last executing test programs: 10.835726348s ago: executing program 2 (id=692): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x20040010) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x2, 0x2}}, 0x0, 0x0}}) 8.808871536s ago: executing program 4 (id=699): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @loopback}, 0xc) 8.364405171s ago: executing program 2 (id=701): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x5, 0x5e, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000c291492099042a102d850102030109024c0001000010000904100002e51de5000b2402010302057ff49bfd052406000105240002000d240f010500000009000700080624037f000109050602ff03000000090582"], 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0) 8.121870829s ago: executing program 4 (id=703): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x800, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x26c, &(0x7f0000000840)="$eJzs3U9rU1kYB+A3bTpJC0OyGCgzDMwdZjOr0HaYfcrQgWECipKFriw2RWlqoYWCLtruit9Bv4Iu3QouxK1fQASpghvrqgshEm//JDWJjZpG7PNs+nLu++Ock17upYueXPl1eWlhZW1xd3cn8vlMZMtRjr1MFGMkRiO1FQDA92Sv0Yg3jdSw1wIAnA7vfwA4e3q9/zNbh2PnT39lAMCgfNHf/yMDWRIAMGAXL13+f7ZSmbuQJPmI5e316no1/Zlen12M61GPWkxFId5FNA6l9b//VeamkqaXxcgvb46k+c316mh7fjoKUeycn05SUW3mDvJjMbGffzYRtZiJQvzUOT/TMf9D/PlHy/ylKMTTq7ES9ViIZjbN5yJiYzpJ/jlXOZbPfegDAAAAAAAAAAAAAAAAAAAAAIBBKCWHiu3n36Tn95RK3a6n+dbzgcZ7nQ/U2Dx2vk42fskOd+8AAAAAAAAAAAAAAAAAAADwrVi7eWtpvl6vrfYqbjy592gnlwY+2dy7yOzP219qu2fP+Ml2caz48fcXdzpdykWu38/n84qxiGgdSfanfPjbACf9WsXjnWs//7U2+Xe3nsi2jtxubrWtp8uNlB3UB/66ENG1J9/3Ddla3D8oym8/6jm4lWqr48P+xU3eLc8/2Hj+6qSpHg+NxuggHkUAAAAAAAAAAAAAAAAAAHDmHf3T77BXAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADDc/T9//0WuWgbyXdt3hr2HgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4H0AAAD//7qXlSU=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x275a, 0x0) 7.401598765s ago: executing program 4 (id=706): sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00'], 0x24}}, 0x0) r0 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xefa8, 0x10000, 0x7ffe, 0xc0024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r2 = eventfd2(0xff, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000880)=r2, 0x1) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) 6.809891064s ago: executing program 3 (id=708): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) poll(&(0x7f00000001c0)=[{r0, 0x1000}], 0x1, 0x4) 6.679400321s ago: executing program 4 (id=710): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f00000001c0)='./file2\x00', 0x2008410, &(0x7f0000000d00)=ANY=[@ANYBLOB="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", @ANYRES32], 0x1, 0x555a, &(0x7f00000067c0)="$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") syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42041, 0x0) 5.959527705s ago: executing program 2 (id=713): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000840)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f0000000900)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000000c0)={0x0, 0x12, 0x2, ']1'}, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.855029784s ago: executing program 3 (id=714): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x18) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000060900020073797a30000000005800048054000180090001006d657461000000004400028008000140000056d6080003400000000008000140000000010800014000000009080001400000000b080002400000001e0800014000000015080003"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 5.309130014s ago: executing program 1 (id=717): r0 = fsopen(&(0x7f0000000400)='pstore\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 5.302186738s ago: executing program 3 (id=718): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 5.085138241s ago: executing program 4 (id=719): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000b0000f8ff00000000010001"], 0x20}}, 0x4000000) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 4.999334393s ago: executing program 0 (id=720): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000600)='hybla', 0x5) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 4.807927114s ago: executing program 1 (id=721): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f0000000200)=[{r0}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1020affff20c311df259149e300", 0x10) listen(r0, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 3.696454941s ago: executing program 4 (id=722): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2c}}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r0, &(0x7f0000000000)='1', 0x1, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r2, 0x1, 0x4, 0x6, @local}, 0x14) 3.630422529s ago: executing program 1 (id=723): syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000540)={[{@jqfmt_vfsv0}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@lazytime}, {@barrier}, {@i_version}, {@nomblk_io_submit}]}, 0xff, 0x4ab, &(0x7f0000000080)="$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") r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd49032800030020000000600000000004730081e949b93897bc3b0000070000007d01ff020000000000000000000000000001"], 0xfdef) 3.575834017s ago: executing program 0 (id=724): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xe8c}, 0x2a, 0xfffffffffffffff9) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x8008af83, &(0x7f0000000000)={0x1}) 2.117055231s ago: executing program 32 (id=722): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2c}}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r0, &(0x7f0000000000)='1', 0x1, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r2, 0x1, 0x4, 0x6, @local}, 0x14) 2.099501179s ago: executing program 0 (id=726): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x20a006, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) 2.086483158s ago: executing program 1 (id=727): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=@newtfilter={0x98, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x8, 0xfff3}, {}, {0xc, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xffffff2c, 0x2, [@TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0xff, 0xff, 0x0, 0xff]}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x76}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @remote}, @TCA_FLOWER_KEY_PORT_DST_MAX={0x6, 0x5a, 0x4e21}, @TCA_FLOWER_KEY_ETH_SRC_MASK={0xa, 0x7, [0x0, 0x0, 0xff, 0x0, 0xff]}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x8001}, @TCA_FLOWER_KEY_UDP_DST={0x6}, @TCA_FLOWER_KEY_FLAGS={0x8, 0x2f, 0x4}]}}, @TCA_CHAIN={0x0, 0xb, 0xc592}]}, 0x98}, 0x1, 0x0, 0x0, 0x20041090}, 0x840) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, 0x1032b}, [@IFLA_IFNAME={0x14, 0x3, 'team_slave_0\x00'}, @IFLA_MASTER={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x19}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) 2.049839048s ago: executing program 2 (id=728): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000000)='/\x00\x02\x00\x00/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2\xbe\xf0\x81x\x97'}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) 2.046911311s ago: executing program 3 (id=729): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) io_setup(0x9, &(0x7f0000000240)=0x0) r2 = eventfd2(0x7, 0x0) io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xff45, r0, &(0x7f0000000080)="d1", 0x1, 0x7, 0x0, 0x5, r2}]) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.529847341s ago: executing program 2 (id=730): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0xe}, {0x4, 0xf}}}, 0x24}}, 0x14000000) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.519426168s ago: executing program 0 (id=731): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f00000005c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r0, &(0x7f000000bb40)="de98ee653502c564abeb97fc678bde22efebcf99c2d89952950acc703a3c6268a54c8b1bd1ee165c82980cd315b55a070dc41deeb2d4c1842d936a0bcde5fd7ed6031fdd9cb58ebfe8261528f097f309813b5722c24a1af8e6bc6ddaef7e85d2659690154bc5e6ee73c3fe7176509ad7b30e1098fc9873db91d3c1816825e710374de8d40693578b598922d9c523cfff93a630f121251d17ad40bce021d7fd57945fe2a186618a40b5f3995a9f0ceaa3e22b57e4f68e53fffeb5474fb83afaf5cde6b0aaf5cf0313ede442ddf1df6c280921e43d80dddfd005969272e1719b37fd8f749fcde83f8201826b4cf5b1c1da394568aa7d8833dd11309f46422b0152ede5ab29b17bc1ae80147346155b20a98d6fc2650bec3fe73327c45cad1b38f7c983cd070556a8f8ed5d58e1052f6436fad905099d18fb3e62c2c36a1c2209a94c820e30e5234e77be3beb4cd183015d281e7bf39cdcf0f1e541211c75d64a49b55ba4c2c444bef36d98df66bea814bab91ed65386d6a491a6295c24dbaf752a5e7a856e0dfe46a6f9e718ca3919c6f8978b0fd65c9e389114e5afd8e9e2a575b854463b63f46d08795f0f1d0d48d6d610fd74e9238de32ee3fa2ffef550336341803c083ac1d749be6c5440bbe4bd3bc3015bcde2b4e2160ba266d281a9641f74d9348fb6fa8550d1e8a8362999452e40b75c412cfa77ab8e1aaf1a9e83c855ec9b7ada38690f0d2e59f67a1f3babbcda8011595ea720816c24726b833beaca0a9d11e7b99373601d27d18c9e29940503d3a12149fdc4fe0065c3d023d6e7712eb853df19f2b4b886e08d61629288ff16c2597d7fae5bfc8b41f92fc325ffe0f61683b1f661409bdd7c3d88a854f8393484f4669b5d9654fd3a0819a32110b9064539a7419c332629b3fc71da35b783ef7c693842ce83733a63f2e6af37989cfcb768ab8cea5d21b82a0e9f6fdcec26b0107708867dec54c4e739fe9b931b3c6da013bfae097c57f1e16ba54f9028e672511938a0ad9d681d7feebc65a2f5f588abd66261393f3ba02d7b2cf650a9f7c6a4ca55b4d41132908dc9c90e26f0da8e2259e3a2b63b2d9e27754e278827ab80438070698c690ec375a9aeb4193079a28a2a062961ba0e65af01644af063f3ebefda92c4986379f7b099b2fd3960929578736f09887fc5816cb1b982e5b121b79662d1674dd0c6e82627cf8c63e576e5c1eb0af9415ddc10ff880e8ae3ce8c4fb87b8f9d364974c2a1d8eba4e04bc2bc018bfabc435683b2551c0e4908570b930c4fd7c03ddb95e9ec1d1994e3df0305fdac4e5b914641ae25b0c469b194c0bb78ab04887cdc4262da468475b926a18254d23b4c44705aeca34ef8a7b04dd55a43f39996529a23804e054655c5ba8661f7c02737e7539650364928d62b9b8d80988232009acb54214f06640e9bc6614c0ce02e4a22dc8b91a0aad711e4fd01d7020b7c7185e41e27ce266b9f5aec682cbd4bba3240d6277b17b564937254f37afe580cba0b78c6b0cc81830eaf10d7cc1f7e918d49e935629fe6c24b4368a04af1b99f6981340ee031874f3d4b3a9ebc31719b3b775bfe1fdfa0460a3820bff6f61b49b11ac2ca00836a0c4a74aed92a619f34231196669b942e761538e64f965d23d4f7814256e876263fe5307985c4e6eb69c974f66276764e80ab1de3f5c55e7b2cfdb78dd183a85473e968918ad73f29a266c818b9bf9f62eed86df25b2577bb6d98e3996e94f5bdf119b869541a94eb3536c979c3d77cc0df7c0c48a902ca2f03f5ba5a8ef9431cf95f6fc89744e8440e1d5ebb837e30ef7541fbc27672c31566ac3676a173cb9e466a2d206ba1ebc2b985eddcd6ff937375fbc8415eba46f5ec68cfa9f3a669d41b078867dd9f5160ba45fa4719f32cf877d4b7a6d77c977533659f7c7ac22c68f5e93c1df6c2a3d45b55a4afd3355680aed864f6bbe13da2da28a4851f73c88e555f3bb1c34a21fc45ab6c28287902e8b5fcae6899c804f364cd878a8d1734462bb075cb7bc709cc2c5d7747c4c29a2fa9259752301c26b852b7993adf889d45dbe39094c9b7b168756e5b939ed10bb6df57b8f5e14352cfc7d8b03cda5b978b06cf2430af5db17177b1ef664bc4b00307f970c4fc606a6bab72125f62b0f59655c35b104da7af188a953cfc09b3aa0785abf330830fefedcc8bf9a11d5dc4b5642f679d45cb44fe61ab1d906345c1c345f6b8027bae9585580c20115d2504d9c83ab54ea2557b6d2dd3bc65fa29f091aa46a215e77621836154104e6969fa9107139a19f2e45cc6bf55422a0e1a6d037ad9e63df5f9cd2045e13ac2d6a15bc12008c4cd23782df7d41bfecc0037292d22c7b42f2cc1a22db7502332d9f4fa85f7640c8635b9469681adb6bcec2dfdf6926f1815156d80a835ae918527f549ea6df45f350f618dc1f3ca139759be28e35013034f8bbfd3fa1a8f302594213c18015305911f42e287f2d86f17d76f8a0ea03fb574c60c808669f9f4454fc2eaf0e93873f688e34bd3341f6874d5d8fe754172a751d6ab23dc1642220e7fb1071df0ee3c7e07c338915494a3b360bdc0b38ed221c2c2bc86b29744448b255802b3ddfe600c1d0f9acabb2185e4e9dae5e456d5825f516c857f63e72e4a5f3d45eaf11a0e3a5ad0ba30a0bf0f94cc99586fd202d6118bb6f9c272f6cbe39dd9b8b36ea7fa51dfe0bb87a633be11c16a14d1bce8492387696e195fa3c5f172690b4434aa2e91ce7d225d73b1983d2605ec725aae0ae402cd2f79fc202a307f1896f3dfcf8c0fd8b841dcfeda5d65bb7d76f7c2d2eb1b164c0368e9984f320a224d7d438bc5c69dacbc18a587b7589e960af114afbc9f59243646557962fc2e0cb5b5bf160a313bcfd9ade3e140b808e9f19415808aa312ae9c9e8bcd5a47fc721eda59d10670088714984a71d5c0df8b68e675a8e31ec15a92ff6a04d17e0ef849c782b302d11f742efe6486ab904fd65c0aac4ec25c6d877b453dce80e894de703aa8b1e5d00701850f149fe437fd0944cb95e54a924a49bd86bb9a602cf2904fbd9e399f1cdcd0b45b6d8f872e285f9dfeaa26aa760074651393c6451b36c643dd0b7236ec7803d69cec1b09bf1b63fbb68ad7c01507f00083b184ff01a62096f386f4c8fdc85e93eecf3f4b384aec1c10ccc60d8109a6d887bd389c3406163f9600879f0e944443d783e8644f69344f6f44f7bbf1883cda7369c9b9904d991c01552135f158a0bbb7f40c354f292c034824d82c209ebc770f5b756768ae51d45f8875b59904a07090689e65b40625566eed5d209130db812f287b966ae21ba46a3a7a3a0360a4e284d8d91ba9ed9806ea063827c8dda0fa98f758cbfa523ac645421f444a40b95bb065a64256c19354b1ad5002bb7b2add9b5236ad64e9052734b9d263515683db121b5e4dc1eab244dd8fc0fc62d962834ba0b21aad872b127afc0a33c7869a3f213519aa2ef51bab9ab28ed18859fd8239841a6668fc614dedd099121ae6c220a143c119cb9bff9068f65d0554b4c12105e59a22e91203a08ab8c718ec62c42d7ebb7b495e9e1be8fb7e4aab2777025da37b48d9d7b97578841a73898a6eab994e250106e096390c77b0600537be881ab7d81e3cb468bf1fe318b1e804d8df9875e9b8da22e6244997317391cce608085a28b8d070d654a29afab324ba3eecf427b6dfd43501ec0db919f71a932897eb37fe3bd64ab5a34ec60011696298b74ddd7a3710d3e444cedcc5cdc357f9dd58e67dc0ed3fc8df6dad82b3c00b4290c3280c28f78df052ec9cdd9df025abe8834616eddd