truncate cleaned up [ 59.723063][ T5631] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 59.878182][ T4342] EXT4-fs (loop4): unmounting filesystem. [ 59.910938][ T5639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.924911][ T5639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.108162][ T5642] EXT2-fs (loop1): error: ext2_check_page: size of directory #2 is not a multiple of chunk size [ 60.111099][ T5642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.118348][ T5642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.129283][ T5642] EXT2-fs (loop1): error: ext2_check_page: size of directory #2 is not a multiple of chunk size [ 60.303608][ T5660] exfat: Deprecated parameter 'namecase' [ 60.305096][ T5660] exfat: Deprecated parameter 'namecase' [ 60.331816][ T5660] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xef5d2b8f, utbl_chksum : 0xe619d30d) [ 60.689998][ T5666] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 60.743797][ T5666] ntfs3: loop4: ino=5, mi_enum_attr [ 60.748985][ T5666] ntfs3: loop4: ino=5, "/" mi_enum_attr [ 60.780897][ T5670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.785889][ T5670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.820234][ T5672] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 60.836630][ T5672] EXT4-fs (loop4): 1 truncate cleaned up [ 60.839512][ T5672] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 60.875597][ T4342] EXT4-fs (loop4): unmounting filesystem. [ 61.418279][ T5658] set_capacity_and_notify: 10 callbacks suppressed [ 61.418289][ T5658] loop3: detected capacity change from 0 to 131072 [ 61.436967][ T5658] F2FS-fs (loop3): Test dummy encryption mode enabled [ 61.443989][ T5658] F2FS-fs (loop3): invalid crc value [ 61.459053][ T5658] F2FS-fs (loop3): Found nat_bits in checkpoint [ 61.477425][ T5658] F2FS-fs (loop3): access invalid blkaddr:0 [ 61.479522][ T5658] CPU: 0 PID: 5658 Comm: syz.3.313 Not tainted syzkaller #0 [ 61.481241][ T5658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 61.483734][ T5658] Call trace: [ 61.484514][ T5658] dump_backtrace+0x1c4/0x1f0 [ 61.485638][ T5658] show_stack+0x2c/0x3c [ 61.486657][ T5658] __dump_stack+0x30/0x40 [ 61.487732][ T5658] dump_stack_lvl+0xf4/0x15c [ 61.488876][ T5658] dump_stack+0x1c/0x5c [ 61.489913][ T5658] f2fs_is_valid_blkaddr+0x9c4/0xefc [ 61.491246][ T5658] sanity_check_extent_cache+0x14c/0x2d0 [ 61.492653][ T5658] f2fs_iget+0x2d60/0x47b0 [ 61.493768][ T5658] f2fs_fill_super+0x398c/0x57bc [ 61.495017][ T5658] mount_bdev+0x264/0x35c [ 61.496135][ T5658] f2fs_mount+0x44/0x58 [ 61.497192][ T5658] legacy_get_tree+0xd8/0x174 [ 61.498240][ T5658] vfs_get_tree+0x90/0x278 [ 61.499162][ T5658] do_new_mount+0x228/0x818 [ 61.500160][ T5658] path_mount+0x5ac/0xe6c [ 61.501128][ T5658] __arm64_sys_mount+0x4a0/0x5a0 [ 61.502238][ T5658] invoke_syscall+0x98/0x290 [ 61.503337][ T5658] el0_svc_common+0x13c/0x258 [ 61.504482][ T5658] do_el0_svc+0x5c/0x134 [ 61.505565][ T5658] el0_svc+0x58/0x12c [ 61.506519][ T5658] el0t_64_sync_handler+0x84/0xf0 [ 61.507747][ T5658] el0t_64_sync+0x18c/0x190 [ 61.511818][ T5658] F2FS-fs (loop3): sanity_check_extent_cache: inode (ino=3) extent info [0, 0, 4128768] is incorrect, run fsck to fix [ 61.536568][ T5658] F2FS-fs (loop3): Failed to read root inode [ 61.549711][ T5692] loop1: detected capacity change from 0 to 512 [ 61.610846][ T5695] loop1: detected capacity change from 0 to 256 [ 61.615668][ T5695] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 62.991278][ T5701] loop4: detected capacity change from 0 to 128 [ 63.039765][ T5701] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 63.131934][ T5707] ubi: mtd0 is already attached to ubi0 [ 63.141364][ T4342] EXT4-fs (loop4): unmounting filesystem. [ 63.221336][ T5709] loop2: detected capacity change from 0 to 4096 [ 63.228428][ T5709] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 63.236524][ T5709] ntfs3: loop2: ino=5, mi_enum_attr [ 63.240592][ T5709] ntfs3: loop2: ino=5, "/" mi_enum_attr [ 63.269683][ T5713] loop4: detected capacity change from 0 to 512 [ 63.277669][ T5713] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 63.311169][ T5713] EXT4-fs (loop4): 1 truncate cleaned up [ 63.312943][ T5713] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 63.331617][ T5720] loop1: detected capacity change from 0 to 512 [ 63.408684][ T5722] netlink: 60 bytes leftover after parsing attributes in process `syz.2.333'. [ 63.676731][ T4342] EXT4-fs (loop4): unmounting filesystem. [ 63.679357][ T5720] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e018, mo2=0002] [ 63.681247][ T5720] System zones: 0-2, 18-18, 34-34 [ 63.707886][ T5720] EXT4-fs (loop1): 1 orphan inode deleted [ 63.783248][ T5730] netlink: 12 bytes leftover after parsing attributes in process `syz.3.334'. [ 64.070744][ T1576] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 64.087282][ T1576] EXT4-fs error (device loop1): ext4_release_dquot:6884: comm kworker/u4:3: Failed to release dquot type 1 [ 64.131158][ T5735] loop0: detected capacity change from 0 to 128 [ 64.323268][ T5750] kernel profiling enabled (shift: 63) [ 64.324558][ T5750] profiling shift: 63 too large [ 64.376109][ T5754] ubi: mtd0 is already attached to ubi0 [ 64.379314][ T5742] loop0: detected capacity change from 0 to 40427 [ 64.517150][ T2068] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.519100][ T2068] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.175936][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 65.210822][ T5742] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 65.221116][ T5742] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 65.224221][ T5742] F2FS-fs (loop0): invalid crc value [ 65.225438][ T5742] F2FS-fs (loop0): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 65.228352][ T5759] FAULT_INJECTION: forcing a failure. [ 65.228352][ T5759] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 65.231232][ T5759] CPU: 0 PID: 5759 Comm: syz.3.349 Not tainted syzkaller #0 [ 65.232912][ T5759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 65.235276][ T5759] Call trace: [ 65.236072][ T5759] dump_backtrace+0x1c4/0x1f0 [ 65.237216][ T5759] show_stack+0x2c/0x3c [ 65.238234][ T5759] __dump_stack+0x30/0x40 [ 65.239298][ T5759] dump_stack_lvl+0xf4/0x15c [ 65.240426][ T5759] dump_stack+0x1c/0x5c [ 65.241435][ T5759] should_fail_ex+0x3cc/0x524 [ 65.242561][ T5759] should_fail+0x14/0x24 [ 65.243584][ T5759] should_fail_usercopy+0x20/0x30 [ 65.244793][ T5759] copy_from_bpfptr+0x84/0x1d8 [ 65.245909][ T5759] __sys_bpf+0x1f8/0x660 [ 65.246844][ T5759] __arm64_sys_bpf+0x80/0x98 [ 65.247947][ T5759] invoke_syscall+0x98/0x290 [ 65.249054][ T5759] el0_svc_common+0x13c/0x258 [ 65.250140][ T5759] do_el0_svc+0x5c/0x134 [ 65.251167][ T5759] el0_svc+0x58/0x12c [ 65.252137][ T5759] el0t_64_sync_handler+0x84/0xf0 [ 65.253357][ T5759] el0t_64_sync+0x18c/0x190 [ 65.257513][ T5759] loop3: detected capacity change from 0 to 128 [ 65.274625][ T5742] F2FS-fs (loop0): Found nat_bits in checkpoint [ 65.291067][ T5742] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 65.295500][ T5742] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 65.306816][ T5742] syz.0.343: attempt to access beyond end of device [ 65.306816][ T5742] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 65.710863][ T5757] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 65.714580][ T5757] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 65.723702][ T5757] overlayfs: missing 'lowerdir' [ 65.876754][ T5782] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.053422][ T5792] exfat: Deprecated parameter 'utf8' [ 66.055017][ T5792] exfat: Deprecated parameter 'namecase' [ 66.056320][ T5792] exfat: Deprecated parameter 'utf8' [ 66.057639][ T5792] exfat: Bad value for 'uid' [ 67.393733][ T4628] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 67.411974][ T5796] set_capacity_and_notify: 4 callbacks suppressed [ 67.411981][ T5796] loop2: detected capacity change from 0 to 16 [ 68.275147][ T5796] erofs: (device loop2): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 68.277413][ T5796] erofs: (device loop2): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 68.365106][ T5806] loop2: detected capacity change from 0 to 512 [ 68.410679][ T5811] ubi: mtd0 is already attached to ubi0 [ 68.423191][ T5806] EXT4-fs mount: 10 callbacks suppressed [ 68.423201][ T5806] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 68.481090][ T5819] loop3: detected capacity change from 0 to 512 [ 68.531013][ T5819] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 68.740349][ T5825] EXT4-fs warning (device loop2): ext4_empty_dir:3158: inode #12: comm syz.2.361: directory missing '..' [ 69.784583][ T5827] EXT4-fs warning (device loop3): ext4_empty_dir:3158: inode #12: comm syz.3.365: directory missing '..' [ 70.375752][ T114] cfg80211: failed to load regulatory.db [ 70.465224][ T4334] EXT4-fs (loop2): unmounting filesystem. [ 70.578248][ T5833] loop4: detected capacity change from 0 to 128 [ 70.603802][ T5833] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 70.761521][ T4342] EXT4-fs (loop4): unmounting filesystem. [ 70.777863][ T4332] EXT4-fs (loop3): unmounting filesystem. [ 70.890123][ T5843] cgroup: Invalid name [ 71.149919][ T5846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.369'. [ 72.074981][ T5855] loop0: detected capacity change from 0 to 512 [ 72.093872][ T5855] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 72.329480][ T5855] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.370: invalid indirect mapped block 32768 (level 2) [ 72.334860][ T5855] EXT4-fs (loop0): 1 orphan inode deleted [ 72.336049][ T5855] EXT4-fs (loop0): 1 truncate cleaned up [ 72.337516][ T5855] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 72.535671][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 72.568144][ T5871] loop0: detected capacity change from 0 to 512 [ 72.573110][ T5871] ext3: Unknown parameter '.' [ 72.829490][ T5879] loop0: detected capacity change from 0 to 256 [ 73.986071][ T5880] loop2: detected capacity change from 0 to 512 [ 73.989214][ T5880] FAT-fs (loop2): Unrecognized mount option "0x0000000000000007" or missing value [ 74.371696][ T5877] loop3: detected capacity change from 0 to 128 [ 74.388459][ T5877] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 74.537152][ T4332] EXT4-fs (loop3): unmounting filesystem. [ 74.566008][ T5886] ubi: mtd0 is already attached to ubi0 [ 74.939038][ T5890] loop1: detected capacity change from 0 to 256 [ 77.992216][ T5914] loop0: detected capacity change from 0 to 512 [ 78.010574][ T5918] loop1: detected capacity change from 0 to 1024 [ 78.028668][ T5914] EXT4-fs: Ignoring removed nomblk_io_submit option [ 78.029988][ T5914] EXT4-fs: Ignoring removed mblk_io_submit option [ 78.041516][ T5914] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 78.049264][ T5918] EXT4-fs (loop1): orphan cleanup on readonly fs [ 78.050519][ T5918] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #3: comm syz.1.391: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 78.386584][ T5918] EXT4-fs error (device loop1): ext4_quota_enable:7059: comm syz.1.391: Bad quota inode: 3, type: 0 [ 78.390990][ T5918] EXT4-fs warning (device loop1): ext4_enable_quotas:7100: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 78.404533][ T5918] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 78.412825][ T5914] EXT4-fs (loop0): 1 truncate cleaned up [ 79.027723][ T5914] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 79.037394][ T5918] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 79.225285][ T5933] ip_tables: iptables: counters copy to user failed while replacing table [ 79.386485][ T4331] EXT4-fs (loop1): unmounting filesystem. [ 79.822638][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 79.830289][ T5938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.834429][ T5938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.869666][ T5940] input: syz0 as /devices/virtual/input/input6 [ 79.876399][ T5944] ubi: mtd0 is already attached to ubi0 [ 79.907716][ T5951] loop2: detected capacity change from 0 to 256 [ 79.909300][ T5952] netlink: 36 bytes leftover after parsing attributes in process `syz.0.402'. [ 79.931845][ T5951] FAT-fs (loop2): Directory bread(block 64) failed [ 79.933433][ T5951] FAT-fs (loop2): Directory bread(block 65) failed [ 79.944343][ T5951] FAT-fs (loop2): Directory bread(block 66) failed [ 79.949594][ T5951] FAT-fs (loop2): Directory bread(block 67) failed [ 79.951102][ T5951] FAT-fs (loop2): Directory bread(block 68) failed [ 79.959513][ T5951] FAT-fs (loop2): Directory bread(block 69) failed [ 79.960783][ T5951] FAT-fs (loop2): Directory bread(block 70) failed [ 79.966350][ T5951] FAT-fs (loop2): Directory bread(block 71) failed [ 79.967563][ T5951] FAT-fs (loop2): Directory bread(block 72) failed [ 79.968836][ T5951] FAT-fs (loop2): Directory bread(block 73) failed [ 79.973318][ T5954] device syzkaller0 entered promiscuous mode [ 80.016135][ T5957] loop0: detected capacity change from 0 to 256 [ 80.036138][ T5957] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 80.083937][ T5959] loop0: detected capacity change from 0 to 1024 [ 80.090422][ T5959] EXT4-fs: Ignoring removed orlov option [ 80.106211][ T5959] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 80.158352][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 83.886534][ T5976] loop2: detected capacity change from 0 to 512 [ 83.920813][ T5976] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 83.952407][ T5976] EXT4-fs (loop2): 1 truncate cleaned up [ 83.953855][ T5976] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 84.342279][ T4334] EXT4-fs (loop2): unmounting filesystem. [ 84.461462][ T5995] loop3: detected capacity change from 0 to 512 [ 84.475252][ T5995] EXT4-fs error (device loop3): mb_free_blocks:1853: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 84.491782][ T5995] EXT4-fs error (device loop3): ext4_do_update_inode:5312: inode #11: comm syz.3.414: corrupted inode contents [ 84.502452][ T5995] EXT4-fs error (device loop3): ext4_dirty_inode:6199: inode #11: comm syz.3.414: mark_inode_dirty error [ 84.506086][ T5995] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.414: invalid indirect mapped block 1 (level 1) [ 84.509636][ T5995] EXT4-fs error (device loop3): ext4_do_update_inode:5312: inode #11: comm syz.3.414: corrupted inode contents [ 84.515908][ T5995] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 84.518424][ T5995] EXT4-fs error (device loop3): ext4_do_update_inode:5312: inode #11: comm syz.3.414: corrupted inode contents [ 84.521515][ T5995] EXT4-fs error (device loop3): ext4_truncate:4328: inode #11: comm syz.3.414: mark_inode_dirty error [ 84.524528][ T5995] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 84.526754][ T5995] EXT4-fs (loop3): 1 truncate cleaned up [ 84.528378][ T5995] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 84.820220][ T5998] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 84.824976][ T4332] EXT4-fs (loop3): unmounting filesystem. [ 84.850786][ T6002] loop0: detected capacity change from 0 to 512 [ 84.876340][ T6002] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 85.183269][ T6008] EXT4-fs warning (device loop0): ext4_empty_dir:3158: inode #12: comm syz.0.419: directory missing '..' [ 86.425916][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 95.038552][ T4341] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 95.041253][ T4341] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 95.046865][ T4341] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 95.048440][ T4341] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 95.050619][ T4341] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 95.054438][ T4341] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 96.141601][ T6030] input: syz0 as /devices/virtual/input/input7 [ 96.196212][ T6021] rxe_eth0 speed is unknown, defaulting to 1000 [ 96.225935][ T6040] loop0: detected capacity change from 0 to 256 [ 96.251920][ T6043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.263710][ T6043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.354366][ T6021] chnl_net:caif_netlink_parms(): no params data found [ 96.377396][ T6021] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.379183][ T6021] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.381249][ T6021] device bridge_slave_0 entered promiscuous mode [ 96.384520][ T6021] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.386268][ T6021] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.388695][ T6021] device bridge_slave_1 entered promiscuous mode [ 96.398658][ T6021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.402361][ T6021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.412719][ T6021] team0: Port device team_slave_0 added [ 96.415712][ T6021] team0: Port device team_slave_1 added [ 96.423112][ T6021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.424940][ T6021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.431538][ T6021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.435163][ T6021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.436862][ T6021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.442790][ T6021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.504118][ T6021] device hsr_slave_0 entered promiscuous mode [ 96.542394][ T6021] device hsr_slave_1 entered promiscuous mode [ 96.592093][ T6021] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.594407][ T6021] Cannot create hsr debugfs directory [ 96.712551][ T6021] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 96.753322][ T6021] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 97.078899][ T6057] loop2: detected capacity change from 0 to 256 [ 97.132679][ T4341] Bluetooth: hci5: command 0x0409 tx timeout [ 97.144741][ T6059] loop2: detected capacity change from 0 to 512 [ 97.149680][ T1612] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.157807][ T6021] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 97.179372][ T6059] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 97.290209][ T6021] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 97.511790][ T6068] EXT4-fs warning (device loop2): ext4_empty_dir:3158: inode #12: comm syz.2.433: directory missing '..' [ 97.772371][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 98.317607][ T1612] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.552182][ T6073] loop3: detected capacity change from 0 to 256 [ 98.555546][ T6073] exfat: Deprecated parameter 'utf8' [ 98.556685][ T6073] exfat: Deprecated parameter 'namecase' [ 98.557869][ T6073] exfat: Deprecated parameter 'utf8' [ 98.559089][ T6073] exfat: Bad value for 'uid' [ 99.045824][ T6072] rxe_eth0 speed is unknown, defaulting to 1000 [ 99.055408][ T6076] loop4: detected capacity change from 0 to 4096 [ 99.071338][ T6078] loop0: detected capacity change from 0 to 512 [ 99.073238][ T6078] EXT4-fs: Ignoring removed orlov option [ 99.074957][ T6078] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 99.326619][ T4338] Bluetooth: hci5: command 0x041b tx timeout [ 99.441261][ T4334] EXT4-fs (loop2): unmounting filesystem. [ 99.464124][ T1612] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.498021][ T6021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.504101][ T6078] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3877: comm syz.0.437: Allocating blocks 41-42 which overlap fs metadata [ 99.508286][ T6078] Quota error (device loop0): write_blk: dquota write failed [ 99.509743][ T6078] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 99.522851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 99.524601][ T6078] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3877: comm syz.0.437: Allocating blocks 41-42 which overlap fs metadata [ 99.535488][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.546495][ T6078] Quota error (device loop0): write_blk: dquota write failed [ 99.548140][ T6078] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 99.561732][ T6078] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.437: Failed to acquire dquot type 1 [ 99.571114][ T6078] EXT4-fs error (device loop0): mb_free_blocks:1853: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 99.584412][ T6076] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 99.586034][ T6078] EXT4-fs error (device loop0): ext4_do_update_inode:5312: inode #12: comm syz.0.437: corrupted inode contents [ 99.601004][ T6078] EXT4-fs error (device loop0): ext4_dirty_inode:6199: inode #12: comm syz.0.437: mark_inode_dirty error [ 99.610517][ T6078] EXT4-fs error (device loop0): ext4_do_update_inode:5312: inode #12: comm syz.0.437: corrupted inode contents [ 99.616819][ T6078] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #12: comm syz.0.437: mark_inode_dirty error [ 99.622423][ T6078] EXT4-fs error (device loop0): ext4_do_update_inode:5312: inode #12: comm syz.0.437: corrupted inode contents [ 99.629753][ T6078] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 