last executing test programs: 1m38.095445196s ago: executing program 2 (id=16): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f00000005c0)=[{0x0}, {&(0x7f00000003c0)=""/138, 0x8a}], 0x2) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) 1m37.801003144s ago: executing program 2 (id=20): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\n\x00\x00\x00\t\x00\x00\x00B\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00 \x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r3}, 0x38) 1m36.562626085s ago: executing program 2 (id=21): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)=ANY=[], 0x28) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0xfd, 0x2a8, &(0x7f0000000240)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x810, &(0x7f00000008c0)=ANY=[@ANYBLOB="726f6469722c757466383d302c6e6f6e756d7461696c3d302c696f636861727365743d6d616363656e746575726f2c73686f72746e616d653d6c6f7765722c757466383d302c757466383d302c757466383d302c6769643d073b8e01cb3743a93be49eb7c6aec7f2508d8b8773af626bde0491c81876d257307a4041d7606d2f0c6f0d5768d4bb5a2cb71c81a1c630ce4b", @ANYRESHEX=0xee00, @ANYBLOB=',shortname=mixed,check=relaxed,shortname=winnt,utf8=1,utf8=1,utf8=0,shortname=mixed,nonumtail=0,check=strict,uni_xlate=0,\x00'], 0x1, 0x27b, &(0x7f0000000640)="$eJzs3cFqK1UYAOB/mqRJdJEsXInQAV24Kq1P0CIVxIKgZKEutNgUpAmFFgJVMXblE/gEPo8b8QV8AC93d7u43LmkM0nTyyQlvWlT7v2+TQ//+f85/5kZ2tWc/vBB//jw5Ozo4tf/otFIYm0nduIyiXasxdjvUerfJ+VxAOCRu8yyeJrl6nno/GZGbUZlde3emwMA7sX03/9V9wIAPIyvv/n2i939/b2v0rQR0f9j0Eki/5nP7x7FT9GLbmxFK55HZBP5+LPP9/eimo6046P+cNAZVfa//7u4/u7/EVf129GKdnn9dpqbqh8OOrV4p1h/pxfdL/+KVrxXXv9JSX101uPjD6f634xW/PNjnEQvDovexvW/bafpp9mfz375bhQd1SfDQac+ySuyKw/6YAAAAAAAAAAAAAAAAAAAAAAAeKNtphPtm+fvjA/+nzM/53yg4dT5PFtpmmZJnn9dX433q1Fd5d4BAAAAAAAAAAAAAAAAAADgsTg7//n4oNfrni51MP6sv2QqXtyM1CPi7mttLFoVlaK1XhKx2Fq1qF9V3p5cWXAXzVE/3dOkGst7BMkk0pye2oh8rVGkmQ+mIq+9eiOuBuO36/ggue3hNspekiUMspLXrzKzav3VSLPYQUlyc87q6+/eqeesNWMqiYja5GbOv05tuffw4X4HAQAAAAAAAAAAAAAAAAAAueuPfksmL1bQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACswPX//19gMCyKZ+VkldGgGkVkxVsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgLfAyAAD//0MUZ+o=") openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x89b1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) 1m34.687531832s ago: executing program 2 (id=23): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0), 0x1, 0x4ba, &(0x7f0000000100)="$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") socket$inet(0x2, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x111800, 0x14, 0x2}, 0x18) userfaultfd(0x80001) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x1, 0x0) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000180)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9ffff28bbe044ff092403f3", @ANYRES8=r0, @ANYRES64=r1], 0x0) setxattr$incfs_metadata(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, 0x0, 0x2) 1m32.837397718s ago: executing program 2 (id=29): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@ifindex, 0xffffffffffffffff, 0x26}, 0x20) io_setup(0x4, &(0x7f0000000080)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000003c0)={'bridge_slave_1\x00', &(0x7f00000001c0)=@ethtool_sset_info={0x4b, 0x21, 0xfffffffffffffffe}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb010018000000000000006c0000006c000000060000000d00000007000004010000000a00000002000000f9d54b448a01d1f068894c00000003000000fffbffff0b00000003000000010001000d00000004000000070000001000000003000000e30a000008000000010000000b0900000400000004000000060000000400000000000000000000006dfd9866b1033cf301efe6a90461b03acdb89351ac6149596796156f8d3c3a82053203bb997877c7dbcbe6d3fe4a4656791858768f6d841b649d9ddb31d4870f2387f6da042a74bb4315688ee131c4ff8feda09e6fe2d39ee20211c1a3a45c4cbe1a00676737925e49c22938d5e6d0998dc4c4ebe93993145de11214"], &(0x7f0000000540)=""/246, 0x8a, 0xf6, 0x1}, 0x28) unshare(0x62040200) 1m31.697132086s ago: executing program 2 (id=37): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = gettid() r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000000000)) wait4(r2, 0x0, 0x2, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r2, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x1, 0x400, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xffffffff}, 0x0) 1m31.696913076s ago: executing program 32 (id=37): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = gettid() r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000000000)) wait4(r2, 0x0, 0x2, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r2, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x1, 0x400, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xffffffff}, 0x0) 3.948534312s ago: executing program 0 (id=566): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 2.858219919s ago: executing program 0 (id=578): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)=ANY=[], 0x28) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0xfd, 0x2a8, &(0x7f0000000240)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) 2.43263505s ago: executing program 4 (id=581): r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x81, 0x141200) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x582, &(0x7f0000005a80)="$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") capset(0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000180)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80000003, 0xf, 0x0, 0x1, 0x18, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000350bc8b100", "c7db08b3551265406c7f306003d80700", [0x800000000000009, 0x3]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c03, r1) 2.344468872s ago: executing program 4 (id=583): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x458, 0xb, 0x0, 0xfeffffff, 0xf0, 0x218, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) 1.677857669s ago: executing program 4 (id=584): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f0000000080), 0x1, 0x797, &(0x7f0000000800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101142, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) read$FUSE(r0, &(0x7f00000040c0)={0x2020}, 0x2020) 1.676745749s ago: executing program 0 (id=585): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x2) recvmsg$unix(r1, 0x0, 0x0) 1.573155461s ago: executing program 0 (id=586): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000040)=@id, 0x10) shutdown(r4, 0x2) recvmmsg(r4, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f00000007c0)=""/180, 0xb4}], 0x1}}], 0x1, 0x40002100, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x408c0}, 0x4040805) r5 = socket$inet6(0xa, 0x3, 0x87) r6 = syz_pidfd_open(0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x28384bb, &(0x7f00000001c0)=ANY=[@ANYRES8=0x0, @ANYRESHEX=r6, @ANYRES8=r5, @ANYRESHEX=0x0, @ANYRESHEX=r5, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES8, @ANYRESHEX=r5, @ANYRES8=0x0], 0x5, 0x0, &(0x7f0000000000)) 1.522808052s ago: executing program 3 (id=587): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x2b5, &(0x7f0000000380)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r0, 0x4a8e) 1.517714652s ago: executing program 1 (id=588): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x100004, 0x0, &(0x7f0000000080)={0x2, 0x18, 0x0, 0x44}, 0x8, 0x4, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 1.353133377s ago: executing program 1 (id=589): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1e0001c, &(0x7f0000000480)={[{@rodir}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@numtail}]}, 0x3, 0x27b, &(0x7f00000008c0)="$eJzs3cFqK1UYAOB/mqRJdJEsXInQAV24Kq1P0CIVxIKgZKEutNgUpAmFFgJVMXblE/gEPo8b8QV8AC93d7u43LmkM0nTyyQlvWlT7v2+TQ//+f85/5kZ2tWc/vBB//jw5Ozo4tf/otFIYm0nduIyiXasxdjvUerfJ+VxAOCRu8yyeJrl6nno/GZGbUZlde3emwMA7sX03/9V9wIAPIyvv/n2i939/b2v0rQR0f9j0Eki/5nP7x7FT9GLbmxFK55HZBP5+LPP9/eimo6046P+cNAZVfa//7u4/u7/EVf129GKdnn9dpqbqh8OOrV4p1h/pxfdL/+KVrxXXv9JSX101uPjD6f634xW/PNjnEQvDovexvW/bafpp9mfz375bhQd1SfDQac+ySuyKw/6YAAAAAAAAAAAAAAAAAAAAAAAeKNtphPtm+fvjA/+nzM/53yg4dT5PFtpmmZJnn9dX433q1Fd5d4BAAAAAAAAAAAAAAAAAADgsTg7//n4oNfrni51MP6sv2QqXtyM1CPi7mttLFoVlaK1XhKx2Fq1qF9V3p5cWXAXzVE/3dOkGst7BMkk0pye2oh8rVGkmQ+mIq+9eiOuBuO36/ggue3hNspekiUMspLXrzKzav3VSLPYQUlyc87q6+/eqeesNWMqiYja5GbOv05tuffw4X4HAQAAAAAAAAAAAAAAAAAAueuPfksmL1bQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACswPX//19gMCyKZ+VkldGgGkVkxVsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgLfAyAAD//0MUZ+o=") openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) 1.353031867s ago: executing program 3 (id=590): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0xc0104d08, 0x0) 1.287285828s ago: executing program 3 (id=592): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="01000000070000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000000), &(0x7f0000000280)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f00000005c0), 0x0}, 0x20) 1.234894599s ago: executing program 1 (id=593): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 1.21958211s ago: executing program 3 (id=594): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x458, 0xb, 0x0, 0xfeffffff, 0xf0, 0x218, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) 1.204446591s ago: executing program 5 (id=595): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="12000000810000000800000002"], 0x14) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f00000001c0), 0x0}, 0x20) 1.137133602s ago: executing program 1 (id=596): r0 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x4c}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000340)=0x6, 0x4) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.136876632s ago: executing program 5 (id=597): r0 = socket$inet(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x6}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6(0xa, 0x1, 0x6) sendmmsg$sock(r4, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r5, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) 1.136656612s ago: executing program 3 (id=598): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000300)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[@ANYBLOB='1'], 0x31) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x4e23, 0x9, @empty, 0xa}}, 0x0, 0x0, 0x49, 0x0, "c00866fdc25aca6c451dbae34eeb6cc3904fddf83259e584824efe263c8eef3e3a2f4a231e46f2e5d0c491fd99bb68ec8293d502fcfeafa0dec2fac1fd9b716c8a628631f326f2d8d5f495dec117c4d8"}, 0xd8) unshare(0x42000000) readahead(0xffffffffffffffff, 0xe, 0x8000000000000000) 410.9503ms ago: executing program 4 (id=599): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="020d00001000000000000000000000000800120002000a0000000000000000001000320003000000000000000000000010003300000000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) 285.777903ms ago: executing program 5 (id=600): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf479}, 0x94) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="030000000400000004000000ff"], 0x48) 221.136935ms ago: executing program 5 (id=601): syz_mount_image$ext4(&(0x7f00000011c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000540)={[{@journal_dev={'journal_dev', 0x3d, 0xe}}]}, 0x1, 0x5bc, &(0x7f0000001440)="$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") chdir(&(0x7f0000000d80)='./file0\x00') quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') 220.919945ms ago: executing program 3 (id=602): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) tgkill(0x0, 0x0, 0x12) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) socket$inet(0x2, 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000080000000000000009000000731110000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x3, 0x0, @loopback}}}, 0x108) close_range(r2, 0xffffffffffffffff, 0x0) 173.010756ms ago: executing program 0 (id=603): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4bfb, &(0x7f0000000600)=""/171) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000180)="2000000012005f0214", 0x9) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x40, 0x4, 0x40, 0x1}}) timer_settime(0x0, 0x0, 0x0, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) timer_create(0x7, 0x0, &(0x7f0000000240)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) 172.856816ms ago: executing program 4 (id=604): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x10, &(0x7f0000000080), 0x1, 0x4e8, &(0x7f00000005c0)="$eJzs3U9oVNsZAPDvTv5YY2LSUrHVFgItVrGdmESjQilmVRAtbS100T8Sk5iISSaYCagUahCLFCpddGFx1Y1ddBO6K9IiFB681Vu4eG8hCm/1njyfPHkuXOVxJ3d0jGPyYmLuY/z94DL3nEnmfHc+7p1zhnPPBPDW6o6IIxHRFBHFiOjM6gvZFpcWt/TvTvXPj6dbEgsLJx4lkUTE0f758eprJdnjluwFvpU+XInY2/xyuzMXLp4dmpgYPZeVe8qT0z0zFy7+6Mzk0Njo2OjUwMGDhw8dGDhweP2OdfP26ze//fdjd669M/fdbVuGJ9N427Pnao9jvXRHd/aetERH7RNJxKn1bixnX8s7AFbtk8LOW3nHAABsvELW92+u9P87oykWO+v37/72cWf8sS3v+AAAAIC1W1hoyh4BAACAxpUY+wMAAECDq84DONo/P17dNmruwYOfblRLvMrDwYjoWsx/9f7uxWean93T2/KG7u/9w9OI7uh48tFPvvH/dIs3dB82X03zH+YdAXlq3Z93BORpxy/yjoA8vXc17wi4NBcRt4/U6f8na+7ztS8pJ0vKxwfT/t9fZmrr9P/eHr88kXcE5OlnA3lHQJ5uPMo7Am4PRsS+et//FSrr91Vtjoi26tp+6+RQe/r5/+/7tXUvf/4XHqxjkyzxcDDixzVrO56qyX+mqykrdVS+KmxJTp+ZGN0XEVsjYne0bErLvcu00Ttw46/16r/zJM3/P5Pq93/plrZf/S4wi+NB86YX/29kqDy01uNm0cO5iB3N9fL/vP+fZLl+Xf8tXftzvfqBPZV1RXctn3/epIV/ROyqe/4/H60ly67P2lO5HPRULwp1/OuDz67Uq//+79P8n90j//lJz/+25fNfuf4/W693ZvVtXP7fzSf16p/eSvP/t0uvc/1vTX5VCbA1qzs/VC6f641oTY69XN+3+pgbVfX9qL5faf53f6/+53+1/5dk60J3RcTXX6PNuXvTd+rVXy+k+b/xO+d/ftL8j6xw/icvnP+r35l//4c/qNf2zqtp/rt+vfL5v78SzO6sRv9vZV82QXnHCQAAAAAAAMD6KFTu00kKxWf7hUKxuDjP95vRVpgozZT3ni7NTo0s3s/TFS2F6lSvzpr5oL3Z/JBquW9JuT+bO3K1c3OlXBwuTYzkffAAAADQ4Noj7v3m8n+2b3nF+D91tzPvKAEAAIC1SMf/HffaKst5fW6cDwAAAA0pHf8//tOn74bxPwAAADSs2vE/AAAA0Nh+fvx4ui1Uf/dvqjR25uz49OG+fcXJ2eHicOncdHGsVBqrrNg3ufLrTZRK0719MXu+pzw6U+6ZuXDx5GRpdqp8svK7sSdHWzbgmICVFbd+vC3vGAAAgI2zlt/1t2PHTqPu5H1lAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgLb4IAAD//wws/WY=") socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x2}) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') 135.206377ms ago: executing program 0 (id=605): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') exit(0x2616) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6e66732c646f733178666c6f7070792c7379735f696d6d757461626c652c756e695f786c6174653d302c757466383d312c6e6f6e756d7e61696c3d302c756e695f786c6174653d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c696f63686172736f72746e616d653d6d697865642c636f6465706167653d3836352c696f636861727365743d63703835302c696f636861727365743d69736f383835392d362c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c0000000000000000000000002e60959cebeab90654bdbbc3662035b930078e4dd05a177e4268233c1236"], 0x1, 0x38c, &(0x7f0000000380)="$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") 77.098519ms ago: executing program 5 (id=606): syz_emit_ethernet(0x6c, &(0x7f0000000400)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x5, 0x8, 0x2]}, {}, {0x8, 0x88be, 0x81000004}}}}}}, 0x0) 46.719069ms ago: executing program 1 (id=607): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40000) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x1, 0x1}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 43.710049ms ago: executing program 5 (id=608): socket$netlink(0x10, 0x3, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x0) write$binfmt_misc(r0, &(0x7f0000000340)="55f7ee03ccaa274c40812dbb2c45", 0xfffffdd4) ioctl$NILFS_IOCTL_SYNC(r0, 0x80086e8a, &(0x7f0000000040)) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000c00)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000d240902010000"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) getpgid(r1) 14.44264ms ago: executing program 4 (id=609): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000006480)={0x0, 0x0, &(0x7f0000006440)={&(0x7f0000001640)={0x40, 0xd, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_USERDATA={0x14, 0x6, 0x1, 0x0, "acfbef210b567f5bd9f5830a4afc89b2"}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0xc000) recvmmsg(r0, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@xdp, 0x80, &(0x7f00000011c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/236, 0xec}], 0x2, &(0x7f0000001200)=""/97, 0x61}}, {{&(0x7f00000015c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001300)=""/68, 0x44}, {&(0x7f0000001380)=""/197, 0xc5}], 0x2e3, &(0x7f00000014c0)=""/45, 0x38}}], 0x3, 0x0, 0x0) 0s ago: executing program 1 (id=610): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f0000000b00)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c757466383d312c696f636861727365743d61736369692c73686f72746e616d653d77696e39352c73686f77657865632c6e66732c636865636b3d7374726963742c756e695f786c6174653d302c757466383d312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c726f6469722c726f6469722c64656275672c757466383d302c726f6469722c71756965742c6572726f72733d72656d6f756e742d726f2c009c8a8fc4f74784ad79ec08fb556262ebc972ef94821f3565ef5f75f11e30ef1f72a065c510b17cae356940538b7b2c5d72f4627c25306b2479725add28f511a68f5f6f47f9facdd0cc574286d00ab52d6b9374b6a58eac694336ebe971f41860d01084c1a0fa6b51d80fa9f9d2c1a2e7a5284f93296217ef8f28e0a36e573296a0bfb38b94191f4b82873563f3759b5e193ecfab6ed7892542364757e47d656ad6a0fbb6e8bf138bddae620a3602991821d4844f628e6bdd8b62cca73744332f0185a54b52a0352a82c794995bbb97c82fcde79d14fb20e5127150de", @ANYRESDEC], 0x4a, 0x2df, &(0x7f0000000f80)="$eJzs3b+LHFUcAPDv7O3NTrTYLaxEyIAprIKXTmz2kATEqwxbRAs9TAJyuwg5OIiKaypbGwsL/wJBsPG/SON/INgKdkYIjMzszO3s3uZ+RPckd59Pc9977/ud997sY2+3mHcfvzbZu5vH/Udf/hZZlkRnGMN4ksQgOtH4OhYMvw0A4EX2pCjiz2KmakhOV1emZeudGgCwJkf+/q/UnYc/n8u0AIA1un3ng/e2d3Zuvp9FFrcm3xyMym/25c9Z//b9+DTGcS/ejH48jag+J9Rf/Mv4VlEU025eGsS1yfRgVFZOPnpcX3/7j4iqfiv6MTgsqz5tVPXv7tzcqsrzXqt+Ws7jpXr8YVl/I/rxymHxQv2NWX3ero9RGm+83pr/9ejHr5/EZzGOu9Uk5vVfbeX5O8V3f33xYTm9sj6ZHox6Vd5csXGerwsAAAAAAAAAAAAAAAAAAAAAABfb9bw5fCe/GtcmZVN9/s7G07TOqVMG86qyfxYdHhfcOh+oNC3ih9mRgpsL483P9+nGq932wYIAAAAAAAAAAAAAAAAAAABwee0//Hxvdzy+9+A/CZKIK82V/74d8bzXGbZarsbxyb16vN3xuFOHCzmP03ZLbDQ5ScSx04huxELL8y/npOBKtjTnJvjxp3KBZ7lg1mp5a/UCN5fWdSS40/u3e6PZA3u7yeqxetG0ZPVd/T6NmOekccqx0md1FdF+vU5acrqyq3/mtacvV8H0mTlFsmKLtoK3f5/11y1JLO26tLqrK0ffrINW+dLeOOEm1OXZrPzoe0VSndbRW8O7EAAAAAAAAAAAAAAAAAAAENXTvM3Tv+Vvvyx2Pjq2tFN4FBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAC2L/YfP//88QTOviUySn8WD/f14iAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAl8A/AQAA//+0t0sX") fdatasync(r0) kernel console output (not intermixed with test programs): DEV_CHANGE): veth0_vlan: link becomes ready [ 32.008483][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.010025][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.014980][ T4330] device veth0_vlan entered promiscuous mode [ 32.025145][ T4330] device veth1_vlan entered promiscuous mode [ 32.039424][ T4330] device veth0_macvtap entered promiscuous mode [ 32.041743][ T4330] device veth1_macvtap entered promiscuous mode [ 32.049349][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.051022][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.052629][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.055384][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.057217][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.062614][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.068157][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.069827][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.074564][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.078112][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.080076][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.085788][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.089148][ T4330] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.090671][ T4330] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.092158][ T4330] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.093638][ T4330] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.124234][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.125682][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.138749][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.140164][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.141537][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.142923][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.150737][ T4335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.158133][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.162641][ T4334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.173398][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.175859][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.177536][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.179223][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.186169][ T4407] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.187686][ T4407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.193074][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.194802][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.196531][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.198204][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.199733][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.202473][ T4344] device veth0_vlan entered promiscuous mode [ 32.213283][ T4334] device veth0_vlan entered promiscuous mode [ 32.218560][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.220281][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.221904][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.223468][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.232191][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.233734][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.236000][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.237708][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.243651][ T4344] device veth1_vlan entered promiscuous mode [ 32.249518][ T4334] device veth1_vlan entered promiscuous mode [ 32.250919][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.252539][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.254680][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.256205][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.257800][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.259256][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.262696][ T4335] device veth0_vlan entered promiscuous mode [ 32.265690][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.266124][ T4407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.267427][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.268240][ T4407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.270012][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.273653][ T4329] device veth0_vlan entered promiscuous mode [ 32.278676][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.280273][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.281897][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.283506][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.290757][ T4335] device veth1_vlan entered promiscuous mode [ 32.293656][ T4329] device veth1_vlan entered promiscuous mode [ 32.300825][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.302509][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.304093][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.306609][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.308253][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.312487][ T4344] device veth0_macvtap entered promiscuous mode [ 32.319570][ T4344] device veth1_macvtap entered promiscuous mode [ 32.326589][ T4329] device veth0_macvtap entered promiscuous mode [ 32.329388][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.330907][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.332526][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.336599][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.343014][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.345264][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.349801][ T4335] device veth0_macvtap entered promiscuous mode [ 32.352086][ T4335] device veth1_macvtap entered promiscuous mode [ 32.355647][ T4334] device veth0_macvtap entered promiscuous mode [ 32.357880][ T4334] device veth1_macvtap entered promiscuous mode [ 32.362353][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.364167][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.369964][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.375054][ T4329] device veth1_macvtap entered promiscuous mode [ 32.378997][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.380684][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.382448][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.386747][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.389123][ T4411] loop3: detected capacity change from 0 to 512 [ 32.392226][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.395704][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.402328][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.407405][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.409165][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.411572][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.413375][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.416676][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.419815][ T4344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.421717][ T4344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.423499][ T4344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.431881][ T4411] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 32.436315][ T4344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.438706][ T4344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.442967][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.446232][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.451158][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.453070][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.456050][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.458279][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.471228][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.472814][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.475020][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.476737][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.478222][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.479983][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.481479][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.483136][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.488927][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.494331][ T4334] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.495988][ T4334] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.497542][ T4334] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.499325][ T4334] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.511099][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.512950][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.517695][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.519552][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.520363][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.523383][ T4344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.526719][ T4344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.528163][ T4344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.529925][ T4344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.529939][ T4344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.529947][ T4344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.535862][ T4344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.537372][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.537601][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.537795][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.537995][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.538775][ T4335] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.538808][ T4335] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.538827][ T4335] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.538845][ T4335] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.547773][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.562546][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.571124][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.573030][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.577733][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.579186][ T4415] loop3: detected capacity change from 0 to 512 [ 32.579505][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.586323][ T4415] EXT4-fs: Ignoring removed bh option [ 32.588114][ T4415] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 32.589701][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.596000][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.598483][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.602112][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.603860][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.609253][ T4344] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.610788][ T4344] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.612245][ T4344] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.613742][ T4344] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.618194][ T4415] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 32.639170][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.640991][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.642642][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.648488][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.650251][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.652073][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.653786][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.656071][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.658882][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.660034][ T4330] EXT4-fs (loop3): unmounting filesystem. [ 32.663404][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.666618][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.718744][ T4329] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.720394][ T4329] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.722086][ T4329] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.723647][ T4329] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.726214][ T4421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.727987][ T4421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.750366][ T4407] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.751780][ T4407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.755011][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.767233][ T1654] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.768897][ T1654] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.770192][ T1577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.771545][ T1577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.778467][ T1654] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.780078][ T1654] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.781575][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.783247][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.787744][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.821145][ T1577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.822499][ T1577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.823881][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.826955][ T4407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.828291][ T1577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.829670][ T1577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.830410][ T4407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.831467][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.834259][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.848000][ T1577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.849383][ T1577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.850728][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.911472][ T4427] loop4: detected capacity change from 0 to 256 [ 32.913263][ T4427] ======================================================= [ 32.913263][ T4427] WARNING: The mand mount option has been deprecated and [ 32.913263][ T4427] and is ignored by this kernel. Remove the mand [ 32.913263][ T4427] option from the mount to silence this warning. [ 32.913263][ T4427] ======================================================= [ 32.915796][ T4426] loop1: detected capacity change from 0 to 128 [ 32.929721][ T4429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 32.935331][ T4426] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 32.944467][ T4426] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 33.467548][ T4331] Bluetooth: hci2: command 0x041b tx timeout [ 33.469034][ T4331] Bluetooth: hci1: command 0x041b tx timeout [ 33.470703][ T4331] Bluetooth: hci3: command 0x041b tx timeout [ 33.472262][ T4331] Bluetooth: hci4: command 0x041b tx timeout [ 33.475906][ T4333] Bluetooth: hci0: command 0x041b tx timeout [ 33.696735][ T4441] loop4: detected capacity change from 0 to 512 [ 33.728781][ T4444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.740189][ T4441] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.10: missing EA_INODE flag [ 33.744452][ T4444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.776602][ T4441] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.10: error while reading EA inode 12 err=-117 [ 33.823195][ T4441] EXT4-fs (loop4): 1 orphan inode deleted [ 33.826707][ T4441] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 33.828442][ T4448] loop0: detected capacity change from 0 to 256 [ 34.684146][ T4456] capability: warning: `syz.4.10' uses deprecated v2 capabilities in a way that may be insecure [ 34.688219][ T4456] 9pnet_fd: Insufficient options for proto=fd [ 35.043564][ T4344] EXT4-fs (loop4): unmounting filesystem. [ 35.101027][ T4463] input: syz1 as /devices/virtual/input/input2 [ 35.116005][ T4468] device syzkaller0 entered promiscuous mode [ 35.120801][ T4468] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 35.177021][ T4465] 9pnet_fd: Insufficient options for proto=fd [ 35.461215][ T4465] loop0: detected capacity change from 0 to 40427 [ 35.476628][ T4465] F2FS-fs (loop0): build fault injection attr: rate: 19, type: 0x3ffff [ 35.766613][ T4333] Bluetooth: hci3: command 0x040f tx timeout [ 35.768024][ T4333] Bluetooth: hci0: command 0x040f tx timeout [ 35.769342][ T4333] Bluetooth: hci1: command 0x040f tx timeout [ 35.770683][ T4333] Bluetooth: hci2: command 0x040f tx timeout [ 35.771983][ T4333] Bluetooth: hci4: command 0x040f tx timeout [ 36.601784][ T4483] loop2: detected capacity change from 0 to 256 [ 37.217007][ T4489] tun0: tun_chr_ioctl cmd 1342215178 [ 37.344396][ T4471] loop3: detected capacity change from 0 to 131072 [ 37.408548][ T4493] loop1: detected capacity change from 0 to 16 [ 37.834816][ T4333] Bluetooth: hci2: command 0x0419 tx timeout [ 37.834842][ T4339] Bluetooth: hci4: command 0x0419 tx timeout [ 37.837088][ T4333] Bluetooth: hci1: command 0x0419 tx timeout [ 37.838291][ T4339] Bluetooth: hci0: command 0x0419 tx timeout [ 37.839413][ T4333] Bluetooth: hci3: command 0x0419 tx timeout [ 38.439422][ T4493] erofs: (device loop1): mounted with root inode @ nid 36. [ 38.456132][ T4492] erofs: (device loop1): z_erofs_readahead: readahead error at page 155 @ nid 36 [ 38.457706][ T4492] erofs: (device loop1): z_erofs_readahead: readahead error at page 154 @ nid 36 [ 38.459242][ T4492] erofs: (device loop1): z_erofs_readahead: readahead error at page 153 @ nid 36 [ 38.460748][ T4492] erofs: (device loop1): z_erofs_readahead: readahead error at page 152 @ nid 36 [ 38.462308][ T4492] erofs: (device loop1): z_erofs_readahead: readahead error at page 139 @ nid 36 [ 38.463832][ T4492] erofs: (device loop1): z_erofs_readahead: readahead error at page 138 @ nid 36 [ 38.465826][ T4492] erofs: (device loop1): z_erofs_readahead: readahead error at page 137 @ nid 36 [ 38.467407][ T4492] erofs: (device loop1): z_erofs_readahead: readahead error at page 136 @ nid 36 [ 38.469013][ T4492] erofs: (device loop1): z_erofs_readahead: readahead error at page 128 @ nid 36 [ 38.470539][ T4492] erofs: (device loop1): z_erofs_readahead: readahead error at page 120 @ nid 36 [ 38.472470][ T4492] syz.1.22: attempt to access beyond end of device [ 38.472470][ T4492] loop1: rw=524288, sector=13478624032, nr_sectors = 32 limit=16 [ 38.475534][ T4492] syz.1.22: attempt to access beyond end of device [ 38.475534][ T4492] loop1: rw=524288, sector=13478624040, nr_sectors = 32 limit=16 [ 38.478042][ T4492] syz.1.22: attempt to access beyond end of device [ 38.478042][ T4492] loop1: rw=524288, sector=14550774152, nr_sectors = 32 limit=16 [ 38.480284][ T4492] syz.1.22: attempt to access beyond end of device [ 38.480284][ T4492] loop1: rw=524288, sector=14550774160, nr_sectors = 32 limit=16 [ 38.482595][ T4492] syz.1.22: attempt to access beyond end of device [ 38.482595][ T4492] loop1: rw=524288, sector=13716630376, nr_sectors = 32 limit=16 [ 38.484899][ T4492] syz.1.22: attempt to access beyond end of device [ 38.484899][ T4492] loop1: rw=524288, sector=13716630384, nr_sectors = 32 limit=16 [ 38.487132][ T4492] syz.1.22: attempt to access beyond end of device [ 38.487132][ T4492] loop1: rw=524288, sector=790384, nr_sectors = 32 limit=16 [ 38.489227][ T4492] syz.1.22: attempt to access beyond end of device [ 38.489227][ T4492] loop1: rw=524288, sector=790392, nr_sectors = 32 limit=16 [ 38.491361][ T4492] syz.1.22: attempt to access beyond end of device [ 38.491361][ T4492] loop1: rw=524288, sector=72, nr_sectors = 32 limit=16 [ 38.493467][ T4492] syz.1.22: attempt to access beyond end of device [ 38.493467][ T4492] loop1: rw=524288, sector=80, nr_sectors = 32 limit=16 [ 38.528408][ T4496] loop2: detected capacity change from 0 to 512 [ 38.572723][ T4496] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.23: bg 0: block 393: padding at end of block bitmap is not set [ 38.578053][ T4496] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 38.581359][ T4496] EXT4-fs (loop2): 2 truncates cleaned up [ 38.583629][ T4496] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 38.707621][ T4496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.709266][ T4496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.784426][ T4502] loop1: detected capacity change from 0 to 512 [ 38.801975][ T4504] loop4: detected capacity change from 0 to 128 [ 38.825018][ T4504] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 38.919945][ T4508] tipc: Started in network mode [ 38.920962][ T4508] tipc: Node identity 4, cluster identity 4711 [ 38.922138][ T4508] tipc: Node number set to 4 [ 38.946115][ T4508] syz.0.26 uses obsolete (PF_INET,SOCK_PACKET) [ 38.973098][ T4508] input: syz0 as /devices/virtual/input/input3 [ 39.215118][ T4502] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 39.243197][ T4514] loop3: detected capacity change from 0 to 8192 [ 39.349808][ T4344] EXT4-fs (loop4): unmounting filesystem. [ 40.393599][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 40.769703][ T27] audit: type=1326 audit(40.760:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4521 comm="syz.3.30" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffa51792a8 code=0x0 [ 40.886892][ T4538] loop0: detected capacity change from 0 to 128 [ 40.893086][ T4538] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 40.901697][ T4538] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 41.348780][ T4334] EXT4-fs (loop2): unmounting filesystem. [ 41.509161][ T4339] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 41.512074][ T4339] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 41.513794][ T4339] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 41.517354][ T4339] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 41.518996][ T4339] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 41.520460][ T4339] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 41.676450][ T39] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.715258][ T4556] process 'syz.3.40' launched '/dev/fd/3/./file0' with NULL argv: empty string added [ 41.806678][ T39] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.847899][ T4525] loop4: detected capacity change from 0 to 131072 [ 41.859942][ T4525] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(512) [ 41.862451][ T4525] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 41.866122][ T4525] F2FS-fs (loop4): invalid crc value [ 41.887855][ T4525] F2FS-fs (loop4): Found nat_bits in checkpoint [ 42.076950][ T4573] input: syz0 as /devices/virtual/input/input4 [ 42.134650][ T4525] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 42.252279][ T4525] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 42.255477][ T39] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.264778][ T4572] tipc: Started in network mode [ 42.265761][ T4572] tipc: Node identity 4, cluster identity 4711 [ 42.266834][ T4572] tipc: Node number set to 4 [ 42.269959][ T4548] chnl_net:caif_netlink_parms(): no params data found [ 42.365354][ T39] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.407242][ T4548] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.411982][ T4548] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.419580][ T4548] device bridge_slave_0 entered promiscuous mode [ 42.425668][ T4548] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.427198][ T4548] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.428872][ T4548] device bridge_slave_1 entered promiscuous mode [ 42.446889][ T4548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.453677][ T4548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.476121][ T4548] team0: Port device team_slave_0 added [ 42.505160][ T4548] team0: Port device team_slave_1 added [ 42.559569][ T4548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.567376][ T4548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.588104][ T4548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.601607][ T4548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.608453][ T4548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.620765][ T4548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.096050][ T4548] device hsr_slave_0 entered promiscuous mode [ 43.126196][ T27] audit: type=1326 audit(43.120:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4592 comm="syz.4.47" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff92f792a8 code=0x0 [ 43.164818][ T4548] device hsr_slave_1 entered promiscuous mode [ 43.225154][ T4548] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.226568][ T4548] Cannot create hsr debugfs directory [ 43.343935][ T4616] loop3: detected capacity change from 0 to 128 [ 43.367041][ T4616] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 43.381805][ T4616] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 43.714618][ T4340] Bluetooth: hci2: command 0x0409 tx timeout [ 44.126402][ T4548] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 44.227160][ T4548] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 44.287004][ T4548] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 44.437356][ T4548] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 44.506517][ T4669] loop3: detected capacity change from 0 to 256 [ 45.001143][ T4548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.011170][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.012851][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.018458][ T4548] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.114479][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.116277][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.117890][ T4487] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.119162][ T4487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.120584][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.122322][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.123855][ T4487] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.125175][ T4487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.137478][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.139335][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.156404][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.163566][ T4548] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 45.174485][ T4548] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.185136][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.187068][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.188682][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.191105][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.205422][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.222217][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.231410][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.233045][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.327121][ T4698] loop1: detected capacity change from 0 to 128 [ 45.368958][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.370636][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.373698][ T4698] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 45.424069][ T4698] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 45.619393][ T4420] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 45.754137][ T4340] Bluetooth: hci2: command 0x041b tx timeout [ 45.936622][ T4420] usb 1-1: unable to get BOS descriptor or descriptor too short [ 45.939055][ T4420] usb 1-1: not running at top speed; connect to a high speed hub [ 45.943106][ T4420] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 45.946189][ T4420] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 45.968478][ T4420] usb 1-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice= 0.40 [ 45.982317][ T4420] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.988027][ T4420] usb 1-1: Product: syz [ 45.988747][ T4420] usb 1-1: Manufacturer: syz [ 45.995925][ T4420] usb 1-1: SerialNumber: syz [ 46.236780][ T4420] snd-usb-audio: probe of 1-1:1.0 failed with error -71 [ 46.240137][ T4420] snd-usb-audio: probe of 1-1:1.1 failed with error -71 [ 46.257888][ T4420] snd-usb-audio: probe of 1-1:1.2 failed with error -71 [ 46.266516][ T4732] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 46.278608][ T4420] usb 1-1: USB disconnect, device number 2 [ 46.278995][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.281048][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.310135][ T4548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.060284][ T4789] loop1: detected capacity change from 0 to 16 [ 47.109537][ T4789] erofs: (device loop1): mounted with root inode @ nid 36. [ 47.837922][ T4340] Bluetooth: hci2: command 0x040f tx timeout [ 47.996986][ T39] device hsr_slave_0 left promiscuous mode [ 48.198191][ T39] device hsr_slave_1 left promiscuous mode [ 48.314358][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.315790][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.317741][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.319040][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.322481][ T39] device bridge_slave_1 left promiscuous mode [ 48.323988][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.377073][ T39] device bridge_slave_0 left promiscuous mode [ 48.378261][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.557532][ T39] device veth1_macvtap left promiscuous mode [ 48.558820][ T39] device veth0_macvtap left promiscuous mode [ 48.559987][ T39] device veth1_vlan left promiscuous mode [ 48.561092][ T39] device veth0_vlan left promiscuous mode [ 48.791685][ T4841] loop1: detected capacity change from 0 to 16 [ 49.471042][ T4841] erofs: (device loop1): mounted with root inode @ nid 36. [ 49.853583][ T4832] loop3: detected capacity change from 0 to 40427 [ 49.875240][ T4832] F2FS-fs (loop3): invalid crc value [ 49.894734][ T4832] F2FS-fs (loop3): Found nat_bits in checkpoint [ 49.914056][ T4339] Bluetooth: hci2: command 0x0419 tx timeout [ 49.918183][ T4832] F2FS-fs (loop3): Start checkpoint disabled! [ 49.991746][ T4832] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 51.724734][ T56] bio_check_eod: 8 callbacks suppressed [ 51.724744][ T56] kworker/u4:3: attempt to access beyond end of device [ 51.724744][ T56] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 51.998838][ T4888] loop4: detected capacity change from 0 to 16 [ 52.001290][ T4888] erofs: (device loop4): mounted with root inode @ nid 36. [ 53.320634][ T4907] loop0: detected capacity change from 0 to 40427 [ 53.325115][ T4907] F2FS-fs (loop0): invalid crc value [ 53.330525][ T4907] F2FS-fs (loop0): Found nat_bits in checkpoint [ 53.344146][ T4907] F2FS-fs (loop0): Start checkpoint disabled! [ 53.354810][ T4907] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 54.414262][ T9] kworker/u4:0: attempt to access beyond end of device [ 54.414262][ T9] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 55.125557][ T39] team0 (unregistering): Port device team_slave_1 removed [ 55.295820][ T39] team0 (unregistering): Port device team_slave_0 removed [ 55.454374][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.654830][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.175384][ T39] bond0 (unregistering): Released all slaves [ 57.474845][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.476710][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.478364][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.479997][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.494290][ T4893] netlink: 'syz.3.124': attribute type 21 has an invalid length. [ 57.495827][ T4893] netlink: 132 bytes leftover after parsing attributes in process `syz.3.124'. [ 57.511997][ T4914] netlink: 132 bytes leftover after parsing attributes in process `syz.0.135'. [ 57.538908][ T4548] device veth0_vlan entered promiscuous mode [ 57.542241][ T4548] device veth1_vlan entered promiscuous mode [ 57.579656][ T4548] device veth0_macvtap entered promiscuous mode [ 57.582523][ T4548] device veth1_macvtap entered promiscuous mode [ 57.602654][ T4548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.605264][ T4548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.607198][ T4548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.617908][ T4548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.619713][ T4548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.621491][ T4548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.625072][ T4548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.626900][ T4548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.630261][ T4548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.633122][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.635193][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.636590][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.638210][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.654598][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.660018][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.686419][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.688979][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.701512][ T4548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.703375][ T4548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.727683][ T4548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.729643][ T4548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.731318][ T4548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.733105][ T4548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.747041][ T4548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.752373][ T4548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.755277][ T4548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.759235][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.761062][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.769677][ T4548] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.777579][ T4548] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.779466][ T4548] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.780914][ T4548] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.796342][ T4936] netlink: 'syz.4.144': attribute type 10 has an invalid length. [ 57.801434][ T4936] netlink: 40 bytes leftover after parsing attributes in process `syz.4.144'. [ 57.807788][ T4936] bridge0: port 3(team0) entered blocking state [ 57.809799][ T4936] bridge0: port 3(team0) entered disabled state [ 57.871329][ T4936] device team0 entered promiscuous mode [ 57.872451][ T4936] device team_slave_0 entered promiscuous mode [ 57.873700][ T4936] device team_slave_1 entered promiscuous mode [ 57.875694][ T4936] bridge0: port 3(team0) entered blocking state [ 57.876912][ T4936] bridge0: port 3(team0) entered forwarding state [ 59.076459][ T4509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.077890][ T4509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.079683][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.085231][ T4950] loop0: detected capacity change from 0 to 16 [ 59.086859][ T4950] erofs: (device loop0): mounted with root inode @ nid 36. [ 59.165382][ T4509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.166953][ T4509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.168655][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.642442][ T4976] loop3: detected capacity change from 0 to 1024 [ 60.767137][ T4999] loop0: detected capacity change from 0 to 512 [ 60.810605][ T4999] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 60.812388][ T4999] System zones: 1-12 [ 60.827355][ T4999] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.159: missing EA_INODE flag [ 60.837754][ T4999] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.159: error while reading EA inode 12 err=-117 [ 60.865197][ T4999] EXT4-fs (loop0): 1 orphan inode deleted [ 60.866324][ T4999] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 61.635953][ T5065] loop4: detected capacity change from 0 to 512 [ 61.650671][ T5065] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 61.652165][ T5065] System zones: 1-12 [ 61.679871][ T5065] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.175: missing EA_INODE flag [ 61.714811][ T5065] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.175: error while reading EA inode 12 err=-117 [ 61.739281][ T5065] EXT4-fs (loop4): 1 orphan inode deleted [ 61.740406][ T5065] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 61.885611][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 62.173584][ T5091] loop5: detected capacity change from 0 to 128 [ 62.180149][ T5091] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 62.191766][ T5091] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 62.711207][ T5103] loop3: detected capacity change from 0 to 256 [ 62.798854][ T5105] loop1: detected capacity change from 0 to 512 [ 62.826240][ T5105] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 62.829536][ T5105] System zones: 1-12 [ 62.832587][ T5105] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.188: missing EA_INODE flag [ 62.844136][ T5105] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.188: error while reading EA inode 12 err=-117 [ 62.852477][ T5105] EXT4-fs (loop1): 1 orphan inode deleted [ 62.855898][ T5105] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 62.972948][ T4344] EXT4-fs (loop4): unmounting filesystem. [ 63.386209][ T5130] loop0: detected capacity change from 0 to 16 [ 63.388058][ T5130] erofs: (device loop0): mounted with root inode @ nid 36. [ 63.403534][ T5128] loop5: detected capacity change from 0 to 1024 [ 63.496667][ T4323] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 63.648055][ T5131] loop4: detected capacity change from 0 to 40427 [ 63.656859][ T5131] F2FS-fs (loop4): invalid crc value [ 63.661238][ T5131] F2FS-fs (loop4): Found nat_bits in checkpoint [ 63.686545][ T5131] F2FS-fs (loop4): Start checkpoint disabled! [ 63.698073][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 63.726330][ T5131] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 63.742334][ T5139] erofs: (device loop3): mounted with root inode @ nid 36. [ 63.745435][ T5139] erofs: (device loop3): z_erofs_readahead: readahead error at page 155 @ nid 36 [ 63.747111][ T5139] erofs: (device loop3): z_erofs_readahead: readahead error at page 154 @ nid 36 [ 63.748809][ T5139] erofs: (device loop3): z_erofs_readahead: readahead error at page 153 @ nid 36 [ 63.750510][ T5139] erofs: (device loop3): z_erofs_readahead: readahead error at page 152 @ nid 36 [ 63.752121][ T5139] erofs: (device loop3): z_erofs_readahead: readahead error at page 139 @ nid 36 [ 63.753633][ T5139] erofs: (device loop3): z_erofs_readahead: readahead error at page 138 @ nid 36 [ 63.755378][ T5139] erofs: (device loop3): z_erofs_readahead: readahead error at page 137 @ nid 36 [ 63.756954][ T5139] erofs: (device loop3): z_erofs_readahead: readahead error at page 136 @ nid 36 [ 63.758572][ T5139] erofs: (device loop3): z_erofs_readahead: readahead error at page 128 @ nid 36 [ 63.760334][ T5139] erofs: (device loop3): z_erofs_readahead: readahead error at page 120 @ nid 36 [ 63.762243][ T5139] syz.3.199: attempt to access beyond end of device [ 63.762243][ T5139] loop3: rw=524288, sector=13478624032, nr_sectors = 32 limit=16 [ 63.764826][ T5139] syz.3.199: attempt to access beyond end of device [ 63.764826][ T5139] loop3: rw=524288, sector=13478624040, nr_sectors = 32 limit=16 [ 63.767146][ T5139] syz.3.199: attempt to access beyond end of device [ 63.767146][ T5139] loop3: rw=524288, sector=14550774152, nr_sectors = 32 limit=16 [ 63.769508][ T5139] syz.3.199: attempt to access beyond end of device [ 63.769508][ T5139] loop3: rw=524288, sector=14550774160, nr_sectors = 32 limit=16 [ 63.771842][ T5139] syz.3.199: attempt to access beyond end of device [ 63.771842][ T5139] loop3: rw=524288, sector=13716630376, nr_sectors = 32 limit=16 [ 63.774748][ T5139] syz.3.199: attempt to access beyond end of device [ 63.774748][ T5139] loop3: rw=524288, sector=13716630384, nr_sectors = 32 limit=16 [ 63.777210][ T5139] syz.3.199: attempt to access beyond end of device [ 63.777210][ T5139] loop3: rw=524288, sector=790384, nr_sectors = 32 limit=16 [ 63.779519][ T5139] syz.3.199: attempt to access beyond end of device [ 63.779519][ T5139] loop3: rw=524288, sector=790392, nr_sectors = 32 limit=16 [ 63.781830][ T5139] syz.3.199: attempt to access beyond end of device [ 63.781830][ T5139] loop3: rw=524288, sector=72, nr_sectors = 32 limit=16 [ 63.784101][ T5139] syz.3.199: attempt to access beyond end of device [ 63.784101][ T5139] loop3: rw=524288, sector=80, nr_sectors = 32 limit=16 [ 63.792821][ T5142] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 63.794773][ T5142] System zones: 1-12 [ 63.796235][ T5142] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.200: missing EA_INODE flag [ 63.808642][ T5142] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.200: error while reading EA inode 12 err=-117 [ 63.814473][ T5142] EXT4-fs (loop1): 1 orphan inode deleted [ 63.815682][ T5142] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 64.475687][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.477031][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.818571][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 64.947155][ T5184] set_capacity_and_notify: 2 callbacks suppressed [ 64.947164][ T5184] loop4: detected capacity change from 0 to 16 [ 64.951537][ T5184] erofs: (device loop4): mounted with root inode @ nid 36. [ 64.955804][ T5184] erofs: (device loop4): z_erofs_readahead: readahead error at page 155 @ nid 36 [ 64.957483][ T5184] erofs: (device loop4): z_erofs_readahead: readahead error at page 154 @ nid 36 [ 64.959236][ T5184] erofs: (device loop4): z_erofs_readahead: readahead error at page 153 @ nid 36 [ 64.961011][ T5184] erofs: (device loop4): z_erofs_readahead: readahead error at page 152 @ nid 36 [ 64.962741][ T5184] erofs: (device loop4): z_erofs_readahead: readahead error at page 139 @ nid 36 [ 64.964400][ T5184] erofs: (device loop4): z_erofs_readahead: readahead error at page 138 @ nid 36 [ 64.965903][ T5184] erofs: (device loop4): z_erofs_readahead: readahead error at page 137 @ nid 36 [ 64.967682][ T5184] erofs: (device loop4): z_erofs_readahead: readahead error at page 136 @ nid 36 [ 64.969514][ T5184] erofs: (device loop4): z_erofs_readahead: readahead error at page 128 @ nid 36 [ 64.971203][ T5184] erofs: (device loop4): z_erofs_readahead: readahead error at page 120 @ nid 36 [ 65.551167][ T5212] loop4: detected capacity change from 0 to 256 [ 65.784791][ T5215] loop0: detected capacity change from 0 to 16 [ 65.790429][ T5215] erofs: (device loop0): mounted with root inode @ nid 36. [ 65.796104][ T5214] erofs: (device loop0): z_erofs_readahead: readahead error at page 155 @ nid 36 [ 65.798973][ T5214] erofs: (device loop0): z_erofs_readahead: readahead error at page 154 @ nid 36 [ 65.800871][ T5214] erofs: (device loop0): z_erofs_readahead: readahead error at page 153 @ nid 36 [ 65.806760][ T5214] erofs: (device loop0): z_erofs_readahead: readahead error at page 152 @ nid 36 [ 65.811061][ T5214] erofs: (device loop0): z_erofs_readahead: readahead error at page 139 @ nid 36 [ 65.812915][ T5214] erofs: (device loop0): z_erofs_readahead: readahead error at page 138 @ nid 36 [ 65.818947][ T5214] erofs: (device loop0): z_erofs_readahead: readahead error at page 137 @ nid 36 [ 65.825375][ T5214] erofs: (device loop0): z_erofs_readahead: readahead error at page 136 @ nid 36 [ 65.827305][ T5214] erofs: (device loop0): z_erofs_readahead: readahead error at page 128 @ nid 36 [ 65.832268][ T5214] erofs: (device loop0): z_erofs_readahead: readahead error at page 120 @ nid 36 [ 65.927935][ T5236] netlink: 16 bytes leftover after parsing attributes in process `syz.1.238'. [ 66.116404][ T5245] loop1: detected capacity change from 0 to 32768 [ 66.461019][ T5261] loop4: detected capacity change from 0 to 16 [ 66.468033][ T5261] erofs: (device loop4): mounted with root inode @ nid 36. [ 66.472768][ T5259] erofs: (device loop4): z_erofs_readahead: readahead error at page 155 @ nid 36 [ 66.474552][ T5259] erofs: (device loop4): z_erofs_readahead: readahead error at page 154 @ nid 36 [ 66.476055][ T5259] erofs: (device loop4): z_erofs_readahead: readahead error at page 153 @ nid 36 [ 66.477511][ T5259] erofs: (device loop4): z_erofs_readahead: readahead error at page 152 @ nid 36 [ 66.479179][ T5259] erofs: (device loop4): z_erofs_readahead: readahead error at page 139 @ nid 36 [ 66.480725][ T5259] erofs: (device loop4): z_erofs_readahead: readahead error at page 138 @ nid 36 [ 66.482437][ T5259] erofs: (device loop4): z_erofs_readahead: readahead error at page 137 @ nid 36 [ 66.484188][ T5259] erofs: (device loop4): z_erofs_readahead: readahead error at page 136 @ nid 36 [ 66.485795][ T5259] erofs: (device loop4): z_erofs_readahead: readahead error at page 128 @ nid 36 [ 66.487433][ T5259] erofs: (device loop4): z_erofs_readahead: readahead error at page 120 @ nid 36 [ 66.951640][ T5289] loop0: detected capacity change from 0 to 1024 [ 67.314040][ T27] audit: type=1326 audit(67.300:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5304 comm="syz.5.266" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f9792a8 code=0x10000 [ 69.238963][ T5331] loop4: detected capacity change from 0 to 16 [ 69.243337][ T5331] erofs: (device loop4): mounted with root inode @ nid 36. [ 69.247892][ T5331] erofs: (device loop4): z_erofs_readahead: readahead error at page 155 @ nid 36 [ 69.249556][ T5331] erofs: (device loop4): z_erofs_readahead: readahead error at page 154 @ nid 36 [ 69.251157][ T5331] erofs: (device loop4): z_erofs_readahead: readahead error at page 153 @ nid 36 [ 69.252784][ T5331] erofs: (device loop4): z_erofs_readahead: readahead error at page 152 @ nid 36 [ 69.254687][ T5331] erofs: (device loop4): z_erofs_readahead: readahead error at page 139 @ nid 36 [ 69.256254][ T5331] erofs: (device loop4): z_erofs_readahead: readahead error at page 138 @ nid 36 [ 69.257978][ T5331] erofs: (device loop4): z_erofs_readahead: readahead error at page 137 @ nid 36 [ 69.259565][ T5331] erofs: (device loop4): z_erofs_readahead: readahead error at page 136 @ nid 36 [ 69.261135][ T5331] erofs: (device loop4): z_erofs_readahead: readahead error at page 128 @ nid 36 [ 69.262756][ T5331] erofs: (device loop4): z_erofs_readahead: readahead error at page 120 @ nid 36 [ 69.264473][ T5331] bio_check_eod: 63 callbacks suppressed [ 69.264479][ T5331] syz.4.273: attempt to access beyond end of device [ 69.264479][ T5331] loop4: rw=524288, sector=13478624032, nr_sectors = 32 limit=16 [ 69.267819][ T5331] syz.4.273: attempt to access beyond end of device [ 69.267819][ T5331] loop4: rw=524288, sector=13478624040, nr_sectors = 32 limit=16 [ 69.270353][ T5331] syz.4.273: attempt to access beyond end of device [ 69.270353][ T5331] loop4: rw=524288, sector=14550774152, nr_sectors = 32 limit=16 [ 69.272683][ T5331] syz.4.273: attempt to access beyond end of device [ 69.272683][ T5331] loop4: rw=524288, sector=14550774160, nr_sectors = 32 limit=16 [ 69.275093][ T5331] syz.4.273: attempt to access beyond end of device [ 69.275093][ T5331] loop4: rw=524288, sector=13716630376, nr_sectors = 32 limit=16 [ 69.277436][ T5331] syz.4.273: attempt to access beyond end of device [ 69.277436][ T5331] loop4: rw=524288, sector=13716630384, nr_sectors = 32 limit=16 [ 69.279886][ T5331] syz.4.273: attempt to access beyond end of device [ 69.279886][ T5331] loop4: rw=524288, sector=790384, nr_sectors = 32 limit=16 [ 69.282174][ T5331] syz.4.273: attempt to access beyond end of device [ 69.282174][ T5331] loop4: rw=524288, sector=790392, nr_sectors = 32 limit=16 [ 69.284646][ T5331] syz.4.273: attempt to access beyond end of device [ 69.284646][ T5331] loop4: rw=524288, sector=72, nr_sectors = 32 limit=16 [ 69.286880][ T5331] syz.4.273: attempt to access beyond end of device [ 69.286880][ T5331] loop4: rw=524288, sector=80, nr_sectors = 32 limit=16 [ 69.480437][ T5350] loop1: detected capacity change from 0 to 1024 [ 69.541117][ T4321] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 69.598751][ T1517] cfg80211: failed to load regulatory.db [ 69.720577][ T5361] loop3: detected capacity change from 0 to 512 [ 69.743161][ T5361] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 69.744760][ T5361] System zones: 1-12 [ 69.768615][ T5361] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.286: missing EA_INODE flag [ 69.771062][ T5361] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.286: error while reading EA inode 12 err=-117 [ 69.783740][ T5361] EXT4-fs (loop3): 1 orphan inode deleted [ 69.796740][ T5361] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 70.769224][ T5405] loop4: detected capacity change from 0 to 256 [ 70.862071][ T4330] EXT4-fs (loop3): unmounting filesystem. [ 70.915655][ T5409] loop3: detected capacity change from 0 to 1024 [ 70.992717][ T5411] loop0: detected capacity change from 0 to 1024 [ 71.231640][ T5420] loop1: detected capacity change from 0 to 4096 [ 71.259400][ T5420] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 71.467770][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 71.910629][ T5429] loop4: detected capacity change from 0 to 40427 [ 71.929308][ T5429] F2FS-fs (loop4): invalid crc value [ 71.941154][ T5435] loop5: detected capacity change from 0 to 128 [ 71.943547][ T5429] F2FS-fs (loop4): Found nat_bits in checkpoint [ 71.961680][ T5429] F2FS-fs (loop4): Start checkpoint disabled! [ 71.966684][ T5435] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 71.977785][ T5429] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 72.218548][ T4548] EXT4-fs (loop5): unmounting filesystem. [ 72.663751][ T5479] loop1: detected capacity change from 0 to 512 [ 72.701010][ T5479] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 72.741911][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 72.848564][ T5493] loop1: detected capacity change from 0 to 4096 [ 72.918914][ T5493] EXT4-fs (loop1): Test dummy encryption mode enabled [ 72.925847][ T5493] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 72.943696][ T5493] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 72.985843][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 73.148640][ T5530] loop5: detected capacity change from 0 to 1024 [ 73.166633][ T5530] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.187148][ T5530] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 73.222571][ T5530] EXT4-fs (loop5): shut down requested (2) [ 73.236905][ T5518] loop1: detected capacity change from 0 to 40427 [ 73.240871][ T5518] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 73.242213][ T5518] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 73.251108][ T5518] F2FS-fs (loop1): invalid crc value [ 73.253686][ T4548] EXT4-fs (loop5): unmounting filesystem. [ 73.289499][ T5518] F2FS-fs (loop1): Found nat_bits in checkpoint [ 73.303001][ T5518] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 73.304740][ T5518] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 73.554779][ T5552] FAULT_INJECTION: forcing a failure. [ 73.554779][ T5552] name failslab, interval 1, probability 0, space 0, times 1 [ 73.560720][ T5552] CPU: 0 PID: 5552 Comm: syz.5.322 Not tainted syzkaller #0 [ 73.561998][ T5552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 73.563959][ T5552] Call trace: [ 73.564594][ T5552] dump_backtrace+0x1c4/0x1f0 [ 73.565461][ T5552] show_stack+0x2c/0x3c [ 73.566219][ T5552] __dump_stack+0x30/0x40 [ 73.567019][ T5552] dump_stack_lvl+0xf4/0x15c [ 73.567823][ T5552] dump_stack+0x1c/0x5c [ 73.568558][ T5552] should_fail_ex+0x3cc/0x524 [ 73.569539][ T5552] __should_failslab+0xc0/0x11c [ 73.570543][ T5552] should_failslab+0x10/0x28 [ 73.571421][ T5552] kmem_cache_alloc+0x88/0x310 [ 73.572339][ T5552] key_alloc+0x284/0xdec [ 73.573122][ T5552] keyring_alloc+0x68/0xe0 [ 73.573970][ T5552] install_process_keyring_to_cred+0x98/0x12c [ 73.575094][ T5552] keyctl_set_reqkey_keyring+0xf4/0x1e4 [ 73.576097][ T5552] __arm64_sys_keyctl+0x1e8/0x8e0 [ 73.576939][ T5552] invoke_syscall+0x98/0x290 [ 73.577772][ T5552] el0_svc_common+0x13c/0x258 [ 73.578626][ T5552] do_el0_svc+0x5c/0x134 [ 73.579391][ T5552] el0_svc+0x58/0x128 [ 73.580083][ T5552] el0t_64_sync_handler+0x84/0xf0 [ 73.580963][ T5552] el0t_64_sync+0x18c/0x190 [ 73.666189][ T5574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.668091][ T5574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.672604][ T5573] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.673991][ T5573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.762755][ T5578] EXT4-fs: Ignoring removed oldalloc option [ 73.770212][ T5578] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.327: inode #1: comm syz.1.327: iget: illegal inode # [ 73.780689][ T5578] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.327: error while reading EA inode 1 err=-117 [ 73.785400][ T5578] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 73.787998][ T5578] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.327: inode #1: comm syz.1.327: iget: illegal inode # [ 73.791983][ T5578] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.327: error while reading EA inode 1 err=-117 [ 73.798098][ T5578] EXT4-fs (loop1): 1 orphan inode deleted [ 73.799026][ T5578] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 73.822889][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 73.887095][ T5590] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 73.948558][ T5580] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 73.950081][ T5580] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 73.982662][ T5580] F2FS-fs (loop5): Found nat_bits in checkpoint [ 73.991233][ T5580] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 73.992807][ T5580] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 74.499097][ T5590] bio_check_eod: 249 callbacks suppressed [ 74.499110][ T5590] syz.1.329: attempt to access beyond end of device [ 74.499110][ T5590] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 74.504377][ T5589] syz.1.329: attempt to access beyond end of device [ 74.504377][ T5589] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 74.508437][ T5589] syz.1.329: attempt to access beyond end of device [ 74.508437][ T5589] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 74.521251][ T5589] syz.1.329: attempt to access beyond end of device [ 74.521251][ T5589] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 74.533271][ T5590] syz.1.329: attempt to access beyond end of device [ 74.533271][ T5590] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 74.542799][ T5621] erofs: (device loop4): mounted with root inode @ nid 36. [ 74.547698][ T5590] syz.1.329: attempt to access beyond end of device [ 74.547698][ T5590] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 74.555455][ T5621] erofs: Unknown parameter '@' [ 74.584367][ T5590] syz.1.329: attempt to access beyond end of device [ 74.584367][ T5590] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 74.589765][ T5589] syz.1.329: attempt to access beyond end of device [ 74.589765][ T5589] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 74.597729][ T5589] syz.1.329: attempt to access beyond end of device [ 74.597729][ T5589] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 74.616777][ T5590] syz.1.329: attempt to access beyond end of device [ 74.616777][ T5590] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 74.680318][ T27] audit: type=1326 audit(74.670:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5632 comm="syz.3.336" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa51792a8 code=0x7ffc0000 [ 74.687696][ T27] audit: type=1326 audit(74.670:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5632 comm="syz.3.336" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa51792a8 code=0x7ffc0000 [ 74.707351][ T27] audit: type=1326 audit(74.670:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5632 comm="syz.3.336" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=431 compat=0 ip=0xffffa51792a8 code=0x7ffc0000 [ 74.722781][ T27] audit: type=1326 audit(74.670:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5632 comm="syz.3.336" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa51792a8 code=0x7ffc0000 [ 74.747371][ T27] audit: type=1326 audit(74.670:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5632 comm="syz.3.336" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa51792a8 code=0x7ffc0000 [ 74.763529][ T27] audit: type=1326 audit(74.670:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5632 comm="syz.3.336" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=432 compat=0 ip=0xffffa51792a8 code=0x7ffc0000 [ 74.778524][ T27] audit: type=1326 audit(74.670:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5632 comm="syz.3.336" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa51792a8 code=0x7ffc0000 [ 74.808093][ T27] audit: type=1326 audit(74.670:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5632 comm="syz.3.336" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa51792a8 code=0x7ffc0000 [ 74.908355][ T5648] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 74.910084][ T5648] System zones: 1-12 [ 74.913871][ T5648] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.339: missing EA_INODE flag [ 74.937385][ T5648] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.339: error while reading EA inode 12 err=-117 [ 74.942213][ T5648] EXT4-fs (loop1): 1 orphan inode deleted [ 74.943415][ T5648] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 75.055233][ T4323] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 75.131869][ T5639] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 75.133911][ T5639] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 75.143392][ T5639] F2FS-fs (loop3): Found nat_bits in checkpoint [ 75.181301][ T5639] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 75.183023][ T5639] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 76.877391][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 77.172005][ T5684] usb usb7: check_ctrlrecip: process 5684 (syz.1.347) requesting ep 01 but needs 81 [ 77.173677][ T5684] usb usb7: usbfs: process 5684 (syz.1.347) did not claim interface 0 before use [ 77.176559][ T5684] Zero length message leads to an empty skb [ 77.371494][ T5686] set_capacity_and_notify: 9 callbacks suppressed [ 77.371502][ T5686] loop4: detected capacity change from 0 to 2048 [ 77.396633][ T5686] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 77.420192][ T4344] EXT4-fs (loop4): unmounting filesystem. [ 77.457057][ T5675] loop5: detected capacity change from 0 to 40427 [ 77.469926][ T5675] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 77.475503][ T5675] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 77.481551][ T5675] F2FS-fs (loop5): invalid crc value [ 77.501508][ T5675] F2FS-fs (loop5): Found nat_bits in checkpoint [ 77.526082][ T5675] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 77.527486][ T5675] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 77.689940][ T5691] loop4: detected capacity change from 0 to 40427 [ 77.699396][ T5691] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 77.702992][ T5691] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 77.710845][ T5691] F2FS-fs (loop4): invalid crc value [ 77.714661][ T5691] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 77.743809][ T5691] F2FS-fs (loop4): Start checkpoint disabled! [ 77.749221][ T5691] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 77.750589][ T5691] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 77.828788][ T5698] loop5: detected capacity change from 0 to 256 [ 77.971484][ T5704] loop4: detected capacity change from 0 to 2048 [ 78.080928][ T5704] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 78.107935][ T5704] fs-verity: sha512 using implementation "sha512-ce" [ 78.132978][ T4344] EXT4-fs (loop4): unmounting filesystem. [ 79.223959][ C0] sched: RT throttling activated [ 79.639075][ T5723] loop0: detected capacity change from 0 to 512 [ 79.657937][ T5723] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 79.659457][ T5723] System zones: 1-12 [ 79.663701][ T5723] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.357: missing EA_INODE flag [ 79.670603][ T5728] loop1: detected capacity change from 0 to 128 [ 79.675902][ T5728] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 79.679189][ T5723] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.357: error while reading EA inode 12 err=-117 [ 79.682148][ T5723] EXT4-fs (loop0): 1 orphan inode deleted [ 79.683718][ T5723] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 79.688449][ T5728] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 79.839148][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 80.149731][ T5734] loop0: detected capacity change from 0 to 512 [ 80.164247][ T5734] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.359: missing EA_INODE flag [ 80.174554][ T5734] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.359: error while reading EA inode 12 err=-117 [ 80.188384][ T5737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.190303][ T5737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.196044][ T5734] EXT4-fs (loop0): 1 orphan inode deleted [ 80.197211][ T5734] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 80.243850][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 80.272246][ T5743] loop0: detected capacity change from 0 to 512 [ 80.282492][ T5743] EXT4-fs (loop0): Test dummy encryption mode enabled [ 80.342094][ T5746] netlink: 24 bytes leftover after parsing attributes in process `syz.3.362'. [ 80.632042][ T5743] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 80.646036][ T5743] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 80.666868][ T5743] EXT4-fs error (device loop0): ext4_add_entry:2486: inode #2: comm syz.0.363: Directory hole found for htree leaf block 0 [ 80.685628][ T5743] EXT4-fs (loop0): Remounting filesystem read-only [ 80.851717][ T5748] loop1: detected capacity change from 0 to 40427 [ 80.858198][ T5748] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 80.860355][ T5748] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 80.868626][ T5748] F2FS-fs (loop1): invalid crc value [ 80.873086][ T5748] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 80.885151][ T5748] F2FS-fs (loop1): Start checkpoint disabled! [ 81.745336][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 81.950944][ T5748] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 81.952320][ T5748] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 82.052018][ T5717] bio_check_eod: 1257 callbacks suppressed [ 82.052029][ T5717] kworker/u4:18: attempt to access beyond end of device [ 82.052029][ T5717] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 82.795025][ T5781] set_capacity_and_notify: 1 callbacks suppressed [ 82.795035][ T5781] loop3: detected capacity change from 0 to 128 [ 82.799837][ T5781] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 82.814606][ T5781] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 83.197112][ T5788] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 83.410656][ T5793] loop0: detected capacity change from 0 to 4096 [ 83.412432][ T5793] EXT4-fs: inline encryption not supported [ 83.416760][ T5793] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 83.418386][ T5793] EXT4-fs (loop0): Test dummy encryption mode enabled [ 83.420484][ T5793] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 83.422249][ T5793] System zones: 0-5 [ 83.423734][ T5793] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 83.448273][ T5793] netlink: 'syz.0.377': attribute type 49 has an invalid length. [ 83.616869][ T5793] device ip6gretap0 entered promiscuous mode [ 83.719829][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 83.756147][ T5805] loop5: detected capacity change from 0 to 512 [ 83.781283][ T5805] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 83.783155][ T5805] System zones: 1-12 [ 84.974566][ T5803] loop3: detected capacity change from 0 to 1024 [ 84.976169][ T5803] EXT4-fs: Ignoring removed bh option [ 85.107524][ T5805] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.380: missing EA_INODE flag [ 85.119962][ T5805] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.380: error while reading EA inode 12 err=-117 [ 85.133938][ T5805] EXT4-fs (loop5): 1 orphan inode