5bb93379c69092911cd60761e7d14b426a83e335bfc8bf67a14e01df7cefb6023f0c6556534b975ed889de0d96d968526372402ce3d21a2c5c64a449dc3ba4ee0b5ceabc2fa29679e225681c8e946dc94b48af024bb1633e1860c7d8c14500967f24e2f8f46db537232a4e9f4abf8408f53bb52b035bdb89917a6f2f4bd22403ad002c2d936b785ecd965177e9f6235787a185d0eca92532f1aab16756ae86ece13925ba4a1fd08125102ae08c428d073aa426c4e792b5a4acf618605df1707021ce1eed62da4ee87334e34edf43338a0076b8ec739e2c31071e10c6a853e19fbf25b8a356527a67c8f7696dc184e374f4641f4e5b0aa345f1e6c4bfeba3a392d9a994bc271717a051c98d6c5b1f3296caf4c01d80ffb75b6fbdd0a0583f9d4695a44a2878df0c09a85aaab14522320cc3d2611603a34e52da03677a60cc87cc3c689975e5b5366c82e040b6643b8865d8bea0c84cef9ff85245a8b4bc41af1a50775b29fe55e42ac4b29fe80ddaf02e8c9bd07cab823f3d9021ac88236525ec045688a2fc9c6df66f549b10720cebf09ead919524f071cd128fb7575c84190c698b420f89b3c11195b5d83022d1f7e48afc21203995caf8f9286dcd5bd51b65c1af1caadf5a1b3f12579066855ff851075adb959dc3e086a7fb4e9a27fe80e8f3c0959b042486310ae7b785b0612e0385e36f50d4cae3474dd000c3957955534b4907b9480e2e5d83dedbeb76cb78d893c5b64dd51e31abc8e8b4c56b96f67c4b6e43861d91681af3270aae1a8f50712bd97326ee46a2640285b2902f051071d5a3400e99b76459956ac6908688c314bd8e54365383a65b186a6386cc5218e41e0b386759de81bccf5aa68f8608831a9d33ad1af2bdbd8579c5921cd8c3dd2f3bf1f123c742e118c76e2f43618bb7885e44826b7417c9ca5a139d774c16fbf74c8969c038ba6a54f27bab46ecc94d6455188d8dc1edf1da715c8d9976226877096df4158eeecced2248c7b88de0dd11a076db1f06bae4adba8286dc39aa62a55233886e011622ae1cf97238914a55078a78908145295777dbbc4e0d34364e0f3daa9eba6fa54c085777b18c0523818ff8710dee4bfeb3db549c3f38dde73b99a7b1b219282407a4e0ab3794089e21f6f2045ab6254ac3703903edb302fb2f0f97e47cca7969ad6b5b6cf27314137a04d5f4f29c193cfc5540592ab1342a1a9cbd514a7b4d6b23f724a5d7bfa6ffe8e3d9de29b8661139f179a0fafecf234f19bee75c25faffc765e02377d83e0ad0a0029c08f5c71595bc1b2fe88f0fe958f3f1f8ba6821ab834cab9bc902b2d47bd4b5ed52b5b0d7b3bc999b2f68879be39ddcb0428ce3a617b68c11459b746651f413d9e9a098cd2b5c0fcfd0ea1db2cde1672818d7bc73b053015692f9e9259a0153e3c9ac5e73e3343dd350cfbcaa57be93cc881a35063aec2db4ed71df2b1bd90b5ecbd84f399d4530c5450d622188423e151cec49673dc633e503c497d53843f4824750dc09abae9f2f465e92888715b6879f5edbab7bcd58f0899e1430ffb5f3063450945cb0fb3b5c3088ed6966c54dddae3aab489a80341b45a17cac02ae62749f209a7e16ecdfd86b43569c7b34511c65474acf2b2c18834e158e20957bf2320e4a6b9d63caea93b3a7dd4f7ba54443aba1ac2b6f2b27e1bf6f17d3fd1582462e0debc7069bb70e219654cbb99adfed54ab94329382163f2ab6710bb581d189cb3449a02c917c1f2d1d5f51958ce605fdb0e37ae5f3cb3f123276d43b2c26ea948dee863e0b679ecddf0fe41ce78bbca30167c9c7d6b0e9193c98090facd7205a490727e1ac49bb4d639348a32546007459c61c27bf8df87dd2ed3f3228b8193422a72d15f848bac13c6ffa7b8a767cf04866feb7c7a81267d7a8e890128d4709e4873223578aa7febdd562403c6092c0a3f6e0650772ede935ab6ef95e375bcbfa395e23ef1d73532388b845a95f158dc845a123f798176c73e177926d39abd38a910d40653006375110be2f2c5f6efc87b31908be36dd07c8ba5853519a37dfc4dea981af855293f49a3270bb67cdc17b780fbf2a418fcec8953dae927909a6bbbdce230d23113efad9c02474682dafc63311050cb4f3f86c282ff29728eefac5c678360122b4ce221bcec82d24e053b63972d2e9a631a180b48bb8d2d4de7254d91a856071df51a1d87ca7eb5d19ac3def1fdd6ebd8f57c2c9e43cb6ff2fa00d27f279368f5ee29a84ba219a51d1f0f1965781164edbb3aa6209fbce6d40284fbb4a33f59bf9e1248100a623de16613eebc11f510b7718dde9f13b4c9b2b6a10dd932696cdb7fa4b5733b0377453471462762457d42038ebf8c0fb392ca7656ad1f050c326de75fffc698c48f5d809ae360ddb9856b9a54b811073233294bf91e46414441b6665f432201da12e49718b0d7929b6cbcbf310a09ce0d22f07ee5cfa8ffb9f03acd224641171ffafdf50f18be8fa3c907226cc1a6f3b16a776781a6396dbf09f689ad6bba4d537dad490a6f036a45ee3e224e6f519e44b7352ee3e7d3f0d89f8c7c8f54b6d2698c0298a07866c9d9ca09c96c2ac8efd7974294df6dd1bb0598debadb6135e7123bbfddf84870de54476a291586fc0e64784e65fdf78d462e8b51cbac38e7ff1878b11418f188220e3deb5367a2d90ad7d44395f6965cc6d680c59daac268c16814d1085302d0453b48e4a8ae78b8a5b6951a875ef42776f6d11955da7e5734a72b61cefcc6889b8f8d58db51ee78d7b1a8ffebd90e15a64654054767aaec24dd3b5f338b572496c8731049c10622b7f54fdfa43aaea316946291fee7bc9e64640e8bccf33fd1e8693b67020b49cf77faaaa8269e2fecc4e2b43c8c3378a4a9b9b85a4fe2c346c5512cda631542e0ff5706eba996f4f72e629b076d6be1966d44b1835ce664e3c6a4f18c68f5e32f900a0a167e547d5aa79c0aede966f83d00366a623ef8107e328654c8558d5e606f69a12b6c2a6fcbe0e08f945c4ad2738ed0b28d79c98514abe0819569c6e4f4751c665fd651aaa9ee392c330560ef6d57c0a97f0764f88433b2bf7641ba391634316b0ee1dac23a63be21270e50ea1ac24ac3b429a0b46c38dbd48c540bfb1e141b8b3df6caa179c7e54f2b7b1371e8eb05a30f13da95200ab70dc58325f6bea0ee9fe1f04154998df393f2b4ff4431363f3a7450fa5210e883d67620ae63cc41f72e74e26a0244de1ac722b6f1c1d293f7483b331a0efda65a4e4e9144547fe6dce2f4535e29048b07079329b63754bb124b9e046a6e97929b1f4a387765bf93804530791c9f649db6efbebebf46fa4f9af7ff2587130d0e70a32d4aab1dfbee6aadd1f3e5317e3d4c8cde75b1479bc3dd16ea35db3dca11cf1eb1d2bbac60b83605e171619d85fd4b6d0e24be8db76df12efef05eb87473b832e59f3039df44ef034e5e7546b399cc817a41b2f020286ff139072a5b909ebb185a3c955cf88f4a9929b2112e0a9ab43da0288ce3ea268ccc9f46f852d387f5d0a2831dfc8cb0bf593905ba376c069b8c9b70558ec826c5bf9835031199c4c6d84c913da7e9e7db49c1d34511d917b9ad3c40af0598737d58fd61b8f2adc46b73a284957a99943cf73414412fa5440a5f85b63c20794d122c267fba72bfcd0e2741642fd8ff5a0ae1ffd8b30d852c053d0e31f505ca13a21c0223a8ee77cdd92de1b9f87ebee4ea332e9d4573d7efb2ad3f50c35fb7a596c4edb4b72bf6df5a16ffe3c8a236f2cab8c0712ac26c2cbcc68c1dc45209b579c952c7d645642aeed7d60407ee2dc168179d536da950108e962c5c976d3a05bf5142466ee38939ee94e707a0135f99c99b5d6376f63c711e4f64950f08dbc931c812f34735d9eb1c5997770d8159068cdca2e0f192311ca438d613728b544d6a3e50ae0e4e6b1eb611ce55a96bb2f991d49173073d8547f5ede69d8b587a34bb8f637297a15ab4fc45f1384bbd19b3feab5fb81322ba831386eeb6067e55af374c1b1eb9613a6c41dfe2bbbcfad157dd042c67c44400b350f0dc40a8611f2e947f32ea3ac3f609027b5dbc95b157c13216fe7c35edcc82950bd4e38bcb02b63d2576489c331a222e013e73b5333694889b184bedbbb6fdd6fd40a62b1d5d494e68cd2aefc264f74bf70ef38373e599faaa326f574ae32b1aad86854af22db8c9673d14666aa7c0c3bbe0d76a835ba4b391552777ed20c5c6cd0aa84f3be73ca0a3c128914107fb8fc02220317fb111cf13398480cd3325582a7e55f4c4ef5a258bcd01a97615e95f89c8064d41d04340b88cd5f4b1d827a030637145d98422facadbbbce97dc3060402a7bfa73d7b4dde53184a0923c0ee29c6e8e2c35e396808df2481af6aab053b619fcb2833f14f87051c5461567c5f8dd40383a7521971775493f896e18c78bad8219f88258ea686652780c03ebafb63ecbfcb23e24d52a2f88a77ed3b2280637807a5e155f4fad7149b76841772471a3b77aa42e8058c0af1ac2be9d88b5152851708f1a77582b3e31702864ee6a244a38f3f95d9797a60cddeb5ddf08cc48fc677f03f9e717ebe7f472883e5a6a7df31ca4272228f26991460c537ebc8aecb6a0c34a763eb1f57124fbfafd6db4c21bedf6723b252aeb21eb1fd9f4f811fd3e2e764422964761b2ef3aaaf986a48f7be66f6387578f9492feebc97dfbc6bc97380394a5635dbe582e52a1fb18ea8fc4e53974c63d198cf0d878ba8a8d58688a037c0f753c7073337ef3da4c134ef939c98c8806d09943591e6013a1342de7c722f993fd7eb36ba8e8407d1ea60eb5724b0d6262c70469dbd8ea1956b8d7f5a77707a9cbe2137079e7abda3966c5bee4fd86e8a3c4969bc88ff328a2adc8f4546f647575866d5ced16df06bf40d9a5f178f9d19e490bd76e187c441e7de0e571f6cea5512ec9bea48903d91a519dc82defe34a06b0244d623090b5a250786bbc66c1e76db6b18d81ed33c81a7c93782d5cdbe0a7cf7d1ab29c04be6ff4a9bbc10f716a67d52fd52d91425abd2002cf83c3797861db5fbeaec745a552ca4a50604340f2cf2c1b10e9ba76c8ea43b283c73f774f8be213f17f70cf93b9f6a8bab1f516a935e80c3cc6756945edafd572e6e00840eedf61fc40351869f03562d8c13006de585a1141c02f1311fbc8e45e4b3878c32810698e4764a6e8495f165eefee35714a1794f9ab50897c5565ab745425933d9d6272a172c1f2a274f9ca7bc8e1b01a27b8bd06fd9dc61880789696348c99e9a70c9dd2a62ca04d1f86dc87380b618c2a78b16229d614702fce242fa17ea90cda2648f9375bf7e78b4267d558983e08a9566d95871998d23cc6d22c23370ae067b677609844abc140df81cbd9addbf657fffaab5c22c479acca18f3e4b508cf01ff7b2ca308ff116389790f26f2c7635f89c747a5bc66f61de575653069349a89fd7e3dd785266b7bccf16eb8b4a8a86751de60d33e17d64f6e4e0f9d13a16d243ad7364114db7ad011f094c4debf20a39e35e7eeb440bbe8811db2857b965edd1e2675ceb1bc9a1691f123dedb341962fbbe539485d2241b0409adce2587d035187a0dd5a62076ac4eb5c3e2f4455569b6eac0fc16155da1774cbe505dc92e2087585a7846bae699bef32e3c5ec2356dd4433ed29d4b03ff7b38f7b3cb96b92874eefda6c2e0e326214e40f14cc2ef80e1cd3fe226257a423b8ff5bb368b87ac7066c5136487775b5b122a858334c37f6a3f53d758c3c866e2e79daf9aeab36a59eddbae2fa5b6d20973014196ef0a4cde1373c7297833e6f1e46828f4a42eebd829dd4f17999abe285218ed5dc6007b21bceb588a213b29dbb1ab1a79b41a12df26fe35f0cf6a310c9e50cf10d71ad5960626e4efec211032ec4ae52512001362ba4108d86eb774d2d4d0364cbb1dae68f03a774e328c2dc09899ee80c05ac2a8e3ba905b0b3b7a08a3df20b505901123e7dc0a15db48d09c84189ca4345c23c2010c12cc35287fad30211cab9631e148a7c1e8bfab61ced30e098d1c3cf7b6a7fbd8288dfdc48044d0d47c17f129f6b5d751af1984d395ab1b08ccca3e7309a89a8a36dfc3fb82d2a4269bffc32571438d04a7b98137b46ae1fea1bd9ea64f99e2f0c5f12ed84886b10bbd511993b0447036c4e57b9dae6d5bdad6aa3f2d12e62471194e43111613b8b6944c2baf1f539ea14dd76c356bfef7e3d4b6fb91f6d321a796a4bce5a4c6a5caaf0f3eccd914dea21ae909be7ba486075ff6139e7e351fdd7e98013ba51ff0248852398c734f245ffd7fde8cacfa4805496ad7350b1c96d7bf9da9be492f2f414e973937ac9109b6e8b8315aa9b81840f2c21239caf85a28f0e590bb6ad12148e75bd4d7ea69a9ffb053781db98d5fb5aca30a734017be7683a559c203c006ecd4b135afe3650b906e0aa208c889f2af09f3f8263260c3bd07cf8021124b6f0e0d021f9839e47996905c3d7562df810484552de3bcc9ae054b62a01af6a7991e4d63f30c7a92d8b58e01052e53818e64d7540a3208af321709a5d891ceecae5d27a999b00ed01616a73ec8854ca61973ed1fd3d82f8628b215c55eb7908e297d77098a7b0c362709005a7d13c89c54556589b2a926c6e08cc1c0afebc7eeb5d7ae4ef0507c91b8e706e6dbf83d898819192c812554ad1c6377871a8ca50f1325630f7b5266b807ef61d0c8d399fada49cb02a14c16d39f4fa7b81272573808e761c9dce7cfd12f4f18dd06b0ee471c166e095bf84aa4aaa2d82f1afcf09e5d960257c0a8dc404225b4b62187829c59e57da50bf848d72fabfb69362c117c6913541f84095a2a4ccdd2d30860cd96640bb2315e435a4af08c62c584ad129300adb02a871f3c548b96c4f6c47efdf4a1163a8a5ba9b4766b01437bc5957324660a8cd87df0f7e000d1309e896e3ce9f57b17562c9368a95a4cf66b3a5b57f0cca563b045452bbc8ad07b96fd0322728ccb3b05bfda14ef36ecfa2f32c5aa899811a67f2d62ed970db5723d6e4e4913c98c81ed6c03469112c23549f7e20be6401c6544db9078f34e6a4ad3cc868bace2e7ec6ea17225986f9e941ec67d9a3fc57958f9df8a60f585aa38b1769e26ed3f68dd85685b2cefae9dd72a18abc0de6b94689785df377ef4a812a6abc7f738a396f0e99ccbc5731801c36e746ab6b1dda88ca6ecb899528e18543cb3dfd439cd5be566594f01a4533da3638e6331fedf5b67870938ad044aa0dfdae33e3a6258ad40baadd726eacb1f3c1eb8d83ef4e185d7603a4f1eb006d90bf5849e2f65d37ffe750eb061bbad08a0c0cfabb9abf7f27d36ee5687d23feaa923e09d2ae905410a9193f21ed9b1d6331bb1f3babb90da2f2e023a6ceda4b4fe0f5d864738ee7f65a0b136021fbe076b4adf2d3af760e1361bad7ae35cb7ca010ddf4488255a2d3c492d0b26a1a5643f998b5d04a52a59f176d9bda85c916ff901329f09fe953b030b92f6415172476ad89d3e8cdcb4eda7dde5d4fcd5d6a584a312563558e784b0f9bcea7c53d26c3f2d3350c70a5e06a67c4c0373dd6279e29c320e6580fba8ab2df3039c289235c066af1b07dd112f25b25e292020f36c1aba246cba4e054d64b38f53ed57a712dffad7d3dc97f86af511638a2779107fc55da63b6498ea5f3ae36883163e5bf2324211a61a9889278f828e58daae797fdba9218d322da7aa23db7a48a00", 0x2000, &(0x7f0000007a80)={&(0x7f0000000200)={0x50, 0x0, 0x4, {0x7, 0x29, 0x1, 0xdb0078e61bf2cdff, 0xdd2, 0x3, 0xb, 0x0, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000007b40)="308f4f94771584351b85c5532a9cb3f13986e87863cfd608f17cb38bfda319b1b6d9db268133fddb02793b3a1b7181dc6313dc41ecafbf1ea3019af5ba74c41b3541d155925411d9cb3b4f2d7ef7c0c0a388f683aefdd9cc0c02cd972c6c47ce2751d7a1b6934222cb3096aabe72040ee4133e86c0217bdeedf7f8579e7026eba71d2bd71cad8e39e9c27dae9d321037e38158ac3bc8efddd849a3ecd08d51a09e670f0e7fd2246c268f23192ff644711e285eb6a0651797189819bd1e7d53c12f1d3da1249901cb1f7eb2078555a4537658cb0ea50b7da2bfffd71e3e476fd61a341ae840b184e2f0010f3a306ea794392992c2dc2eabb74eff7c97831b1241ff7e31e37898bbdc99362c73da8d1f215434ca06420ea62fb997f8a67bb02f1139ac96e04bbe07628156f37d94777b3402e46189855ae041e716a0cd828533972db242ebbb1b6dc7dc39ddcc8d869a3bf4c341329cf806cb22d31953f5184f1f23d67381ea29b23ed37d2318bd92b525be93d275e09b9fb5856aab08d9cb87e858673025a4cfcf534cf2becca10e2334d1051dda98f9f63ab2093559ba2d6778d4f502bb51e5a73841fa436cef7fd217b3767cf9e09d01a6887a15f73d6296771119262b319d4e4291325461fff02678d8bc169a47820111c3ca3fdb5d2bd45d6629728e999374b312cb81bdb9d4c53b0cb2a442b987a968f78e3387796fc1016f67b8250fc8c98adeaac1f44da1d35faaa50b9329ec998f5e0ec2ba75f8c44ab8ffc944c0c6473f25c2f05ee289089317b06f2704d00af5ef3efde2fe9ff0933f14fad803e923d207e24a0d999bc5e34b1c1c292cd2a8278346cbf3c8f826cbcb4457b947212e2150e82743f0a90989a50b4ed751c131a3ba860921bcd7446bff9ab953a9de76a22fc0a5c6795ba7eafb35a91dd464ee7354e6e8784166295976a25aaf2eaad3c2750137b3507aee0a01cb79b0b92ab1b33b0e916fd8364dfa688b17328c23bfcdd61f24d36942707a8a4fa0e74cad7c3b3a898af2d225dbce9604933248d6bbebd34178dd0e6e63b8debed6ad5688704cfdb6b8514b0a7463a21cc02315def4d0f81aa7627ebde1e02acd1e598a265fe122f868e072a163037de847302d2ab8b80d10154810194b3ba3830e6e4f3d68063ffde12fa6515f23c83299afd889b3fbf6ff782e51a5342abcd1d6d707aea071d18479cd28abdcc4617d0094c1e7af425dafb9a580e71a7aff964b9ac8ed50e7b9498ea3f420ba43353ceb9a965824b3faad049d98370b465061243fae891f5eb9cf8e284cadf3d49c3e216438422bcaad32b275ffdba21e1cb8d4f7a83576f5968e552dcca09a11e1744c63d96b6884315e274f028e5c0c8d3b00f8ce2cd844388127fe9ef02ac9e2bb7544b61c00c82ef8552b01f55aadd3b3de2c2c3e106ef4099a320b76e637ade07a2792fdc0b1464022a7d11d2228d91f15a1c017847c4