99.631631][ T6078] EXT4-fs error (device loop0): ext4_do_update_inode:5312: inode #12: comm syz.0.437: corrupted inode contents [ 99.643131][ T1612] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.647799][ T6021] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.653137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.884183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.928845][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.930337][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.049052][ T6078] EXT4-fs error (device loop0): ext4_truncate:4328: inode #12: comm syz.0.437: mark_inode_dirty error [ 100.051514][ T6078] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 100.071333][ T6092] loop2: detected capacity change from 0 to 512 [ 100.072497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.073972][ T6092] FAT-fs (loop2): Unrecognized mount option "Aot" or missing value [ 100.074327][ T6078] EXT4-fs (loop0): 1 truncate cleaned up [ 100.077477][ T6078] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 100.124886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.126769][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.128457][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.142323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 100.144396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 100.146735][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 100.148766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.151199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.186674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.195958][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.198223][ T6078] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #13: comm syz.0.437: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 100.205690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.211845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.218232][ T6021] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.220576][ T6021] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 100.308639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 100.311168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.313582][ T6078] EXT4-fs error (device loop0): __ext4_remount:6657: comm syz.0.437: Abort forced by user [ 100.321055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.328761][ T6078] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 100.664167][ T6097] loop3: detected capacity change from 0 to 256 [ 101.057984][ T6090] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 101.144478][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 101.257602][ T6110] loop2: detected capacity change from 0 to 256 [ 101.330887][ T6110] FAT-fs (loop2): Directory bread(block 64) failed [ 101.337248][ T6110] FAT-fs (loop2): Directory bread(block 65) failed [ 101.338616][ T6110] FAT-fs (loop2): Directory bread(block 66) failed [ 101.339949][ T6110] FAT-fs (loop2): Directory bread(block 67) failed [ 101.368548][ T6110] FAT-fs (loop2): Directory bread(block 68) failed [ 101.369938][ T6110] FAT-fs (loop2): Directory bread(block 69) failed [ 101.371383][ T6110] FAT-fs (loop2): Directory bread(block 70) failed [ 101.379049][ T4341] Bluetooth: hci5: command 0x040f tx timeout [ 101.753043][ T6110] FAT-fs (loop2): Directory bread(block 71) failed [ 101.758061][ T6110] FAT-fs (loop2): Directory bread(block 72) failed [ 101.839041][ T6110] FAT-fs (loop2): Directory bread(block 73) failed [ 103.277878][ T6134] loop3: detected capacity change from 0 to 256 [ 103.279631][ T6134] exfat: Deprecated parameter 'utf8' [ 103.280873][ T6134] exfat: Deprecated parameter 'utf8' [ 103.281919][ T6134] exfat: Deprecated parameter 'utf8' [ 103.292657][ T6137] loop0: detected capacity change from 0 to 512 [ 103.305978][ T6144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.307926][ T6144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.333284][ T6098] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 103.335167][ T6098] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.348087][ T6134] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 103.362743][ T6021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.379329][ T6137] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 103.390172][ T6149] loop2: detected capacity change from 0 to 4096 [ 103.482110][ T4338] Bluetooth: hci5: command 0x0419 tx timeout [ 103.489866][ T6156] loop3: detected capacity change from 0 to 512 [ 103.491701][ T6156] EXT4-fs: Ignoring removed orlov option [ 103.514754][ T6090] I/O error, dev loop2, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 103.518910][ T6156] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 103.519149][ T6149] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 103.547650][ T6156] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3877: comm syz.3.453: Allocating blocks 41-42 which overlap fs metadata [ 104.821226][ T6155] EXT4-fs warning (device loop0): ext4_empty_dir:3158: inode #12: comm syz.0.450: directory missing '..' [ 105.046477][ T6156] Quota error (device loop3): write_blk: dquota write failed [ 105.048050][ T6156] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 105.050355][ T6156] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 105.052817][ T6156] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.453: Failed to acquire dquot type 1 [ 105.063335][ T6156] EXT4-fs error (device loop3): mb_free_blocks:1853: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 105.073021][ T6156] EXT4-fs error (device loop3): ext4_do_update_inode:5312: inode #12: comm syz.3.453: corrupted inode contents [ 105.076514][ T6156] EXT4-fs error (device loop3): ext4_dirty_inode:6199: inode #12: comm syz.3.453: mark_inode_dirty error [ 105.081780][ T6156] EXT4-fs error (device loop3): ext4_do_update_inode:5312: inode #12: comm syz.3.453: corrupted inode contents [ 105.421641][ T6156] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #12: comm syz.3.453: mark_inode_dirty error [ 105.428123][ T6156] EXT4-fs error (device loop3): ext4_do_update_inode:5312: inode #12: comm syz.3.453: corrupted inode contents [ 105.452940][ T6156] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 105.462850][ T6156] EXT4-fs error (device loop3): ext4_do_update_inode:5312: inode #12: comm syz.3.453: corrupted inode contents [ 105.480169][ T6156] EXT4-fs error (device loop3): ext4_truncate:4328: inode #12: comm syz.3.453: mark_inode_dirty error [ 105.488481][ T6156] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 105.503427][ T6156] EXT4-fs (loop3): 1 truncate cleaned up [ 105.504831][ T6156] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 105.521225][ T6156] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #13: comm syz.3.453: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 105.720240][ T5617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 105.723953][ T5617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 105.729406][ T6163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 105.731576][ T6163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 105.738394][ T6163] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 105.741500][ T6163] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 105.746446][ T6021] device veth0_vlan entered promiscuous mode [ 105.757022][ T6021] device veth1_vlan entered promiscuous mode [ 105.780742][ T6163] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 105.782796][ T6163] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 105.785052][ T6163] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 105.789066][ T6163] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 105.802491][ T6163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 105.806750][ T6163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 105.812478][ T6021] device veth0_macvtap entered promiscuous mode [ 105.815721][ T6021] device veth1_macvtap entered promiscuous mode [ 105.828277][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 105.832244][ T6156] EXT4-fs error (device loop3): __ext4_remount:6657: comm syz.3.453: Abort forced by user [ 105.838986][ T6156] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 105.890069][ T4332] EXT4-fs (loop3): unmounting filesystem. [ 105.906999][ T6021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.909078][ T6021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.911040][ T6021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.918998][ T6021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.921003][ T6021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.933057][ T6021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.935296][ T6021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.937810][ T6021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.939918][ T6021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.953327][ T6021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.957926][ T6021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.959717][ T5935] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 105.969700][ T5935] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 105.971611][ T5935] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 105.976878][ T5935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 105.985676][ T6021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.987955][ T6021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.990187][ T6021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.993236][ T6021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.995372][ T6021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.004326][ T6021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.006320][ T6021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.008353][ T6021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.010321][ T6021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.014398][ T6021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.017064][ T6021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.031085][ T6163] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 106.033761][ T6163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 106.035011][ T6198] loop3: detected capacity change from 0 to 256 [ 106.039346][ T6186] loop2: detected capacity change from 0 to 256 [ 106.927081][ T27] audit: type=1326 audit(106.910:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.4.455" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83f83c68 code=0x7fc00000 [ 106.936066][ T6186] FAT-fs (loop2): Directory bread(block 64) failed [ 106.937274][ T6186] FAT-fs (loop2): Directory bread(block 65) failed [ 106.938596][ T6186] FAT-fs (loop2): Directory bread(block 66) failed [ 106.939969][ T6186] FAT-fs (loop2): Directory bread(block 67) failed [ 106.941316][ T6186] FAT-fs (loop2): Directory bread(block 68) failed [ 107.006846][ T6186] FAT-fs (loop2): Directory bread(block 69) failed [ 107.008337][ T6186] FAT-fs (loop2): Directory bread(block 70) failed [ 107.009727][ T6186] FAT-fs (loop2): Directory bread(block 71) failed [ 107.011203][ T6186] FAT-fs (loop2): Directory bread(block 72) failed [ 107.015549][ T6021] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.017246][ T6021] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.019104][ T6021] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.021225][ T6021] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.051288][ T6205] loop4: detected capacity change from 0 to 512 [ 107.065386][ T6186] FAT-fs (loop2): Directory bread(block 73) failed [ 107.096963][ T6205] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 107.157875][ T5847] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.159480][ T5847] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.161615][ T5847] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 107.174868][ T5847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.176662][ T5847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.178911][ T5847] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 107.209741][ T4342] EXT4-fs (loop4): unmounting filesystem. [ 107.264513][ T6214] loop4: detected capacity change from 0 to 512 [ 107.271836][ T6214] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 107.278101][ T6218] loop0: detected capacity change from 0 to 512 [ 107.279474][ T6214] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 107.324451][ T6218] ext3: Unknown parameter '.' [ 107.504659][ T6227] loop0: detected capacity change from 0 to 256 [ 108.219167][ T6231] loop4: detected capacity change from 0 to 512 [ 108.239435][ T6231] EXT4-fs: Ignoring removed orlov option [ 108.272799][ T6231] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 108.349464][ T6236] loop5: detected capacity change from 0 to 4096 [ 108.354910][ T6231] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3877: comm syz.4.467: Allocating blocks 41-42 which overlap fs metadata [ 108.358182][ T6231] Quota error (device loop4): write_blk: dquota write failed [ 108.359782][ T6231] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 108.361817][ T6231] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3877: comm syz.4.467: Allocating blocks 41-42 which overlap fs metadata [ 108.395438][ T6231] Quota error (device loop4): write_blk: dquota write failed [ 108.397080][ T6231] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 108.441448][ T6231] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.467: Failed to acquire dquot type 1 [ 108.450349][ T6083] I/O error, dev loop5, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 108.472560][ T6231] EXT4-fs error (device loop4): mb_free_blocks:1853: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 108.480452][ T6231] EXT4-fs error (device loop4): ext4_do_update_inode:5312: inode #12: comm syz.4.467: corrupted inode contents [ 108.480589][ T6236] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 108.510240][ T6231] EXT4-fs error (device loop4): ext4_dirty_inode:6199: inode #12: comm syz.4.467: mark_inode_dirty error [ 108.518962][ T6231] EXT4-fs error (device loop4): ext4_do_update_inode:5312: inode #12: comm syz.4.467: corrupted inode contents [ 108.523070][ T6231] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #12: comm syz.4.467: mark_inode_dirty error [ 108.529301][ T6231] EXT4-fs error (device loop4): ext4_do_update_inode:5312: inode #12: comm syz.4.467: corrupted inode contents [ 108.535286][ T6231] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 108.549186][ T6231] EXT4-fs error (device loop4): ext4_do_update_inode:5312: inode #12: comm syz.4.467: corrupted inode contents [ 109.020221][ T6231] EXT4-fs error (device loop4): ext4_truncate:4328: inode #12: comm syz.4.467: mark_inode_dirty error [ 109.256279][ T6231] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 109.271735][ T6231] EXT4-fs (loop4): 1 truncate cleaned up [ 109.281894][ T6231] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 109.318824][ T6231] EXT4-fs error (device loop4): __ext4_remount:6657: comm syz.4.467: Abort forced by user [ 109.330446][ T6231] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 109.885802][ T4342] EXT4-fs (loop4): unmounting filesystem. [ 110.006396][ T6212] loop3: detected capacity change from 0 to 131072 [ 110.017814][ T6212] F2FS-fs (loop3): Invalid segment/section count (458783, 24 x 150994945) [ 110.020501][ T6212] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 110.028568][ T6212] F2FS-fs (loop3): invalid crc value [ 110.047158][ T6212] F2FS-fs (loop3): Found nat_bits in checkpoint [ 110.090883][ T6212] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 110.094759][ T6212] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 110.119746][ T5731] kworker/u4:16: attempt to access beyond end of device [ 110.119746][ T5731] loop2: rw=1, sector=1224, nr_sectors = 160 limit=256 [ 110.127149][ T5731] kworker/u4:16: attempt to access beyond end of device [ 110.127149][ T5731] loop2: rw=1, sector=1416, nr_sectors = 352 limit=256 [ 110.134677][ T5731] kworker/u4:16: attempt to access beyond end of device [ 110.134677][ T5731] loop2: rw=1, sector=1800, nr_sectors = 128 limit=256 [ 110.180765][ T5731] kworker/u4:16: attempt to access beyond end of device [ 110.180765][ T5731] loop2: rw=1, sector=1960, nr_sectors = 14440 limit=256 [ 110.197514][ T5731] kworker/u4:16: attempt to access beyond end of device [ 110.197514][ T5731] loop2: rw=1, sector=16400, nr_sectors = 6596 limit=256 [ 110.360371][ T6281] loop2: detected capacity change from 0 to 128 [ 110.436859][ T6266] loop5: detected capacity change from 0 to 40427 [ 110.443220][ T6266] F2FS-fs (loop5): build fault injection attr: rate: 174, type: 0x3ffff [ 110.556465][ T1612] device hsr_slave_0 left promiscuous mode [ 110.571171][ T6296] loop2: detected capacity change from 0 to 512 [ 110.643683][ T6041] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 110.926314][ T6296] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 110.943440][ T1612] device hsr_slave_1 left promiscuous mode [ 110.977773][ T6294] usb usb6: usbfs: process 6294 (syz.3.477) did not claim interface 0 before use [ 110.987076][ T6294] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 111.017951][ T6302] erofs: (device loop4): mounted with root inode @ nid 36. [ 111.051042][ T6302] erofs: (device loop4): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 111.055422][ T6302] syz.4.482: attempt to access beyond end of device [ 111.055422][ T6302] loop4: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 111.059951][ T1612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.062693][ T1612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.064750][ T1612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.066352][ T1612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.068275][ T1612] device bridge_slave_1 left promiscuous mode [ 111.070799][ T1612] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.287293][ T6306] EXT4-fs warning (device loop2): ext4_empty_dir:3158: inode #12: comm syz.2.481: directory missing '..' [ 111.335670][ T1612] device bridge_slave_0 left promiscuous mode [ 111.350879][ T1612] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.675260][ T6310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.677219][ T6310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.681716][ T6309] EXT4-fs: Ignoring removed orlov option [ 111.697841][ T6309] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 111.753885][ T6310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.765623][ T6309] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3877: comm syz.4.483: Allocating blocks 41-42 which overlap fs metadata [ 111.769025][ T6309] Quota error (device loop4): write_blk: dquota write failed [ 111.770476][ T6309] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 111.775661][ T6309] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3877: comm syz.4.483: Allocating blocks 41-42 which overlap fs metadata [ 111.779589][ T6310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.788772][ T6309] Quota error (device loop4): write_blk: dquota write failed [ 111.790284][ T6309] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 111.815478][ T6309] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.483: Failed to acquire dquot type 1 [ 111.837559][ T6309] EXT4-fs error (device loop4): mb_free_blocks:1853: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 111.856984][ T6309] EXT4-fs error (device loop4): ext4_do_update_inode:5312: inode #12: comm syz.4.483: corrupted inode contents [ 111.866519][ T6309] EXT4-fs error (device loop4): ext4_dirty_inode:6199: inode #12: comm syz.4.483: mark_inode_dirty error [ 111.880034][ T6309] EXT4-fs error (device loop4): ext4_do_update_inode:5312: inode #12: comm syz.4.483: corrupted inode contents [ 111.899739][ T6309] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #12: comm syz.4.483: mark_inode_dirty error [ 111.907535][ T6309] EXT4-fs error (device loop4): ext4_do_update_inode:5312: inode #12: comm syz.4.483: corrupted inode contents [ 111.919963][ T6309] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 111.927440][ T6309] EXT4-fs error (device loop4): ext4_do_update_inode:5312: inode #12: comm syz.4.483: corrupted inode contents [ 111.949762][ T6309] EXT4-fs error (device loop4): ext4_truncate:4328: inode #12: comm syz.4.483: mark_inode_dirty error [ 111.953449][ T1612] device veth1_macvtap left promiscuous mode [ 111.954933][ T1612] device veth0_macvtap left promiscuous mode [ 111.956117][ T1612] device veth1_vlan left promiscuous mode [ 111.957705][ T1612] device veth0_vlan left promiscuous mode [ 111.977861][ T6309] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 111.988146][ T6309] EXT4-fs (loop4): 1 truncate cleaned up [ 111.989747][ T6309] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 112.065521][ T6309] EXT4-fs error (device loop4): __ext4_remount:6657: comm syz.4.483: Abort forced by user [ 112.067779][ T6309] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 112.100108][ T4342] EXT4-fs (loop4): unmounting filesystem. [ 112.134275][ T4334] EXT4-fs (loop2): unmounting filesystem. [ 112.165570][ T6321] set_capacity_and_notify: 3 callbacks suppressed [ 112.165578][ T6321] loop0: detected capacity change from 0 to 256 [ 112.202573][ T6321] FAT-fs (loop0): Directory bread(block 64) failed [ 112.204033][ T6321] FAT-fs (loop0): Directory bread(block 65) failed [ 112.205415][ T6321] FAT-fs (loop0): Directory bread(block 66) failed [ 112.206946][ T6321] FAT-fs (loop0): Directory bread(block 67) failed [ 112.208504][ T6321] FAT-fs (loop0): Directory bread(block 68) failed [ 112.210041][ T6321] FAT-fs (loop0): Directory bread(block 69) failed [ 112.232282][ T6321] FAT-fs (loop0): Directory bread(block 70) failed [ 112.233700][ T6321] FAT-fs (loop0): Directory bread(block 71) failed [ 112.235194][ T6321] FAT-fs (loop0): Directory bread(block 72) failed [ 112.236455][ T6321] FAT-fs (loop0): Directory bread(block 73) failed [ 112.880647][ T6334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.883699][ T6334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.925271][ T6329] loop4: detected capacity change from 0 to 40427 [ 112.946796][ T6329] F2FS-fs (loop4): invalid crc value [ 112.961228][ T6329] F2FS-fs (loop4): Found nat_bits in checkpoint [ 113.011001][ T6329] F2FS-fs (loop4): Start checkpoint disabled! [ 113.057407][ T6329] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 113.097329][ T6339] syz.2.492 uses obsolete (PF_INET,SOCK_PACKET) [ 113.152583][ T6341] loop2: detected capacity change from 0 to 16 [ 113.156814][ T6341] erofs: Unknown parameter '' [ 113.532908][ T6163] kworker/u4:26: attempt to access beyond end of device [ 113.532908][ T6163] loop0: rw=1048577, sector=1224, nr_sectors = 160 limit=256 [ 113.537252][ T6163] kworker/u4:26: attempt to access beyond end of device [ 113.537252][ T6163] loop0: rw=1048577, sector=1416, nr_sectors = 352 limit=256 [ 113.551529][ T6163] kworker/u4:26: attempt to access beyond end of device [ 113.551529][ T6163] loop0: rw=1048577, sector=1800, nr_sectors = 128 limit=256 [ 113.558880][ T6163] kworker/u4:26: attempt to access beyond end of device [ 113.558880][ T6163] loop0: rw=1048577, sector=1960, nr_sectors = 4032 limit=256 [ 114.109835][ T6345] loop5: detected capacity change from 0 to 131072 [ 114.115209][ T6345] F2FS-fs (loop5): Invalid segment/section count (458783, 24 x 150994945) [ 114.117174][ T6345] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 114.119889][ T6345] F2FS-fs (loop5): invalid crc value [ 114.141783][ T6345] F2FS-fs (loop5): Found nat_bits in checkpoint [ 114.157505][ T6345] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 114.159059][ T6345] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 114.409278][ T6350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.411215][ T6350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.478620][ T6356] loop4: detected capacity change from 0 to 512 [ 114.516785][ T6356] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 115.109041][ T6362] loop5: detected capacity change from 0 to 512 [ 115.802065][ T6363] EXT4-fs warning (device loop4): ext4_empty_dir:3158: inode #12: comm syz.4.496: directory missing '..' [ 115.943234][ T6362] EXT4-fs (loop5): Test dummy encryption mode enabled [ 115.988778][ T6362] EXT4-fs error (device loop5): ext4_orphan_get:1409: inode #15: comm syz.5.495: inode has both inline data and extents flags [ 115.992068][ T6362] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.495: couldn't read orphan inode 15 (err -117) [ 115.995424][ T6362] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 116.143537][ T6021] EXT4-fs (loop5): unmounting filesystem. [ 116.205175][ T6369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.209418][ T6369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.356802][ T6381] loop5: detected capacity change from 0 to 128 [ 116.888457][ T4342] EXT4-fs (loop4): unmounting filesystem. [ 116.943912][ T1612] team0 (unregistering): Port device team_slave_1 removed [ 117.313056][ T6396] loop3: detected capacity change from 0 to 128 [ 118.605326][ T1612] team0 (unregistering): Port device team_slave_0 removed [ 118.704540][ T6400] loop4: detected capacity change from 0 to 256 [ 119.662519][ T1612] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.776415][ T6402] loop4: detected capacity change from 0 to 512 [ 119.778490][ T6402] EXT4-fs: inline encryption not supported [ 119.780179][ T6402] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 119.810245][ T6402] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 119.833070][ T6402] loop4: detected capacity change from 0 to 4096 [ 119.839510][ T6402] EXT4-fs (loop4): Test dummy encryption mode enabled [ 119.841574][ T6402] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c018, mo2=0003] [ 119.846928][ T6402] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 119.853087][ T6402] EXT4-fs: inline encryption not supported [ 119.854371][ T6402] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 119.856386][ T6402] EXT4-fs: Cannot change quota options when quota turned on [ 119.867876][ T4342] EXT4-fs (loop4): unmounting filesystem. [ 119.896515][ T1612] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.236595][ T6417] loop4: detected capacity change from 0 to 1024 [ 121.242545][ T6417] EXT4-fs: Ignoring removed nomblk_io_submit option [ 121.245996][ T6417] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 121.265758][ T6417] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 121.284745][ T4342] EXT4-fs (loop4): unmounting filesystem. [ 121.983430][ T1612] bond0 (unregistering): Released all slaves [ 122.160797][ T6425] loop4: detected capacity change from 0 to 512 [ 122.166627][ T6425] FAT-fs (loop4): Unrecognized mount option "ÿÿÿÿÿ18446744073709551615" or missing value [ 122.271738][ T5847] bio_check_eod: 2 callbacks suppressed [ 122.271747][ T5847] kworker/u4:18: attempt to access beyond end of device [ 122.271747][ T5847] loop0: rw=1, sector=18440, nr_sectors = 4556 limit=256 [ 122.364833][ T6428] loop5: detected capacity change from 0 to 4096 [ 122.377924][ T6428] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 122.747966][ T6438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.517'. [ 122.749943][ T6438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.810838][ T6445] loop4: detected capacity change from 0 to 256 [ 122.825481][ T6445] FAT-fs (loop4): "posix" option is obsolete, not supported now [ 122.853612][ T6438] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.974904][ T6441] netlink: 20 bytes leftover after parsing attributes in process `syz.2.522'. [ 123.838843][ T6464] loop3: detected capacity change from 0 to 512 [ 123.851252][ T6461] loop2: detected capacity change from 0 to 256 [ 123.880433][ T6464] EXT4-fs: Ignoring removed nomblk_io_submit option [ 123.881852][ T6464] EXT4-fs: Ignoring removed mblk_io_submit option [ 123.898686][ T6461] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 123.906781][ T6464] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 123.944922][ T6464] EXT4-fs (loop3): 1 truncate cleaned up [ 123.946651][ T6464] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 124.044011][ T6468] loop5: detected capacity change from 0 to 4096 [ 124.058240][ T6468] usb usb6: usbfs: process 6468 (syz.5.526) did not claim interface 0 before use [ 124.170676][ T6474] ip_tables: iptables: counters copy to user failed while replacing table [ 124.745435][ T6468] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 124.795199][ T6477] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779264) [ 124.796856][ T6477] FAT-fs (loop2): Filesystem has been set read-only [ 124.819991][ T6461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.821843][ T6461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.825184][ T6461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.826907][ T6461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.832656][ T6477] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 124.835160][ T6477] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 124.838863][ T6477] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 124.840812][ T6477] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 124.856523][ T6483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.861116][ T6483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.920055][ T6487] loop0: detected capacity change from 0 to 16 [ 124.922557][ T6487] erofs: (device loop0): mounted with root inode @ nid 36. [ 124.925832][ T6487] erofs: (device loop0): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 124.927512][ T6487] erofs: (device loop0): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 124.929242][ T6487] syz.0.532: attempt to access beyond end of device [ 124.929242][ T6487] loop0: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 124.932147][ T6487] syz.0.532: attempt to access beyond end of device [ 124.932147][ T6487] loop0: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 124.936042][ T6487] ================================================================== [ 124.937600][ T6487] BUG: KASAN: use-after-free in z_erofs_transform_plain+0x39c/0x494 [ 124.939149][ T6487] Read of size 4096 at addr ffff0000e379b000 by task syz.0.532/6487 [ 124.940879][ T6487] [ 124.941417][ T6487] CPU: 1 PID: 6487 Comm: syz.0.532 Not tainted syzkaller #0 [ 124.943100][ T6487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 124.945461][ T6487] Call trace: [ 124.946213][ T6487] dump_backtrace+0x1c4/0x1f0 [ 124.947373][ T6487] show_stack+0x2c/0x3c [ 124.948351][ T6487] __dump_stack+0x30/0x40 [ 124.949340][ T6487] dump_stack_lvl+0xf4/0x15c [ 124.950393][ T6487] print_address_description+0x88/0x218 [ 124.951644][ T6487] print_report+0x50/0x68 [ 124.952585][ T6487] kasan_report+0xa8/0xfc [ 124.953518][ T6487] kasan_check_range+0x258/0x290 [ 124.954579][ T6487] memcpy+0x48/0x90 [ 124.955385][ T6487] z_erofs_transform_plain+0x39c/0x494 [ 124.956612][ T6487] z_erofs_decompress+0x9c/0xd4 [ 124.957725][ T6487] z_erofs_decompress_queue+0x103c/0x1bf4 [ 124.958963][ T6487] z_erofs_runqueue+0x1508/0x16a8 [ 124.960064][ T6487] z_erofs_read_folio+0x2dc/0x5cc [ 124.961138][ T6487] filemap_read_folio+0x134/0x384 [ 124.962213][ T6487] filemap_read+0x1290/0x20dc [ 124.963225][ T6487] generic_file_read_iter+0xf8/0x5ac [ 124.964352][ T6487] vfs_read+0x3cc/0x7b8 [ 124.965229][ T6487] ksys_read+0x12c/0x228 [ 124.966039][ T6487] __arm64_sys_read+0x7c/0x90 [ 124.967042][ T6487] invoke_syscall+0x98/0x290 [ 124.967992][ T6487] el0_svc_common+0x13c/0x258 [ 124.968935][ T6487] do_el0_svc+0x5c/0x134 [ 124.969772][ T6487] el0_svc+0x58/0x12c [ 124.970627][ T6487] el0t_64_sync_handler+0x84/0xf0 [ 124.971775][ T6487] el0t_64_sync+0x18c/0x190 [ 124.972736][ T6487] [ 124.973226][ T6487] The buggy address belongs to the physical page: [ 124.974577][ T6487] page:00000000f2052233 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12379b [ 124.976884][ T6487] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 124.978420][ T6487] raw: 05ffc00000000000 fffffc00038de648 ffff00019e146190 0000000000000000 [ 124.980312][ T6487] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 124.982028][ T6487] page dumped because: kasan: bad access detected [ 124.983345][ T6487] [ 124.983784][ T6487] Memory state around the buggy address: [ 124.984906][ T6487] ffff0000e379af00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 124.986530][ T6487] ffff0000e379af80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 124.988140][ T6487] >ffff0000e379b000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 124.989751][ T6487] ^ [ 124.990636][ T6487] ffff0000e379b080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 124.992290][ T6487] ffff0000e379b100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 124.993986][ T6487] ================================================================== [ 124.995640][ T6487] Disabling lock debugging due to kernel taint [ 124.996990][ T6487] syz.0.532: attempt to access beyond end of device [ 124.996990][ T6487] loop0: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 125.367975][ T4332] EXT4-fs (loop3): unmounting filesystem. [ 125.833084][ T1612] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.922856][ T1612] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.932365][ T2068] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.933752][ T2068] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.003174][ T1612] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.082841][ T1612] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.320918][ T1612] device hsr_slave_0 left promiscuous mode [ 128.373419][ T1612] device hsr_slave_1 left promiscuous mode [ 128.453806][ T1612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.455399][ T1612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.457530][ T1612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.459077][ T1612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.460954][ T1612] device bridge_slave_1 left promiscuous mode [ 128.462994][ T1612] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.502483][ T1612] device bridge_slave_0 left promiscuous mode [ 128.503758][ T1612] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.622096][ T1612] device veth1_macvtap left promiscuous mode [ 128.628301][ T1612] device veth0_macvtap left promiscuous mode [ 128.629550][ T1612] device veth1_vlan left promiscuous mode [ 128.630797][ T1612] device veth0_vlan left promiscuous mode [ 129.344534][ T1612] bond1 (unregistering): Released all slaves [ 131.652786][ T1612] team0 (unregistering): Port device team_slave_1 removed [ 131.822587][ T1612] team0 (unregistering): Port device team_slave_0 removed [ 131.972844][ T1612] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.192427][ T1612] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.642796][ T1612] bond0 (unregistering): Released all slaves