last executing test programs: 5.174976414s ago: executing program 3 (id=954): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x40001f9, 0x2, 0x0) ioctl$XFS_IOC_FSINUMBERS(0xffffffffffffffff, 0xc0205867, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000001cc0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) r4 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e23, 0x1000, @empty}, 0x1c) setreuid(0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x1808014, &(0x7f00000009c0)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461002018bbdecde39739fcd1df176dde746ec834120600000000003b048000000000000072462abc30ef5b65c70f73ecea54b5e5bec5aca9836c319f653557e79a002208ceae6dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e36868736000000f6a55493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1174e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc369c71e57fafab52f325ca91e684160191acf5ae7469c82ab4145b595b987d75912afdcc1c061835294cc0c618aba204f8adaa20c80108d356cd887ba217c8f569e6d0caf75052a77056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6ac0d90ea79b8027cf75964dd86c2ed2b5e75779677a28c76b848dd03dab190b5f02ec52830f3ff01eaae1c3df076000000000000000000000000000083a48a6b926c668b9ba42490175018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac011170182f99766e86fb125cc6799c43aa4dc708dc4a00a6decad26f0378072a571da000000aec3dfbae348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0f1415e90fd0400bad5f796374bb196e60e537b8ffca80a5ec3c5c063aab2c87a7824c4fbfab7264185e1b2e59012acbf3732abe75b848de8ec4aaba2e3c8cd14dd9bf9499952815b9fb34057a585a9c18a11f3d496825b3fcb0c8aa89e079fd78997da864b302139b2b10597100846b55f7d0b050b7b0ef7e9c897c50b53404acdd701425323201b33465fddec69c37cb13fd441a830af5ea73f4ac82d7926eb0db1141003d148473077a76c3bee7e37dc799abb47bd67cde7958c50fb2d15c9cc196e4bff1d00"/716, @ANYRESHEX, @ANYBLOB="99b77d5bf0e4f488f1a06d3eaadf288d1a0bc9008f6a3bcf6564a3bb5d28e7605fcd02c5b1692869cd162d8accf9c2d716b7537a34aea4d2212a59e6b6205bb2b3ec1d7f1c1521d56d697305db68aeb1f641f73293b945e4a7c4ea5eaae5e241d70c42aa26b50f699caeec0b3ae27d32208d654541c7d2b05b73441275b81e91a5610bddc43ac550a55f5d56c8cece27675c29446ee82f70d92bcac9c21953637402f90a9eb507c8b69cdb6d090cfa24e99dff71609ae03282267987feec0478b447840876084eda7a22aecf54efa457d9ab75ad861e", @ANYBLOB="be0c386e4cdc3da35edc21c83330dd2cd3675bc494b4e83934f360ff1e86d52fd7c8efe5bb669a90b583ded38147d1"], 0x5, 0x5593, &(0x7f00000061c0)="$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") r5 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r5, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40002, &(0x7f00000003c0)={[{@min_batch_time={'min_batch_time', 0x3d, 0xa}}, {@inlinecrypt}, {@min_batch_time={'min_batch_time', 0x3d, 0x402}}, {@stripe={'stripe', 0x3d, 0x40000}}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@discard}, {@nobarrier}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@journal_checksum}]}, 0xfa, 0x49c, &(0x7f0000001e80)="$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") 3.450888052s ago: executing program 3 (id=957): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x80c8d0, &(0x7f0000000140)=ANY=[], 0x1, 0x34f, &(0x7f00000004c0)="$eJzs3M1vG0UYx/FfjO04qZr1AYE4oD4SF7isknDigrBQKyEiUYUa8SIhts0GrCx25LWCjBBpT1w4IP4IDlWPvVWC/gO5cOOAuHDLBYkDPSAWed+8bpzEdes2L9+PVO00M8/ubGazemalmf0Pf/hyazN0N72eSjXTnCQ9kOoqKTOXHktxuaq6hm7qtQt///by+x99/G5jbe3yutmVxrXXV81s6dLPX32zkDa7N6+9+qf7f63+uffC3kv7/137ohVaK7R2p2eeXe/80fOuB75ttMIt1+xq4Huhb6126HeT+mhXCnzbDDrb233z2gsXF7e7fhia1+7blt+3Xsd63b55n3uttrmuaxcXdbz5CdqcZc3b6+teI/3PG889WvCNWfQIjyca80h3uw1vMLYLB2qat59OrwAAwEmS5v95tl8apPTH5P9Fef5fTvL/3yUV8v879fu9Cx/cXUrz/3vVQf4vFfL/z/JT1WQbpTz/r0ka5v+dZH6Q5/8bTyb/P5gRnW7fjw6OoigvVse1H8n/cUYN8v/F9O83duuTO8txgfwfAAAAAAAAAAAAAAAAAAAAAIDT4EEUOVEUOckxWwEeOfPxghwpSusPCX/EJeM4aUbHf/hvwvHHKTfcuKO8JAXf7TR3mskxbXBfUiBfy3L0b/w8pAbl6k0rrqL7JdhN43d3msmrobGpVhy/Ikf1h+Oj6Mo7a5dXzLJdCwrxFS0W41fl6Hlpfkz8qiXy61cGx6pefaUQ78rRrzfUUaCNdGVcFv/titnb763ZaP8X4nYAAAAAAJwFruXq2fy3uIWg6x6sT+bHSX0yvy5r/PeBZH69/PD8PI4vq1R+VncNAAAAAMD5Eva/3vKCwO/OqHBL0lFtyprN1YffMCaNyjbIPaTNnOaefFdrkuJCdvHpzjPo2xRXr4ytqkz0GytN1dVL1ckHpXpoVfbZ6LBwXZ1mLCInHYvHGNMXf/zpn6PbJF/GpElO+Obd2jF3esQjUT6qTfW4O62MvCRKs30HAQAAAHg6hkl/9pO3pMqz7RMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOfNrPf/K+4sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJx3/wcAAP//QOD4ig==") recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10040, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x14, 0xfffffffffffffe6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 3.347531158s ago: executing program 0 (id=959): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000440)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f00000000c0)="4b0003000000", 0x6) getsockname$packet(r3, 0x0, &(0x7f0000000040)) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket(0x1, 0x803, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0xfffffe1a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x884) 3.271970302s ago: executing program 0 (id=962): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000740), &(0x7f0000000800), 0x2}, 0x20) 3.238380143s ago: executing program 1 (id=963): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x8001) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000040)={0x0, 0xb, 0x1, 0x3, 0x0, 0x7, 0x0}) 3.173701467s ago: executing program 0 (id=964): r0 = socket(0xa, 0x3, 0xff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$inet6(r0, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000180)="9e91d91a92dc7c8f06c24fbe79d9284d0c66c92c658bb539e2ffb332c99223a7dfe52c", 0x23}], 0x1}, 0x20008b88) 3.148286408s ago: executing program 0 (id=965): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x1, 0x105c2, &(0x7f0000020b80)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101041, 0x15) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700000000000000ffffff7f000000000000000001fcffff0000000000000000f72a39ae123afeec5db671a673d6808a410c12798df47523f91d7c566d810948f508862d65d032d82805c4094244c810f51f1d16dcb67892ad49e7fcd288c8fe31992e72f0"]) 3.119158419s ago: executing program 1 (id=967): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000100)={0x2, 0x100, 0x0, 0x2, 0x7, 0x42}) 3.005278355s ago: executing program 3 (id=969): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2c, &(0x7f0000000200)={0x2000, {{0xa, 0x0, 0x7, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r3) socket$inet(0x2, 0x3, 0x4) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0xa0, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x40, 0x0) close(r5) socket$packet(0x11, 0x2, 0x300) r6 = socket$unix(0x1, 0x5, 0x0) bind$unix(r6, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x12) listen(r6, 0x787) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000200), 0x2a10413, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB]) 2.383206737s ago: executing program 2 (id=975): r0 = socket(0xa, 0x3, 0xff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$inet6(r0, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000180)="9e91d91a92dc7c8f06c24fbe79d9284d0c66c92c658bb539e2ffb332c99223a7dfe52c", 0x23}], 0x1}, 0x20008b88) 2.300349561s ago: executing program 1 (id=978): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xc695d31f854950dd}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29c}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x3, 0x6, 0x86}, 0x65}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, 0x0, 0x4005) 2.295237231s ago: executing program 2 (id=979): r0 = syz_open_dev$usbfs(0x0, 0x77, 0x8001) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000040)={0x0, 0xb, 0x1, 0x3, 0x0, 0x7, 0x0}) 2.205595816s ago: executing program 2 (id=980): socket$unix(0x1, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) 1.598118887s ago: executing program 3 (id=982): openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0x1}, &(0x7f0000000200), 0x0}, 0x20) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'aead\x00', 0x11, 0x0, 'aegis256-generic\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0x87, "7bf8ec152fa16d39e4553d9607191c01003f4f261459314625abafbae0dd3d3a415cb19b2f3f5bd1d92f8a3b28f86ac6911e26622113c1d519b46c2b1bb9b76cf8008d37a06e88b31100ae16fcb20ca3c5e2bc78d0014278c1e4c7fb4ab35e2c3ae32abc7bf205fd325765be5684ece2933f3325ec9cb8b4725605bf2722d1ded87089430c8a35"}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x19, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x22000040) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r0, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x48805}, 0x4008004) 1.34563558s ago: executing program 2 (id=983): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x2, 0x0}, @broadcast}, @timestamp={0xd, 0x0, 0x0, 0x7, 0x0, 0x3, 0x3f5, 0x5}}}}}, 0x0) 1.262169395s ago: executing program 2 (id=986): socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x5) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f0000000100), 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 1.261971825s ago: executing program 0 (id=987): unshare(0x62020600) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw6\x00') preadv(r0, &(0x7f0000000400)=[{&(0x7f0000002180)=""/168, 0xa8}], 0x1, 0x24, 0x8080) 1.261551965s ago: executing program 4 (id=988): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x0, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x6, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x7, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1007, 0x7fff, 0xfffffffe, 0x400, 0x3ff, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x8000042, 0x3], [0x4, 0x408, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x2b8, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d02, 0x6, 0x38, 0x203, 0x1fd, 0x80, 0x3, 0x4, 0x2950bfaf, 0x8, 0xa4, 0x4, 0xa9, 0x5, 0x6, 0x2, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2006, 0x80a2ed, 0x5, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x9, 0x5, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0xe, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x70, 0x28, &(0x7f0000000800)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x2, 0x3e}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000580)=""/236, 0xec, 0x1, 0x26}, @fda={0x66646185, 0x9, 0x1, 0xb8}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) 1.181518669s ago: executing program 1 (id=989): r0 = socket(0xa, 0x3, 0xff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$inet6(r0, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000180)="9e91d91a92dc7c8f06c24fbe79d9284d0c66c92c658bb539e2ffb332c99223a7dfe52c", 0x23}], 0x1}, 0x20008b88) 1.181137859s ago: executing program 3 (id=990): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x0, 0x5003) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prlimit64(r0, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) capget(&(0x7f00000000c0)={0x20071026, r0}, &(0x7f0000000340)={0xfff, 0x8, 0xe, 0x0, 0x40, 0xd}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/bus/input/devices\x00', 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x6, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00, 0x50000000}, [@call={0xc}, @exit, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 1.180705859s ago: executing program 4 (id=991): r0 = syz_open_dev$usbfs(0x0, 0x77, 0x8001) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000040)={0x0, 0xb, 0x1, 0x3, 0x0, 0x7, 0x0}) 1.125681232s ago: executing program 4 (id=992): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000440)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f00000000c0)="4b0003000000", 0x6) getsockname$packet(r3, 0x0, &(0x7f0000000040)) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket(0x1, 0x803, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0xfffffe1a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x884) 1.125180992s ago: executing program 1 (id=993): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x40, 0x8, 0x8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xffff24d6, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x2, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x7, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0x7ff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000200)="2478546ca4fa3b", 0x7, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14) 579.89474ms ago: executing program 3 (id=994): socket$unix(0x1, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) 494.526184ms ago: executing program 4 (id=995): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[@ANYRES8, @ANYRES8], 0x32600) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) 433.590327ms ago: executing program 0 (id=996): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_tgsigqueueinfo(r0, 0xffffffffffffffff, 0x1d, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$vcsa(0x0, 0x1, 0x40402) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x8001) 407.618408ms ago: executing program 4 (id=997): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000008000000950000000000000076d5030174950f1a688c67406e5ee79d2dcb75cc370c483357716247f417"], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000013c0)={r1, r2, 0x25, 0x0, @void}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_ethernet(0xd41, &(0x7f0000002180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @val={@void, {0x8100, 0x6, 0x0, 0x2}}, {@llc_tr={0x11, {@llc={0x0, 0xbc6a4763c38d1641, '\f', "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"}}}}}, 0x0) 374.66383ms ago: executing program 2 (id=998): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000010, &(0x7f0000000280)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x81, 0x7a5, &(0x7f0000000f80)="$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") r0 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x110) pwrite64(r1, &(0x7f0000000540)="321983", 0x3, 0x8080c61) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 213.68µs ago: executing program 1 (id=999): r0 = socket(0xa, 0x3, 0xff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$inet6(r0, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000180)="9e91d91a92dc7c8f06c24fbe79d9284d0c66c92c658bb539e2ffb332c99223a7df2b2c", 0x23}], 0x2}, 0x20008b88) 0s ago: executing program 4 (id=1000): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xc695d31f854950dd}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29c}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x3, 0x6, 0x86}, 0x65}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, 0x0, 0x4005) kernel console output (not intermixed with test programs): T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.161748][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.164700][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.166247][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.168569][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.179662][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.181989][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.204924][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.206126][ T4387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.206205][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.207497][ T4387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.209192][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.211787][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.215925][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.217176][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.221151][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.228827][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.230597][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.232150][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.234977][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.236655][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.238359][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.240049][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.241904][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.245224][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.246484][ T1659] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.248722][ T1659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.255106][ T4333] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.256454][ T4333] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.257831][ T4333] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.259260][ T4333] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.280480][ T1659] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.281866][ T1659] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.283775][ T1659] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.290930][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.292327][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.295846][ T1659] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.297115][ T1659] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.298527][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.300194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.306696][ T4387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.308076][ T4387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.311270][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.317885][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.319414][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.321362][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.339755][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.341070][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.342417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.383022][ T4387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.384422][ T4387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.385925][ T1659] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.489681][ T4412] loop1: detected capacity change from 0 to 256 [ 33.506208][ T4414] loop0: detected capacity change from 0 to 1024 [ 33.507918][ T4414] ======================================================= [ 33.507918][ T4414] WARNING: The mand mount option has been deprecated and [ 33.507918][ T4414] and is ignored by this kernel. Remove the mand [ 33.507918][ T4414] option from the mount to silence this warning. [ 33.507918][ T4414] ======================================================= [ 33.517261][ T4412] FAT-fs (loop1): Directory bread(block 64) failed [ 33.518475][ T4412] FAT-fs (loop1): Directory bread(block 65) failed [ 33.519560][ T4412] FAT-fs (loop1): Directory bread(block 66) failed [ 33.520644][ T4412] FAT-fs (loop1): Directory bread(block 67) failed [ 33.521771][ T4412] FAT-fs (loop1): Directory bread(block 68) failed [ 33.526648][ T4412] FAT-fs (loop1): Directory bread(block 69) failed [ 33.528422][ T4412] FAT-fs (loop1): Directory bread(block 70) failed [ 33.529523][ T4412] FAT-fs (loop1): Directory bread(block 71) failed [ 33.530621][ T4412] FAT-fs (loop1): Directory bread(block 72) failed [ 33.541063][ T4412] FAT-fs (loop1): Directory bread(block 73) failed [ 33.848270][ T4414] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 2: comm syz.0.1: lblock 2 mapped to illegal pblock 2 (length 1) [ 33.858377][ T4414] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 33.859874][ T4414] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 48: comm syz.0.1: lblock 0 mapped to illegal pblock 48 (length 1) [ 33.869013][ T4414] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 33.876786][ T4414] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.1: Failed to acquire dquot type 0 [ 33.882132][ T4414] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 33.887691][ T4414] EXT4-fs error (device loop0): ext4_evict_inode:281: inode #11: comm syz.0.1: mark_inode_dirty error [ 34.942827][ T4423] loop4: detected capacity change from 0 to 40427 [ 34.999245][ T4338] Bluetooth: hci2: command 0x041b tx timeout [ 34.999270][ T4328] Bluetooth: hci0: command 0x041b tx timeout [ 35.001461][ T4338] Bluetooth: hci1: command 0x041b tx timeout [ 35.001552][ T4328] Bluetooth: hci4: command 0x041b tx timeout [ 35.003570][ T4328] Bluetooth: hci3: command 0x041b tx timeout [ 35.093275][ T4423] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 35.094934][ T4423] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 35.121197][ T4423] F2FS-fs (loop4): invalid crc value [ 35.196559][ T4414] EXT4-fs warning (device loop0): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 35.372643][ C0] sched: RT throttling activated [ 35.387250][ T4414] EXT4-fs (loop0): 1 orphan inode deleted [ 35.388338][ T4414] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 35.456216][ T4387] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 35.458946][ T4387] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 35.460402][ T4387] EXT4-fs error (device loop0): ext4_release_dquot:6877: comm kworker/u4:7: Failed to release dquot type 0 [ 35.465787][ T4414] EXT4-fs (loop0): unmounting filesystem. [ 35.466803][ T4414] EXT4-fs error (device loop0): __ext4_get_inode_loc:4520: comm syz.0.1: Invalid inode table block 1 in block_group 0 [ 35.482764][ T4414] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 35.485959][ T4423] F2FS-fs (loop4): Found nat_bits in checkpoint [ 35.503882][ T4414] EXT4-fs error (device loop0): ext4_quota_off:7147: inode #3: comm syz.0.1: mark_inode_dirty error [ 35.507272][ T4423] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 35.508502][ T4423] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 36.611268][ T4434] loop2: detected capacity change from 0 to 40427 [ 36.712166][ T4434] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 36.713583][ T4434] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 36.900138][ T4434] F2FS-fs (loop2): invalid crc value [ 37.052926][ T4338] Bluetooth: hci3: command 0x040f tx timeout [ 37.052956][ T4325] Bluetooth: hci1: command 0x040f tx timeout [ 37.052974][ T4328] Bluetooth: hci4: command 0x040f tx timeout [ 37.056042][ T4338] Bluetooth: hci0: command 0x040f tx timeout [ 37.057102][ T4325] Bluetooth: hci2: command 0x040f tx timeout [ 37.333784][ T4434] F2FS-fs (loop2): Found nat_bits in checkpoint [ 37.343941][ T4434] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 37.345105][ T4434] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 37.375811][ T4429] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 37.378406][ T4429] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 37.464044][ T4444] loop0: detected capacity change from 0 to 256 [ 37.483348][ T4448] loop3: detected capacity change from 0 to 16 [ 37.484697][ T4448] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 37.492223][ T4444] FAT-fs (loop0): Directory bread(block 64) failed [ 37.498620][ T4448] erofs: DAX unsupported by block device. Turning off DAX. [ 37.500536][ T4444] FAT-fs (loop0): Directory bread(block 65) failed [ 37.501683][ T4444] FAT-fs (loop0): Directory bread(block 66) failed [ 37.504995][ T4448] erofs: (device loop3): mounted with root inode @ nid 36. [ 37.511290][ T4444] FAT-fs (loop0): Directory bread(block 67) failed [ 37.512349][ T4444] FAT-fs (loop0): Directory bread(block 68) failed [ 37.541022][ T4444] FAT-fs (loop0): Directory bread(block 69) failed [ 37.542279][ T4444] FAT-fs (loop0): Directory bread(block 70) failed [ 37.545952][ T4444] FAT-fs (loop0): Directory bread(block 71) failed [ 37.547068][ T4444] FAT-fs (loop0): Directory bread(block 72) failed [ 37.548159][ T4444] FAT-fs (loop0): Directory bread(block 73) failed [ 37.555181][ T4429] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 37.557108][ T4429] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 37.641172][ T4453] syz.2.11 uses obsolete (PF_INET,SOCK_PACKET) [ 37.947684][ T4483] netlink: 40 bytes leftover after parsing attributes in process `syz.2.18'. [ 37.950872][ T4487] Bluetooth: MGMT ver 1.22 [ 37.957155][ T4483] Zero length message leads to an empty skb [ 38.029295][ T4495] device syzkaller0 entered promiscuous mode [ 38.430445][ T4503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.440705][ T4503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.693526][ T4516] device syzkaller0 entered promiscuous mode [ 39.133350][ T4334] Bluetooth: hci0: command 0x0419 tx timeout [ 39.133754][ T4338] Bluetooth: hci2: command 0x0419 tx timeout [ 39.134313][ T4334] Bluetooth: hci4: command 0x0419 tx timeout [ 39.135353][ T4338] Bluetooth: hci3: command 0x0419 tx timeout [ 39.136254][ T4334] Bluetooth: hci1: command 0x0419 tx timeout [ 49.897171][ T4544] netlink: 40 bytes leftover after parsing attributes in process `syz.0.33'. [ 50.248877][ T4577] device syzkaller0 entered promiscuous mode [ 50.277390][ T4582] netlink: 40 bytes leftover after parsing attributes in process `syz.2.47'. [ 61.170353][ T4626] device syzkaller0 entered promiscuous mode [ 61.406449][ T4637] netlink: 40 bytes leftover after parsing attributes in process `syz.1.60'. [ 61.491082][ T4652] device syzkaller0 entered promiscuous mode [ 64.493946][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.495226][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.634609][ T22] cfg80211: failed to load regulatory.db [ 72.557009][ T4697] netlink: 40 bytes leftover after parsing attributes in process `syz.1.76'. [ 72.564313][ T4699] device syzkaller0 entered promiscuous mode [ 73.636794][ T4730] device syzkaller0 entered promiscuous mode [ 84.872871][ T4755] netlink: 40 bytes leftover after parsing attributes in process `syz.3.92'. [ 84.919230][ T4775] device syzkaller0 entered promiscuous mode [ 86.067754][ T4810] netlink: 40 bytes leftover after parsing attributes in process `syz.2.107'. [ 86.211418][ T4815] device syzkaller0 entered promiscuous mode [ 97.561116][ T4840] device syzkaller0 entered promiscuous mode [ 97.731277][ T4865] netlink: 40 bytes leftover after parsing attributes in process `syz.3.122'. [ 98.341273][ T4885] loop4: detected capacity change from 0 to 16 [ 98.348688][ T4885] erofs: (device loop4): mounted with root inode @ nid 36. [ 98.376900][ T4885] syz.4.126: attempt to access beyond end of device [ 98.376900][ T4885] loop4: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 98.379469][ T4885] syz.4.126: attempt to access beyond end of device [ 98.379469][ T4885] loop4: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 98.386565][ T4885] syz.4.126: attempt to access beyond end of device [ 98.386565][ T4885] loop4: rw=0, sector=1056, nr_sectors = 8 limit=16 [ 98.986414][ T4903] device syzkaller0 entered promiscuous mode [ 99.118158][ T4924] netlink: 40 bytes leftover after parsing attributes in process `syz.3.136'. [ 99.137815][ T4877] loop0: detected capacity change from 0 to 131072 [ 99.143841][ T4877] F2FS-fs (loop0): invalid crc value [ 99.160811][ T4877] F2FS-fs (loop0): Found nat_bits in checkpoint [ 99.179126][ T4877] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 99.517068][ T4955] netlink: 40 bytes leftover after parsing attributes in process `syz.2.148'. [ 99.520547][ T4935] loop4: detected capacity change from 0 to 40427 [ 99.530980][ T4935] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 99.544453][ T4935] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 99.550960][ T4935] F2FS-fs (loop4): invalid crc value [ 99.564143][ T4935] F2FS-fs (loop4): Found nat_bits in checkpoint [ 99.598211][ T4935] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 99.599506][ T4935] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 99.649369][ T4966] device syzkaller0 entered promiscuous mode [ 99.744199][ T4974] loop0: detected capacity change from 0 to 256 [ 99.751827][ T4974] FAT-fs (loop0): Directory bread(block 64) failed [ 99.753970][ T4974] FAT-fs (loop0): Directory bread(block 65) failed [ 99.755611][ T4974] FAT-fs (loop0): Directory bread(block 66) failed [ 99.756877][ T4974] FAT-fs (loop0): Directory bread(block 67) failed [ 99.761839][ T4974] FAT-fs (loop0): Directory bread(block 68) failed [ 99.763990][ T4974] FAT-fs (loop0): Directory bread(block 69) failed [ 99.765141][ T4974] FAT-fs (loop0): Directory bread(block 70) failed [ 99.766278][ T4974] FAT-fs (loop0): Directory bread(block 71) failed [ 99.767410][ T4974] FAT-fs (loop0): Directory bread(block 72) failed [ 99.768654][ T4974] FAT-fs (loop0): Directory bread(block 73) failed [ 99.909404][ T4970] loop3: detected capacity change from 0 to 40427 [ 99.920339][ T4970] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 99.921690][ T4970] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 99.924942][ T4970] F2FS-fs (loop3): invalid crc value [ 99.936055][ T4970] F2FS-fs (loop3): Found nat_bits in checkpoint [ 99.956051][ T4970] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 99.957289][ T4970] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 100.422122][ T4996] netlink: 40 bytes leftover after parsing attributes in process `syz.0.160'. [ 100.439559][ T4998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.441135][ T4998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.508034][ T5004] device syzkaller0 entered promiscuous mode [ 100.600920][ T5002] loop0: detected capacity change from 0 to 40427 [ 100.607047][ T5002] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 100.608438][ T5002] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 100.610461][ T5002] F2FS-fs (loop0): invalid crc value [ 100.612541][ T5002] F2FS-fs (loop0): Found nat_bits in checkpoint [ 100.620122][ T5002] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 100.621329][ T5002] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 100.716709][ T4321] syz-executor: attempt to access beyond end of device [ 100.716709][ T4321] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 100.830990][ T5020] loop3: detected capacity change from 0 to 256 [ 100.858097][ T5020] FAT-fs (loop3): Directory bread(block 64) failed [ 100.859393][ T5020] FAT-fs (loop3): Directory bread(block 65) failed [ 100.860563][ T5020] FAT-fs (loop3): Directory bread(block 66) failed [ 100.861655][ T5020] FAT-fs (loop3): Directory bread(block 67) failed [ 100.864204][ T5020] FAT-fs (loop3): Directory bread(block 68) failed [ 100.865243][ T5020] FAT-fs (loop3): Directory bread(block 69) failed [ 100.866321][ T5020] FAT-fs (loop3): Directory bread(block 70) failed [ 100.870915][ T5020] FAT-fs (loop3): Directory bread(block 71) failed [ 100.872557][ T5020] FAT-fs (loop3): Directory bread(block 72) failed [ 100.874883][ T5020] FAT-fs (loop3): Directory bread(block 73) failed [ 101.007293][ T5031] netlink: 40 bytes leftover after parsing attributes in process `syz.2.174'. [ 101.199590][ T5037] loop0: detected capacity change from 0 to 40427 [ 101.206739][ T5037] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 101.208045][ T5037] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 101.210790][ T5035] loop2: detected capacity change from 0 to 40427 [ 101.214921][ T5037] F2FS-fs (loop0): invalid crc value [ 101.222744][ T5035] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 101.224037][ T5035] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 101.229965][ T5035] F2FS-fs (loop2): invalid crc value [ 101.251221][ T5035] F2FS-fs (loop2): Found nat_bits in checkpoint [ 101.253548][ T5037] F2FS-fs (loop0): Found nat_bits in checkpoint [ 101.283599][ T5035] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 101.285052][ T5035] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 101.285056][ T5037] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 101.287948][ T5037] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 101.336619][ T5054] device syzkaller0 entered promiscuous mode [ 101.834563][ T5066] loop2: detected capacity change from 0 to 256 [ 101.850298][ T5068] netlink: 40 bytes leftover after parsing attributes in process `syz.4.187'. [ 101.879715][ T5066] FAT-fs (loop2): Directory bread(block 64) failed [ 101.881040][ T5066] FAT-fs (loop2): Directory bread(block 65) failed [ 101.886229][ T5066] FAT-fs (loop2): Directory bread(block 66) failed [ 101.888888][ T5066] FAT-fs (loop2): Directory bread(block 67) failed [ 101.896020][ T5066] FAT-fs (loop2): Directory bread(block 68) failed [ 101.897098][ T5066] FAT-fs (loop2): Directory bread(block 69) failed [ 101.898249][ T5066] FAT-fs (loop2): Directory bread(block 70) failed [ 101.899384][ T5066] FAT-fs (loop2): Directory bread(block 71) failed [ 101.906584][ T5066] FAT-fs (loop2): Directory bread(block 72) failed [ 101.907665][ T5066] FAT-fs (loop2): Directory bread(block 73) failed [ 101.920093][ T4327] syz-executor: attempt to access beyond end of device [ 101.920093][ T4327] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 101.964970][ T5062] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 101.966214][ T5062] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 101.988751][ T5062] F2FS-fs (loop1): Found nat_bits in checkpoint [ 102.024411][ T5062] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 102.025528][ T5062] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 102.066266][ T4322] syz-executor: attempt to access beyond end of device [ 102.066266][ T4322] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 102.352422][ T5091] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 102.353943][ T5091] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 102.355994][ T5091] F2FS-fs (loop1): invalid crc value [ 102.358224][ T5091] F2FS-fs (loop1): Found nat_bits in checkpoint [ 102.365804][ T5091] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 102.367194][ T5091] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 102.712752][ T1965] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 102.899621][ T1965] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 102.901365][ T1965] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 102.903071][ T1965] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.913751][ T1965] usb 1-1: config 0 descriptor?? [ 102.992571][ T5116] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 102.993966][ T5116] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 103.006661][ T5116] F2FS-fs (loop2): invalid crc value [ 103.009199][ T5116] F2FS-fs (loop2): Found nat_bits in checkpoint [ 103.017706][ T5116] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 103.018943][ T5116] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 103.118895][ T5123] FAT-fs (loop3): Directory bread(block 64) failed [ 103.120407][ T5123] FAT-fs (loop3): Directory bread(block 65) failed [ 103.121701][ T5123] FAT-fs (loop3): Directory bread(block 66) failed [ 103.127542][ T5123] FAT-fs (loop3): Directory bread(block 67) failed [ 103.128715][ T5123] FAT-fs (loop3): Directory bread(block 68) failed [ 103.130550][ T5123] FAT-fs (loop3): Directory bread(block 69) failed [ 103.131633][ T5123] FAT-fs (loop3): Directory bread(block 70) failed [ 103.133376][ T5123] FAT-fs (loop3): Directory bread(block 71) failed [ 103.134562][ T5123] FAT-fs (loop3): Directory bread(block 72) failed [ 103.135671][ T5123] FAT-fs (loop3): Directory bread(block 73) failed [ 103.439570][ T1965] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 103.452524][ T1965] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0001/input/input2 [ 103.628135][ T1965] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 103.846463][ T111] usb 1-1: USB disconnect, device number 2 [ 113.350525][ T5112] netlink: 40 bytes leftover after parsing attributes in process `syz.1.200'. [ 113.496376][ T4329] syz-executor: attempt to access beyond end of device [ 113.496376][ T4329] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 113.631832][ T5160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.640328][ T5160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.675598][ T5165] set_capacity_and_notify: 4 callbacks suppressed [ 113.675612][ T5165] loop0: detected capacity change from 0 to 256 [ 113.710302][ T5167] tipc: Failed to remove unknown binding: 66,0,0/0:3676426789/3676426791 [ 113.711854][ T5167] tipc: Failed to remove unknown binding: 66,0,0/0:3676426789/3676426790 [ 113.719261][ T5165] FAT-fs (loop0): Directory bread(block 64) failed [ 113.720417][ T5165] FAT-fs (loop0): Directory bread(block 65) failed [ 113.721595][ T5165] FAT-fs (loop0): Directory bread(block 66) failed [ 113.722570][ T5165] FAT-fs (loop0): Directory bread(block 67) failed [ 113.726738][ T5165] FAT-fs (loop0): Directory bread(block 68) failed [ 113.727851][ T5165] FAT-fs (loop0): Directory bread(block 69) failed [ 113.728915][ T5165] FAT-fs (loop0): Directory bread(block 70) failed [ 113.729979][ T5165] FAT-fs (loop0): Directory bread(block 71) failed [ 113.731126][ T5165] FAT-fs (loop0): Directory bread(block 72) failed [ 113.732177][ T5165] FAT-fs (loop0): Directory bread(block 73) failed [ 113.780290][ T5171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.781784][ T5171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.928461][ T5176] ipt_REJECT: TCP_RESET invalid for non-tcp [ 113.932106][ T5176] capability: warning: `syz.2.217' uses deprecated v2 capabilities in a way that may be insecure [ 113.952552][ T5176] loop2: detected capacity change from 0 to 128 [ 113.957463][ T5176] FAT-fs (loop2): Unrecognized mount option "" or missing value [ 114.142015][ T5150] loop4: detected capacity change from 0 to 40427 [ 114.145594][ T5175] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 114.155385][ T5150] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 114.157916][ T5150] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 114.160912][ T5150] F2FS-fs (loop4): invalid crc value [ 114.180914][ T5150] F2FS-fs (loop4): Found nat_bits in checkpoint [ 114.195581][ T5150] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 114.197067][ T5150] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 114.207252][ T5150] overlayfs: missing 'lowerdir' [ 114.255409][ T5173] loop0: detected capacity change from 0 to 40427 [ 114.260179][ T5173] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 114.262182][ T5173] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 114.266408][ T5173] F2FS-fs (loop0): invalid crc value [ 114.276666][ T5173] F2FS-fs (loop0): Found nat_bits in checkpoint [ 114.299365][ T5173] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 114.300561][ T5173] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 125.510933][ T4327] syz-executor: attempt to access beyond end of device [ 125.510933][ T4327] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 125.595824][ T5215] loop1: detected capacity change from 0 to 256 [ 125.606835][ T5216] netlink: 56 bytes leftover after parsing attributes in process `syz.2.227'. [ 125.610302][ T5215] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d) [ 125.726193][ T5228] loop4: detected capacity change from 0 to 512 [ 125.732421][ T5229] loop3: detected capacity change from 0 to 256 [ 125.772550][ T5229] FAT-fs (loop3): Directory bread(block 64) failed [ 125.795312][ T5228] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 125.802538][ T5229] FAT-fs (loop3): Directory bread(block 65) failed [ 125.816255][ T5229] FAT-fs (loop3): Directory bread(block 66) failed [ 125.817301][ T5229] FAT-fs (loop3): Directory bread(block 67) failed [ 125.818412][ T5229] FAT-fs (loop3): Directory bread(block 68) failed [ 125.819481][ T5229] FAT-fs (loop3): Directory bread(block 69) failed [ 125.820629][ T5229] FAT-fs (loop3): Directory bread(block 70) failed [ 125.821715][ T5229] FAT-fs (loop3): Directory bread(block 71) failed [ 125.827201][ T4333] EXT4-fs (loop4): unmounting filesystem. [ 125.834722][ T5229] FAT-fs (loop3): Directory bread(block 72) failed [ 125.841238][ T5229] FAT-fs (loop3): Directory bread(block 73) failed [ 125.933035][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.934328][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.962544][ T5226] loop0: detected capacity change from 0 to 40427 [ 125.977932][ T5226] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 125.980967][ T5226] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 125.984470][ T5226] F2FS-fs (loop0): invalid crc value [ 125.987071][ T5226] F2FS-fs (loop0): Found nat_bits in checkpoint [ 125.996770][ T5226] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 125.998053][ T5226] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 126.006361][ T5226] overlayfs: missing 'lowerdir' [ 126.054897][ T5247] netlink: 40 bytes leftover after parsing attributes in process `syz.3.238'. [ 126.365854][ T5262] netlink: 56 bytes leftover after parsing attributes in process `syz.3.244'. [ 126.613415][ T5269] loop1: detected capacity change from 0 to 40427 [ 126.617028][ T5267] loop3: detected capacity change from 0 to 40427 [ 126.626237][ T5269] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 126.628597][ T5267] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 126.629676][ T5269] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 126.630500][ T5267] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 126.633186][ T5269] F2FS-fs (loop1): invalid crc value [ 126.638723][ T5267] F2FS-fs (loop3): invalid crc value [ 126.642016][ T5269] F2FS-fs (loop1): Found nat_bits in checkpoint [ 126.652470][ T5267] F2FS-fs (loop3): Found nat_bits in checkpoint [ 126.662060][ T5269] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 126.663778][ T5269] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 126.671505][ T5267] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 126.673290][ T5267] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 126.678113][ T5269] overlayfs: missing 'lowerdir' [ 126.766029][ T5280] loop4: detected capacity change from 0 to 256 [ 126.771701][ T5280] FAT-fs (loop4): Directory bread(block 64) failed [ 126.773104][ T5280] FAT-fs (loop4): Directory bread(block 65) failed [ 126.774174][ T5280] FAT-fs (loop4): Directory bread(block 66) failed [ 126.775300][ T5280] FAT-fs (loop4): Directory bread(block 67) failed [ 126.776437][ T5280] FAT-fs (loop4): Directory bread(block 68) failed [ 126.777511][ T5280] FAT-fs (loop4): Directory bread(block 69) failed [ 126.778662][ T5280] FAT-fs (loop4): Directory bread(block 70) failed [ 126.779750][ T5280] FAT-fs (loop4): Directory bread(block 71) failed [ 126.780789][ T5280] FAT-fs (loop4): Directory bread(block 72) failed [ 126.781773][ T5280] FAT-fs (loop4): Directory bread(block 73) failed [ 137.454578][ T5302] loop2: detected capacity change from 0 to 1024 [ 137.456114][ T5302] EXT4-fs: Ignoring removed bh option [ 137.457020][ T5302] EXT4-fs: Ignoring removed oldalloc option [ 137.458008][ T5302] EXT4-fs: Ignoring removed nobh option [ 137.459700][ T5302] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 137.461640][ T5302] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block [ 137.461640][ T5302] [ 137.536967][ T5288] netlink: 40 bytes leftover after parsing attributes in process `syz.4.250'. [ 137.573437][ T4321] syz-executor: attempt to access beyond end of device [ 137.573437][ T4321] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 137.617220][ T5311] netlink: 56 bytes leftover after parsing attributes in process `syz.4.257'. [ 137.619971][ T5310] binder: 5308:5310 Acquire 1 refcount change on invalid ref 1 ret -22 [ 137.909888][ T5335] loop1: detected capacity change from 0 to 256 [ 137.913035][ T5335] exfat: Unknown parameter 'nÿecase' [ 138.209424][ T5342] netlink: 40 bytes leftover after parsing attributes in process `syz.2.268'. [ 138.288520][ T5321] loop0: detected capacity change from 0 to 40427 [ 138.293206][ T5321] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 138.295084][ T5321] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 138.300137][ T5321] F2FS-fs (loop0): invalid crc value [ 138.312478][ T5321] F2FS-fs (loop0): Found nat_bits in checkpoint [ 138.328606][ T5321] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 138.330081][ T5321] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 138.342792][ T5321] overlayfs: missing 'lowerdir' [ 138.408606][ T5338] loop4: detected capacity change from 0 to 40427 [ 138.416004][ T5338] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 138.417255][ T5338] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 138.428868][ T5338] F2FS-fs (loop4): invalid crc value [ 138.440784][ T5338] F2FS-fs (loop4): Found nat_bits in checkpoint [ 138.461157][ T5338] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 138.462326][ T5338] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 138.554200][ T5367] netlink: 24 bytes leftover after parsing attributes in process `syz.0.273'. [ 138.618149][ T5369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.621941][ T5369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.353450][ T4333] syz-executor: attempt to access beyond end of device [ 149.353450][ T4333] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 149.480508][ T5393] netlink: 40 bytes leftover after parsing attributes in process `syz.0.280'. [ 149.572042][ T27] audit: type=1326 audit(149.550:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5405 comm="syz.3.285" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5b771a8 code=0x0 [ 149.597114][ T5409] netlink: 24 bytes leftover after parsing attributes in process `syz.0.286'. [ 149.658915][ T5395] loop2: detected capacity change from 0 to 40427 [ 149.668982][ T5395] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 149.671465][ T5395] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 149.674288][ T5416] loop4: detected capacity change from 0 to 4096 [ 149.675986][ T5416] EXT4-fs: inline encryption not supported [ 149.677778][ T5395] F2FS-fs (loop2): invalid crc value [ 149.680175][ T5395] F2FS-fs (loop2): Found nat_bits in checkpoint [ 149.688714][ T5395] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 149.690036][ T5395] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 149.698974][ T5395] overlayfs: missing 'lowerdir' [ 149.812887][ T5416] EXT4-fs (loop4): Test dummy encryption mode enabled [ 149.816116][ T5416] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 149.817564][ T5416] System zones: 0-5 [ 149.820700][ T5416] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 149.853782][ T5416] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 150.111524][ T5450] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 150.326006][ T5425] loop1: detected capacity change from 0 to 40427 [ 150.336474][ T5425] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 150.337855][ T5425] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 150.346742][ T5425] F2FS-fs (loop1): invalid crc value [ 150.374658][ T5425] F2FS-fs (loop1): Found nat_bits in checkpoint [ 150.404066][ T5425] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 150.405423][ T5425] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 150.859171][ T4322] syz-executor: attempt to access beyond end of device [ 150.859171][ T4322] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 150.868233][ T4333] EXT4-fs (loop4): unmounting filesystem. [ 150.945364][ T5469] loop4: detected capacity change from 0 to 256 [ 150.964026][ T5470] device syzkaller0 entered promiscuous mode [ 151.026107][ T5476] loop4: detected capacity change from 0 to 256 [ 151.031385][ T5462] loop3: detected capacity change from 0 to 40427 [ 151.034449][ T5462] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 151.035776][ T5462] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 151.037241][ T5462] F2FS-fs (loop3): Unrecognized mount option "whint_mode=user-based" or missing value [ 151.090912][ T5476] FAT-fs (loop4): Directory bread(block 64) failed [ 151.092021][ T5476] FAT-fs (loop4): Directory bread(block 65) failed [ 151.093152][ T5476] FAT-fs (loop4): Directory bread(block 66) failed [ 151.094178][ T5476] FAT-fs (loop4): Directory bread(block 67) failed [ 151.095284][ T5476] FAT-fs (loop4): Directory bread(block 68) failed [ 151.096451][ T5476] FAT-fs (loop4): Directory bread(block 69) failed [ 151.097523][ T5476] FAT-fs (loop4): Directory bread(block 70) failed [ 151.098545][ T5476] FAT-fs (loop4): Directory bread(block 71) failed [ 151.111527][ T5485] loop0: detected capacity change from 0 to 256 [ 151.111990][ T5476] FAT-fs (loop4): Directory bread(block 72) failed [ 151.114140][ T5476] FAT-fs (loop4): Directory bread(block 73) failed [ 151.118004][ T5485] exfat: Deprecated parameter 'utf8' [ 151.121752][ T5485] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf8a64500, utbl_chksum : 0xe619d30d) [ 151.878099][ T5498] loop2: detected capacity change from 0 to 40427 [ 151.886417][ T5498] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 151.887641][ T5498] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 151.896308][ T5498] F2FS-fs (loop2): invalid crc value [ 151.905368][ T5498] F2FS-fs (loop2): Found nat_bits in checkpoint [ 151.920059][ T5498] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 151.921412][ T5498] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 152.960018][ T4329] syz-executor: attempt to access beyond end of device [ 152.960018][ T4329] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 152.997245][ T5531] device syzkaller0 entered promiscuous mode [ 153.613315][ T4338] Bluetooth: hci4: command 0x0406 tx timeout [ 153.613343][ T4325] Bluetooth: hci0: command 0x0406 tx timeout [ 153.613361][ T4334] Bluetooth: hci2: command 0x0406 tx timeout [ 153.718426][ T5555] loop0: detected capacity change from 0 to 256 [ 153.748064][ T5559] netlink: 56 bytes leftover after parsing attributes in process `syz.4.332'. [ 153.750312][ T5555] FAT-fs (loop0): Directory bread(block 64) failed [ 153.751475][ T5555] FAT-fs (loop0): Directory bread(block 65) failed [ 153.752618][ T5555] FAT-fs (loop0): Directory bread(block 66) failed [ 153.754050][ T5555] FAT-fs (loop0): Directory bread(block 67) failed [ 153.755411][ T5555] FAT-fs (loop0): Directory bread(block 68) failed [ 153.756528][ T5555] FAT-fs (loop0): Directory bread(block 69) failed [ 153.757643][ T5555] FAT-fs (loop0): Directory bread(block 70) failed [ 153.758801][ T5555] FAT-fs (loop0): Directory bread(block 71) failed [ 153.760058][ T5555] FAT-fs (loop0): Directory bread(block 72) failed [ 153.761084][ T5555] FAT-fs (loop0): Directory bread(block 73) failed [ 153.773075][ T4338] Bluetooth: hci1: command 0x0406 tx timeout [ 153.774771][ T4334] Bluetooth: hci3: command 0x0406 tx timeout [ 154.032404][ T5562] loop2: detected capacity change from 0 to 40427 [ 154.035680][ T5562] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 154.037200][ T5562] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 154.079418][ T5562] F2FS-fs (loop2): invalid crc value [ 154.087208][ T5562] F2FS-fs (loop2): Found nat_bits in checkpoint [ 154.096004][ T5562] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 154.097258][ T5562] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 154.189484][ T5577] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.336: inode has both inline data and extents flags [ 154.196242][ T5577] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.336: couldn't read orphan inode 15 (err -117) [ 154.206986][ T5577] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 154.550274][ T4321] EXT4-fs (loop3): unmounting filesystem. [ 154.616250][ T4329] syz-executor: attempt to access beyond end of device [ 154.616250][ T4329] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 154.741028][ T5589] device syzkaller0 entered promiscuous mode [ 154.905543][ T5604] netlink: 56 bytes leftover after parsing attributes in process `syz.4.344'. [ 154.916293][ T5607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.921050][ T5607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.325902][ T5613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.327664][ T5613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.351998][ T5615] set_capacity_and_notify: 1 callbacks suppressed [ 155.352010][ T5615] loop4: detected capacity change from 0 to 256 [ 155.375833][ T5615] FAT-fs (loop4): Directory bread(block 64) failed [ 155.379214][ T5615] FAT-fs (loop4): Directory bread(block 65) failed [ 155.382579][ T5615] FAT-fs (loop4): Directory bread(block 66) failed [ 155.388074][ T5615] FAT-fs (loop4): Directory bread(block 67) failed [ 155.390216][ T5615] FAT-fs (loop4): Directory bread(block 68) failed [ 155.396738][ T5615] FAT-fs (loop4): Directory bread(block 69) failed [ 155.398985][ T5615] FAT-fs (loop4): Directory bread(block 70) failed [ 155.403324][ T5615] FAT-fs (loop4): Directory bread(block 71) failed [ 155.405537][ T5615] FAT-fs (loop4): Directory bread(block 72) failed [ 155.408809][ T5615] FAT-fs (loop4): Directory bread(block 73) failed [ 155.536686][ T5619] loop2: detected capacity change from 0 to 40427 [ 155.546867][ T5619] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 155.550258][ T5619] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 155.557500][ T5619] F2FS-fs (loop2): invalid crc value [ 155.565857][ T5619] F2FS-fs (loop2): Found nat_bits in checkpoint [ 155.577344][ T5619] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 155.578634][ T5619] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 156.249691][ T4329] syz-executor: attempt to access beyond end of device [ 156.249691][ T4329] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 156.293259][ T5647] netlink: 56 bytes leftover after parsing attributes in process `syz.4.358'. [ 156.607959][ T5659] loop3: detected capacity change from 0 to 40427 [ 156.620733][ T5659] F2FS-fs (loop3): Unrecognized mount option "whint_mode=fs-based" or missing value [ 156.886034][ T5686] loop1: detected capacity change from 0 to 512 [ 156.976934][ T5686] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 157.050498][ T4322] EXT4-fs (loop1): unmounting filesystem. [ 157.060358][ T5680] loop2: detected capacity change from 0 to 40427 [ 157.078802][ T27] audit: type=1326 audit(157.060:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5690 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d3771a8 code=0x7ffc0000 [ 157.082363][ T27] audit: type=1326 audit(157.060:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5690 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d3771a8 code=0x7ffc0000 [ 157.088603][ T5680] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 157.091042][ T27] audit: type=1326 audit(157.060:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5690 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff8d3771a8 code=0x7ffc0000 [ 157.096138][ T5680] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 157.102084][ T5680] F2FS-fs (loop2): invalid crc value [ 157.102223][ T5694] netlink: 24 bytes leftover after parsing attributes in process `syz.0.373'. [ 157.119019][ T27] audit: type=1326 audit(157.060:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5690 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d3771a8 code=0x7ffc0000 [ 157.135863][ T27] audit: type=1326 audit(157.060:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5690 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d3771a8 code=0x7ffc0000 [ 157.142369][ T5680] F2FS-fs (loop2): Found nat_bits in checkpoint [ 157.148605][ T27] audit: type=1326 audit(157.060:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5690 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=434 compat=0 ip=0xffff8d3771a8 code=0x7ffc0000 [ 157.162910][ T27] audit: type=1326 audit(157.060:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5690 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d3771a8 code=0x7ffc0000 [ 157.176046][ T27] audit: type=1326 audit(157.060:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5690 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d3771a8 code=0x7ffc0000 [ 157.192568][ T5680] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 157.194254][ T5680] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 157.288579][ T5708] loop0: detected capacity change from 0 to 512 [ 157.295899][ T5708] EXT4-fs: inline encryption not supported [ 157.320347][ T5708] EXT4-fs (loop0): 1 truncate cleaned up [ 157.321358][ T5708] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 157.630455][ T4329] syz-executor: attempt to access beyond end of device [ 157.630455][ T4329] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 157.652027][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 157.726682][ T5715] device syzkaller0 entered promiscuous mode [ 157.980930][ T5733] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 158.332400][ T5742] netlink: 24 bytes leftover after parsing attributes in process `syz.3.386'. [ 158.543830][ T5734] loop0: detected capacity change from 0 to 40427 [ 158.560235][ T5734] F2FS-fs (loop0): invalid crc value [ 158.581518][ T5734] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 158.621120][ T5734] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 158.631782][ T5734] F2FS-fs (loop0): Start checkpoint disabled! [ 158.661190][ T5734] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 158.759231][ T5750] bridge0: port 2(bridge_slave_1) entered listening state [ 158.786367][ T5750] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.017298][ T5756] loop1: detected capacity change from 0 to 256 [ 159.021932][ T5752] loop0: detected capacity change from 0 to 40427 [ 159.031786][ T5752] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 159.041563][ T5752] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 159.045279][ T5756] FAT-fs (loop1): Directory bread(block 64) failed [ 159.047768][ T5756] FAT-fs (loop1): Directory bread(block 65) failed [ 159.049051][ T5756] FAT-fs (loop1): Directory bread(block 66) failed [ 159.049783][ T5752] F2FS-fs (loop0): invalid crc value [ 159.050058][ T5756] FAT-fs (loop1): Directory bread(block 67) failed [ 159.063306][ T5756] FAT-fs (loop1): Directory bread(block 68) failed [ 159.064420][ T5756] FAT-fs (loop1): Directory bread(block 69) failed [ 159.065560][ T5756] FAT-fs (loop1): Directory bread(block 70) failed [ 159.066788][ T5756] FAT-fs (loop1): Directory bread(block 71) failed [ 159.067885][ T5756] FAT-fs (loop1): Directory bread(block 72) failed [ 159.068945][ T5756] FAT-fs (loop1): Directory bread(block 73) failed [ 159.087817][ T5752] F2FS-fs (loop0): Found nat_bits in checkpoint [ 159.103643][ T5752] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 159.105068][ T5752] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 159.717777][ T4327] syz-executor: attempt to access beyond end of device [ 159.717777][ T4327] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 159.919603][ T5781] device syzkaller0 entered promiscuous mode [ 159.966186][ T5787] netlink: 24 bytes leftover after parsing attributes in process `syz.4.398'. [ 160.057457][ T5791] tipc: Enabling of bearer rejected, failed to enable media [ 160.101842][ T5795] binder: 5794:5795 tried to acquire reference to desc 0, got 1 instead [ 160.122621][ T4370] binder: send failed reply for transaction 5 to 5794:5795 [ 160.143383][ T4370] binder: undelivered TRANSACTION_COMPLETE [ 160.144421][ T4370] binder: undelivered TRANSACTION_ERROR: 29189 [ 160.694230][ T5815] loop3: detected capacity change from 0 to 256 [ 160.740448][ T5815] FAT-fs (loop3): Directory bread(block 64) failed [ 160.745304][ T5815] FAT-fs (loop3): Directory bread(block 65) failed [ 160.748856][ T5815] FAT-fs (loop3): Directory bread(block 66) failed [ 160.755753][ T5815] FAT-fs (loop3): Directory bread(block 67) failed [ 160.760433][ T5815] FAT-fs (loop3): Directory bread(block 68) failed [ 160.767701][ T5815] FAT-fs (loop3): Directory bread(block 69) failed [ 160.769501][ T5800] loop0: detected capacity change from 0 to 40427 [ 160.771888][ T5815] FAT-fs (loop3): Directory bread(block 70) failed [ 160.781395][ T5815] FAT-fs (loop3): Directory bread(block 71) failed [ 160.787214][ T5800] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 160.810423][ T5815] FAT-fs (loop3): Directory bread(block 72) failed [ 160.811668][ T5815] FAT-fs (loop3): Directory bread(block 73) failed [ 160.815280][ T5800] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 160.825699][ T5800] F2FS-fs (loop0): invalid crc value [ 160.852407][ T5800] F2FS-fs (loop0): Found nat_bits in checkpoint [ 160.883945][ T5800] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 160.885008][ T5800] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 160.898300][ T5826] ipt_CLUSTERIP: Please specify destination IP [ 160.967886][ T5830] loop1: detected capacity change from 0 to 256 [ 160.969366][ T5830] exfat: Deprecated parameter 'utf8' [ 160.970664][ T5830] exFAT-fs (loop1): bogus fat length [ 160.971613][ T5830] exFAT-fs (loop1): failed to read boot sector [ 160.973080][ T5830] exFAT-fs (loop1): failed to recognize exfat type [ 161.320502][ T4327] syz-executor: attempt to access beyond end of device [ 161.320502][ T4327] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 161.335598][ T5431] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 161.390122][ T5835] device syzkaller0 entered promiscuous mode [ 162.299171][ T5862] loop0: detected capacity change from 0 to 40427 [ 162.311930][ T5862] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 162.319123][ T5862] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 162.327142][ T5862] F2FS-fs (loop0): invalid crc value [ 162.491387][ T5862] F2FS-fs (loop0): Found nat_bits in checkpoint [ 162.508657][ T5862] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 162.509845][ T5862] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 162.651739][ T5875] netlink: 52 bytes leftover after parsing attributes in process `syz.1.429'. [ 163.076577][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.222556][ T5882] loop2: detected capacity change from 0 to 256 [ 163.263679][ T4327] syz-executor: attempt to access beyond end of device [ 163.263679][ T4327] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 163.307968][ T5882] FAT-fs (loop2): Directory bread(block 64) failed [ 163.309234][ T5882] FAT-fs (loop2): Directory bread(block 65) failed [ 163.310305][ T5882] FAT-fs (loop2): Directory bread(block 66) failed [ 163.311411][ T5882] FAT-fs (loop2): Directory bread(block 67) failed [ 163.312478][ T5882] FAT-fs (loop2): Directory bread(block 68) failed [ 163.322263][ T5882] FAT-fs (loop2): Directory bread(block 69) failed [ 163.323758][ T5882] FAT-fs (loop2): Directory bread(block 70) failed [ 163.324775][ T5882] FAT-fs (loop2): Directory bread(block 71) failed [ 163.325850][ T5882] FAT-fs (loop2): Directory bread(block 72) failed [ 163.326981][ T5882] FAT-fs (loop2): Directory bread(block 73) failed [ 163.459730][ T5897] loop1: detected capacity change from 0 to 512 [ 163.466521][ T5897] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 163.472368][ T5897] EXT4-fs (loop1): orphan cleanup on readonly fs [ 163.476754][ T5897] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:511: comm syz.1.437: Block bitmap for bg 0 marked uninitialized [ 163.491842][ T5897] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 163.502437][ T5897] EXT4-fs (loop1): 1 orphan inode deleted [ 163.504836][ T5897] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 163.523209][ T5897] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 163.537299][ T5897] EXT4-fs (loop1): re-mounted. Quota mode: none. [ 163.679087][ T4322] EXT4-fs (loop1): unmounting filesystem. [ 163.925375][ T5919] loop0: detected capacity change from 0 to 40427 [ 163.931387][ T5919] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 163.939036][ T5919] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 163.945721][ T5919] F2FS-fs (loop0): invalid crc value [ 163.971278][ T5919] F2FS-fs (loop0): Found nat_bits in checkpoint [ 163.988866][ T5919] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 163.990198][ T5919] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 164.510024][ T5912] loop3: detected capacity change from 0 to 40427 [ 164.610637][ T4327] syz-executor: attempt to access beyond end of device [ 164.610637][ T4327] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 165.109262][ T5967] qfq: no options [ 165.238030][ T5958] loop0: detected capacity change from 0 to 40427 [ 165.265569][ T5958] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 165.266880][ T5958] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 165.276845][ T5958] F2FS-fs (loop0): invalid crc value [ 165.304163][ T5958] F2FS-fs (loop0): Found nat_bits in checkpoint [ 165.329617][ T5958] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 165.330755][ T5958] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 165.423528][ T5983] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 165.425002][ T5983] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 165.556643][ T5970] loop4: detected capacity change from 0 to 40427 [ 165.563586][ T5970] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 165.565367][ T5970] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 165.570394][ T5970] F2FS-fs (loop4): invalid crc value [ 165.589401][ T5970] F2FS-fs (loop4): Found nat_bits in checkpoint [ 165.615813][ T5970] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 165.617164][ T5970] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 166.076402][ T4333] syz-executor: attempt to access beyond end of device [ 166.076402][ T4333] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 166.285386][ T6012] qfq: no options [ 166.504730][ T5932] loop1: detected capacity change from 0 to 262144 [ 166.638312][ T5932] F2FS-fs (loop1): Found nat_bits in checkpoint [ 166.673947][ T5932] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 166.945901][ T6019] loop0: detected capacity change from 0 to 40427 [ 166.959871][ T6038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.964659][ T6019] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 166.965943][ T6019] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 166.968425][ T6038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.996127][ T6019] F2FS-fs (loop0): invalid crc value [ 167.013800][ T6019] F2FS-fs (loop0): Found nat_bits in checkpoint [ 167.046621][ T6019] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 167.047928][ T6019] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 167.057097][ T6023] loop3: detected capacity change from 0 to 40427 [ 167.064468][ T6023] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 167.065804][ T6023] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 167.074859][ T6019] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 167.076493][ T6019] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 167.078598][ T6023] F2FS-fs (loop3): invalid crc value [ 167.106830][ T6023] F2FS-fs (loop3): Found nat_bits in checkpoint [ 167.130088][ T6023] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 167.131336][ T6023] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 167.843673][ T4321] syz-executor: attempt to access beyond end of device [ 167.843673][ T4321] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 168.448217][ T6056] loop1: detected capacity change from 0 to 40427 [ 168.450515][ T6056] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 168.454095][ T6056] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 168.459021][ T6056] F2FS-fs (loop1): invalid crc value [ 168.474853][ T6056] F2FS-fs (loop1): Found nat_bits in checkpoint [ 168.496895][ T6056] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 168.498251][ T6056] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 168.498526][ T6072] qfq: no options [ 169.076393][ T6053] loop0: detected capacity change from 0 to 131072 [ 169.113765][ T6053] F2FS-fs (loop0): Test dummy encryption mode enabled [ 169.125683][ T6053] F2FS-fs (loop0): invalid crc value [ 169.153397][ T6053] F2FS-fs (loop0): Found nat_bits in checkpoint [ 169.188757][ T6053] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 169.419180][ T6087] loop2: detected capacity change from 0 to 40427 [ 169.476554][ T6087] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 169.478041][ T6087] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 169.485016][ T6090] loop1: detected capacity change from 0 to 40427 [ 169.486243][ T6087] F2FS-fs (loop2): invalid crc value [ 169.497966][ T6090] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 169.499337][ T6090] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 169.522825][ T6090] F2FS-fs (loop1): invalid crc value [ 169.522863][ T6087] F2FS-fs (loop2): Found nat_bits in checkpoint [ 169.539879][ T6090] F2FS-fs (loop1): Found nat_bits in checkpoint [ 169.555914][ T6087] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 169.557313][ T6087] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 169.649744][ T6090] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 169.651110][ T6090] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 169.682242][ T6090] overlayfs: missing 'lowerdir' [ 170.011288][ T4329] syz-executor: attempt to access beyond end of device [ 170.011288][ T4329] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 170.142836][ T6139] loop4: detected capacity change from 0 to 256 [ 170.151578][ T6139] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 170.156642][ T6139] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 170.160127][ T6139] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 170.227990][ T6143] netlink: 40 bytes leftover after parsing attributes in process `syz.0.512'. [ 170.230735][ T6143] device ip6gre1 entered promiscuous mode [ 170.285942][ T6151] loop4: detected capacity change from 0 to 512 [ 170.287808][ T6151] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 170.334470][ T6151] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #11: comm syz.4.517: iget: bad extra_isize 90 (inode size 256) [ 170.340506][ T6151] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.517: error while reading EA inode 11 err=-117 [ 170.349546][ T6151] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 170.373179][ T6151] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #11: comm syz.4.517: iget: bad extra_isize 90 (inode size 256) [ 170.380405][ T6151] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.517: error while reading EA inode 11 err=-117 [ 170.407341][ T6151] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #18: comm syz.4.517: iget: bad extra_isize 90 (inode size 256) [ 170.418091][ T6151] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.517: error while reading EA inode 18 err=-117 [ 170.432987][ T6151] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #18: comm syz.4.517: iget: bad extra_isize 90 (inode size 256) [ 170.442085][ T6151] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.517: error while reading EA inode 18 err=-117 [ 170.458871][ T6151] EXT4-fs (loop4): 1 orphan inode deleted [ 170.466293][ T6151] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 170.520718][ T6160] netlink: 32 bytes leftover after parsing attributes in process `syz.1.520'. [ 170.542618][ T4333] EXT4-fs (loop4): unmounting filesystem. [ 170.827631][ T6158] loop0: detected capacity change from 0 to 40427 [ 170.833719][ T6158] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 170.835006][ T6158] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 170.845902][ T6158] F2FS-fs (loop0): invalid crc value [ 170.859061][ T6158] F2FS-fs (loop0): Found nat_bits in checkpoint [ 170.888403][ T6158] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 170.889715][ T6158] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 170.913662][ T6158] overlayfs: missing 'lowerdir' [ 170.932372][ T6171] EXT2-fs (loop1): error: revision level too high, forcing read-only mode [ 170.939983][ T6171] syz.1.524: attempt to access beyond end of device [ 170.939983][ T6171] loop1: rw=0, sector=1022032, nr_sectors = 8 limit=512 [ 170.947581][ T6171] EXT2-fs (loop1): error: ext2_readdir: bad page in #2 [ 171.343383][ T6185] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 171.344674][ T6185] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 171.346591][ T6185] F2FS-fs (loop4): invalid crc value [ 171.348665][ T6185] F2FS-fs (loop4): Found nat_bits in checkpoint [ 171.358687][ T6185] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 171.360008][ T6185] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 171.526509][ T6202] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 171.528808][ T6202] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 171.656319][ T6202] EXT4-fs error (device loop2): xattr_find_entry:297: inode #15: comm syz.2.530: corrupted xattr entries [ 171.660682][ T6202] EXT4-fs (loop2): 1 truncate cleaned up [ 171.661836][ T6202] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 172.233275][ T4333] syz-executor: attempt to access beyond end of device [ 172.233275][ T4333] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 172.339174][ T6211] netlink: 32 bytes leftover after parsing attributes in process `syz.1.535'. [ 172.541686][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 172.622618][ T6215] set_capacity_and_notify: 3 callbacks suppressed [ 172.622627][ T6215] loop3: detected capacity change from 0 to 40427 [ 172.641877][ T6215] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 172.643335][ T6215] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 172.648680][ T6215] F2FS-fs (loop3): invalid crc value [ 172.666661][ T6215] F2FS-fs (loop3): Found nat_bits in checkpoint [ 172.695402][ T6215] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 172.696728][ T6215] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 172.750648][ T6215] overlayfs: missing 'lowerdir' [ 173.040463][ T6249] process 'syz.1.546' launched '/dev/fd/-1/./file0' with NULL argv: empty string added [ 173.255145][ T6243] loop4: detected capacity change from 0 to 40427 [ 173.281677][ T6243] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 173.283006][ T6243] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 173.288125][ T6243] F2FS-fs (loop4): invalid crc value [ 173.336759][ T6243] F2FS-fs (loop4): Found nat_bits in checkpoint [ 173.356100][ T6243] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 173.357261][ T6243] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 173.370605][ T6259] netlink: 32 bytes leftover after parsing attributes in process `syz.0.549'. [ 173.677392][ T6241] loop3: detected capacity change from 0 to 131072 [ 173.681237][ T6241] F2FS-fs (loop3): invalid crc value [ 173.696190][ T6241] F2FS-fs (loop3): Found nat_bits in checkpoint [ 173.709933][ T6241] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 173.716480][ T6241] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 173.791358][ T4333] syz-executor: attempt to access beyond end of device [ 173.791358][ T4333] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 173.939633][ T6278] netlink: 44 bytes leftover after parsing attributes in process `syz.0.555'. [ 174.047917][ T6271] loop3: detected capacity change from 0 to 40427 [ 174.051574][ T6271] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 174.053376][ T6271] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 174.063819][ T6271] F2FS-fs (loop3): invalid crc value [ 174.085858][ T6271] F2FS-fs (loop3): Found nat_bits in checkpoint [ 174.099047][ T6271] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 174.100235][ T6271] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 174.110760][ T6271] overlayfs: missing 'workdir' [ 174.222708][ T4370] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 174.228617][ T6301] netlink: 12 bytes leftover after parsing attributes in process `syz.1.561'. [ 174.415736][ T4370] usb 1-1: unable to get BOS descriptor or descriptor too short [ 174.417880][ T4370] usb 1-1: not running at top speed; connect to a high speed hub [ 174.420074][ T4370] usb 1-1: config 8 has an invalid interface number: 249 but max is 0 [ 174.421509][ T4370] usb 1-1: config 8 has no interface number 0 [ 174.422575][ T4370] usb 1-1: config 8 interface 249 has no altsetting 0 [ 174.432333][ T6303] loop4: detected capacity change from 0 to 40427 [ 174.440968][ T6303] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 174.442357][ T6303] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 174.446761][ T4370] usb 1-1: New USB device found, idVendor=0451, idProduct=5416, bcdDevice= 1.00 [ 174.448424][ T4370] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.450597][ T4370] usb 1-1: Product: syz [ 174.456608][ T6303] F2FS-fs (loop4): invalid crc value [ 174.458541][ T4370] usb 1-1: Manufacturer: syz [ 174.459277][ T4370] usb 1-1: SerialNumber: syz [ 174.471496][ T6303] F2FS-fs (loop4): Found nat_bits in checkpoint [ 174.513172][ T6303] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 174.514648][ T6303] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 174.538290][ T6319] loop3: detected capacity change from 0 to 256 [ 174.631752][ T6319] FAT-fs (loop3): Directory bread(block 64) failed [ 174.633031][ T6319] FAT-fs (loop3): Directory bread(block 65) failed [ 174.634159][ T6319] FAT-fs (loop3): Directory bread(block 66) failed [ 174.635328][ T6319] FAT-fs (loop3): Directory bread(block 67) failed [ 174.636436][ T6319] FAT-fs (loop3): Directory bread(block 68) failed [ 174.637467][ T6319] FAT-fs (loop3): Directory bread(block 69) failed [ 174.665687][ T6319] FAT-fs (loop3): Directory bread(block 70) failed [ 174.670884][ T4370] usb-storage 1-1:8.249: USB Mass Storage device detected [ 174.678669][ T6319] FAT-fs (loop3): Directory bread(block 71) failed [ 174.682520][ T6319] FAT-fs (loop3): Directory bread(block 72) failed [ 174.688119][ T6319] FAT-fs (loop3): Directory bread(block 73) failed [ 174.689663][ T4370] usb-storage 1-1:8.249: Quirks match for vid 0451 pid 5416: 2 [ 174.730856][ T4370] usb 1-1: USB disconnect, device number 3 [ 175.192185][ T4333] syz-executor: attempt to access beyond end of device [ 175.192185][ T4333] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 175.266302][ T6338] loop2: detected capacity change from 0 to 4096 [ 175.277156][ T6338] EXT4-fs: inline encryption not supported [ 175.285732][ T6338] EXT4-fs (loop2): Test dummy encryption mode enabled [ 175.292565][ T6338] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 175.295238][ T6338] System zones: 0-5 [ 175.303079][ T6338] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 175.440935][ T6345] loop0: detected capacity change from 0 to 256 [ 175.613616][ T6333] loop1: detected capacity change from 0 to 40427 [ 175.743557][ T6333] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 175.745018][ T6333] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 175.748546][ T6333] F2FS-fs (loop1): invalid crc value [ 175.750876][ T6333] F2FS-fs (loop1): Found nat_bits in checkpoint [ 175.762512][ T6345] FAT-fs (loop0): Directory bread(block 64) failed [ 175.770582][ T6345] FAT-fs (loop0): Directory bread(block 65) failed [ 175.771936][ T6345] FAT-fs (loop0): Directory bread(block 66) failed [ 175.773815][ T6345] FAT-fs (loop0): Directory bread(block 67) failed [ 175.775079][ T6345] FAT-fs (loop0): Directory bread(block 68) failed [ 175.777297][ T6345] FAT-fs (loop0): Directory bread(block 69) failed [ 175.779497][ T6345] FAT-fs (loop0): Directory bread(block 70) failed [ 175.782082][ T6345] FAT-fs (loop0): Directory bread(block 71) failed [ 175.783415][ T6345] FAT-fs (loop0): Directory bread(block 72) failed [ 175.784951][ T6345] FAT-fs (loop0): Directory bread(block 73) failed [ 175.816767][ T6354] netlink: 12 bytes leftover after parsing attributes in process `syz.3.577'. [ 175.821615][ T6333] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 175.822932][ T6333] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 175.830741][ T6333] overlayfs: missing 'workdir' [ 176.116055][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 187.092244][ T6378] netlink: 52 bytes leftover after parsing attributes in process `syz.2.581'. [ 187.094742][ T6378] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.096111][ T6378] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.373463][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.374540][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.475690][ T6390] loop1: detected capacity change from 0 to 40427 [ 187.490275][ T6390] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 187.493942][ T6390] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 187.501092][ T6390] F2FS-fs (loop1): invalid crc value [ 187.527939][ T6390] F2FS-fs (loop1): Found nat_bits in checkpoint [ 187.542043][ T6390] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 187.543367][ T6390] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 187.593666][ T6408] loop3: detected capacity change from 0 to 4096 [ 187.595230][ T6408] EXT4-fs: inline encryption not supported [ 187.608269][ T6408] EXT4-fs (loop3): Test dummy encryption mode enabled [ 187.645225][ T6408] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 187.646600][ T6408] System zones: 0-5 [ 187.647840][ T6412] loop4: detected capacity change from 0 to 512 [ 187.656761][ T6408] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 187.659004][ T6412] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 187.675972][ T6412] EXT4-fs error (device loop4): ext4_get_journal_inode:5762: inode #32: comm syz.4.592: iget: special inode unallocated [ 187.698480][ T6412] EXT4-fs (loop4): no journal found [ 187.699510][ T6412] EXT4-fs (loop4): can't get journal size [ 187.705610][ T6401] loop2: detected capacity change from 0 to 40427 [ 187.733668][ T6412] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 187.765190][ T6401] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 187.766640][ T6401] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 187.770523][ T6401] F2FS-fs (loop2): invalid crc value [ 187.770877][ T6412] EXT4-fs error (device loop4): ext4_protect_reserved_inode:160: inode #32: comm syz.4.592: iget: special inode unallocated [ 187.796449][ T6401] F2FS-fs (loop2): Found nat_bits in checkpoint [ 187.800521][ T6412] EXT4-fs (loop4): failed to initialize system zone (-117) [ 187.801785][ T6412] EXT4-fs (loop4): mount failed [ 187.810861][ T6401] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 187.812313][ T6401] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 188.164416][ T4322] syz-executor: attempt to access beyond end of device [ 188.164416][ T4322] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 188.172781][ T6401] overlayfs: missing 'workdir' [ 188.350521][ T6429] loop1: detected capacity change from 0 to 512 [ 188.387156][ T6429] EXT4-fs: Ignoring removed i_version option [ 188.388941][ T6429] EXT4-fs: Ignoring removed nomblk_io_submit option [ 188.410961][ T6429] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.593: bad orphan inode 1 [ 188.415615][ T6429] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 188.415869][ T4321] EXT4-fs (loop3): unmounting filesystem. [ 188.489502][ T4322] EXT4-fs (loop1): unmounting filesystem. [ 188.499462][ T6435] netlink: 52 bytes leftover after parsing attributes in process `syz.2.597'. [ 188.586062][ T6442] loop4: detected capacity change from 0 to 256 [ 188.604437][ T6442] FAT-fs (loop4): Directory bread(block 64) failed [ 188.605713][ T6442] FAT-fs (loop4): Directory bread(block 65) failed [ 188.606880][ T6442] FAT-fs (loop4): Directory bread(block 66) failed [ 188.608211][ T6442] FAT-fs (loop4): Directory bread(block 67) failed [ 188.609371][ T6442] FAT-fs (loop4): Directory bread(block 68) failed [ 188.618591][ T6442] FAT-fs (loop4): Directory bread(block 69) failed [ 188.619905][ T6442] FAT-fs (loop4): Directory bread(block 70) failed [ 188.621163][ T6442] FAT-fs (loop4): Directory bread(block 71) failed [ 188.622244][ T6442] FAT-fs (loop4): Directory bread(block 72) failed [ 188.623617][ T6442] FAT-fs (loop4): Directory bread(block 73) failed [ 189.817379][ T6475] loop0: detected capacity change from 0 to 40427 [ 189.824570][ T6475] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 189.825987][ T6475] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 189.827638][ T6475] F2FS-fs (loop0): invalid crc value [ 189.842206][ T6475] F2FS-fs (loop0): Found nat_bits in checkpoint [ 189.853236][ T6475] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 189.854457][ T6475] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 199.724389][ T6488] loop3: detected capacity change from 0 to 256 [ 199.741083][ T6488] FAT-fs (loop3): Directory bread(block 64) failed [ 199.742202][ T6488] FAT-fs (loop3): Directory bread(block 65) failed [ 199.746772][ T6488] FAT-fs (loop3): Directory bread(block 66) failed [ 199.755570][ T6488] FAT-fs (loop3): Directory bread(block 67) failed [ 199.756684][ T6488] FAT-fs (loop3): Directory bread(block 68) failed [ 199.757712][ T6488] FAT-fs (loop3): Directory bread(block 69) failed [ 199.758761][ T6488] FAT-fs (loop3): Directory bread(block 70) failed [ 199.759771][ T6488] FAT-fs (loop3): Directory bread(block 71) failed [ 199.760803][ T6488] FAT-fs (loop3): Directory bread(block 72) failed [ 199.761838][ T6488] FAT-fs (loop3): Directory bread(block 73) failed [ 199.796725][ T4327] syz-executor: attempt to access beyond end of device [ 199.796725][ T4327] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 199.844349][ T6500] netlink: 52 bytes leftover after parsing attributes in process `syz.3.610'. [ 199.846306][ T6500] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.847614][ T6500] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.967113][ T6507] loop2: detected capacity change from 0 to 256 [ 199.979405][ T6507] exfat: Deprecated parameter 'utf8' [ 199.980435][ T6507] exfat: Deprecated parameter 'namecase' [ 199.981394][ T6507] exfat: Deprecated parameter 'namecase' [ 199.982382][ T6507] exfat: Deprecated parameter 'utf8' [ 200.069024][ T6507] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 200.775227][ T6515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.617'. [ 200.888120][ T6527] xt_hashlimit: size too large, truncated to 1048576 [ 202.091575][ T6529] loop2: detected capacity change from 0 to 40427 [ 202.129245][ T6529] F2FS-fs (loop2): invalid crc value [ 202.137673][ T6529] F2FS-fs (loop2): Found nat_bits in checkpoint [ 202.163987][ T6529] F2FS-fs (loop2): Start checkpoint disabled! [ 202.166698][ T6529] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 202.242947][ T4733] kworker/u4:14: attempt to access beyond end of device [ 202.242947][ T4733] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 202.309900][ T6547] netlink: 52 bytes leftover after parsing attributes in process `syz.3.625'. [ 202.320333][ T6539] loop0: detected capacity change from 0 to 40427 [ 202.334946][ T6539] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 202.336685][ T6539] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 202.342035][ T6539] F2FS-fs (loop0): invalid crc value [ 202.364469][ T6539] F2FS-fs (loop0): Found nat_bits in checkpoint [ 202.380130][ T6539] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 202.381365][ T6539] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 202.577566][ T6562] loop2: detected capacity change from 0 to 512 [ 202.609810][ T6562] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.628: inode has both inline data and extents flags [ 202.612495][ T6562] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.628: couldn't read orphan inode 15 (err -117) [ 202.615232][ T6562] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 203.443087][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 203.768043][ T6579] loop4: detected capacity change from 0 to 1024 [ 203.783266][ T6579] EXT4-fs: Ignoring removed oldalloc option [ 203.784250][ T6579] EXT4-fs: Ignoring removed oldalloc option [ 203.796210][ T6579] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 203.820765][ T6579] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 203.869273][ T4333] EXT4-fs (loop4): unmounting filesystem. [ 213.800717][ T4327] syz-executor: attempt to access beyond end of device [ 213.800717][ T4327] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 213.963528][ T6611] xt_hashlimit: size too large, truncated to 1048576 [ 214.177674][ T6614] loop0: detected capacity change from 0 to 256 [ 214.180677][ T6614] exfat: Unknown parameter 'nÿecase' [ 214.361845][ T6615] xt_hashlimit: size too large, truncated to 1048576 [ 214.449285][ T6619] loop1: detected capacity change from 0 to 4096 [ 214.455180][ T6619] EXT4-fs: inline encryption not supported [ 214.467804][ T6619] EXT4-fs (loop1): Test dummy encryption mode enabled [ 214.490778][ T6619] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 214.498185][ T6619] System zones: 0-5 [ 214.506578][ T6626] binder: 6625:6626 tried to acquire reference to desc 0, got 1 instead [ 214.517920][ T6626] binder: 6625:6626 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 214.522005][ T6619] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 215.352708][ T6626] binder: 6626 RLIMIT_NICE not set [ 215.353716][ T6626] binder: 6626 RLIMIT_NICE not set [ 215.354979][ T6626] binder: 6626 RLIMIT_NICE not set [ 215.382365][ T1965] binder: undelivered TRANSACTION_COMPLETE [ 215.383402][ T1965] binder: undelivered transaction 11, process died. [ 215.385432][ T1965] binder: undelivered TRANSACTION_COMPLETE [ 215.714254][ T4322] EXT4-fs (loop1): unmounting filesystem. [ 216.223908][ T6632] loop2: detected capacity change from 0 to 40427 [ 216.235102][ T6632] F2FS-fs (loop2): invalid crc value [ 216.278097][ T6632] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 216.675568][ T6632] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 216.691994][ T6646] f2fs_ckpt-7:2: attempt to access beyond end of device [ 216.691994][ T6646] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 216.729651][ T6634] loop0: detected capacity change from 0 to 40427 [ 216.738311][ T6634] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 216.740704][ T6634] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 216.755354][ T6634] F2FS-fs (loop0): invalid crc value [ 216.772565][ T6634] F2FS-fs (loop0): Found nat_bits in checkpoint [ 216.792054][ T6634] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 216.794009][ T6634] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 216.880333][ T6672] device syzkaller0 entered promiscuous mode [ 216.962735][ T4327] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 216.962769][ T4327] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 216.964194][ T4327] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 216.965442][ T4327] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 216.966691][ T4327] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 216.973968][ T4327] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 216.975373][ T4327] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 217.304191][ T6682] loop4: detected capacity change from 0 to 40427 [ 217.311745][ T6682] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 217.313451][ T6682] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 217.319600][ T6682] F2FS-fs (loop4): invalid crc value [ 217.669544][ T6682] F2FS-fs (loop4): Found nat_bits in checkpoint [ 218.104333][ T6682] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 218.105576][ T6682] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 218.136919][ T6693] loop0: detected capacity change from 0 to 4096 [ 218.138409][ T6693] EXT4-fs: inline encryption not supported [ 218.226372][ T6693] EXT4-fs (loop0): Test dummy encryption mode enabled [ 218.241675][ T6693] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 218.245466][ T6693] System zones: 0-5 [ 218.437430][ T6693] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 218.495382][ T4333] syz-executor: attempt to access beyond end of device [ 218.495382][ T4333] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 218.867541][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 218.923192][ T6732] loop0: detected capacity change from 0 to 256 [ 218.945961][ T6732] FAT-fs (loop0): Directory bread(block 64) failed [ 218.947182][ T6732] FAT-fs (loop0): Directory bread(block 65) failed [ 218.948319][ T6732] FAT-fs (loop0): Directory bread(block 66) failed [ 218.949468][ T6732] FAT-fs (loop0): Directory bread(block 67) failed [ 218.950637][ T6732] FAT-fs (loop0): Directory bread(block 68) failed [ 218.951763][ T6732] FAT-fs (loop0): Directory bread(block 69) failed [ 218.975027][ T6732] FAT-fs (loop0): Directory bread(block 70) failed [ 218.976195][ T6732] FAT-fs (loop0): Directory bread(block 71) failed [ 218.977362][ T6732] FAT-fs (loop0): Directory bread(block 72) failed [ 218.978466][ T6732] FAT-fs (loop0): Directory bread(block 73) failed [ 218.999690][ T6718] loop2: detected capacity change from 0 to 40427 [ 219.029479][ T6718] F2FS-fs (loop2): invalid crc value [ 219.031616][ T6718] F2FS-fs (loop2): Found nat_bits in checkpoint [ 219.040467][ T6737] netlink: 'syz.4.669': attribute type 1 has an invalid length. [ 219.041682][ T6737] netlink: 28 bytes leftover after parsing attributes in process `syz.4.669'. [ 219.045493][ T6718] F2FS-fs (loop2): Start checkpoint disabled! [ 219.048185][ T6737] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.049465][ T6737] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.058600][ T6718] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 219.109226][ T4384] kworker/u4:6: attempt to access beyond end of device [ 219.109226][ T4384] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 220.351376][ T6754] loop2: detected capacity change from 0 to 16 [ 220.373543][ T6754] erofs: (device loop2): mounted with root inode @ nid 36. [ 220.526272][ T6770] netlink: 'syz.4.681': attribute type 1 has an invalid length. [ 220.528242][ T6770] netlink: 28 bytes leftover after parsing attributes in process `syz.4.681'. [ 220.531796][ T6765] loop1: detected capacity change from 0 to 4096 [ 220.538082][ T6765] EXT4-fs: inline encryption not supported [ 220.551127][ T6765] EXT4-fs (loop1): Test dummy encryption mode enabled [ 220.565413][ T6765] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 220.566785][ T6765] System zones: 0-5 [ 220.573085][ T6765] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 220.635688][ T6779] loop4: detected capacity change from 0 to 256 [ 220.653932][ T6779] FAT-fs (loop4): Directory bread(block 64) failed [ 220.655150][ T6779] FAT-fs (loop4): Directory bread(block 65) failed [ 220.656357][ T6779] FAT-fs (loop4): Directory bread(block 66) failed [ 220.657443][ T6779] FAT-fs (loop4): Directory bread(block 67) failed [ 220.665155][ T6779] FAT-fs (loop4): Directory bread(block 68) failed [ 220.666334][ T6779] FAT-fs (loop4): Directory bread(block 69) failed [ 220.667552][ T6779] FAT-fs (loop4): Directory bread(block 70) failed [ 220.668681][ T6779] FAT-fs (loop4): Directory bread(block 71) failed [ 220.669835][ T6779] FAT-fs (loop4): Directory bread(block 72) failed [ 220.725622][ T6779] FAT-fs (loop4): Directory bread(block 73) failed [ 221.089720][ T6786] loop3: detected capacity change from 0 to 40427 [ 221.101040][ T6794] device syzkaller0 entered promiscuous mode [ 221.108198][ T6786] F2FS-fs (loop3): invalid crc value [ 221.129146][ T6786] F2FS-fs (loop3): Found nat_bits in checkpoint [ 221.169605][ T6786] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 221.679300][ T4322] EXT4-fs (loop1): unmounting filesystem. [ 221.682126][ T4321] syz-executor: attempt to access beyond end of device [ 221.682126][ T4321] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 221.929639][ T6823] netlink: 'syz.1.694': attribute type 1 has an invalid length. [ 221.930973][ T6823] netlink: 28 bytes leftover after parsing attributes in process `syz.1.694'. [ 221.956596][ T6826] loop4: detected capacity change from 0 to 256 [ 221.977874][ T6826] FAT-fs (loop4): Directory bread(block 64) failed [ 221.979095][ T6826] FAT-fs (loop4): Directory bread(block 65) failed [ 221.980257][ T6826] FAT-fs (loop4): Directory bread(block 66) failed [ 221.981405][ T6826] FAT-fs (loop4): Directory bread(block 67) failed [ 221.988376][ T6826] FAT-fs (loop4): Directory bread(block 68) failed [ 221.989641][ T6826] FAT-fs (loop4): Directory bread(block 69) failed [ 221.997066][ T6826] FAT-fs (loop4): Directory bread(block 70) failed [ 221.998210][ T6826] FAT-fs (loop4): Directory bread(block 71) failed [ 221.999419][ T6826] FAT-fs (loop4): Directory bread(block 72) failed [ 222.000512][ T6826] FAT-fs (loop4): Directory bread(block 73) failed [ 222.082749][ T6835] loop3: detected capacity change from 0 to 4096 [ 222.086797][ T6835] EXT4-fs: inline encryption not supported [ 222.093190][ T6835] EXT4-fs (loop3): Test dummy encryption mode enabled [ 222.103540][ T6834] loop1: detected capacity change from 0 to 256 [ 222.105146][ T6834] FAT-fs (loop1): Unrecognized mount option "shortname=wè/+ÍÞPÿ±àcin95" or missing value [ 222.110532][ T6835] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 222.111952][ T6835] System zones: 0-5 [ 222.114172][ T6835] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 222.240775][ T6841] device syzkaller0 entered promiscuous mode [ 222.775460][ T6863] netlink: 'syz.0.708': attribute type 1 has an invalid length. [ 222.777195][ T6863] netlink: 28 bytes leftover after parsing attributes in process `syz.0.708'. [ 222.779288][ T6863] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.780696][ T6863] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.811372][ T6865] loop4: detected capacity change from 0 to 256 [ 222.952470][ T4321] EXT4-fs (loop3): unmounting filesystem. [ 223.229350][ T6899] loop4: detected capacity change from 0 to 256 [ 223.246375][ T6899] FAT-fs (loop4): Directory bread(block 64) failed [ 223.247718][ T6899] FAT-fs (loop4): Directory bread(block 65) failed [ 223.251361][ T6899] FAT-fs (loop4): Directory bread(block 66) failed [ 223.253716][ T6899] FAT-fs (loop4): Directory bread(block 67) failed [ 223.255986][ T6899] FAT-fs (loop4): Directory bread(block 68) failed [ 223.258334][ T6899] FAT-fs (loop4): Directory bread(block 69) failed [ 223.261542][ T6899] FAT-fs (loop4): Directory bread(block 70) failed [ 223.268202][ T6899] FAT-fs (loop4): Directory bread(block 71) failed [ 223.270524][ T6899] FAT-fs (loop4): Directory bread(block 72) failed [ 223.273385][ T6899] FAT-fs (loop4): Directory bread(block 73) failed [ 223.316235][ T6907] netlink: 'syz.1.723': attribute type 1 has an invalid length. [ 223.317499][ T6907] netlink: 28 bytes leftover after parsing attributes in process `syz.1.723'. [ 223.409647][ T6916] xt_hashlimit: size too large, truncated to 1048576 [ 223.687424][ T6945] netlink: 'syz.4.737': attribute type 1 has an invalid length. [ 223.688632][ T6945] netlink: 28 bytes leftover after parsing attributes in process `syz.4.737'. [ 223.881597][ T6940] loop1: detected capacity change from 0 to 40427 [ 223.895397][ T6940] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 223.896716][ T6940] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 223.898708][ T6940] F2FS-fs (loop1): invalid crc value [ 223.906502][ T6957] netlink: 'syz.2.740': attribute type 13 has an invalid length. [ 223.920364][ T6940] F2FS-fs (loop1): Found nat_bits in checkpoint [ 223.931133][ T6957] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 223.936412][ T6940] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 223.937587][ T6940] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 223.970128][ T6957] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 223.988893][ T6957] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 225.303894][ T6702] I/O error, dev loop0, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 225.315275][ T4322] syz-executor: attempt to access beyond end of device [ 225.315275][ T4322] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 225.486061][ T6986] netlink: 'syz.0.750': attribute type 1 has an invalid length. [ 225.487442][ T6986] netlink: 28 bytes leftover after parsing attributes in process `syz.0.750'. [ 225.629687][ T6994] mmap: syz.1.747 (6994) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 226.113657][ T6992] set_capacity_and_notify: 1 callbacks suppressed [ 226.113667][ T6992] loop0: detected capacity change from 0 to 40427 [ 226.134270][ T6992] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 226.135529][ T6992] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 226.146675][ T6998] loop4: detected capacity change from 0 to 4096 [ 226.160184][ T6998] EXT4-fs: inline encryption not supported [ 226.173676][ T6998] EXT4-fs (loop4): Test dummy encryption mode enabled [ 226.175104][ T6992] F2FS-fs (loop0): Found nat_bits in checkpoint [ 226.203929][ T6998] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 226.205361][ T6998] System zones: 0-5 [ 226.208543][ T6992] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 226.209757][ T6992] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 226.216526][ T6998] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 226.379558][ T7008] loop1: detected capacity change from 0 to 256 [ 226.421275][ T7008] FAT-fs (loop1): Directory bread(block 64) failed [ 226.422422][ T7008] FAT-fs (loop1): Directory bread(block 65) failed [ 226.427803][ T4333] EXT4-fs (loop4): unmounting filesystem. [ 226.432949][ T7008] FAT-fs (loop1): Directory bread(block 66) failed [ 226.434063][ T7008] FAT-fs (loop1): Directory bread(block 67) failed [ 226.435140][ T7008] FAT-fs (loop1): Directory bread(block 68) failed [ 226.436274][ T7008] FAT-fs (loop1): Directory bread(block 69) failed [ 226.437407][ T7008] FAT-fs (loop1): Directory bread(block 70) failed [ 226.442291][ T7008] FAT-fs (loop1): Directory bread(block 71) failed [ 226.444031][ T7008] FAT-fs (loop1): Directory bread(block 72) failed [ 226.445063][ T7008] FAT-fs (loop1): Directory bread(block 73) failed [ 226.563889][ T7015] device syzkaller0 entered promiscuous mode [ 227.447355][ T7026] loop1: detected capacity change from 0 to 40427 [ 227.456675][ T7026] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 227.458078][ T7026] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 227.473832][ T7026] F2FS-fs (loop1): invalid crc value [ 227.480670][ T7041] loop0: detected capacity change from 0 to 256 [ 227.482413][ T7041] exfat: Deprecated parameter 'utf8' [ 227.487596][ T7041] exfat: Deprecated parameter 'namecase' [ 227.520710][ T7041] exfat: Deprecated parameter 'namecase' [ 227.702781][ T7041] exfat: Deprecated parameter 'utf8' [ 227.716748][ T7041] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 227.797145][ T7026] F2FS-fs (loop1): Found nat_bits in checkpoint [ 227.829830][ T7026] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 227.831163][ T7026] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 228.449091][ T7057] loop3: detected capacity change from 0 to 256 [ 228.450531][ T7057] exfat: Unknown parameter 'nÿecase' [ 228.559958][ T7059] netlink: 'syz.0.771': attribute type 1 has an invalid length. [ 228.561281][ T7059] netlink: 20 bytes leftover after parsing attributes in process `syz.0.771'. [ 228.755459][ T7067] device syzkaller0 entered promiscuous mode [ 229.384768][ T4322] syz-executor: attempt to access beyond end of device [ 229.384768][ T4322] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 229.393818][ T6702] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 229.911555][ T7071] loop0: detected capacity change from 0 to 40427 [ 229.920340][ T7071] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 229.921560][ T7071] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 229.927542][ T7071] F2FS-fs (loop0): invalid crc value [ 229.960566][ T7071] F2FS-fs (loop0): Found nat_bits in checkpoint [ 229.968701][ T7084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.972497][ T7084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.987937][ T7071] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 229.989149][ T7071] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 230.036236][ T7078] loop1: detected capacity change from 0 to 40427 [ 230.045369][ T7078] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 230.049638][ T7078] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 230.056086][ T7078] F2FS-fs (loop1): invalid crc value [ 230.088304][ T7078] F2FS-fs (loop1): Found nat_bits in checkpoint [ 230.111791][ T7078] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 230.115735][ T7078] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 230.331019][ T4322] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 230.331040][ T4322] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 230.339481][ T4322] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 230.340739][ T4322] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 230.341995][ T4322] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 230.349603][ T4322] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 230.350869][ T4322] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 230.404823][ T7085] loop2: detected capacity change from 0 to 40427 [ 230.430999][ T7085] F2FS-fs (loop2): invalid crc value [ 230.457106][ T7085] F2FS-fs (loop2): Found nat_bits in checkpoint [ 230.475161][ T7085] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 230.508734][ T4327] syz-executor: attempt to access beyond end of device [ 230.508734][ T4327] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 231.428321][ T7115] device syzkaller0 entered promiscuous mode [ 231.485702][ T4329] syz-executor: attempt to access beyond end of device [ 231.485702][ T4329] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 231.591410][ T7120] netlink: 44 bytes leftover after parsing attributes in process `syz.2.786'. [ 231.601400][ T7120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.617271][ T7120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.733328][ T7118] loop0: detected capacity change from 0 to 40427 [ 231.762393][ T7118] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 231.771255][ T7118] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 231.779423][ T7118] F2FS-fs (loop0): invalid crc value [ 231.795189][ T7118] F2FS-fs (loop0): Found nat_bits in checkpoint [ 231.876625][ T7130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.789'. [ 232.108725][ T7118] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 232.110210][ T7118] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 232.156121][ T4327] syz-executor: attempt to access beyond end of device [ 232.156121][ T4327] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 233.268331][ T7104] loop1: detected capacity change from 0 to 131072 [ 233.284374][ T7104] F2FS-fs (loop1): invalid crc value [ 233.306276][ T7104] F2FS-fs (loop1): Found nat_bits in checkpoint [ 233.324525][ T7104] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 233.988874][ T7168] loop1: detected capacity change from 0 to 4096 [ 234.005128][ T7168] EXT4-fs: inline encryption not supported [ 234.016266][ T7168] EXT4-fs (loop1): Test dummy encryption mode enabled [ 234.044466][ T7168] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 234.046033][ T7168] System zones: 0-5 [ 234.058636][ T7168] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 234.622356][ T7165] loop0: detected capacity change from 0 to 40427 [ 234.637624][ T7165] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 234.639593][ T7165] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 234.657729][ T7165] F2FS-fs (loop0): invalid crc value [ 234.682801][ T7165] F2FS-fs (loop0): Found nat_bits in checkpoint [ 234.697960][ T7165] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 234.699246][ T7165] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 234.736285][ T4327] syz-executor: attempt to access beyond end of device [ 234.736285][ T4327] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 234.820553][ T4322] EXT4-fs (loop1): unmounting filesystem. [ 234.841594][ T7186] loop3: detected capacity change from 0 to 4096 [ 234.844409][ T7186] EXT4-fs: inline encryption not supported [ 234.850164][ T7186] EXT4-fs (loop3): Test dummy encryption mode enabled [ 234.873732][ T7186] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 234.875174][ T7186] System zones: 0-5 [ 234.876514][ T7186] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 234.887907][ T7198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.890670][ T7198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.924270][ T4321] EXT4-fs (loop3): unmounting filesystem. [ 235.542386][ T7217] loop3: detected capacity change from 0 to 256 [ 235.578428][ T7217] FAT-fs (loop3): Directory bread(block 64) failed [ 235.579688][ T7217] FAT-fs (loop3): Directory bread(block 65) failed [ 235.582022][ T7217] FAT-fs (loop3): Directory bread(block 66) failed [ 235.587500][ T7217] FAT-fs (loop3): Directory bread(block 67) failed [ 235.588666][ T7217] FAT-fs (loop3): Directory bread(block 68) failed [ 235.594008][ T7217] FAT-fs (loop3): Directory bread(block 69) failed [ 235.598417][ T7217] FAT-fs (loop3): Directory bread(block 70) failed [ 235.599566][ T7217] FAT-fs (loop3): Directory bread(block 71) failed [ 235.605421][ T7217] FAT-fs (loop3): Directory bread(block 72) failed [ 235.609894][ T7217] FAT-fs (loop3): Directory bread(block 73) failed [ 235.701408][ T7219] device syzkaller0 entered promiscuous mode [ 235.867294][ T7226] loop2: detected capacity change from 0 to 4096 [ 235.870974][ T7226] EXT4-fs: inline encryption not supported [ 235.875962][ T7226] EXT4-fs (loop2): Test dummy encryption mode enabled [ 235.877891][ T7226] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 235.879238][ T7226] System zones: 0-5 [ 235.880796][ T7226] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 235.888694][ T7193] loop0: detected capacity change from 0 to 131072 [ 235.903541][ T7193] F2FS-fs (loop0): invalid crc value [ 235.948624][ T7193] F2FS-fs (loop0): Found nat_bits in checkpoint [ 235.968142][ T7193] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 235.993389][ T7221] loop3: detected capacity change from 0 to 40427 [ 235.995191][ T7221] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 235.996473][ T7221] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 236.007241][ T7221] F2FS-fs (loop3): invalid crc value [ 236.050540][ T7221] F2FS-fs (loop3): Found nat_bits in checkpoint [ 236.128448][ T7221] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 236.129681][ T7221] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 236.659664][ T4338] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 236.661885][ T4338] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 236.665544][ T4338] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 236.667889][ T4338] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 236.669894][ T4338] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 236.671474][ T4338] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 236.696621][ T4321] syz-executor: attempt to access beyond end of device [ 236.696621][ T4321] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 236.745441][ T4436] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.833643][ T4436] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.933837][ T4436] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.016310][ T4436] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.031879][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 237.062095][ T7269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.832'. [ 237.098695][ T7249] chnl_net:caif_netlink_parms(): no params data found [ 237.148467][ T7271] device syzkaller0 entered promiscuous mode [ 237.212728][ T7249] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.213920][ T7249] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.215997][ T7249] device bridge_slave_0 entered promiscuous mode [ 237.218196][ T7249] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.219337][ T7249] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.220808][ T7249] device bridge_slave_1 entered promiscuous mode [ 237.238358][ T7249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.450314][ T7249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.496883][ T7249] team0: Port device team_slave_0 added [ 237.522547][ T7249] team0: Port device team_slave_1 added [ 237.589972][ T7296] loop2: detected capacity change from 0 to 512 [ 237.606993][ T7296] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 237.608633][ T7296] EXT4-fs (loop2): bad geometry: first data block 1281 is beyond end of filesystem (256) [ 237.865488][ T7249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.874076][ T7249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.900397][ T7249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.925150][ T7249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.926376][ T7249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.951207][ T7249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.000954][ T7309] loop2: detected capacity change from 0 to 4096 [ 238.048149][ T7309] EXT4-fs: inline encryption not supported [ 238.079685][ T7309] EXT4-fs (loop2): Test dummy encryption mode enabled [ 238.124139][ T7309] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 238.125542][ T7309] System zones: 0-5 [ 238.127076][ T7309] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 238.144327][ T7249] device hsr_slave_0 entered promiscuous mode [ 238.353437][ T7249] device hsr_slave_1 entered promiscuous mode [ 238.424546][ T7249] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.426323][ T7249] Cannot create hsr debugfs directory [ 238.583782][ T7328] device syzkaller0 entered promiscuous mode [ 238.763487][ T4325] Bluetooth: hci4: command 0x0409 tx timeout [ 239.398989][ T7359] loop0: detected capacity change from 0 to 256 [ 239.417686][ T7359] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 239.727258][ T7362] loop3: detected capacity change from 0 to 512 [ 239.757077][ T7363] loop1: detected capacity change from 0 to 1024 [ 239.773769][ T7362] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 239.778754][ T7362] EXT4-fs warning (device loop3): ext4_group_add:1723: Can't resize non-sparse filesystem further [ 239.788600][ T7363] EXT4-fs: Ignoring removed i_version option [ 239.793035][ T7363] EXT4-fs: inline encryption not supported [ 239.807912][ T7363] ext4: Bad value for 'init_itable' [ 239.827441][ T4321] EXT4-fs (loop3): unmounting filesystem. [ 240.051966][ T7388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.056843][ T7388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.065159][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 240.486182][ T7392] device syzkaller0 entered promiscuous mode [ 240.513578][ T7384] loop1: detected capacity change from 0 to 40427 [ 240.518590][ T7397] binder: 7396:7397 got transaction to invalid handle, 2 [ 240.519422][ T7384] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 240.519809][ T7397] binder: 7397:7396 cannot find target node [ 240.522142][ T7397] binder: 7396:7397 transaction async to 0:0 failed 12/29201/-22, size 0-0 line 3045 [ 240.522478][ T7384] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 240.528996][ T7384] F2FS-fs (loop1): invalid crc value [ 240.536043][ T7384] F2FS-fs (loop1): Found nat_bits in checkpoint [ 240.568516][ T7384] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 240.569700][ T7384] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 240.844262][ T4325] Bluetooth: hci4: command 0x041b tx timeout [ 241.121955][ T7411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.123627][ T7411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.148289][ T7405] binder: 7404:7405 ioctl c0306201 20000000 returned -14 [ 241.458417][ T7249] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 241.467218][ T4322] syz-executor: attempt to access beyond end of device [ 241.467218][ T4322] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 241.518058][ T7414] loop0: detected capacity change from 0 to 2048 [ 241.537876][ T7249] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 241.547579][ T7414] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 241.552912][ T7414] overlayfs: missing 'workdir' [ 241.562034][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 241.576333][ T7249] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 241.602068][ T7419] loop0: detected capacity change from 0 to 512 [ 241.604112][ T7419] EXT4-fs: quotafile must be on filesystem root [ 241.635336][ T7382] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 241.841254][ T7249] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 242.279742][ T7445] loop0: detected capacity change from 0 to 16 [ 242.289773][ T7445] erofs: (device loop0): mounted with root inode @ nid 36. [ 242.702203][ T7454] loop3: detected capacity change from 0 to 40427 [ 242.704191][ T7454] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 242.705439][ T7454] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 242.707387][ T7454] F2FS-fs (loop3): invalid crc value [ 242.709396][ T7454] F2FS-fs (loop3): Found nat_bits in checkpoint [ 242.732182][ T7454] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 242.736828][ T7454] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 242.829525][ T7434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.847814][ T7434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.949654][ T4325] Bluetooth: hci4: command 0x040f tx timeout [ 243.358844][ T7434] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.360468][ T7434] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.361949][ T7434] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.363583][ T7434] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.630989][ T4436] device hsr_slave_0 left promiscuous mode [ 243.663445][ T4436] device hsr_slave_1 left promiscuous mode [ 243.712860][ T4436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.714198][ T4436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.716110][ T4436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.717284][ T4436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.718730][ T4436] device bridge_slave_1 left promiscuous mode [ 243.720561][ T4436] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.753795][ T4436] device bridge_slave_0 left promiscuous mode [ 243.754836][ T4436] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.883053][ T4436] device veth1_macvtap left promiscuous mode [ 243.884360][ T4436] device veth0_macvtap left promiscuous mode [ 243.886107][ T4436] device veth1_vlan left promiscuous mode [ 243.887113][ T4436] device veth0_vlan left promiscuous mode [ 244.972695][ T4338] Bluetooth: hci4: command 0x0419 tx timeout [ 245.985503][ T4436] team0 (unregistering): Port device team_slave_1 removed [ 246.143302][ T4436] team0 (unregistering): Port device team_slave_0 removed [ 246.313134][ T4436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.514231][ T4436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.024079][ T4436] bond0 (unregistering): Released all slaves [ 248.320375][ T7468] netlink: 20 bytes leftover after parsing attributes in process `syz.1.879'. [ 248.365112][ T4321] syz-executor: attempt to access beyond end of device [ 248.365112][ T4321] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 248.450284][ T7249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.480443][ T7409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 248.482048][ T7409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.495025][ T7249] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.521337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 248.523577][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 248.525069][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.526260][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.528484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 248.541108][ T7249] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 248.543773][ T7249] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 248.546130][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 248.547900][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 248.549406][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.550575][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.551934][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 248.559665][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 248.576634][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 248.586989][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 248.590676][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 248.690383][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 248.811408][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 248.813332][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.815833][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 248.915025][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 249.000634][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 249.077481][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 249.154659][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 249.237196][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 