a0d12e5c51434f2fa50f94ff6d969f013765a67d0991a3cbf93828eb32e3c7c824dec7374e576b1651511a702c3f07ad2c0ba9a046b8d6cd56c74523682f1aa892986f29e13a7a49175f6e59fd0387f1b9279c76ffc0b87696d112a815a770d50206a2e9d4532d37ac9da0b600f2d75a9aaa7702cfcb4d2f4a463f06ba14d13f1f890033d89ca4a5b4b392828d25b274003dd27c311903ef1b8674d37e169af1078257b6d25a76d6374711c18d656c6ddbed246d6d629401d304c9d240b0f230b3a80e42646f95ba6468faad645cf0805de47a05a45db26ff8bd949a8a49055ae167196922b4fd0502e630dd6ff0186702bbdebadf981e7022691335144b1fcc0d8b0fade1f178bb3f052a2c480e55b9b6fe17b27368ebf429a3745fd7314a3799e692c8cac67b04053c5cb656e190fbdfb2afbe1d79d546f3bc268307210ee318b1205a579cf308995908a302b52eac5318c04af7ff3d172b0ce810cffb15b778472eb68d3ff886fb09d3e553912851e66687b48e881d55689382a48c8166c738ad94ec28c1f7c048d543c791e9c43136a26e2a871b3871c312240d6c9432cacbad105d3a0d5f2bcf24d2835e624c65fca1da66388a0a603ae0e3a0969bd100f6c61c766901a5f7d08cae2f648be0ad00fd7191b318d4abccb863e33f5a389d89306934e4d1a786420ef118bd46f3d87618b707234496b8825250b424cf49714c5598a8c480b625c4f8a6a9fbac9e25ae827b2883a2ba4c7b4e920cf9dc51edcc26d7f6c5200717bb7deee62fe3c439ccfca6b22e6593a631f7ff20975dd0e19582d3571c80e4b34ea625566f124562e5332e323c7a1a8509e3650a2b5a79df7d7165219e471ee226bffc55a75efc5d2d2eb4384820fbf1cf23f506d91b595d20ad9dc61be99e6ea68303aee3943e82c2d25deba50f9f5e979e08bbf6bc9266d9a5cc5f5501645fc1217c1110f495fbf25814102de273f5fcd1cce82acf474e7caf8baec955b1a6fdeba6e4937df67bab7dd8ec31a630f04e1f93684435caf02611214a2e57ce895f6f3af108e1de38db5bbcaa4df8c0c31cb6e26f3f5837fb5acddf99619a1addffa413ee29913d255e70b2f60b6882892a9ecaf76aeddd41cdacc4df88295d2eb565fbf659fa5cafc2463c8c54878fffc54008693f253eb590d665c9671b7a969c72d56f10bfb4d3ad644db2ff2b01172c51db49917ede52edf4e11023a525599a241fad18710430cd9533e88a8a3b3885ab1fd396f1969633bfe77efeb325013e2bda4bf87a17290fd06bbb3ff120922acd161acfe2774733f33ca578981828a790311b611558e58fa9f0b44e92288f5cb9324c0c26ac1e33210e914026797f0fd0b7207953112da4f4541a36d6ab2a3a80903375fa352f19306a01be396679c581d72542087701a2943bb86556c991ab736ca7954bbc99d5ebb8e6a7ad148fe7ef4a30d17bce34ad252408236c0a55cee344ba79fa9233fb7ae72c07b1505305d8ce2f834b9aee3f4f3e77f86cc529d729592b509287d5e03b8b215e0c0dd20ec668c5b022fda4de57ed890e0dd3fcf8fd370a2e6a210139361d0233a550c60fd30bc6f62f948cd5691d64b2ddf1a0a82c3109896a5ed057a59bf9089191f6b664913fb75b2b5392da6205e4926967092d4c71a9c95bacbbe327783c24a47f385023752d05556c7a6225692f931d121c1caa6c75dae4d656e4cb8f0b6d745f3f590ee9ab0883d93ce76956c24c1838a2f4e7903bc2a041db42ba7ff3c54541ad4e2f83c7b47d07f1672c0f014d87fe17de3dcde1e47f50a76ef390c9d9b69ab317948dac2b47aef1fa0bd6c92ba31151b4c774f018ca3ad428d3fd6dd503084165d7e82860763db1c45728c238a19e62a93102655e4bc10f60996cdfc6e62489021a521d2edb63319cd5d91a2ecf2a98e125a82df82e5872adf15f2328dbd3a10cdb509b6b8f8f81fc2c286ac62e8b64daca66b4d36152399a38a59e100cb70694228b03d60a21269421f07088815736ceddc054e610bc3a08a3c9215f3905e9de9c5d216ead0910f99616a33d4bd0d11399b4e3fb5843515b72591e44fcb7462bc9b2dd8a0bb26b8add560946a609fa5f2c95db31aec78924665819f75d56547d40d00a42fbb01236fdfa612467601eb358ef664efbb10b2e1c949729763f8e58f99ee33ac9fefa98234232e2590343f563a0b458497adff08b4bfd42aaa2e218e540c811467f2f28430ac408ff4d88e1a94dd26d8f8f7e1bc6055228b2772049ce830adc5fee653b28fec3a9588197f5b9afadc9c8a14eea738d863ebeb709d3120713ec2ccb7da6b614bb2d8eaab6e5b7455b3d9f8afa691823d9cb293454230a5db24fc1a091781231026339d3d05fcf731d9bbbfa5cb1b58ffc8e5a801daf948df3529aef142791b1d6f54c21f310d8bac7527fd63f2dfbd9cc03f34ba3ecda9fe478883dac7ec025370ff594d37735431d3c5a63580783d5e79b3d5c6e9b8ee3f0f69541a1fb2a4afa836e5683a0fefaa965ffa79349bf2a2f15a3afb0322885f4cbbb761320973c27a44b924c38b56f79d81120e3c6272eafb741986c52ef0eb93821866239574d98157b4da7c9a91113785311b1e99836d0195aac8ba86560f25f7580f69a1ad752ea26ca555e17a0678a2d075d58dbe2d87a441ba92c7355dae578ba9b5ac14cb92950107bd148122fee16f0f4519423e9ce25d0108ecdefb5c17b414f5191da6c8b699bdd95257fac0e00c1112ad4f1f7e887b2e5eab1dca1e8feed87328adfbecbb8e3614347b28621ab0d9d0576b4daa2c8fd3ede61742656d1f1c26b46669fea8f58267e439f6355dab1d7e5146e3533c6fc3906023919275d810789f8046e78f2741b4c6be3ca01b2df4a45c45b9a338948351ffe2059566f1091396062576ae674b359f71c815d0f1cd18579a581146b81ce05eb92e9758a8cbbb11c206555b14be788f8ba3057ffbaaad8916144e56bdfcae8a9b3640f387558afe4095b4779696fe497dbbffe0070bf133eb1f0d929b5134efd0aeb317927af709b0ed5218d88110cdd27ae146048bb26a6ce8f53cc422951221023765d4629375c582ce90baeb1b9dca05d3550e96d1556e4031f0289e5ac18304bfbfc75fc4a2998ab507a1fa89f9a5fa67a9a4dd80ab0011e6d72c2c6835a6b9ea2ed28a4431a31e2695d7fd2f613bca1b5d1dc6ada9f2031c92ed38b30cc05ef25067c29fa1616c16f17975c08792fc4d521aa32cd09e492c8f90023afda5f4664f0c706dbf79b40e6558c691ddac572c92cae3e9d132c665ab69a519df9eb85098abb8ba1baa0b576b93ef8f34908cf43e8d2843f8703cba2a22fd7667ce9b0d5a9a1a5d5138be4a34bef70b9e3531963b6cbbf07da131efee739ab887a8c976b7423a1464f56563c6b65edc8ae66d2fc526cedc6af4ac616c9e9daf00b865fcfaac28202743ed40aa1641bd272358886981f3fc17e3c6187859757172adeffc2c6578387fcb9de29d957e7fd4c8fba790349ced82cf212ef6c234c1bf565451f353598a957793a6e7dfe940e957a49b593e17a387703f008396e0ea0d5d98e1d07212dfcb4fbab9b54fc78a0a07803ffe62796feec1e0f59220d821dd52b18c3b2a8eccd9cc8a04bac6a536b625070e1628dcc8d90d24e19d3945aca91f11c54caff198503a316e5b2ed18a52d5d416fbb5290900fffe47c72f2350b3c62202cc4e06c7c33f57cbe16cd7c335a46fb63b4e3e77a20bdcf7deb810f7eda4ca9787458052f7a317e05739a93a2a4fbd9967855a91afbc07ab1ce297bd95b97ec5d890e1e09e704908752a172c3ba4bee5f7a459b1373b9244fea7c5cc585e644b0fbe0cf13cad973eaf0e58beee2dadd0033756ab239fd92f7defc96d4f837b133a0a2ca59e70223a0677d2019439389a567e06c3f67e6dcf6b0a74fc61eb8e0a70bbd28d69093ecfbb6eb27eb51230edf06743684d0b81aae253a9880d0fc73f065e261c097876e8978daad1c7d7ba5b3019ab39cdebb26230e72fdadc6f1036e1a06d0e6bf733b9b89b68a7e8743a6ee2125d9a8b5357c35c93e1de4ab1c8247dbd55cb6b6d16efc03cefabe2b013741d707ad7650d6be75be3a7d469290abec3abbcfef1561a424fa54aeda345d15d626b2f5184bd08c349fd5288d9e39f5645203f763cba13733f0c72cb4d22adbc5300d3da50db2b732a72a17efbd6b2187f1201abeaf686c703f6b364018af4a0b8cbaf89936d9d85b24ac7df66b7a464123d4bbaa189039fe6dccb5454bdb3403909e6969a4ad18ed8a427d3b9fa3532467e9f2e07e4bf17e6acc89c1fba74f78b63b7e9713022b62930e0242ba50f5c52699fc333ebed1e4061d37e5109b75774a24ba9ec2ba76daacb4f69281b29adaf89a440b060929a411a281832810b6975f944f47eaaf8b6509986760480550be0f5f128ea460d0d12231eebe5cbf0c787f72d438d4c62a80f995dcdfe933c4f9fab3c54a3f01126ae011a5dfa703820e7a073950b1537b77b9551f30cb50a1d0c53047f8cb62c64f11b87a55eadf99a0c6e2a40753a02daa2635c269170247a0a59c7971aa7a60ce00236d6226b8ded67be89a3b7c6ed658013eea108cc227ce5391da62caa4df4bf5c84f12e24510cea6dcffa77a9351f827d99610ed2838bd01be98507e35246b9f0d1627877df2dd7a030d6699a29bdbfac7821fa840683b69755f496086fd1c481eece51d8751394a815c2620c1b6b0d0ace2301cc1cf161a048ea190f65ade47dcde3a261b5802bb54d9abe1d30fda5b6168a04c08b7b254787adfebc7ab32502173b88356e4672245d3f336bf1ef61bcac2bfaac0bf626ad1437bc0434f935b96a24a5b8ee6c684be40a3f5552410ddddbf6cc0aa719c154aede8d3ecff053e33d3a674623ed2f69ee8fd2e37989f8d3fad25627d17658613a95ae8b29c317920f3ed6a5e541eb85312da5858e02f087d79f002c2a509823bc7bfad1093d0acb0092e6d92984e7148aa264356e97f112e55dd4cd7b962c29e40cb58b1c752bf549e683bb8ed68ba4f6396032577db95a6fcd382a905f3fd84c1accef612cb4721079abee24bf4e6621e861338e211b8c605586f63d8851df63b64c65ac0148d95e23e0b40c55fa4736e234ea9d3e520c5187ddd894fcfecae3547f7d3516a96d52364478b816dedd31f8de2072a3e4052742e09892c1af11e7912a218a3150343afd34b2047f99725600636371dfc584229240cf669df60c8b956ad1f0945c35f60d78d8741d1205482c8985f5208ad95a41bbbd5204e22192d8d6dff18cac16bedf9e47ef596e86a5c7e11133395c755f0dd213f484ec28d9d41db6ab3d030ae4d110384d11f00cb9c791318884d35bbf0d47f1f735d7ec931758919a5fb379b7430acd688705566a5946b766bed8881bdb57a8369930533c10e1063f377ff0319238c517f71ec97b03e1b954e240a2131845cd6a0af86c0c4e93af284d7da07d8e7ad80227f620dadb5f81852f7fe23a6cf56340dd71e3cd3dc68731562e236ec9ffbd056b9c2ea14deea83bf4c2218e4cba4bfc6fae34d1c8004df23724d3d4781b55ab266ac4d44a9d468d983b1f583cc951a3651fe25c6f0fc811565d9268c5f4f54f915343a74ab39ace954a72bfface0353996599b346e903391b23a114e2772a04c4294060c644c7cf52485942b98ca93d150682be61cb160a69f2c69a05c6c1805dd0d132182a70f8b81ade01b1dcb8520e659feb46066122db68109627546adf269fc67c66fad21a9232ad4c0e6bdc44c1e93fec19e4707a7d51e7c7f2803ce9211e6280e195700830bf578f31be6316b01bda4475d4eaf75fad4134faf16f51521e830e718401461a5f62fe515cf56e2f51da2c8f667cf6b124c8c8be28843acc82671d2d701d05ebb19df1a6f48f1d4543e9496d3d50d5ef67d29b393bdf0a4bd5d01c32fc8e6f0dc384285b6f58defc06cd7b20b04a47d6719a4238f0d6a69ead55c5905aad066362ae1a459d88f14d5c379726c8e9b177029ca80473871a3176969291675ca61d214ae4f47b09ebb3d610d18be8cef820868356776b9129d7875d8221c53cf5d0ee1559dad42c5f776a5b679dea1a0454ee10ec7a8950d56513aecc74ccfc81acb4c25252e4a66fc248329e5246eb5fc7a8f18deb555a36b2488e07ce2a18a9d7f3b0f5990675c1d64af8369e9840ad0c3ba428a0690c7407bdd4a2d5a75d6ecaba6c4e7bebe8a5293fb29a67021e61f99417a6081fc47d7486bb337347cc3bcf3940a320675f1e6b1fbf78fe34af5485dbe22f2a6c0c863b0ebfec2a27923215917aebe107a6e902b7e21eafe124dcecad4112a3337280d41de0a8dba13679c6b8ac07389c31b418827a938b188b043587d0781903a3f38e7cfe8486cf03de749991e9634f70f6c966475f92de5993caf0f5c3ff4a26305578aa5b6fd17567343fdebf20c80ff648b9e3cc92ead693526356da4dcf23beb2ba12a61a38b8b04ec7ad0bba7dddea3affc7f4b5770517a44ec8a5c97ce96b9802a8f8e319153da820ebab1994936f3c3406efd2e435829c9e8db5bc5a86d291a87c10600e91f9c7ea3c550558bb1adaa6a81ba836ca38d7da5194a2e6cb0f45efbb19953a1db093a7e02512e5638666b372d518e3c24a8cb60032235c51813dcda0a10d6e3ddf14dc6b13ee8d82bda2155335c0151ef1e056c675dd5059f80885c653a2b1283e3b4fab926e98a2a1d1af4a700e5798e79e8f816b30bdd7fd377f9fa803a81d76b5d378776ca820e83677c66bc2d6a4f3454734cb244259bbcb99827a5b214d66574e1951325828233622f4cb0cb9194bd8ce8217b0f76faea49e7f742640f039f5017d9c77d6c1711bea52396e04e930b3eb70b27f41980f61d191585b111d2338ef32bd20d3679d41a9d434e0b21235c42b776217aabe6bf69ab728b40fda0570b1f7688ae9b9fd3ded0f19fa7b12e5e7d8d7b7df562d212e88721ce8a5b877ed992ca37948558d57778e0d5f809ae4598534cb7b6c1b16cef5ba41ff318d993d3dac9a39981d27cb35043e394e1c491ab8050b7dfb02897a77b728dd1e84e9ac4da54160c6f68238ba1f2e56c01222d252f6b4b2331516288de3bdb8db926721de32a1d28fdb431df6f79edcb3fda2529703a2e3792f5bf6f664f1935409ba85c03215d2ca2c5c72adb7325c7ffd3a149860bc84a4d8fd4017cbcf6d4233e00485d6bbb4e1ac87301f320a8cb24426c1c67a96a01ac94fed196fd90872e25ec944d4d301ef386175a9302437b4a5e7142eb232074703bc15ec04430656194675a3ea982b26a10625da6649128ba32d69c78b4538ada76cb84f932a51b32c61ad95e49134bd416820f57d2894edbc5dc5b63ff61f62b3ee8f006f722675be420544304e600fdc584bd4e58d2534b32937caf369f4bf6bafd04746654dca48e434570e0a633915dc302292605fa7575bc4fde147282cd63b72f3d3b4697371a6c9b378089a16b97cca9b62fca17a251e1e221156fd23101811be97050d1a92117fbdabf1306636d1714a2b2406b246e9104b350f662bc334e239015ae384be398ac02bcf552646a9ad8a88da27052ad16f85f006788cdfe307d0c736b3a929f9f9393de73fc00300c7b38531afad6627a5fd0ff8165baa03faf8238c45851bfc362d7fe58b306a3ade0ab711fd1fa2f215f8bb9b909ad446a5a44e8d8903c5982ee664031bf91ec3560a88022e3be3df4c1d4764d3cccca239b14dd839b110f54cf8745fc986fff5976334502439ab836e7ca747f91e7ad3f202fd999d003a24db2f337d52aebda89cdf6141e05fb030bd0b0eee61915a4364a33f7a05181e44f5f1a15a907eb92eb2000033350357ca2bfd7ff375b62d877185dc612d2f14625ccbbc4aee1b4bdc4e15fdd1532963adc984c929ec32f0b048287308438a9bf237b58d96d65caefbef0267581bf6a7918b8175dd026b3d6f37904840b5ba6c4bb0a226c39554cffdd9fe6ea4e9b04c7b91fcdc21606e1cfaf62ba41886b967ebe7d813e2c342b71db1b22b7f0c43c0309497ea038a632eaa51aada24533000a677ebb46f7c3c210565d7aeda40ce29865fa97d051ee5490bdcc6e491751099ac2320f049530b2d414b6ad5858dde992423ff2a7ba7cc4315e19ca73aa63d8020275915d26e9a259fad594c0f25402da3ec66756b2af91b76f7300ab3f40cc15ec6a19c43aba2f97a38e1cbd368c275e4fb34e7c1bc436c482e217227a8f4465c0f5c4cdf03510f785c56120196e1594b2d4f34b10a5acb1b23947a4a9c9c0d9704d88f2c62020e20d3db89d2b09ae560f018fdb6c2ac9720eec3b6d0cb8c9c7144048910f4bbe7070a998deabbdbd98b6dc1f824e6a66ce0bb71037cbe7cc2cb393cee0c87963f8d442150abcacca378371ce8790e86769956b30c0e04ca7c4af0c066402ad10ddb35d984012a7d02702b67f12cfb5c1f28d52d0d618469c722bf9c90bcc521e510bf61f7933edb383faa331907a4fe0f283a6ef71b0ba9dacf52a2e4b6ac1106211f99ada45a48309519e2f4a56d43e1ca43fbe7d612ead95c8a516a916448bc7281803338eed8eb0d7b0d06700f7745332c86ba048579b7c2dc6f94b048bc3903ac637296605378b4d9b7a445fe7d24027a59f0af02d006347b61cc8660c80268fa85d65baa4ccccaa213c6f0bebd4673c312558febcededb5192738d347bda4920eff6ecd42357c86fc3f8ffc72143598ce6faba1acf3e35562a0ce73f3182bbf5b84257a522298c500265db3e774788b5b72a933566bfda2dc4b3bed6bc81669bbe0b2705ac5b08cb669e69ab6740456c7e1a3abb96c9b212512a8780cb59f82744d1f712d1e5591f9cbdf02be11bdc3b647a7e4da5c62017bd16dc495b1cc0da65ee035ecbd96f673da66e1adabb58ccfabd01d55beea781cd5270e18e4846a2f2d527a43b70380507568876ad5499386511a94988840f2e6c565a7b3db9909e010c48e31e9ddbc107eb3b7d8bd11aa0549e18d4e0749f0dee8913e0231dd25bc66915f02f74f29af0ccf67f7b3efa990538cb676baa926c3f567193b7387e548ee6be5161b2da1039532fd1a0c4096b93179ee11a806724bba3fb50d699a0b09fe8919c731b6c848adb17410b4da64f6f03def4b3b92e64df2fc8dd4c981a633f8ada2d1bc6b0f32b7a756a6edd7029528fd6b4a11da00c55769224936f4adef968d516952137740b75112dedab146a2bc09073d49d1e960da845876a6e60fd8b0f444af01dfd3c00372462c0f57273e774f3cddb16ca2fcd7dd13f28b6f13251fbe77ed7cb190f73fa4ecc00b71e73b0545a906c5e30d495c41ba95bbe14fb30f9508482c82e434873fb588a65f3ff951d17f1beeef07da5bd974d84adf1b34df8f96005768e810194f756c1ee60cd429c7b00c98cfe430581313f3ceebf7bcc3e27a3537926a072af66e9d8eb64050f936b3709238f4aa4e99bec0aa4716cdd2a77f259cf591ec900a17875d813faa04eea61a2a796cd51103cdf4473472b26caae2bc07e5b422ad0ee8523c05c2db9ce75a90cf6174366b8aff045b8fd601f3f63fa0b698c6305543eb468edfb30d9b482a554ca786181f2b543b0a8a1cdad8366b29d60ed21fce9e7bdcef32417281e45aa0acb4bc2f0be0de1e42691317e0e799f29e3e230ce3629397f6d236f4c8bb77e488ade6b39fa7b1925f9df6245a7662b75c57dcc9286effdc537f97875ae46f54ba2e0ec5924bc56754a4058ee987be3ca2d552d2414d77209dc79eb714ecd544facf85bd37275859e079153a36a41b7700192069a8df7df93d527258d7587b02863a892f7cc2aa4a26989661257768ad5e4e49635e06726bd2544c50bf6ff5867f9dc48a8dce0c5954734da63b63f1ad6954286994790b81e3f0c4d64f1321ad652ea9a989c63a5bda214ea147720d65ce6075096968a4fb54e239177be207e7a728e480600a5144d089d9a196a50f6c0c04f023d9834c09056f811d18c771a6bcbc4cc51c4c63455e95664a2034b6171bbbf763d65297bbe5550e3c055c21abcc9f038a760", 