deleted [ 85.141577][ T5805] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 85.166222][ T5803] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 85.907409][ T5810] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 85.908755][ T5810] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 85.911826][ T5810] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 85.913075][ T5810] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 85.914264][ T5810] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 85.916000][ T5810] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 85.917300][ T5810] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 85.918806][ T5810] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 85.920607][ T5810] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 85.922033][ T5810] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 85.923046][ T5810] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 85.925262][ T5810] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 85.926593][ T5810] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 85.927685][ T5810] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 85.929329][ T5810] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 85.966833][ T4330] EXT4-fs (loop3): unmounting filesystem. [ 86.008127][ T5828] loop4: detected capacity change from 0 to 512 [ 86.047098][ T5828] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 86.048536][ T5828] System zones: 1-12 [ 86.054906][ T5828] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.382: missing EA_INODE flag [ 86.066857][ T5828] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.382: error while reading EA inode 12 err=-117 [ 86.083461][ T5828] EXT4-fs (loop4): 1 orphan inode deleted [ 86.089559][ T5828] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 86.343227][ T5843] loop1: detected capacity change from 0 to 256 [ 86.402026][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.403930][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.502552][ T4548] EXT4-fs (loop5): unmounting filesystem. [ 86.593257][ T5854] loop5: detected capacity change from 0 to 128 [ 86.598257][ T5854] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 86.600638][ T5854] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 87.022148][ T4344] EXT4-fs (loop4): unmounting filesystem. [ 87.057910][ T5861] loop4: detected capacity change from 0 to 256 [ 87.093607][ T5861] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 87.152352][ T5858] loop1: detected capacity change from 0 to 40427 [ 87.165552][ T5858] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 87.167117][ T5858] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 87.177373][ T5858] F2FS-fs (loop1): Found nat_bits in checkpoint [ 87.196184][ T5858] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 87.202032][ T5858] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 87.284571][ T4340] Bluetooth: hci0: command 0x0c1a tx timeout [ 87.994229][ T4340] Bluetooth: hci2: command 0x0c1a tx timeout [ 87.995574][ T4340] Bluetooth: hci4: command 0x0c1a tx timeout [ 87.996686][ T4340] Bluetooth: hci3: command 0x0c1a tx timeout [ 87.997821][ T4340] Bluetooth: hci1: command 0x0c1a tx timeout [ 88.362678][ T5827] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.380464][ T5874] loop5: detected capacity change from 0 to 40427 [ 88.388771][ T5874] F2FS-fs (loop5): invalid crc value [ 88.392529][ T5827] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.397496][ T5874] F2FS-fs (loop5): Found nat_bits in checkpoint [ 88.422508][ T5874] F2FS-fs (loop5): Start checkpoint disabled! [ 88.437598][ T5874] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 88.462894][ T5881] loop1: detected capacity change from 0 to 512 [ 88.470260][ T5881] EXT4-fs: Ignoring removed nobh option [ 88.473055][ T5881] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 88.480164][ T5881] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 88.482275][ T5881] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 88.517441][ T5881] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 88.521841][ T5881] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000] [ 88.523343][ T5881] EXT4-fs (loop1): failed to initialize system zone (-117) [ 88.524795][ T5881] EXT4-fs (loop1): mount failed [ 88.528675][ T4509] kworker/u4:10: attempt to access beyond end of device [ 88.528675][ T4509] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 88.664633][ T5885] loop5: detected capacity change from 0 to 256 [ 88.666386][ T5885] exfat: Deprecated parameter 'namecase' [ 88.670529][ T5885] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 88.749574][ T5886] loop1: detected capacity change from 0 to 16 [ 89.081002][ T5886] loop1: detected capacity change from 0 to 128 [ 89.090662][ T5886] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 89.355053][ T4339] Bluetooth: hci0: command 0x0406 tx timeout [ 89.464251][ T5886] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 89.465796][ T5886] FAT-fs (loop1): Filesystem has been set read-only [ 89.987228][ T5889] loop5: detected capacity change from 0 to 512 [ 89.990064][ T5889] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 89.991712][ T5889] System zones: 1-12 [ 89.993345][ T5889] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.396: missing EA_INODE flag [ 89.997535][ T5889] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.396: error while reading EA inode 12 err=-117 [ 90.000586][ T5889] EXT4-fs (loop5): 1 orphan inode deleted [ 90.001803][ T5889] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 90.075301][ T4339] Bluetooth: hci1: command 0x0406 tx timeout [ 90.076639][ T4340] Bluetooth: hci3: command 0x0406 tx timeout [ 90.077757][ T4333] Bluetooth: hci4: command 0x0406 tx timeout [ 90.078853][ T4331] Bluetooth: hci2: command 0x0406 tx timeout [ 90.100347][ T5827] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.102153][ T5827] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.103838][ T5827] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.105588][ T5827] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.173918][ T5886] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 91.184251][ T4548] EXT4-fs (loop5): unmounting filesystem. [ 91.210570][ T5901] loop1: detected capacity change from 0 to 512 [ 91.230111][ T5901] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 91.231671][ T5901] System zones: 1-12 [ 91.233089][ T5901] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.400: missing EA_INODE flag [ 91.251573][ T5901] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.400: error while reading EA inode 12 err=-117 [ 91.258096][ T5901] EXT4-fs (loop1): 1 orphan inode deleted [ 91.259096][ T5901] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 91.382888][ T5916] loop3: detected capacity change from 0 to 128 [ 91.390323][ T5916] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 91.398812][ T5916] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 91.487952][ T5923] loop0: detected capacity change from 0 to 256 [ 91.496869][ T5923] exfat: Deprecated parameter 'utf8' [ 91.498885][ T5923] exfat: Deprecated parameter 'utf8' [ 91.500639][ T5923] exfat: Deprecated parameter 'namecase' [ 91.502533][ T5923] exfat: Deprecated parameter 'namecase' [ 91.510800][ T5923] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 92.073884][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 92.877561][ T5941] loop5: detected capacity change from 0 to 512 [ 92.899948][ T5941] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 92.916925][ T5941] System zones: 1-12 [ 92.984313][ T5933] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 92.989897][ T5937] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 92.992325][ T5941] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.411: missing EA_INODE flag [ 93.003251][ T5933] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 93.005408][ T5941] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.411: error while reading EA inode 12 err=-117 [ 93.007944][ T5941] EXT4-fs (loop5): 1 orphan inode deleted [ 93.009026][ T5941] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 93.011135][ T5933] F2FS-fs (loop4): invalid crc value [ 94.440533][ T5933] F2FS-fs (loop4): Found nat_bits in checkpoint [ 94.477813][ T5933] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 94.479231][ T5933] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 94.551482][ T4548] EXT4-fs (loop5): unmounting filesystem. [ 94.714112][ T4380] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 94.907705][ T4380] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.909818][ T4380] usb 1-1: config 0 has no interfaces? [ 94.911017][ T4380] usb 1-1: New USB device found, idVendor=041e, idProduct=3010, bcdDevice= 1.00 [ 94.912764][ T4380] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.916848][ T4380] usb 1-1: config 0 descriptor?? [ 95.087794][ T5971] set_capacity_and_notify: 2 callbacks suppressed [ 95.087804][ T5971] loop1: detected capacity change from 0 to 512 [ 95.099222][ T5971] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 95.152828][ T4376] usb 1-1: USB disconnect, device number 3 [ 95.253239][ T5966] loop5: detected capacity change from 0 to 131072 [ 95.256536][ T5966] F2FS-fs (loop5): invalid crc value [ 95.300423][ T5966] F2FS-fs (loop5): Found nat_bits in checkpoint [ 95.320991][ T5966] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 95.328861][ T5966] F2FS-fs (loop5): Corrupted max_depth of 3: 16842753 [ 95.354942][ T5982] loop3: detected capacity change from 0 to 128 [ 95.356719][ T5982] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 95.361466][ T5982] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 95.924938][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 95.987718][ T5990] loop1: detected capacity change from 0 to 256 [ 96.076381][ T5997] loop0: detected capacity change from 0 to 512 [ 96.080344][ T5997] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 96.087358][ T5997] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 96.099030][ T5997] EXT4-fs (loop0): 1 truncate cleaned up [ 96.103443][ T5997] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 96.148266][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 97.509149][ T6019] loop0: detected capacity change from 0 to 512 [ 97.512358][ T6019] EXT4-fs: Ignoring removed nobh option [ 97.524288][ T6019] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 97.530182][ T6019] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 97.531821][ T6019] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 97.545791][ T6019] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 97.547230][ T6019] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000] [ 97.548677][ T6019] EXT4-fs (loop0): failed to initialize system zone (-117) [ 97.550018][ T6019] EXT4-fs (loop0): mount failed [ 97.733868][ T6028] loop0: detected capacity change from 0 to 16 [ 98.901431][ T6021] loop3: detected capacity change from 0 to 8192 [ 98.913553][ T6033] loop0: detected capacity change from 0 to 512 [ 98.915624][ T6034] loop4: detected capacity change from 0 to 512 [ 98.918513][ T6021] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 98.952501][ T6034] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #15: comm syz.4.436: inode has both inline data and extents flags [ 98.956479][ T6034] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.436: couldn't read orphan inode 15 (err -117) [ 98.959119][ T6033] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #15: comm syz.0.435: inode has both inline data and extents flags [ 98.961795][ T6033] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.435: couldn't read orphan inode 15 (err -117) [ 98.973383][ T6033] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 98.977633][ T6034] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 99.003160][ T6033] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 99.047569][ T6037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.060971][ T4344] EXT4-fs (loop4): unmounting filesystem. [ 99.076579][ T6037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.088103][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 99.221807][ T6039] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #15: comm syz.0.437: inode has both inline data and extents flags [ 99.248680][ T6039] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.437: couldn't read orphan inode 15 (err -117) [ 99.261063][ T6039] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 99.347860][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 99.386437][ T6044] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 99.387953][ T6044] System zones: 1-12 [ 99.389801][ T6044] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.440: missing EA_INODE flag [ 99.400205][ T6044] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.440: error while reading EA inode 12 err=-117 [ 99.419180][ T6044] EXT4-fs (loop4): 1 orphan inode deleted [ 99.420388][ T6044] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 99.512849][ T6025] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 99.518997][ T6047] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 99.521449][ T6025] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 99.525543][ T6047] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 99.597472][ T4376] kernel write not supported for file /243/attr/sockcreate (pid: 4376 comm: kworker/1:4) [ 99.609087][ T6025] F2FS-fs (loop5): Found nat_bits in checkpoint [ 99.630131][ T6025] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 99.631467][ T6025] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 100.247461][ T4344] EXT4-fs (loop4): unmounting filesystem. [ 100.328297][ T6061] set_capacity_and_notify: 4 callbacks suppressed [ 100.328313][ T6061] loop0: detected capacity change from 0 to 16 [ 100.333071][ T6061] erofs: (device loop0): mounted with root inode @ nid 36. [ 100.429429][ T5717] Bluetooth: hci5: Frame reassembly failed (-84) [ 100.431177][ T6029] Bluetooth: hci5: Frame reassembly failed (-84) [ 100.459797][ T6067] loop1: detected capacity change from 0 to 256 [ 100.489544][ T6067] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 101.196264][ T6067] syz.1.445: attempt to access beyond end of device [ 101.196264][ T6067] loop1: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 101.198787][ T6067] syz.1.445: attempt to access beyond end of device [ 101.198787][ T6067] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 101.204354][ T6067] syz.1.445: attempt to access beyond end of device [ 101.204354][ T6067] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 101.207123][ T6067] syz.1.445: attempt to access beyond end of device [ 101.207123][ T6067] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 101.259925][ T6064] syz.1.445: attempt to access beyond end of device [ 101.259925][ T6064] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 101.265727][ T6064] syz.1.445: attempt to access beyond end of device [ 101.265727][ T6064] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 101.268118][ T6064] syz.1.445: attempt to access beyond end of device [ 101.268118][ T6064] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 101.270533][ T6064] syz.1.445: attempt to access beyond end of device [ 101.270533][ T6064] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 101.272942][ T6064] syz.1.445: attempt to access beyond end of device [ 101.272942][ T6064] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 101.292680][ T6067] syz.1.445: attempt to access beyond end of device [ 101.292680][ T6067] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 101.392745][ T6089] loop3: detected capacity change from 0 to 512 [ 101.395546][ T6089] EXT4-fs: Ignoring removed nobh option [ 101.401016][ T6089] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 101.407288][ T6089] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 101.432373][ T6089] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 101.459908][ T6089] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 101.461339][ T6089] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000] [ 101.464819][ T6095] loop0: detected capacity change from 0 to 256 [ 101.470018][ T6089] EXT4-fs (loop3): failed to initialize system zone (-117) [ 101.471322][ T6089] EXT4-fs (loop3): mount failed [ 102.782802][ T6106] loop3: detected capacity change from 0 to 16 [ 102.817155][ T4333] Bluetooth: hci5: command 0x1003 tx timeout [ 102.818531][ T4343] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 102.988462][ T6103] loop1: detected capacity change from 0 to 4096 [ 103.020285][ T6109] loop4: detected capacity change from 0 to 512 [ 103.044380][ T6109] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 103.045893][ T6109] System zones: 1-12 [ 103.047369][ T6103] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 103.052045][ T6109] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.453: missing EA_INODE flag [ 103.062958][ T6109] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.453: error while reading EA inode 12 err=-117 [ 103.077754][ T6109] EXT4-fs (loop4): 1 orphan inode deleted [ 103.078753][ T6109] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 103.104780][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 103.206382][ T6117] loop5: detected capacity change from 0 to 512 [ 103.207942][ T6117] EXT4-fs: Ignoring removed nobh option [ 103.210070][ T6117] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 103.751038][ T6117] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 103.756717][ T6117] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 103.761698][ T6117] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 103.763082][ T6117] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000] [ 103.764582][ T6117] EXT4-fs (loop5): failed to initialize system zone (-117) [ 103.766007][ T6117] EXT4-fs (loop5): mount failed [ 103.799631][ T5837] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 103.899974][ T4344] EXT4-fs (loop4): unmounting filesystem. [ 103.991264][ T6127] loop5: detected capacity change from 0 to 16 [ 105.158121][ T6137] loop5: detected capacity change from 0 to 512 [ 105.182002][ T6137] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 105.183683][ T6137] System zones: 1-12 [ 105.190375][ T6137] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.459: missing EA_INODE flag [ 105.193044][ T6137] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.459: error while reading EA inode 12 err=-117 [ 105.202396][ T6137] EXT4-fs (loop5): 1 orphan inode deleted [ 105.207831][ T6137] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 105.220505][ T6141] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 105.241207][ T6137] EXT4-fs (loop5): shut down requested (2) [ 105.267400][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 105.322323][ T4548] EXT4-fs (loop5): unmounting filesystem. [ 105.374877][ T6155] set_capacity_and_notify: 1 callbacks suppressed [ 105.374885][ T6155] loop5: detected capacity change from 0 to 256 [ 105.377640][ T6155] exfat: Deprecated parameter 'utf8' [ 105.378642][ T6155] exfat: Deprecated parameter 'utf8' [ 105.381834][ T6155] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 105.390659][ T6151] loop0: detected capacity change from 0 to 4096 [ 105.429962][ T6151] EXT4-fs: inline encryption not supported [ 105.435568][ T6162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.464'. [ 105.442801][ T6151] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 105.447109][ T6151] EXT4-fs (loop0): Test dummy encryption mode enabled [ 105.478416][ T6151] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 105.479880][ T6151] System zones: 0-5 [ 105.481277][ T6151] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 105.565790][ T6170] loop1: detected capacity change from 0 to 256 [ 105.587097][ T6151] netlink: 'syz.0.462': attribute type 49 has an invalid length. [ 105.589200][ T6170] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 106.356293][ T6169] bio_check_eod: 3117 callbacks suppressed [ 106.356312][ T6169] syz.1.466: attempt to access beyond end of device [ 106.356312][ T6169] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 106.360219][ T6169] syz.1.466: attempt to access beyond end of device [ 106.360219][ T6169] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 106.362938][ T6169] syz.1.466: attempt to access beyond end of device [ 106.362938][ T6169] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 106.418097][ T6170] syz.1.466: attempt to access beyond end of device [ 106.418097][ T6170] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 106.438514][ T6170] syz.1.466: attempt to access beyond end of device [ 106.438514][ T6170] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 106.479597][ T6170] syz.1.466: attempt to access beyond end of device [ 106.479597][ T6170] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 106.482146][ T6170] syz.1.466: attempt to access beyond end of device [ 106.482146][ T6170] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 106.488382][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 106.526379][ T6169] syz.1.466: attempt to access beyond end of device [ 106.526379][ T6169] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 106.539229][ T6169] syz.1.466: attempt to access beyond end of device [ 106.539229][ T6169] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 106.541630][ T6169] syz.1.466: attempt to access beyond end of device [ 106.541630][ T6169] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 106.864584][ T6188] futex_wake_op: syz.4.468 tries to shift op by -1; fix this program [ 107.008351][ T6187] usb usb7: check_ctrlrecip: process 6187 (syz.4.468) requesting ep 01 but needs 81 [ 107.010052][ T6187] usb usb7: usbfs: process 6187 (syz.4.468) did not claim interface 0 before use [ 107.649512][ T6195] loop4: detected capacity change from 0 to 512 [ 108.218037][ T6195] EXT4-fs: Ignoring removed nobh option [ 108.318390][ T6195] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 108.323245][ T6195] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 108.330296][ T6195] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 108.356008][ T6195] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 108.357839][ T6206] loop1: detected capacity change from 0 to 512 [ 108.363505][ T6206] EXT4-fs warning (device loop1): read_mmp_block:115: Error -74 while reading MMP block 7 [ 108.368674][ T6195] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000] [ 108.370351][ T6195] EXT4-fs (loop4): failed to initialize system zone (-117) [ 108.371870][ T6195] EXT4-fs (loop4): mount failed [ 108.564262][ T6210] loop4: detected capacity change from 0 to 16 [ 108.924029][ T6212] loop5: detected capacity change from 0 to 16 [ 108.926389][ T6212] erofs: (device loop5): mounted with root inode @ nid 36. [ 109.638673][ T6218] loop0: detected capacity change from 0 to 4096 [ 109.640187][ T6218] EXT4-fs: inline encryption not supported [ 109.641877][ T6218] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 109.643520][ T6218] EXT4-fs (loop0): Test dummy encryption mode enabled [ 109.648453][ T6218] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 109.649894][ T6218] System zones: 0-5 [ 109.653732][ T6218] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 109.664240][ T6218] netlink: 'syz.0.477': attribute type 49 has an invalid length. [ 109.810982][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 109.823744][ T6226] loop5: detected capacity change from 0 to 4096 [ 109.841774][ T6226] EXT4-fs: inline encryption not supported [ 109.843281][ T6226] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 109.849534][ T6226] EXT4-fs (loop5): Test dummy encryption mode enabled [ 109.867323][ T6226] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 109.868777][ T6226] System zones: 0-5 [ 109.871033][ T6226] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 109.886749][ T6226] netlink: 'syz.5.478': attribute type 49 has an invalid length. [ 110.297238][ T4548] EXT4-fs (loop5): unmounting filesystem. [ 110.433008][ T6242] loop5: detected capacity change from 0 to 512 [ 110.468393][ T6242] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.483: invalid indirect mapped block 4294967295 (level 1) [ 110.472863][ T6242] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.483: invalid indirect mapped block 4294967295 (level 1) [ 110.478416][ T6242] EXT4-fs (loop5): 2 truncates cleaned up [ 110.479578][ T6242] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 110.567364][ T6245] futex_wake_op: syz.1.482 tries to shift op by -1; fix this program [ 110.639490][ T6245] usb usb7: check_ctrlrecip: process 6245 (syz.1.482) requesting ep 01 but needs 81 [ 110.641399][ T6245] usb usb7: usbfs: process 6245 (syz.1.482) did not claim interface 0 before use [ 110.826399][ T4548] EXT4-fs (loop5): unmounting filesystem. [ 110.859068][ T6249] loop5: detected capacity change from 0 to 256 [ 110.871521][ T6249] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 110.908268][ T6252] loop0: detected capacity change from 0 to 512 [ 110.982984][ T6252] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 110.984648][ T6252] System zones: 1-12 [ 110.986183][ T6252] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.486: missing EA_INODE flag [ 110.990632][ T6252] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.486: error while reading EA inode 12 err=-117 [ 110.997016][ T6252] EXT4-fs (loop0): 1 orphan inode deleted [ 110.999154][ T6252] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 111.631059][ T6249] bio_check_eod: 4287 callbacks suppressed [ 111.631077][ T6249] syz.5.484: attempt to access beyond end of device [ 111.631077][ T6249] loop5: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 111.654219][ T6249] syz.5.484: attempt to access beyond end of device [ 111.654219][ T6249] loop5: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 111.657721][ T6249] syz.5.484: attempt to access beyond end of device [ 111.657721][ T6249] loop5: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 111.660614][ T6249] syz.5.484: attempt to access beyond end of device [ 111.660614][ T6249] loop5: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 111.667652][ T6261] loop1: detected capacity change from 0 to 512 [ 111.669000][ T6249] syz.5.484: attempt to access beyond end of device [ 111.669000][ T6249] loop5: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 111.671739][ T6249] syz.5.484: attempt to access beyond end of device [ 111.671739][ T6249] loop5: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 111.674519][ T6261] EXT4-fs: Ignoring removed nobh option [ 111.674724][ T6249] syz.5.484: attempt to access beyond end of device [ 111.674724][ T6249] loop5: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 111.678669][ T6249] syz.5.484: attempt to access beyond end of device [ 111.678669][ T6249] loop5: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 111.681732][ T6249] syz.5.484: attempt to access beyond end of device [ 111.681732][ T6249] loop5: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 111.686543][ T6261] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 111.689152][ T6261] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 111.692034][ T6261] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 111.698395][ T6261] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 111.700075][ T6261] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000] [ 111.702933][ T6261] EXT4-fs (loop1): failed to initialize system zone (-117) [ 111.704578][ T6261] EXT4-fs (loop1): mount failed [ 111.844404][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 111.928848][ T6271] loop1: detected capacity change from 0 to 16 [ 112.672413][ T6271] loop1: detected capacity change from 0 to 128 [ 112.680274][ T6271] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 112.769357][ T6271] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 112.770939][ T6271] FAT-fs (loop1): Filesystem has been set read-only [ 112.916167][ T6271] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 112.980426][ T6270] loop0: detected capacity change from 0 to 4096 [ 112.985387][ T6270] EXT4-fs: inline encryption not supported [ 112.997897][ T6270] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 112.999460][ T6270] EXT4-fs (loop0): Test dummy encryption mode enabled [ 113.300102][ T6270] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 113.304506][ T6270] System zones: 0-5 [ 113.317402][ T6270] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 113.381934][ T6270] netlink: 'syz.0.491': attribute type 49 has an invalid length. [ 113.727714][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 113.982902][ T6292] loop0: detected capacity change from 0 to 4096 [ 115.950916][ T6292] EXT4-fs (loop0): Test dummy encryption mode enabled [ 116.178518][ T6292] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=85ec018, mo2=0003] [ 116.184989][ T6292] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 116.286483][ T6303] loop4: detected capacity change from 0 to 256 [ 116.309907][ T6303] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 116.357178][ T6303] syz.4.500: attempt to access beyond end of device [ 116.357178][ T6303] loop4: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 116.361012][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 116.949435][ T6303] bio_check_eod: 1346 callbacks suppressed [ 116.949453][ T6303] syz.4.500: attempt to access beyond end of device [ 116.949453][ T6303] loop4: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 116.966527][ T6303] syz.4.500: attempt to access beyond end of device [ 116.966527][ T6303] loop4: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 116.986043][ T6303] syz.4.500: attempt to access beyond end of device [ 116.986043][ T6303] loop4: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 117.003841][ T6303] syz.4.500: attempt to access beyond end of device [ 117.003841][ T6303] loop4: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 117.018249][ T6303] syz.4.500: attempt to access beyond end of device [ 117.018249][ T6303] loop4: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 117.022037][ T6303] syz.4.500: attempt to access beyond end of device [ 117.022037][ T6303] loop4: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 117.043661][ T6303] syz.4.500: attempt to access beyond end of device [ 117.043661][ T6303] loop4: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 117.057937][ T6303] syz.4.500: attempt to access beyond end of device [ 117.057937][ T6303] loop4: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 117.080489][ T6303] syz.4.500: attempt to access beyond end of device [ 117.080489][ T6303] loop4: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 117.083348][ T6303] syz.4.500: attempt to access beyond end of device [ 117.083348][ T6303] loop4: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 117.126319][ T6321] loop3: detected capacity change from 0 to 4096 [ 117.130917][ T6321] EXT4-fs: inline encryption not supported [ 117.152432][ T6321] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 117.154577][ T6321] EXT4-fs (loop3): Test dummy encryption mode enabled [ 117.157218][ T6324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.162247][ T6324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.165432][ T6321] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 117.169274][ T6321] System zones: 0-5 [ 117.175791][ T6321] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 117.296621][ T6321] netlink: 'syz.3.505': attribute type 49 has an invalid length. [ 117.323859][ T4330] EXT4-fs (loop3): unmounting filesystem. [ 117.395622][ T6335] loop5: detected capacity change from 0 to 128 [ 117.408753][ T6335] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 117.417817][ T6340] loop3: detected capacity change from 0 to 512 [ 117.419394][ T6340] EXT4-fs: Ignoring removed nobh option [ 117.423636][ T4548] EXT4-fs (loop5): unmounting filesystem. [ 117.459154][ T6340] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 117.461023][ T6340] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 117.462911][ T6340] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 117.492209][ T6340] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 117.493696][ T6340] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000] [ 117.495419][ T6340] EXT4-fs (loop3): failed to initialize system zone (-117) [ 117.496747][ T6340] EXT4-fs (loop3): mount failed [ 117.621076][ T6345] loop1: detected capacity change from 0 to 512 [ 117.823549][ T6347] loop3: detected capacity change from 0 to 16 [ 119.213509][ T6345] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 119.218165][ T6345] netlink: 64 bytes leftover after parsing attributes in process `syz.1.510'. [ 119.223243][ T5838] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 119.243625][ T6346] loop3: detected capacity change from 0 to 128 [ 119.297413][ T6346] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 119.317161][ T6346] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 119.318628][ T6346] FAT-fs (loop3): Filesystem has been set read-only [ 119.707297][ T6346] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 119.719905][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 119.769972][ T6360] loop0: detected capacity change from 0 to 512 [ 119.783155][ T6362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.785745][ T6360] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 119.798075][ T6362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.861002][ T6365] loop4: detected capacity change from 0 to 512 [ 119.864074][ T6365] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 119.883503][ T6365] EXT4-fs (loop4): 1 truncate cleaned up [ 119.888567][ T6365] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 119.944258][ T4344] EXT4-fs (loop4): unmounting filesystem. [ 120.452335][ T6367] netlink: 'syz.1.515': attribute type 13 has an invalid length. [ 120.478313][ T6367] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 120.511311][ T6378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.513592][ T6367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 120.517630][ T6378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.521117][ T6367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 120.609139][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 120.649528][ T6380] loop0: detected capacity change from 0 to 512 [ 120.664730][ T6380] EXT4-fs: Ignoring removed mblk_io_submit option [ 120.695066][ T6380] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 120.705472][ T6380] overlayfs: workdir and upperdir must be separate subtrees [ 120.751377][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 120.858560][ T6387] FAT-fs (loop4): Directory bread(block 64) failed [ 120.859856][ T6387] FAT-fs (loop4): Directory bread(block 65) failed [ 120.861984][ T6387] FAT-fs (loop4): Directory bread(block 66) failed [ 120.863136][ T6387] FAT-fs (loop4): Directory bread(block 67) failed [ 120.872940][ T6387] FAT-fs (loop4): Directory bread(block 68) failed [ 120.877288][ T6387] FAT-fs (loop4): Directory bread(block 69) failed [ 120.878544][ T6387] FAT-fs (loop4): Directory bread(block 70) failed [ 120.879645][ T6387] FAT-fs (loop4): Directory bread(block 71) failed [ 120.880869][ T6387] FAT-fs (loop4): Directory bread(block 72) failed [ 120.892669][ T6387] FAT-fs (loop4): Directory bread(block 73) failed [ 121.725844][ T6392] set_capacity_and_notify: 1 callbacks suppressed [ 121.725853][ T6392] loop3: detected capacity change from 0 to 256 [ 121.752918][ T6392] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 121.963750][ T6392] bio_check_eod: 1480 callbacks suppressed [ 121.963763][ T6392] syz.3.526: attempt to access beyond end of device [ 121.963763][ T6392] loop3: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 121.973897][ T6392] syz.3.526: attempt to access beyond end of device [ 121.973897][ T6392] loop3: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 121.987635][ T6392] syz.3.526: attempt to access beyond end of device [ 121.987635][ T6392] loop3: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 121.994354][ T6392] syz.3.526: attempt to access beyond end of device [ 121.994354][ T6392] loop3: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 122.009735][ T6392] syz.3.526: attempt to access beyond end of device [ 122.009735][ T6392] loop3: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 122.021974][ T6392] syz.3.526: attempt to access beyond end of device [ 122.021974][ T6392] loop3: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 122.027404][ T6401] loop4: detected capacity change from 0 to 512 [ 122.031999][ T6401] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 122.032088][ T6392] syz.3.526: attempt to access beyond end of device [ 122.032088][ T6392] loop3: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 122.051565][ T6401] EXT4-fs (loop4): 1 truncate cleaned up [ 122.052731][ T6401] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 122.057758][ T6392] syz.3.526: attempt to access beyond end of device [ 122.057758][ T6392] loop3: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 122.060200][ T6392] syz.3.526: attempt to access beyond end of device [ 122.060200][ T6392] loop3: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 122.062571][ T6392] syz.3.526: attempt to access beyond end of device [ 122.062571][ T6392] loop3: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 122.083767][ T4344] EXT4-fs (loop4): unmounting filesystem. [ 122.210192][ T6407] loop4: detected capacity change from 0 to 1024 [ 122.212148][ T6407] EXT4-fs: Ignoring removed mblk_io_submit option [ 122.252772][ T6407] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 122.717311][ T6417] loop3: detected capacity change from 0 to 256 [ 123.156123][ T4344] EXT4-fs (loop4): unmounting filesystem. [ 123.200163][ T6423] loop4: detected capacity change from 0 to 256 [ 123.234925][ T5838] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 123.297900][ T6425] loop4: detected capacity change from 0 to 128 [ 123.298265][ T6425] EXT4-fs: Ignoring removed mblk_io_submit option [ 123.305752][ T6425] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 123.305795][ T6425] System zones: 1-3, 19-19, 35-36 [ 123.306153][ T6425] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 123.387199][ T4344] EXT4-fs (loop4): unmounting filesystem. [ 123.469258][ T6430] loop5: detected capacity change from 0 to 4096 [ 123.470845][ T6430] EXT4-fs: inline encryption not supported [ 123.484495][ T6430] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 123.486095][ T6430] EXT4-fs (loop5): Test dummy encryption mode enabled [ 123.840704][ T6430] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 123.851865][ T6430] System zones: 0-5 [ 123.858814][ T6430] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 123.911013][ T6438] loop3: detected capacity change from 0 to 256 [ 124.018205][ T6444] loop3: detected capacity change from 0 to 512 [ 124.041018][ T6444] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 124.052538][ T6444] EXT4-fs (loop3): 1 truncate cleaned up [ 124.053857][ T6444] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 124.068575][ T6435] bridge0: port 3(team0) entered disabled state [ 124.069883][ T6435] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.071758][ T6435] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.098770][ T4330] EXT4-fs (loop3): unmounting filesystem. [ 124.141622][ T6448] loop3: detected capacity change from 0 to 512 [ 124.175959][ T6448] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 124.180623][ T6448] EXT4-fs (loop3): shut down requested (0) [ 124.306408][ T6419] F2FS-fs (loop0): Invalid segment/section count (458783, 24 x 150994945) [ 124.308148][ T6419] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 124.310606][ T6419] F2FS-fs (loop0): invalid crc value [ 124.329155][ T6419] F2FS-fs (loop0): Found nat_bits in checkpoint [ 124.354579][ T4330] EXT4-fs (loop3): unmounting filesystem. [ 124.359906][ T6419] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 124.361547][ T6419] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 124.617907][ T6435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.643017][ T6435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.000205][ T6435] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.001907][ T6435] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.003680][ T6435] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.005603][ T6435] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.245488][ T6430] netlink: 'syz.5.539': attribute type 49 has an invalid length. [ 125.280921][ T4548] EXT4-fs (loop5): unmounting filesystem. [ 125.340733][ T6479] EXT4-fs: Ignoring removed nobh option [ 125.351095][ T6479] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 125.351420][ T6483] erofs: (device loop5): mounted with root inode @ nid 36. [ 125.363245][ T6479] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 125.365504][ T6479] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 125.383925][ T6479] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 125.386152][ T6479] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000] [ 125.390793][ T6479] EXT4-fs (loop1): failed to initialize system zone (-117) [ 125.392299][ T6479] EXT4-fs (loop1): mount failed [ 125.880001][ T6486] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 125.985761][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.010810][ T6486] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 126.012335][ T6486] FAT-fs (loop1): Filesystem has been set read-only [ 126.041132][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.205340][ T6486] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 126.534052][ T6481] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 126.535595][ T6481] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 126.541115][ T6481] F2FS-fs (loop4): Found nat_bits in checkpoint [ 126.557509][ T6501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.559241][ T6501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.569580][ T6493] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 126.574562][ T6493] EXT4-fs (loop0): shut down requested (1) [ 126.580430][ T6481] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 126.581973][ T6481] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 126.672512][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 127.570449][ T6514] set_capacity_and_notify: 8 callbacks suppressed [ 127.570458][ T6514] loop1: detected capacity change from 0 to 256 [ 127.685805][ T6517] loop5: detected capacity change from 0 to 512 [ 127.999964][ T6517] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 129.253395][ T4548] EXT4-fs (loop5): unmounting filesystem. [ 129.316741][ T6536] loop4: detected capacity change from 0 to 4096 [ 129.318556][ T6536] ext4: Unknown parameter 'noacl' [ 129.374274][ T4321] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 129.382116][ T6543] loop1: detected capacity change from 0 to 256 [ 129.731688][ T6549] loop1: detected capacity change from 0 to 1024 [ 129.733929][ T6549] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 129.736438][ T6549] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 129.736476][ T6551] capability: warning: `syz.3.573' uses 32-bit capabilities (legacy support in use) [ 129.743944][ T6549] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 129.751818][ T6549] System zones: 0-1, 3-36 [ 129.766220][ T6549] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 129.795344][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 130.119621][ T6556] loop4: detected capacity change from 0 to 256 [ 130.243110][ T6563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.259488][ T6563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.285081][ T6569] loop0: detected capacity change from 0 to 256 [ 130.707887][ T6573] loop4: detected capacity change from 0 to 1024 [ 130.763583][ T6573] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 130.769368][ T6573] support for the xor transformation has been removed. [ 130.785767][ T4344] EXT4-fs (loop4): unmounting filesystem. [ 131.480341][ T6587] loop4: detected capacity change from 0 to 2048 [ 131.505726][ T6587] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 131.650296][ T6598] loop3: detected capacity change from 0 to 256 [ 131.652704][ T6598] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 131.805501][ T6604] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 131.811753][ T6604] FAT-fs (loop1): Filesystem has been set read-only [ 131.989499][ T6619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.991146][ T6619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.677204][ T6587] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.584: bg 0: block 345: padding at end of block bitmap is not set [ 132.687412][ T6587] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 117 [ 132.691965][ T6587] EXT4-fs (loop4): This should not happen!! Data will be lost [ 132.691965][ T6587] [ 132.722359][ T1577] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 144 with max blocks 2048 with error 28 [ 132.729020][ T1577] EXT4-fs (loop4): This should not happen!! Data will be lost [ 132.729020][ T1577] [ 132.732323][ T1577] EXT4-fs (loop4): Total free blocks count 0 [ 132.734560][ T1577] EXT4-fs (loop4): Free/Dirty block details [ 132.736675][ T1577] EXT4-fs (loop4): free_blocks=0 [ 132.738738][ T1577] EXT4-fs (loop4): dirty_blocks=3328 [ 132.739648][ T1577] EXT4-fs (loop4): Block reservation details [ 132.895340][ T6634] set_capacity_and_notify: 1 callbacks suppressed [ 132.895349][ T6634] loop5: detected capacity change from 0 to 512 [ 132.971598][ T6639] loop4: detected capacity change from 0 to 512 [ 132.977005][ T6634] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 132.981434][ T6634] EXT4-fs error (device loop5): __ext4_find_entry:1696: inode #12: comm syz.5.601: checksumming directory block 0 [ 132.993320][ T6639] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 133.001667][ T6639] EXT4-fs (loop4): shut down requested (0) [ 133.017669][ T4548] EXT4-fs (loop5): unmounting filesystem. [ 133.065562][ T6650] loop0: detected capacity change from 0 to 256 [ 133.115757][ T4344] EXT4-fs (loop4): unmounting filesystem. [ 133.137951][ T6655] ------------[ cut here ]------------ [ 133.139114][ T6655] WARNING: CPU: 0 PID: 6655 at mm/page_alloc.c:5634 __alloc_pages+0xd0/0x544 [ 133.140809][ T6655] Modules linked in: [ 133.141581][ T6655] CPU: 0 PID: 6655 Comm: syz.5.608 Not tainted syzkaller #0 [ 133.142984][ T6655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 133.144991][ T6655] pstate: 22400005 (nzCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 133.146439][ T6655] pc : __alloc_pages+0xd0/0x544 [ 133.147351][ T6655] lr : __alloc_pages+0xac/0x544 [ 133.148282][ T6655] sp : ffff800021b077c0 [ 133.149078][ T6655] x29: ffff800021b07880 x28: ffff80001539d000 x27: 1ffff00002a73a68 [ 133.150631][ T6655] x26: ffff800021b077e0 x25: dfff800000000000 x24: ffff700004360efc [ 133.152191][ T6655] x23: 0000000000000002 x22: 0000000000000000 x21: 0000000000040cc0 [ 133.153691][ T6655] x20: 0000000000000000 x19: 0000000000000013 x18: 0000000000000000 [ 133.155187][ T6655] x17: 0000000000000000 x16: ffff8000082dbd50 x15: 0000000000000000 [ 133.156718][ T6655] x14: 0000000000000005 x13: 1ffff00004360f00 x12: 0000000000000000 [ 133.158245][ T6655] x11: 0000000000000000 x10: ffff700004360f05 x9 : 0000000000000001 [ 133.159965][ T6655] x8 : ffff800017d7e000 x7 : 0000000000000000 x6 : 0000000000000000 [ 133.161560][ T6655] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000020 [ 133.163220][ T6655] x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000 [ 133.164853][ T6655] Call trace: [ 133.165577][ T6655] __alloc_pages+0xd0/0x544 [ 133.166563][ T6655] __kmalloc_large_node+0x9c/0x1dc [ 133.167664][ T6655] __kmalloc_node_track_caller+0x120/0x174 [ 133.168930][ T6655] memdup_user_nul+0x5c/0x228 [ 133.169930][ T6655] bitmap_parse_user+0x34/0x88 [ 133.170879][ T6655] write_irq_affinity+0x1a0/0x2f4 [ 133.171857][ T6655] irq_affinity_proc_write+0x38/0x4c [ 133.173000][ T6655] proc_reg_write+0x184/0x2d4 [ 133.173889][ T6655] vfs_write+0x2a8/0x7c8 [ 133.174692][ T6655] ksys_write+0x12c/0x228 [ 133.175502][ T6655] __arm64_sys_write+0x7c/0x90 [ 133.176387][ T6655] invoke_syscall+0x98/0x290 [ 133.177250][ T6655] el0_svc_common+0x13c/0x258 [ 133.178127][ T6655] do_el0_svc+0x5c/0x134 [ 133.178930][ T6655] el0_svc+0x58/0x128 [ 133.179656][ T6655] el0t_64_sync_handler+0x84/0xf0 [ 133.180574][ T6655] el0t_64_sync+0x18c/0x190 [ 133.181380][ T6655] irq event stamp: 620 [ 133.182108][ T6655] hardirqs last enabled at (619): [] el0_svc_common+0xa0/0x258 [ 133.183852][ T6655] hardirqs last disabled at (620): [] el1_dbg+0x24/0x80 [ 133.185344][ T6655] softirqs last enabled at (614): [] local_bh_enable+0x10/0x34 [ 133.186970][ T6655] softirqs last disabled at (612): [] local_bh_disable+0x10/0x34 [ 133.188679][ T6655] ---[ end trace 0000000000000000 ]--- [ 133.225466][ T6660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.227629][ T6660] misc raw-gadget: fail, usb_gadget_register_driver returned -16