250.146342][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 250.147864][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 250.164264][ T7249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.561214][ T7557] device syzkaller0 entered promiscuous mode [ 251.141930][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 251.143824][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 251.163822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 251.165572][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 251.167321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 251.168774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 251.178761][ T7249] device veth0_vlan entered promiscuous mode [ 251.198444][ T7249] device veth1_vlan entered promiscuous mode [ 251.232415][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 251.234423][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 251.239921][ T7249] device veth0_macvtap entered promiscuous mode [ 251.246947][ T7249] device veth1_macvtap entered promiscuous mode [ 251.248948][ T7586] binder: 7585:7586 tried to acquire reference to desc 0, got 1 instead [ 251.259816][ T7586] binder: 7585:7586 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 30) [ 251.267248][ T7249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.267264][ T7586] binder: 7586 RLIMIT_NICE not set [ 251.273356][ T7249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.275402][ T7586] binder: 7586 RLIMIT_NICE not set [ 251.278267][ T7249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.284346][ T7249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.285052][ T7586] binder: release 7585:7586 transaction 17 in, still active [ 251.289305][ T7249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.292596][ T7249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.295152][ T7249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.297464][ T7249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.299156][ T7249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.310891][ T7249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.312612][ T7249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.316312][ T7249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.317852][ T7249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.324189][ T7586] binder: send failed reply for transaction 17 to 7585:7586 [ 251.331198][ T7249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.341805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 251.344423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 251.346870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 251.348809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 251.351587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 251.355888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 251.370146][ T7249] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.371774][ T7249] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.373567][ T24] binder: undelivered TRANSACTION_COMPLETE [ 251.374528][ T24] binder: undelivered TRANSACTION_ERROR: 29189 [ 251.375815][ T7249] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.377173][ T7249] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.547092][ T7597] loop3: detected capacity change from 0 to 512 [ 252.692128][ T4734] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.695828][ T4734] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.698218][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 252.807326][ T4734] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.808724][ T4734] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.810122][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 253.015444][ T7615] loop3: detected capacity change from 0 to 40427 [ 253.032670][ T7615] F2FS-fs (loop3): invalid crc value [ 253.051076][ T7615] F2FS-fs (loop3): Found nat_bits in checkpoint [ 253.064414][ T7615] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 254.210101][ T4321] syz-executor: attempt to access beyond end of device [ 254.210101][ T4321] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 254.353471][ T7656] netlink: 68 bytes leftover after parsing attributes in process `syz.3.911'. [ 254.399986][ T7643] device syzkaller0 entered promiscuous mode [ 254.784982][ T7661] netlink: 128 bytes leftover after parsing attributes in process `syz.3.914'. [ 255.029277][ T7649] loop0: detected capacity change from 0 to 40427 [ 255.046682][ T7649] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 255.051814][ T7649] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 255.065551][ T7649] F2FS-fs (loop0): invalid crc value [ 255.082425][ T7649] F2FS-fs (loop0): Found nat_bits in checkpoint [ 255.109051][ T7649] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 255.111381][ T7649] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 256.145674][ T7683] xt_hashlimit: size too large, truncated to 1048576 [ 256.154479][ T7672] loop1: detected capacity change from 0 to 131072 [ 256.161162][ T7672] F2FS-fs (loop1): Test dummy encryption mode enabled [ 256.165686][ T7672] F2FS-fs (loop1): invalid crc value [ 256.190220][ T7672] F2FS-fs (loop1): Found nat_bits in checkpoint [ 256.216538][ T7672] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 256.250538][ T7688] loop2: detected capacity change from 0 to 2048 [ 256.257469][ T7688] EXT4-fs: quotafile must be on filesystem root [ 256.323877][ T7494] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 257.200745][ T7699] binder: 7698:7699 ioctl c0306201 20000080 returned -14 [ 257.203191][ T7699] binder: 7698:7699 got transaction to invalid handle, 1 [ 257.204318][ T7699] binder: 7699:7698 cannot find target node [ 257.205387][ T7699] binder: 7698:7699 transaction async to 0:0 failed 21/29201/-22, size 112-40 line 3045 [ 257.207210][ T4368] binder: undelivered TRANSACTION_ERROR: 29201 [ 257.713400][ T7710] loop1: detected capacity change from 0 to 4096 [ 257.714959][ T7710] EXT4-fs: Ignoring removed i_version option [ 257.716049][ T7710] EXT4-fs: Ignoring removed mblk_io_submit option [ 257.736824][ T7710] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 257.758135][ T4322] EXT4-fs (loop1): unmounting filesystem. [ 259.397354][ T7739] binder: 7738:7739 ioctl c0306201 20000080 returned -14 [ 259.399816][ T7739] binder: 7738:7739 ioctl c0306201 200003c0 returned -14 [ 259.401188][ T7739] binder: 7738:7739 got transaction to invalid handle, 1 [ 259.402244][ T7739] binder: 7739:7738 cannot find target node [ 259.404468][ T7739] binder: 7738:7739 transaction async to 0:0 failed 24/29201/-22, size 112-40 line 3045 [ 259.406371][ T4403] binder: undelivered TRANSACTION_ERROR: 29201 [ 259.433495][ T7741] binder: 7740:7741 tried to acquire reference to desc 0, got 1 instead [ 259.435195][ T7741] binder: 7740:7741 BC_FREE_BUFFER u0000000000000000 no match [ 259.436938][ T7741] binder: tried to use weak ref as strong ref [ 259.437913][ T7741] binder: 7740:7741 got transaction to invalid handle, 1 [ 259.439314][ T7741] binder: 7741:7740 cannot find target node [ 259.440382][ T7741] binder: 7740:7741 transaction call to 0:0 failed 29/29201/-22, size 72-24 line 3045 [ 259.442552][ T4403] binder: undelivered TRANSACTION_ERROR: 29201 [ 259.548892][ T7746] loop1: detected capacity change from 0 to 512 [ 259.550743][ T7746] FAT-fs (loop1): bogus number of FAT sectors [ 259.552060][ T7746] FAT-fs (loop1): Can't find a valid FAT filesystem [ 266.536432][ T7778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.537916][ T7778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.552363][ T7774] device syzkaller0 entered promiscuous mode [ 266.572777][ T27] audit: type=1326 audit(266.530:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7769 comm="syz.2.950" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb45771a8 code=0x0 [ 266.614358][ T7781] loop3: detected capacity change from 0 to 128 [ 266.619973][ T7781] EXT4-fs: inline encryption not supported [ 266.621013][ T7781] ext4: Unknown parameter 'noacl' [ 268.477969][ T7787] loop3: detected capacity change from 0 to 40427 [ 268.489810][ T7787] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 268.491123][ T7787] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 268.497808][ T7787] F2FS-fs (loop3): invalid crc value [ 268.741586][ T7787] F2FS-fs (loop3): Found nat_bits in checkpoint [ 268.842091][ T7787] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 268.843449][ T7787] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 269.195217][ T4387] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 269.197745][ T4387] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 269.329978][ T7806] device syzkaller0 entered promiscuous mode [ 269.559966][ T7821] loop1: detected capacity change from 0 to 512 [ 269.581201][ T7825] device syzkaller0 entered promiscuous mode [ 269.601146][ T7821] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 269.627832][ T7821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.630844][ T7821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.225745][ T7847] loop4: detected capacity change from 0 to 16 [ 270.239669][ T7847] erofs: (device loop4): mounted with root inode @ nid 36. [ 270.297243][ T7852] binder: 7851:7852 ioctl c0306201 20000080 returned -14 [ 270.303282][ T7852] binder: 7851:7852 ioctl c0306201 200003c0 returned -14 [ 270.304659][ T7852] binder: 7851:7852 got transaction to invalid handle, 1 [ 270.306130][ T7852] binder: 7852:7851 cannot find target node [ 270.307183][ T7852] binder: 7851:7852 transaction async to 0:0 failed 32/29201/-22, size 112-40 line 3045 [ 270.309259][ T4368] binder: undelivered TRANSACTION_ERROR: 29201 [ 270.344016][ T4322] EXT4-fs (loop1): unmounting filesystem. [ 270.394158][ T7858] device syzkaller0 entered promiscuous mode [ 270.472394][ T7819] loop0: detected capacity change from 0 to 131072 [ 271.198583][ T7819] F2FS-fs (loop0): Found nat_bits in checkpoint [ 271.330506][ T7819] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 271.394256][ T7886] binder: 7885:7886 ioctl c0306201 20000080 returned -14 [ 271.396568][ T7886] binder: BINDER_SET_CONTEXT_MGR already set [ 271.397652][ T7886] binder: 7885:7886 ioctl 4018620d 20000040 returned -16 [ 271.399976][ T7886] binder: 7885:7886 ioctl c0306201 200003c0 returned -14 [ 271.401429][ T7886] binder: 7885:7886 got transaction to invalid handle, 1 [ 271.412873][ T7886] binder: 7886:7885 cannot find target node [ 271.414006][ T7886] binder: 7885:7886 transaction async to 0:0 failed 35/29201/-22, size 112-40 line 3045 [ 271.419015][ T4369] binder: undelivered TRANSACTION_ERROR: 29201 [ 272.299928][ T7921] loop2: detected capacity change from 0 to 2048 [ 272.659170][ T7921] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 272.668143][ T7921] [ 272.668555][ T7921] ====================================================== [ 272.669805][ T7921] WARNING: possible circular locking dependency detected [ 272.671035][ T7921] syzkaller #0 Not tainted [ 272.671811][ T7921] ------------------------------------------------------ [ 272.673048][ T7921] syz.2.998/7921 is trying to acquire lock: [ 272.674072][ T7921] ffff0000ff9414d8 (&ei->xattr_sem){++++}-{3:3}, at: ext4_destroy_inline_data+0x30/0x114 [ 272.675841][ T7921] [ 272.675841][ T7921] but task is already holding lock: [ 272.677071][ T7921] ffff0000e020cc18 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x1b8/0x28b4 [ 272.678904][ T7921] [ 272.678904][ T7921] which lock already depends on the new lock. [ 272.678904][ T7921] [ 272.680739][ T7921] [ 272.680739][ T7921] the existing dependency chain (in reverse order) is: [ 272.682281][ T7921] [ 272.682281][ T7921] -> #1 (&sbi->s_writepages_rwsem){.+.+}-{0:0}: [ 272.683707][ T7921] percpu_down_read+0x70/0x2a8 [ 272.684646][ T7921] ext4_writepages+0x1b8/0x28b4 [ 272.685638][ T7921] do_writepages+0x2b0/0x504 [ 272.686560][ T7921] __writeback_single_inode+0x164/0x1554 [ 272.687599][ T7921] writeback_single_inode+0x1cc/0x740 [ 272.688604][ T7921] write_inode_now+0x150/0x1cc [ 272.689565][ T7921] iput+0x5bc/0x7e4 [ 272.690308][ T7921] ext4_xattr_block_set+0x1454/0x2880 [ 272.691315][ T7921] ext4_expand_extra_isize_ea+0xe5c/0x17ac [ 272.692360][ T7921] __ext4_expand_extra_isize+0x298/0x358 [ 272.693348][ T7921] __ext4_mark_inode_dirty+0x3e4/0x784 [ 272.694384][ T7921] ext4_evict_inode+0xb64/0x1278 [ 272.695379][ T7921] evict+0x3e0/0x828 [ 272.696168][ T7921] iput+0x754/0x7e4 [ 272.696919][ T7921] ext4_process_orphan+0x240/0x2b4 [ 272.697859][ T7921] ext4_orphan_cleanup+0x920/0x1060 [ 272.698829][ T7921] ext4_fill_super+0x594c/0x61b0 [ 272.699777][ T7921] get_tree_bdev+0x358/0x544 [ 272.700641][ T7921] ext4_get_tree+0x28/0x38 [ 272.701472][ T7921] vfs_get_tree+0x90/0x274 [ 272.702319][ T7921] do_new_mount+0x228/0x810 [ 272.703164][ T7921] path_mount+0x5bc/0xe80 [ 272.703992][ T7921] __arm64_sys_mount+0x49c/0x59c [ 272.704895][ T7921] invoke_syscall+0x98/0x2b4 [ 272.705760][ T7921] el0_svc_common+0x138/0x258 [ 272.706622][ T7921] do_el0_svc+0x58/0x130 [ 272.707479][ T7921] el0_svc+0x58/0x128 [ 272.708231][ T7921] el0t_64_sync_handler+0x84/0xf0 [ 272.709257][ T7921] el0t_64_sync+0x18c/0x190 [ 272.710169][ T7921] [ 272.710169][ T7921] -> #0 (&ei->xattr_sem){++++}-{3:3}: [ 272.711553][ T7921] __lock_acquire+0x2880/0x6800 [ 272.712467][ T7921] lock_acquire+0x20c/0x63c [ 272.713366][ T7921] down_write+0x5c/0x88 [ 272.714236][ T7921] ext4_destroy_inline_data+0x30/0x114 [ 272.715296][ T7921] ext4_writepages+0x430/0x28b4 [ 272.716207][ T7921] do_writepages+0x2b0/0x504 [ 272.717147][ T7921] filemap_fdatawrite_wbc+0x124/0x174 [ 272.718177][ T7921] file_write_and_wait_range+0x11c/0x1f4 [ 272.719239][ T7921] ext4_sync_file+0x210/0xc70 [ 272.720155][ T7921] vfs_fsync_range+0x168/0x188 [ 272.721068][ T7921] ext4_buffered_write_iter+0x47c/0x528 [ 272.722131][ T7921] ext4_file_write_iter+0x18c/0x1574 [ 272.723122][ T7921] vfs_write+0x3ec/0x7f0 [ 272.723959][ T7921] __arm64_sys_pwrite64+0x174/0x20c [ 272.724960][ T7921] invoke_syscall+0x98/0x2b4 [ 272.725915][ T7921] el0_svc_common+0x138/0x258 [ 272.726880][ T7921] do_el0_svc+0x58/0x130 [ 272.727720][ T7921] el0_svc+0x58/0x128 [ 272.728480][ T7921] el0t_64_sync_handler+0x84/0xf0 [ 272.729300][ T7921] el0t_64_sync+0x18c/0x190 [ 272.730155][ T7921] [ 272.730155][ T7921] other info that might help us debug this: [ 272.730155][ T7921] [ 272.731714][ T7921] Possible unsafe locking scenario: [ 272.731714][ T7921] [ 272.732923][ T7921] CPU0 CPU1 [ 272.733759][ T7921] ---- ---- [ 272.734673][ T7921] lock(&sbi->s_writepages_rwsem); [ 272.735532][ T7921] lock(&ei->xattr_sem); [ 272.736690][ T7921] lock(&sbi->s_writepages_rwsem); [ 272.737952][ T7921] lock(&ei->xattr_sem); [ 272.738744][ T7921] [ 272.738744][ T7921] *** DEADLOCK *** [ 272.738744][ T7921] [ 272.740051][ T7921] 2 locks held by syz.2.998/7921: [ 272.740885][ T7921] #0: ffff0000e020a460 (sb_writers#3){.+.+}-{0:0}, at: vfs_write+0x244/0x7f0 [ 272.742346][ T7921] #1: ffff0000e020cc18 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x1b8/0x28b4 [ 272.744104][ T7921] [ 272.744104][ T7921] stack backtrace: [ 272.745017][ T7921] CPU: 1 PID: 7921 Comm: syz.2.998 Not tainted syzkaller #0 [ 272.746311][ T7921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 272.748036][ T7921] Call trace: [ 272.748563][ T7921] dump_backtrace+0x1c0/0x1ec [ 272.749414][ T7921] show_stack+0x2c/0x3c [ 272.750155][ T7921] __dump_stack+0x30/0x40 [ 272.750871][ T7921] dump_stack_lvl+0xf4/0x15c [ 272.751594][ T7921] dump_stack+0x1c/0x5c [ 272.752361][ T7921] print_circular_bug+0x148/0x1b0 [ 272.753169][ T7921] check_noncircular+0x264/0x2f8 [ 272.754011][ T7921] __lock_acquire+0x2880/0x6800 [ 272.754891][ T7921] lock_acquire+0x20c/0x63c [ 272.755662][ T7921] down_write+0x5c/0x88 [ 272.756365][ T7921] ext4_destroy_inline_data+0x30/0x114 [ 272.757297][ T7921] ext4_writepages+0x430/0x28b4 [ 272.758152][ T7921] do_writepages+0x2b0/0x504 [ 272.758900][ T7921] filemap_fdatawrite_wbc+0x124/0x174 [ 272.759822][ T7921] file_write_and_wait_range+0x11c/0x1f4 [ 272.760732][ T7921] ext4_sync_file+0x210/0xc70 [ 272.761529][ T7921] vfs_fsync_range+0x168/0x188 [ 272.762360][ T7921] ext4_buffered_write_iter+0x47c/0x528 [ 272.763302][ T7921] ext4_file_write_iter+0x18c/0x1574 [ 272.764215][ T7921] vfs_write+0x3ec/0x7f0 [ 272.764899][ T7921] __arm64_sys_pwrite64+0x174/0x20c [ 272.765784][ T7921] invoke_syscall+0x98/0x2b4 [ 272.766580][ T7921] el0_svc_common+0x138/0x258 [ 272.767394][ T7921] do_el0_svc+0x58/0x130 [ 272.768165][ T7921] el0_svc+0x58/0x128 [ 272.768854][ T7921] el0t_64_sync_handler+0x84/0xf0 [ 272.769721][ T7921] el0t_64_sync+0x18c/0x190 [ 272.790350][ T7921] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 272.795479][ T7921] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 272.798134][ T7921] EXT4-fs (loop2): This should not happen!! Data will be lost [ 272.798134][ T7921] [ 272.799986][ T7921] EXT4-fs (loop2): Total free blocks count 0 [ 272.801094][ T7921] EXT4-fs (loop2): Free/Dirty block details [ 272.802206][ T7921] EXT4-fs (loop2): free_blocks=2415919104 [ 272.803798][ T7921] EXT4-fs (loop2): dirty_blocks=32 [ 272.804826][ T7921] EXT4-fs (loop2): Block reservation details [ 272.806675][ T7921] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 272.816874][ T7409] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28