0x2000, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x4, {0x3, 0x4, 0x0, {0x3, 0x7ffffffffffffffc, 0x3, 0x2, 0x8, 0x7, 0x2, 0xfffffff9, 0x3, 0x8000, 0x4, 0x0, 0xffffffffffffffff, 0x9, 0x408}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.51280799s ago: executing program 3 (id=732): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000005d80)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000000)="bf", 0x1}], 0x1, &(0x7f0000000680)=ANY=[], 0xc}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000a80)="cb", 0x1}], 0x1, &(0x7f0000001200)=ANY=[], 0x10}}], 0x2, 0x4044044) 1.087582303s ago: executing program 3 (id=733): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x5) r1 = open(&(0x7f0000000040)='./file4\x00', 0x62142, 0xcc) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x2, &(0x7f0000001500)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x100, r0, &(0x7f0000001540)="f6", 0x1, 0x2, 0x0, 0x0, r1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x400, r1, &(0x7f0000000200)='=', 0x1, 0x0, 0x0, 0x2, r1}]) 898.225396ms ago: executing program 0 (id=734): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="0004976b", 0xffffffffffffff46, 0xc091, 0x0, 0x0) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000780)=""/243, 0x11000}], 0x1}, 0x142) 729.19524ms ago: executing program 1 (id=735): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) r0 = syz_io_uring_setup(0x8dd, &(0x7f0000000440)={0x0, 0x1b7, 0x400, 0x8, 0x2000101}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 369.045246ms ago: executing program 1 (id=736): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x31) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 128.965052ms ago: executing program 0 (id=737): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000100)=[0x0], 0x1}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x11}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)}) 0s ago: executing program 2 (id=738): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x10e, &(0x7f0000005b00)={[{@init_itable_val={'init_itable', 0x3d, 0x957}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@init_itable}, {@orlov}, {@errors_remount}]}, 0x4, 0x46b, &(0x7f00000009c0)="$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") r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x188) openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140)={0x474203, 0x5d4}, 0x18) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): T4805] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 234.699942][ T4805] ? kmsan_get_metadata+0xfb/0x160 [ 234.700108][ T4805] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 234.700270][ T4805] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 234.700430][ T4805] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 234.700590][ T4805] do_writepages+0x3f2/0x860 [ 234.700716][ T4805] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 234.700893][ T4805] ? queue_io+0x751/0x790 [ 234.701023][ T4805] ? kmsan_get_metadata+0xfb/0x160 [ 234.701206][ T4805] __writeback_single_inode+0x101/0x1190 [ 234.701357][ T4805] ? kmsan_get_metadata+0xfb/0x160 [ 234.701531][ T4805] writeback_sb_inodes+0xb2d/0x1f10 [ 234.701759][ T4805] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 234.701948][ T4805] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 234.702128][ T4805] wb_writeback+0x4ce/0xc00 [ 234.702279][ T4805] ? queue_io+0x451/0x790 [ 234.702423][ T4805] wb_workfn+0x397/0x1910 [ 234.702541][ T4805] ? kmsan_get_metadata+0xfb/0x160 [ 234.702722][ T4805] ? __pfx_wb_workfn+0x10/0x10 [ 234.702836][ T4805] process_scheduled_works+0xb91/0x1d80 [ 234.703065][ T4805] worker_thread+0xedf/0x1590 [ 234.703217][ T4805] kthread+0xd5c/0xf00 [ 234.703339][ T4805] ? __pfx_worker_thread+0x10/0x10 [ 234.703478][ T4805] ? __pfx_kthread+0x10/0x10 [ 234.703601][ T4805] ret_from_fork+0x208/0x710 [ 234.703758][ T4805] ? __switch_to+0x53d/0x790 [ 234.703896][ T4805] ? __pfx_kthread+0x10/0x10 [ 234.704029][ T4805] ret_from_fork_asm+0x1a/0x30 [ 234.704218][ T4805] [ 235.019586][ T4805] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 235.672731][ T6490] loop4: detected capacity change from 0 to 64 [ 235.782615][ T6490] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 235.839794][ T30] audit: type=1326 audit(1768396908.560:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6492 comm="syz.3.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70738f749 code=0x7ffc0000 [ 235.862617][ T30] audit: type=1326 audit(1768396908.570:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6492 comm="syz.3.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fe70738f749 code=0x7ffc0000 [ 235.890129][ T30] audit: type=1326 audit(1768396908.570:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6492 comm="syz.3.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70738f749 code=0x7ffc0000 [ 235.914293][ T30] audit: type=1326 audit(1768396908.570:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6492 comm="syz.3.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fe70738f749 code=0x7ffc0000 [ 235.937223][ T30] audit: type=1326 audit(1768396908.570:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6492 comm="syz.3.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70738f749 code=0x7ffc0000 [ 235.959743][ T30] audit: type=1326 audit(1768396908.570:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6492 comm="syz.3.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fe70738f749 code=0x7ffc0000 [ 235.988914][ T30] audit: type=1326 audit(1768396908.580:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6492 comm="syz.3.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70738f749 code=0x7ffc0000 [ 236.012507][ T30] audit: type=1326 audit(1768396908.580:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6492 comm="syz.3.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fe70738f749 code=0x7ffc0000 [ 236.035045][ T30] audit: type=1326 audit(1768396908.580:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6492 comm="syz.3.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe7073865e7 code=0x7ffc0000 [ 236.057617][ T30] audit: type=1326 audit(1768396908.580:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6492 comm="syz.3.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe70732b829 code=0x7ffc0000 [ 238.397294][ T6515] loop2: detected capacity change from 0 to 128 [ 238.640665][ T6515] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 238.871072][ T6515] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 238.887617][ T6507] loop0: detected capacity change from 0 to 65536 [ 239.097002][ T6507] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 239.158474][ T6520] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 239.186426][ T6520] bond1: (slave lo): Enslaving as a backup interface with an up link [ 239.204445][ T6520] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 239.435211][ T6507] XFS (loop0): Ending clean mount [ 239.716024][ T5814] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 239.850237][ T6535] netlink: 32 bytes leftover after parsing attributes in process `syz.1.188'. [ 239.879530][ T5810] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 240.412984][ T6544] loop2: detected capacity change from 0 to 128 [ 240.502113][ T6544] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 240.618799][ T6544] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 242.234954][ T6561] loop1: detected capacity change from 0 to 1024 [ 242.244759][ T6561] EXT4-fs: inline encryption not supported [ 242.251038][ T6561] EXT4-fs: Ignoring removed nobh option [ 242.256985][ T6561] EXT4-fs: Ignoring removed mblk_io_submit option [ 242.338682][ T6561] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.357064][ T6561] EXT4-fs warning (device loop1): ext4_resize_begin:72: won't resize using backup superblock at 1 [ 242.447227][ T5803] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.067553][ T6574] loop2: detected capacity change from 0 to 1024 [ 243.241460][ T6574] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.418646][ T6580] netlink: 'syz.4.207': attribute type 1 has an invalid length. [ 243.534356][ T6580] 8021q: adding VLAN 0 to HW filter on device bond2 [ 243.617705][ T5814] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.692920][ T6583] bond2: (slave geneve2): making interface the new active one [ 243.707664][ T6583] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 244.715015][ T6596] binder: 6595:6596 ioctl c0306201 200000000640 returned -22 [ 246.249832][ T6611] loop1: detected capacity change from 0 to 2048 [ 246.536615][ T6615] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 246.553064][ T6609] loop2: detected capacity change from 0 to 40427 [ 246.563682][ T6609] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 246.571822][ T6609] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 246.588505][ T6609] F2FS-fs (loop2): invalid crc value [ 246.962706][ T6609] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 246.994435][ T6609] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 247.001942][ T6609] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 247.943775][ T6633] loop3: detected capacity change from 0 to 64 [ 248.166693][ T6633] hfs: request for non-existent node 131072 in B*Tree [ 248.173782][ T6633] hfs: request for non-existent node 131072 in B*Tree [ 249.627424][ T6654] block nbd1: shutting down sockets [ 249.651958][ T6649] loop0: detected capacity change from 0 to 4096 [ 249.758456][ T11] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 249.988320][ T11] usb 5-1: Using ep0 maxpacket: 32 [ 250.039989][ T11] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 250.052548][ T11] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 250.062943][ T11] usb 5-1: config 0 interface 0 has no altsetting 0 [ 250.239752][ T11] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 250.249296][ T11] usb 5-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 250.257743][ T11] usb 5-1: Product: syz [ 250.262332][ T11] usb 5-1: Manufacturer: syz [ 250.267257][ T11] usb 5-1: SerialNumber: syz [ 250.333870][ T6649] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 250.344606][ T11] usb 5-1: config 0 descriptor?? [ 250.398901][ T6649] ntfs3(loop0): ino=1a, mi_enum_attr [ 250.404990][ T6649] ntfs3(loop0): ino=1a, mi_enum_attr [ 250.416944][ T6649] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 250.799607][ T11] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 251.490005][ T11] gs_usb 5-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 251.501364][ T11] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 251.623583][ T11] usb 5-1: USB disconnect, device number 3 [ 252.063786][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 252.063854][ T30] audit: type=1326 audit(1768396924.830:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6678 comm="syz.0.241" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa957f8f749 code=0x0 [ 252.710835][ T6686] loop4: detected capacity change from 0 to 1024 [ 253.161529][ T11] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 253.333620][ T11] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.344435][ T11] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 253.410754][ T11] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 253.420424][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 253.429370][ T11] usb 5-1: SerialNumber: syz [ 253.736365][ T6694] netlink: 'syz.0.248': attribute type 29 has an invalid length. [ 253.781344][ T11] usb 5-1: 0:2 : does not exist [ 253.782673][ T6694] netlink: 'syz.0.248': attribute type 29 has an invalid length. [ 253.786469][ T11] usb 5-1: unit 55 not found! [ 253.870227][ T6696] netlink: 500 bytes leftover after parsing attributes in process `syz.0.248'. [ 253.969579][ T11] usb 5-1: USB disconnect, device number 4 [ 254.139265][ T5974] udevd[5974]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 254.608111][ T5853] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 254.794916][ T5853] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 254.803732][ T5853] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 254.813164][ T5853] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 254.825897][ T5853] usb 2-1: config 220 has no interface number 2 [ 254.836508][ T5853] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 254.850204][ T5853] usb 2-1: config 220 interface 0 has no altsetting 0 [ 254.857213][ T5853] usb 2-1: config 220 interface 76 has no altsetting 0 [ 254.864722][ T5853] usb 2-1: config 220 interface 1 has no altsetting 0 [ 255.473617][ T6706] loop2: detected capacity change from 0 to 2048 [ 255.557940][ T6706] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 255.722006][ T6703] loop4: detected capacity change from 0 to 32768 [ 255.761871][ T6703] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.253 (6703) [ 255.776666][ T5853] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 255.786271][ T5853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.795409][ T5853] usb 2-1: Product: syz [ 255.799938][ T5853] usb 2-1: Manufacturer: syz [ 255.804789][ T5853] usb 2-1: SerialNumber: syz [ 255.819673][ T6703] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 255.833912][ T6703] BTRFS info (device loop4): using blake2b (blake2b-256-lib) checksum algorithm [ 256.065498][ T6703] BTRFS info (device loop4): enabling ssd optimizations [ 256.073068][ T6703] BTRFS info (device loop4): turning on async discard [ 256.080208][ T6703] BTRFS info (device loop4): enabling free space tree [ 256.087216][ T6703] BTRFS info (device loop4): use lzo compression, level 1 [ 256.110373][ T5853] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 256.118681][ T5853] uvcvideo 2-1:220.0: No valid video chain found. [ 256.125533][ T5853] usb 2-1: selecting invalid altsetting 0 [ 256.183048][ T5853] usb 2-1: selecting invalid altsetting 0 [ 256.189235][ T5853] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 256.257957][ T5853] usb 2-1: USB disconnect, device number 3 [ 257.330681][ T6723] loop0: detected capacity change from 0 to 32768 [ 257.353158][ T5808] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 257.536204][ T6723] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 257.653264][ T6724] loop2: detected capacity change from 0 to 40427 [ 257.668062][ T6724] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x1f52010) [ 257.677605][ T6724] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 257.708602][ T6724] F2FS-fs (loop2): invalid crc value [ 258.059623][ T6724] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 258.083404][ T6724] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 258.098042][ T6724] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 258.212856][ T6723] XFS (loop0): Ending clean mount [ 258.213024][ T6724] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 258.228326][ T6723] XFS (loop0): Quotacheck needed: Please wait. [ 258.397452][ T6723] XFS (loop0): Quotacheck: Done. [ 259.168416][ T5810] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 259.479693][ T5809] Bluetooth: hci4: link tx timeout [ 259.484983][ T5809] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 259.493851][ T5809] Bluetooth: hci4: link tx timeout [ 259.499412][ T5809] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 259.566876][ T5809] Bluetooth: hci4: link tx timeout [ 259.572560][ T5809] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 259.582003][ T5809] Bluetooth: hci4: link tx timeout [ 259.587274][ T5809] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 259.596355][ T5809] Bluetooth: hci4: link tx timeout [ 259.601914][ T5809] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 259.956978][ T6751] loop3: detected capacity change from 0 to 1024 [ 260.035363][ T6751] EXT4-fs: Ignoring removed nomblk_io_submit option [ 260.272167][ T6751] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.578663][ T5853] kernel write not supported for file bpf-prog (pid: 5853 comm: kworker/1:4) [ 261.132924][ T6765] loop2: detected capacity change from 0 to 64 [ 261.200532][ T6765] hfs: Bad value for 'dir_umask' [ 261.226116][ T5800] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.588063][ T5805] Bluetooth: hci4: command 0x0406 tx timeout [ 261.934613][ T6765] loop2: detected capacity change from 0 to 32768 [ 261.948449][ T6765] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.267 (6765) [ 261.967209][ T6765] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 261.978748][ T6765] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm [ 262.146157][ T6765] BTRFS info (device loop2): enabling ssd optimizations [ 262.153665][ T6765] BTRFS info (device loop2): turning on async discard [ 262.161537][ T6765] BTRFS info (device loop2): enabling free space tree [ 262.254666][ T6765] BTRFS error (device loop2): balance: invalid convert metadata profile raid1c4 [ 262.573673][ T5814] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 263.652989][ T6804] block nbd1: NBD_DISCONNECT [ 263.657921][ T6804] block nbd1: Send disconnect failed -107 [ 263.726062][ T6803] block nbd1: Disconnected due to user request. [ 263.733030][ T6803] block nbd1: shutting down sockets [ 264.285901][ T6802] loop4: detected capacity change from 0 to 32768 [ 264.307163][ T6802] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.275 (6802) [ 264.327475][ T6802] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 264.344840][ T6802] BTRFS info (device loop4): using blake2b (blake2b-256-lib) checksum algorithm [ 264.703675][ T6802] BTRFS info (device loop4): enabling ssd optimizations [ 264.711112][ T6802] BTRFS info (device loop4): turning on async discard [ 264.720407][ T6802] BTRFS info (device loop4): enabling free space tree [ 265.164639][ T5808] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 265.574506][ T6833] netlink: 'syz.2.283': attribute type 13 has an invalid length. [ 265.811022][ T11] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 266.067256][ T6833] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.076735][ T6833] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.164541][ T11] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 266.174577][ T11] usb 2-1: config 0 has no interface number 0 [ 266.186105][ T11] usb 2-1: config 0 interface 41 has no altsetting 0 [ 266.407185][ T6833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.432716][ T6833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.647666][ T11] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 266.657239][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.666740][ T11] usb 2-1: Product: syz [ 266.671676][ T11] usb 2-1: Manufacturer: syz [ 266.676441][ T11] usb 2-1: SerialNumber: syz [ 266.743435][ T11] usb 2-1: config 0 descriptor?? [ 267.611917][ T5084] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 256 - 0 [ 267.625223][ T5084] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.708934][ T11] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 267.746758][ T5084] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 256 - 0 [ 267.756111][ T5084] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.868817][ T5084] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 256 - 0 [ 267.878241][ T5084] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.935312][ T11] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 267.947495][ T11] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 267.958783][ T11] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 267.991703][ T5084] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 256 - 0 [ 268.001015][ T5084] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.114949][ T11] usb 2-1: USB disconnect, device number 4 [ 268.289810][ T6851] IPv4: Oversized IP packet from 127.202.26.0 [ 268.439693][ T6853] binder: 6852:6853 ioctl c0306201 2000000001c0 returned -14 [ 268.470044][ T6848] loop0: detected capacity change from 0 to 1024 [ 268.550517][ T6848] EXT4-fs: inline encryption not supported [ 268.890441][ T6848] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.957118][ T6860] loop4: detected capacity change from 0 to 128 [ 269.056245][ T6860] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 269.079350][ T6860] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 269.480823][ T6868] netlink: 'syz.3.295': attribute type 1 has an invalid length. [ 269.488883][ T6868] netlink: 'syz.3.295': attribute type 2 has an invalid length. [ 269.566157][ T5808] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 270.781260][ T6874] loop4: detected capacity change from 0 to 40427 [ 270.839510][ T6874] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 270.847439][ T6874] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 270.859070][ T6874] F2FS-fs (loop4): invalid crc value [ 270.885615][ T5810] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.158249][ T6874] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 271.237315][ T6874] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 271.244764][ T6874] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 271.267296][ T6886] loop2: detected capacity change from 0 to 512 [ 271.494074][ T6886] EXT4-fs (loop2): 1 orphan inode deleted [ 271.502603][ T6886] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.539458][ T4634] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 271.549952][ T6886] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.550029][ T4634] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:25: Failed to release dquot type 1 [ 271.943866][ T30] audit: type=1804 audit(1768396944.710:101): pid=6886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.303" name="/newroot/62/file1/bus" dev="loop2" ino=16 res=1 errno=0 [ 272.404842][ T5814] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.937157][ T6903] loop0: detected capacity change from 0 to 512 [ 273.258566][ T6903] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 273.743578][ T6903] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.756754][ T6903] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 274.088402][ T30] audit: type=1326 audit(1768396946.830:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6924 comm="syz.2.315" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67d2b8f749 code=0x0 [ 275.135411][ T5810] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.739796][ T6942] loop2: detected capacity change from 0 to 65536 [ 276.749149][ T6942] xfs: Deprecated parameter 'attr2' [ 276.754549][ T6942] XFS: attr2 mount option is deprecated. [ 276.852488][ T6942] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 277.144589][ T6942] XFS (loop2): Ending clean mount [ 277.160060][ T6942] XFS (loop2): Quotacheck needed: Please wait. [ 277.232501][ T6942] XFS (loop2): Quotacheck: Done. [ 277.504207][ T6967] loop3: detected capacity change from 0 to 128 [ 277.563635][ T5814] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 277.709705][ T6967] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 277.778299][ T6967] hpfs: filesystem error: improperly stopped [ 277.784713][ T6967] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 277.792948][ T6967] hpfs: You really don't want any checks? You are crazy... [ 277.908104][ T6967] hpfs: hpfs_map_sector(): read error [ 277.913867][ T6967] hpfs: code page support is disabled [ 277.964980][ T6965] loop4: detected capacity change from 0 to 32768 [ 277.981061][ T6965] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.327 (6965) [ 278.001078][ T6965] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 278.014043][ T6965] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 278.024548][ T6967] hpfs: hpfs_map_4sectors(): unaligned read [ 278.104285][ T6967] hpfs: hpfs_map_4sectors(): unaligned read [ 278.110508][ T6967] hpfs: filesystem error: unable to find root dir [ 278.394586][ T6965] BTRFS info (device loop4): enabling ssd optimizations [ 278.402216][ T6965] BTRFS info (device loop4): turning on async discard [ 278.410528][ T6965] BTRFS info (device loop4): enabling free space tree [ 278.559676][ T5808] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 279.122832][ T6995] netlink: 104 bytes leftover after parsing attributes in process `syz.4.334'. [ 280.168069][ T5927] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 280.363285][ T5927] usb 4-1: Using ep0 maxpacket: 16 [ 280.419774][ T5927] usb 4-1: too many configurations: 123, using maximum allowed: 8 [ 280.494502][ T5927] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.600566][ T5927] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.688344][ T5927] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.735887][ T7010] loop2: detected capacity change from 0 to 32768 [ 280.770939][ T5927] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.785818][ T5927] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.806802][ T5927] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.827010][ T5927] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.835795][ T7010] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 280.841589][ T5927] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.005229][ T5927] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 281.015133][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 281.025514][ T5927] usb 4-1: SerialNumber: syz [ 281.059583][ T7024] netlink: 'syz.1.341': attribute type 4 has an invalid length. [ 281.071789][ T7010] XFS (loop2): Ending clean mount [ 281.084532][ T7010] XFS (loop2): Quotacheck needed: Please wait. [ 281.125380][ T7024] netlink: 'syz.1.341': attribute type 4 has an invalid length. [ 281.159008][ T7010] XFS (loop2): Quotacheck: Done. [ 281.169485][ T5927] usb 4-1: config 0 descriptor?? [ 281.243014][ T5927] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 281.529859][ T5139] bcm5974 4-1:0.0: could not read from device [ 281.631208][ T5139] bcm5974 4-1:0.0: could not read from device [ 281.692871][ T5927] usb 4-1: USB disconnect, device number 3 [ 281.722392][ T5139] bcm5974 4-1:0.0: could not read from device [ 281.811830][ T5139] bcm5974 4-1:0.0: could not read from device [ 281.883893][ T5814] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 282.197003][ T7033] loop1: detected capacity change from 0 to 1024 [ 282.373935][ T7033] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 282.386567][ T7033] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.233108][ T7037] loop4: detected capacity change from 0 to 40427 [ 283.266970][ T7037] F2FS-fs (loop4): invalid crc value [ 283.482952][ T5803] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 283.595507][ T7037] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 283.611925][ T7037] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 283.675964][ T7037] syz.4.346: attempt to access beyond end of device [ 283.675964][ T7037] loop4: rw=2049, sector=45096, nr_sectors = 96 limit=40427 [ 283.701757][ T7037] syz.4.346: attempt to access beyond end of device [ 283.701757][ T7037] loop4: rw=2049, sector=45192, nr_sectors = 40 limit=40427 [ 283.716111][ T7037] syz.4.346: attempt to access beyond end of device [ 283.716111][ T7037] loop4: rw=2049, sector=45096, nr_sectors = 88 limit=40427 [ 283.792059][ T5808] syz-executor: attempt to access beyond end of device [ 283.792059][ T5808] loop4: rw=2049, sector=45232, nr_sectors = 8 limit=40427 [ 283.811452][ T5808] CPU: 0 UID: 0 PID: 5808 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(none) [ 283.811615][ T5808] Tainted: [L]=SOFTLOCKUP [ 283.811659][ T5808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 283.811723][ T5808] Call Trace: [ 283.811763][ T5808] [ 283.811805][ T5808] __dump_stack+0x26/0x30 [ 283.811993][ T5808] dump_stack_lvl+0x14c/0x1c0 [ 283.812132][ T5808] dump_stack+0x1e/0x25 [ 283.812252][ T5808] f2fs_handle_critical_error+0xa6f/0xc20 [ 283.812430][ T5808] f2fs_stop_checkpoint+0x65/0x80 [ 283.812579][ T5808] f2fs_write_end_io+0x101c/0x1bc0 [ 283.812774][ T5808] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 283.812951][ T5808] bio_endio+0xf96/0x10f0 [ 283.813071][ T5808] submit_bio_noacct+0x2009/0x2930 [ 283.813241][ T5808] submit_bio+0x57c/0x630 [ 283.813369][ T5808] f2fs_submit_write_bio+0x92/0x250 [ 283.813521][ T5808] __submit_merged_bio+0x16f/0x6a0 [ 283.813663][ T5808] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 283.813836][ T5808] __submit_merged_write_cond+0x44a/0x990 [ 283.814118][ T5808] f2fs_write_data_pages+0x4cf3/0x57a0 [ 283.814410][ T5808] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 283.814582][ T5808] ? kmsan_get_metadata+0xfb/0x160 [ 283.814742][ T5808] ? folio_batch_move_lru+0x6a6/0x6e0 [ 283.814897][ T5808] ? __msan_warning+0x1b/0x30 [ 283.815049][ T5808] ? filter_irq_stacks+0x13f/0x190 [ 283.815207][ T5808] ? stack_depot_save_flags+0x35/0x790 [ 283.815355][ T5808] ? kmsan_get_metadata+0xfb/0x160 [ 283.815509][ T5808] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 283.815674][ T5808] ? kmsan_get_metadata+0xfb/0x160 [ 283.815826][ T5808] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 283.816039][ T5808] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 283.816209][ T5808] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 283.816367][ T5808] do_writepages+0x3f2/0x860 [ 283.816496][ T5808] ? _raw_spin_unlock+0x30/0x50 [ 283.816630][ T5808] ? wbc_attach_and_unlock_inode+0x131/0x680 [ 283.816825][ T5808] filemap_fdatawrite+0x207/0x260 [ 283.817088][ T5808] f2fs_sync_dirty_inodes+0x2ab/0x9e0 [ 283.817232][ T5808] f2fs_write_checkpoint+0x10a4/0x3730 [ 283.817432][ T5808] ? stack_depot_save_flags+0x35/0x790 [ 283.817606][ T5808] kill_f2fs_super+0x321/0x9a0 [ 283.817762][ T5808] ? __pfx_kill_f2fs_super+0x10/0x10 [ 283.817877][ T5808] deactivate_locked_super+0xcb/0x3c0 [ 283.818032][ T5808] deactivate_super+0x12f/0x140 [ 283.818162][ T5808] cleanup_mnt+0x7a2/0x820 [ 283.818348][ T5808] ? __pfx___cleanup_mnt+0x10/0x10 [ 283.818458][ T5808] __cleanup_mnt+0x22/0x30 [ 283.818562][ T5808] task_work_run+0x209/0x2b0 [ 283.818711][ T5808] exit_to_user_mode_loop+0x301/0x1b70 [ 283.818873][ T5808] ? user_path_at+0x241/0x3e0 [ 283.819010][ T5808] ? __x64_sys_umount+0x1dc/0x250 [ 283.819181][ T5808] do_syscall_64+0x1e1/0xf80 [ 283.819337][ T5808] ? clear_bhb_loop+0x40/0x90 [ 283.819474][ T5808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.819617][ T5808] RIP: 0033:0x7faa76f90a77 [ 283.819713][ T5808] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 283.819815][ T5808] RSP: 002b:00007fff8acb8898 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 283.819923][ T5808] RAX: 0000000000000000 RBX: 00007faa77013d7d RCX: 00007faa76f90a77 [ 283.820005][ T5808] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff8acb8950 [ 283.820124][ T5808] RBP: 00007fff8acb8950 R08: 0000000000000000 R09: 0000000000000000 [ 283.820205][ T5808] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff8acb99e0 [ 283.820283][ T5808] R13: 00007faa77013d7d R14: 000000000004543e R15: 00007fff8acb9a20 [ 283.820394][ T5808] [ 284.192715][ T5808] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 285.932063][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 285.938974][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 286.359048][ T7066] loop2: detected capacity change from 0 to 32768 [ 286.395901][ T7066] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.355 (7066) [ 286.450540][ T7066] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 286.463734][ T7066] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 286.742911][ T7066] BTRFS info (device loop2): rebuilding free space tree [ 286.876668][ T7066] BTRFS info (device loop2): checking UUID tree [ 286.896413][ T7066] BTRFS info (device loop2): setting nodatasum [ 286.903064][ T7066] BTRFS info (device loop2): enabling free space tree [ 286.910140][ T7066] BTRFS info (device loop2): force clearing of disk cache [ 287.319033][ T5814] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 287.792348][ T11] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 287.913192][ T7098] Illegal XDP return value 3947478090 on prog (id 39) dev N/A, expect packet loss! [ 288.008474][ T11] usb 1-1: Using ep0 maxpacket: 16 [ 288.061672][ T11] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 288.070349][ T11] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.081451][ T11] usb 1-1: config 0 has no interface number 0 [ 288.390303][ T11] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 288.399787][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.411648][ T11] usb 1-1: Product: syz [ 288.415993][ T11] usb 1-1: Manufacturer: syz [ 288.422204][ T11] usb 1-1: SerialNumber: syz [ 288.550727][ T11] usb 1-1: config 0 descriptor?? [ 289.002968][ T11] uvcvideo 1-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 289.010733][ T11] uvcvideo 1-1:0.105: No valid video chain found. [ 289.190757][ T11] usb 1-1: USB disconnect, device number 2 [ 290.259213][ T7110] loop1: detected capacity change from 0 to 32768 [ 290.270599][ T7110] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.367 (7110) [ 290.292872][ T7110] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 290.304233][ T7110] BTRFS info (device loop1): using blake2b (blake2b-256-lib) checksum algorithm [ 290.566351][ T7110] BTRFS info (device loop1): enabling ssd optimizations [ 290.573750][ T7110] BTRFS info (device loop1): turning on async discard [ 290.580976][ T7110] BTRFS info (device loop1): enabling free space tree [ 290.717660][ T30] audit: type=1804 audit(1768396963.420:103): pid=7110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.367" name="/newroot/83/file0/bus" dev="loop1" ino=263 res=1 errno=0 [ 291.086726][ T5803] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 291.257693][ T7128] loop2: detected capacity change from 0 to 32768 [ 291.292306][ T7128] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.370 (7128) [ 291.322799][ T7128] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 291.336854][ T7128] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm [ 291.408828][ T7132] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 291.416834][ T7132] IPv6: NLM_F_CREATE should be set when creating new route [ 291.424482][ T7132] IPv6: NLM_F_CREATE should be set when creating new route [ 291.787528][ T7128] BTRFS info (device loop2): enabling ssd optimizations [ 291.795357][ T7128] BTRFS info (device loop2): turning on async discard [ 291.802706][ T7128] BTRFS info (device loop2): enabling free space tree [ 291.864224][ T7128] BTRFS error (device loop2): balance: invalid convert metadata profile single [ 292.122697][ T5814] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 292.176181][ T7154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.372'. [ 293.141013][ T5807] Bluetooth: hci1: command 0x0406 tx timeout [ 293.148223][ T5805] Bluetooth: hci0: command 0x0406 tx timeout [ 294.272591][ T7175] loop3: detected capacity change from 0 to 128 [ 294.383474][ T7175] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 294.450998][ T7175] hpfs: filesystem error: improperly stopped [ 294.457211][ T7175] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 294.465455][ T7175] hpfs: You really don't want any checks? You are crazy... [ 294.558052][ T7175] hpfs: hpfs_map_sector(): read error [ 294.563796][ T7175] hpfs: code page support is disabled [ 294.619495][ T7178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.383'. [ 294.623850][ T7175] hpfs: hpfs_map_4sectors(): unaligned read [ 294.689541][ T7175] hpfs: hpfs_map_4sectors(): unaligned read [ 294.695877][ T7175] hpfs: filesystem error: unable to find root dir [ 294.842125][ T7175] hpfs: hpfs_map_4sectors(): unaligned read [ 294.848854][ T7175] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 294.981295][ T7182] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 294.996600][ T7182] overlayfs: overlapping lowerdir path [ 295.644023][ T7189] Bluetooth: hci0: service_discovery: too big uuid_count value 65532 [ 297.142791][ T7202] loop2: detected capacity change from 0 to 32768 [ 297.167065][ T7200] loop4: detected capacity change from 0 to 32768 [ 297.361919][ T7200] XFS (loop4): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 297.606034][ T7212] loop3: detected capacity change from 0 to 512 [ 297.722366][ T7212] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 297.830528][ T7212] EXT4-fs (loop3): 1 truncate cleaned up [ 297.838587][ T7212] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.110411][ T30] audit: type=1800 audit(1768396970.870:104): pid=7212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.394" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 298.140809][ T7222] EXT4-fs (loop3): shut down requested (1) [ 298.231194][ T5809] Bluetooth: hci2: command 0x0406 tx timeout [ 298.238769][ T5807] Bluetooth: hci3: command 0x0406 tx timeout [ 298.295942][ T7200] XFS (loop4): Starting recovery (logdev: internal) [ 298.466661][ T7200] XFS (loop4): Ending recovery (logdev: internal) [ 298.520686][ T5800] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.578564][ T7200] XFS (loop4): Corruption warning: Metadata has LSN (8192:64) ahead of current LSN (1:192). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 298.594084][ T7200] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0xaf/0x2d0, xfs_bnobt block 0x4 [ 298.605683][ T7200] XFS (loop4): Unmount and run xfs_repair [ 298.611664][ T7200] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 298.619526][ T7200] 00000000: 53 55 4d 59 00 00 00 02 ff ff ff ff ff ff ff ff SUMY............ [ 298.628974][ T7200] 00000010: 00 00 00 00 00 00 00 04 00 00 20 00 00 00 00 40 .......... ....@ [ 298.638381][ T7200] 00000020: 9f 91 83 2a 3b 79 45 c3 9d 6d ed 0b c7 35 7f e4 ...*;yE..m...5.. [ 298.653160][ T7200] 00000030: 00 00 00 00 25 47 cc 81 00 00 00 0d 00 00 00 03 ....%G.......... [ 298.663940][ T7200] 00000040: 00 00 0e a8 00 00 11 58 00 00 00 00 00 00 00 00 .......X........ [ 298.673126][ T7200] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 298.682518][ T7200] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 298.691673][ T7200] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 298.701089][ T7200] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x33d/0x5f0" at daddr 0x4 len 4 error 74 [ 298.716903][ T7200] XFS (loop4): page discard on page ffffea0002a45b80, inode 0x1d06, pos 67584. [ 298.730607][ T7200] XFS (loop4): Corruption warning: Metadata has LSN (8192:64) ahead of current LSN (1:192). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 298.733190][ T5927] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 298.751445][ T7200] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0xaf/0x2d0, xfs_bnobt block 0x4 [ 298.771485][ T7200] XFS (loop4): Unmount and run xfs_repair [ 298.777368][ T7200] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 298.785148][ T7200] 00000000: 53 55 4d 59 00 00 00 02 ff ff ff ff ff ff ff ff SUMY............ [ 298.794279][ T7200] 00000010: 00 00 00 00 00 00 00 04 00 00 20 00 00 00 00 40 .......... ....@ [ 298.803493][ T7200] 00000020: 9f 91 83 2a 3b 79 45 c3 9d 6d ed 0b c7 35 7f e4 ...*;yE..m...5.. [ 298.812685][ T7200] 00000030: 00 00 00 00 25 47 cc 81 00 00 00 0d 00 00 00 03 ....%G.......... [ 298.821949][ T7200] 00000040: 00 00 0e a8 00 00 11 58 00 00 00 00 00 00 00 00 .......X........ [ 298.831155][ T7200] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 298.840378][ T7200] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 298.856234][ T7200] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 298.865503][ T7200] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x33d/0x5f0" at daddr 0x4 len 4 error 74 [ 298.877964][ T7200] XFS (loop4): page discard on page ffffea0002991180, inode 0x1d06, pos 98304. [ 298.924356][ T7200] XFS (loop4): Corruption warning: Metadata has LSN (8192:64) ahead of current LSN (1:192). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 298.940279][ T7200] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0xaf/0x2d0, xfs_bnobt block 0x4 [ 298.958768][ T7200] XFS (loop4): Unmount and run xfs_repair [ 298.964685][ T7200] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 298.972639][ T7200] 00000000: 53 55 4d 59 00 00 00 02 ff ff ff ff ff ff ff ff SUMY............ [ 298.981865][ T7200] 00000010: 00 00 00 00 00 00 00 04 00 00 20 00 00 00 00 40 .......... ....@ [ 298.991244][ T7200] 00000020: 9f 91 83 2a 3b 79 45 c3 9d 6d ed 0b c7 35 7f e4 ...*;yE..m...5.. [ 299.000415][ T7200] 00000030: 00 00 00 00 25 47 cc 81 00 00 00 0d 00 00 00 03 ....%G.......... [ 299.009639][ T7200] 00000040: 00 00 0e a8 00 00 11 58 00 00 00 00 00 00 00 00 .......X........ [ 299.019316][ T7200] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 299.025438][ T7226] loop2: detected capacity change from 0 to 2048 [ 299.028616][ T7200] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 299.028712][ T7200] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 299.028795][ T7200] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x33d/0x5f0" at daddr 0x4 len 4 error 74 [ 299.029640][ T7200] XFS (loop4): page discard on page ffffea0002b71a90, inode 0x1d06, pos 131072. [ 299.167533][ T5927] usb 2-1: Using ep0 maxpacket: 32 [ 299.196423][ T5808] XFS (loop4): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 299.221820][ T7226] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 299.241975][ T5927] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 299.250469][ T5927] usb 2-1: config 0 has no interface number 0 [ 299.259389][ T5927] usb 2-1: config 0 interface 184 has no altsetting 0 [ 299.266071][ T5808] XFS (loop4): Uncorrected metadata errors detected; please run xfs_repair. [ 299.321528][ T7229] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 299.341015][ T5927] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 299.350804][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.361309][ T5927] usb 2-1: Product: syz [ 299.365739][ T5927] usb 2-1: Manufacturer: syz [ 299.371291][ T5927] usb 2-1: SerialNumber: syz [ 299.434671][ T5927] usb 2-1: config 0 descriptor?? [ 299.451842][ T5927] smsc75xx v1.0.0 [ 299.522627][ T7226] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 299.616761][ T7226] Remounting filesystem read-only [ 299.622654][ T7226] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 299.634196][ T7226] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 299.644726][ T7226] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 300.020078][ T5814] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 300.421836][ T7237] netlink: 28 bytes leftover after parsing attributes in process `syz.2.404'. [ 300.768760][ T5927] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 300.781759][ T5927] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 300.876835][ T5927] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 300.888151][ T5927] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 300.901340][ T5927] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 300.912929][ T5927] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 300.923431][ T5927] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 301.139891][ T5927] usb 2-1: USB disconnect, device number 5 [ 301.909558][ T7249] syzkaller0: refused to change device tx_queue_len [ 302.991109][ T7259] loop4: detected capacity change from 0 to 2048 [ 303.190457][ T7262] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 303.269561][ T7259] NILFS error (device loop4): nilfs_check_folio: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=203 [ 303.368586][ T7259] Remounting filesystem read-only [ 303.406310][ T7263] NILFS error (device loop4): nilfs_check_folio: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=203 [ 304.435257][ T7268] loop3: detected capacity change from 0 to 40427 [ 304.454561][ T7268] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 304.461958][ T7268] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 304.502907][ T7254] loop0: detected capacity change from 0 to 8192 [ 304.569728][ T7254] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 304.777055][ T7268] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 304.795080][ T7268] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 304.802695][ T7268] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 304.958991][ T5800] syz-executor: attempt to access beyond end of device [ 304.958991][ T5800] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 304.973532][ T5800] CPU: 0 UID: 0 PID: 5800 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(none) [ 304.973682][ T5800] Tainted: [L]=SOFTLOCKUP [ 304.973726][ T5800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 304.973800][ T5800] Call Trace: [ 304.973843][ T5800] [ 304.973886][ T5800] __dump_stack+0x26/0x30 [ 304.974030][ T5800] dump_stack_lvl+0x14c/0x1c0 [ 304.974174][ T5800] dump_stack+0x1e/0x25 [ 304.974296][ T5800] f2fs_handle_critical_error+0xa6f/0xc20 [ 304.974481][ T5800] f2fs_stop_checkpoint+0x65/0x80 [ 304.974643][ T5800] f2fs_write_end_io+0x101c/0x1bc0 [ 304.974850][ T5800] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 304.975010][ T5800] bio_endio+0xf96/0x10f0 [ 304.975141][ T5800] submit_bio_noacct+0x2009/0x2930 [ 304.975319][ T5800] submit_bio+0x57c/0x630 [ 304.975462][ T5800] f2fs_submit_write_bio+0x92/0x250 [ 304.975613][ T5800] __submit_merged_bio+0x16f/0x6a0 [ 304.975757][ T5800] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 304.975935][ T5800] __submit_merged_write_cond+0x44a/0x990 [ 304.976102][ T5800] f2fs_write_data_pages+0x4cf3/0x57a0 [ 304.976393][ T5800] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 304.976542][ T5800] ? kmsan_get_metadata+0xfb/0x160 [ 304.976701][ T5800] ? folio_batch_move_lru+0x6a6/0x6e0 [ 304.976864][ T5800] ? __msan_warning+0x1b/0x30 [ 304.977003][ T5800] ? filter_irq_stacks+0x13f/0x190 [ 304.977154][ T5800] ? stack_depot_save_flags+0x35/0x790 [ 304.977298][ T5800] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 304.977459][ T5800] ? kmsan_get_metadata+0xfb/0x160 [ 304.977617][ T5800] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 304.977774][ T5800] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 304.977932][ T5800] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 304.978089][ T5800] do_writepages+0x3f2/0x860 [ 304.978209][ T5800] ? _raw_spin_unlock+0x30/0x50 [ 304.978335][ T5800] ? wbc_attach_and_unlock_inode+0x131/0x680 [ 304.978537][ T5800] filemap_fdatawrite+0x207/0x260 [ 304.978734][ T5800] f2fs_sync_dirty_inodes+0x2ab/0x9e0 [ 304.978881][ T5800] f2fs_write_checkpoint+0x10a4/0x3730 [ 304.979079][ T5800] ? stack_depot_save_flags+0x35/0x790 [ 304.979253][ T5800] kill_f2fs_super+0x321/0x9a0 [ 304.979411][ T5800] ? __pfx_kill_f2fs_super+0x10/0x10 [ 304.979532][ T5800] deactivate_locked_super+0xcb/0x3c0 [ 304.979679][ T5800] deactivate_super+0x12f/0x140 [ 304.979810][ T5800] cleanup_mnt+0x7a2/0x820 [ 304.979935][ T5800] ? __pfx___cleanup_mnt+0x10/0x10 [ 304.980049][ T5800] __cleanup_mnt+0x22/0x30 [ 304.980157][ T5800] task_work_run+0x209/0x2b0 [ 304.980309][ T5800] exit_to_user_mode_loop+0x301/0x1b70 [ 304.980473][ T5800] ? user_path_at+0x241/0x3e0 [ 304.980604][ T5800] ? __x64_sys_umount+0x1dc/0x250 [ 304.980760][ T5800] do_syscall_64+0x1e1/0xf80 [ 304.980906][ T5800] ? clear_bhb_loop+0x40/0x90 [ 304.981033][ T5800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.981174][ T5800] RIP: 0033:0x7fe707390a77 [ 304.981270][ T5800] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 304.981375][ T5800] RSP: 002b:00007ffe563b9318 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 304.981489][ T5800] RAX: 0000000000000000 RBX: 00007fe707413d7d RCX: 00007fe707390a77 [ 304.981570][ T5800] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe563b93d0 [ 304.981645][ T5800] RBP: 00007ffe563b93d0 R08: 0000000000000000 R09: 0000000000000000 [ 304.981720][ T5800] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe563ba460 [ 304.981799][ T5800] R13: 00007fe707413d7d R14: 000000000004a71f R15: 00007ffe563ba4a0 [ 304.981914][ T5800] [ 305.341271][ T5800] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 306.133298][ T7284] netlink: 24 bytes leftover after parsing attributes in process `syz.4.421'. [ 307.724606][ T7292] loop0: detected capacity change from 0 to 40427 [ 307.736287][ T7292] F2FS-fs: heap/no_heap options were deprecated [ 307.747494][ T7292] F2FS-fs (loop0): Invalid segment/section count (24 != 3 * 1) [ 307.759936][ T7292] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 307.779746][ T7292] F2FS-fs (loop0): Image doesn't support compression [ 307.792241][ T7292] F2FS-fs (loop0): invalid crc value [ 308.111098][ T7292] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 308.138983][ T7292] F2FS-fs (loop0): Start checkpoint disabled! [ 308.170913][ T7292] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 308.197541][ T7292] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 308.205078][ T7292] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 308.872431][ T7306] loop4: detected capacity change from 0 to 128 [ 308.931531][ T7306] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 309.058456][ T7306] ext4 filesystem being mounted at /89/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 309.118375][ T50] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 309.862071][ T5808] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 310.252813][ T7315] loop3: detected capacity change from 0 to 32768 [ 310.373613][ T7315] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 310.676015][ T7315] XFS (loop3): Ending clean mount [ 310.687601][ T7315] XFS (loop3): Quotacheck needed: Please wait. [ 310.772269][ T7315] XFS (loop3): Quotacheck: Done. [ 310.945388][ T5800] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 311.780664][ T7350] loop0: detected capacity change from 0 to 64 [ 313.101317][ T7360] loop2: detected capacity change from 0 to 1024 [ 313.221919][ T7362] ALSA: seq fatal error: cannot create timer (-22) [ 313.281071][ T7360] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.654463][ T5814] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.504425][ T7368] loop3: detected capacity change from 0 to 40427 [ 314.565837][ T7368] F2FS-fs (loop3): invalid crc value [ 314.846769][ T7368] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 314.858152][ T7368] F2FS-fs (loop3): Start checkpoint disabled! [ 314.868825][ T7368] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 314.898341][ T7368] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 315.051382][ T3981] kworker/u8:13: attempt to access beyond end of device [ 315.051382][ T3981] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 315.066249][ T3981] CPU: 0 UID: 0 PID: 3981 Comm: kworker/u8:13 Tainted: G L syzkaller #0 PREEMPT(none) [ 315.066399][ T3981] Tainted: [L]=SOFTLOCKUP [ 315.066444][ T3981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 315.066541][ T3981] Workqueue: writeback wb_workfn (flush-7:3) [ 315.066690][ T3981] Call Trace: [ 315.066734][ T3981] [ 315.066776][ T3981] __dump_stack+0x26/0x30 [ 315.066925][ T3981] dump_stack_lvl+0x14c/0x1c0 [ 315.067070][ T3981] dump_stack+0x1e/0x25 [ 315.067191][ T3981] f2fs_handle_critical_error+0xa6f/0xc20 [ 315.067383][ T3981] f2fs_stop_checkpoint+0x65/0x80 [ 315.067539][ T3981] f2fs_write_end_io+0x101c/0x1bc0 [ 315.067747][ T3981] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 315.067921][ T3981] bio_endio+0xf96/0x10f0 [ 315.068062][ T3981] submit_bio_noacct+0x2009/0x2930 [ 315.068246][ T3981] submit_bio+0x57c/0x630 [ 315.068379][ T3981] f2fs_submit_write_bio+0x92/0x250 [ 315.068540][ T3981] __submit_merged_bio+0x16f/0x6a0 [ 315.068683][ T3981] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 315.068876][ T3981] __submit_merged_write_cond+0x44a/0x990 [ 315.069066][ T3981] f2fs_write_data_pages+0x4cf3/0x57a0 [ 315.069406][ T3981] ? kmsan_get_metadata+0xfb/0x160 [ 315.069554][ T3981] ? kmsan_get_metadata+0xfb/0x160 [ 315.069699][ T3981] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 315.069868][ T3981] ? kmsan_get_metadata+0xfb/0x160 [ 315.070016][ T3981] ? kmsan_get_metadata+0xfb/0x160 [ 315.070180][ T3981] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 315.070345][ T3981] ? kmsan_get_metadata+0xfb/0x160 [ 315.070504][ T3981] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 315.070655][ T3981] ? kmsan_get_metadata+0xfb/0x160 [ 315.070855][ T3981] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 315.071028][ T3981] ? kmsan_get_metadata+0xfb/0x160 [ 315.071185][ T3981] ? kmsan_get_metadata+0xfb/0x160 [ 315.071338][ T3981] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 315.071519][ T3981] ? kmsan_get_metadata+0xfb/0x160 [ 315.071673][ T3981] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 315.071830][ T3981] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 315.071981][ T3981] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 315.072132][ T3981] do_writepages+0x3f2/0x860 [ 315.072247][ T3981] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 315.072407][ T3981] ? queue_io+0x751/0x790 [ 315.072531][ T3981] ? kmsan_get_metadata+0xfb/0x160 [ 315.072698][ T3981] __writeback_single_inode+0x101/0x1190 [ 315.072844][ T3981] ? kmsan_get_metadata+0xfb/0x160 [ 315.073011][ T3981] writeback_sb_inodes+0xb2d/0x1f10 [ 315.073227][ T3981] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 315.073409][ T3981] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 315.073581][ T3981] wb_writeback+0x4ce/0xc00 [ 315.073723][ T3981] ? queue_io+0x451/0x790 [ 315.073864][ T3981] wb_workfn+0x397/0x1910 [ 315.073978][ T3981] ? kmsan_get_metadata+0xfb/0x160 [ 315.074148][ T3981] ? __pfx_wb_workfn+0x10/0x10 [ 315.074260][ T3981] process_scheduled_works+0xb91/0x1d80 [ 315.074475][ T3981] worker_thread+0xedf/0x1590 [ 315.074613][ T3981] kthread+0xd5c/0xf00 [ 315.074740][ T3981] ? __pfx_worker_thread+0x10/0x10 [ 315.074878][ T3981] ? __pfx_kthread+0x10/0x10 [ 315.074990][ T3981] ret_from_fork+0x208/0x710 [ 315.075146][ T3981] ? __switch_to+0x53d/0x790 [ 315.075278][ T3981] ? __pfx_kthread+0x10/0x10 [ 315.075400][ T3981] ret_from_fork_asm+0x1a/0x30 [ 315.075574][ T3981] [ 315.406406][ T3981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 315.838187][ T7377] loop2: detected capacity change from 0 to 32768 [ 315.870547][ T7379] atomic_op ffff88805447dd28 conn xmit_atomic 0000000000000000 [ 316.004678][ T7377] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 316.464806][ T7377] XFS (loop2): Ending clean mount [ 316.481322][ T30] audit: type=1800 audit(1768396989.250:105): pid=7377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.451" name="file1" dev="loop2" ino=4422 res=0 errno=0 [ 316.569709][ T5814] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 317.190820][ T7390] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 317.301545][ T7390] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 318.124296][ T7402] loop2: detected capacity change from 0 to 512 [ 318.171932][ T7402] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 318.393441][ T7402] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 318.408971][ T7402] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.532254][ T7411] netlink: 'syz.0.460': attribute type 12 has an invalid length. [ 318.540636][ T7411] netlink: 'syz.0.460': attribute type 29 has an invalid length. [ 318.548878][ T7411] netlink: 148 bytes leftover after parsing attributes in process `syz.0.460'. [ 318.558571][ T7411] netlink: 'syz.0.460': attribute type 2 has an invalid length. [ 318.566364][ T7411] netlink: 'syz.0.460': attribute type 3 has an invalid length. [ 318.574435][ T7411] netlink: 15 bytes leftover after parsing attributes in process `syz.0.460'. [ 318.976359][ T5814] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 320.175609][ T7419] loop2: detected capacity change from 0 to 32768 [ 320.267195][ T7419] [ 320.267195][ T7419] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 320.267195][ T7419] [ 320.371807][ T4634] [ 320.371807][ T4634] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 320.371807][ T4634] [ 320.382548][ T4634] [ 320.382548][ T4634] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 320.382548][ T4634] [ 320.395154][ T114] [ 320.395154][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 320.395154][ T114] [ 320.488374][ T5814] [ 320.488374][ T5814] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 320.488374][ T5814] [ 320.518335][ T5814] [ 320.518335][ T5814] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 320.518335][ T5814] [ 321.023379][ T11] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 321.234505][ T11] usb 4-1: Using ep0 maxpacket: 32 [ 321.874657][ T7443] loop2: detected capacity change from 0 to 1024 [ 322.066765][ T7443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.313243][ T7443] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: comm syz.2.473: inode #791700844: comm syz.2.473: iget: illegal inode # [ 322.353762][ T7443] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.473: error while reading EA inode 791700844 err=-117 [ 322.483418][ T7448] netlink: 20 bytes leftover after parsing attributes in process `syz.0.474'. [ 322.688282][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.701591][ T4310] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.730925][ T11] usb 4-1: unable to get BOS descriptor or descriptor too short [ 322.779106][ T4310] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.796813][ T11] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 322.804980][ T11] usb 4-1: can't read configurations, error -71 [ 322.837050][ T4310] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.849483][ T5814] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.241130][ T5857] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 323.257623][ T7456] gretap1: entered promiscuous mode [ 323.418081][ T5857] usb 2-1: Using ep0 maxpacket: 32 [ 323.459065][ T5857] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 323.467446][ T5857] usb 2-1: config 0 has no interface number 0 [ 323.474064][ T5857] usb 2-1: config 0 interface 12 has no altsetting 0 [ 323.564051][ T7453] loop4: detected capacity change from 0 to 4096 [ 323.577662][ T5857] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 323.587350][ T5857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.596725][ T5857] usb 2-1: Product: syz [ 323.601309][ T5857] usb 2-1: Manufacturer: syz [ 323.607258][ T5857] usb 2-1: SerialNumber: syz [ 323.739505][ T5857] usb 2-1: config 0 descriptor?? [ 323.764079][ T7461] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 323.798809][ T7462] loop2: detected capacity change from 0 to 8 [ 323.981371][ T7462] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 324.172415][ T5978] udevd[5978]: incorrect cramfs checksum on /dev/loop2 [ 324.400105][ T5978] udevd[5978]: incorrect cramfs checksum on /dev/loop2 [ 325.017554][ T5857] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 325.026854][ T5857] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 325.034587][ T5857] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 325.042792][ T5857] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 325.218625][ T5857] usb 2-1: USB disconnect, device number 6 [ 325.818362][ T7478] netlink: 64 bytes leftover after parsing attributes in process `syz.2.487'. [ 326.339265][ T7487] loop4: detected capacity change from 0 to 128 [ 326.416951][ T7487] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 326.535724][ T7487] ext4 filesystem being mounted at /105/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 326.655213][ T7487] EXT4-fs error (device loop4): dx_make_map:1296: inode #2: block 20: comm syz.4.490: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 326.676988][ T7487] EXT4-fs error (device loop4) in do_split:2027: Corrupt filesystem [ 326.708277][ T7487] EXT4-fs error (device loop4): dx_make_map:1296: inode #2: block 20: comm syz.4.490: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 326.780051][ T7487] EXT4-fs error (device loop4) in do_split:2027: Corrupt filesystem [ 327.036597][ T5808] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 327.075930][ T7494] can0: slcan on ttyS3. [ 327.201208][ T7492] can0 (unregistered): slcan off ttyS3. [ 327.260566][ T795] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 327.458522][ T795] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 327.470032][ T795] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 327.480593][ T795] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 327.489948][ T795] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.576934][ T7499] mmap: syz.2.495 (7499) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 327.674003][ T7493] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 327.759816][ T795] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 328.222572][ T795] usb 4-1: USB disconnect, device number 6 [ 328.358384][ T7507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.498'. [ 328.367480][ T7507] netlink: 12 bytes leftover after parsing attributes in process `syz.1.498'. [ 328.432028][ T5927] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 328.485763][ T7507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.498'. [ 328.494886][ T7507] netlink: 12 bytes leftover after parsing attributes in process `syz.1.498'. [ 329.397567][ T7511] loop1: detected capacity change from 0 to 128 [ 329.519409][ T7511] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 329.581929][ T5927] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 329.591534][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.602310][ T5927] usb 1-1: Product: syz [ 329.606756][ T5927] usb 1-1: Manufacturer: syz [ 329.612139][ T5927] usb 1-1: SerialNumber: syz [ 329.995261][ T7509] loop2: detected capacity change from 0 to 65536 [ 330.010116][ T5927] usb 1-1: config 0 descriptor?? [ 330.202640][ T5927] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 330.745339][ T7520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.502'. [ 330.868894][ T7509] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 331.061142][ T7520] hsr_slave_1 (unregistering): left promiscuous mode [ 331.222454][ T7509] XFS (loop2): Ending clean mount [ 331.438749][ T5814] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 331.741464][ T5927] gspca_sunplus: reg_w_riv err -71 [ 331.747000][ T5927] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 331.834495][ T5927] usb 1-1: USB disconnect, device number 3 [ 332.495747][ T30] audit: type=1326 audit(1768397005.250:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7534 comm="syz.3.508" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe70738f749 code=0x0 [ 332.591760][ T7533] loop4: detected capacity change from 0 to 32768 [ 332.621766][ T7533] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.507 (7533) [ 332.678138][ T7533] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 332.688716][ T7533] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 332.697583][ T7533] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 332.820853][ T7533] BTRFS info (device loop4): rebuilding free space tree [ 333.661578][ T7554] loop0: detected capacity change from 0 to 40427 [ 333.716435][ T7554] F2FS-fs (loop0): invalid crc value [ 333.729816][ T7533] BTRFS info (device loop4): disabling free space tree [ 333.737089][ T7533] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 333.748902][ T7533] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 333.792218][ T7533] BTRFS info (device loop4): enabling ssd optimizations [ 333.799824][ T7533] BTRFS info (device loop4): turning on async discard [ 333.808487][ T7533] BTRFS info (device loop4): enabling disk space caching [ 333.815682][ T7533] BTRFS info (device loop4): force clearing of disk cache [ 333.823822][ T7533] BTRFS info (device loop4): enabling auto defrag [ 333.830496][ T7533] BTRFS info (device loop4): force zlib compression, level 3 [ 333.838216][ T7533] BTRFS info (device loop4): max_inline set to 0 [ 334.081778][ T7554] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 334.092524][ T7554] F2FS-fs (loop0): Start checkpoint disabled! [ 334.105753][ T7554] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 334.115300][ T7554] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 334.188783][ T4805] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 334.321426][ T5808] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 334.445893][ T3981] kworker/u8:13: attempt to access beyond end of device [ 334.445893][ T3981] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 334.463237][ T3981] CPU: 1 UID: 0 PID: 3981 Comm: kworker/u8:13 Tainted: G L syzkaller #0 PREEMPT(none) [ 334.463390][ T3981] Tainted: [L]=SOFTLOCKUP [ 334.463434][ T3981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 334.463530][ T3981] Workqueue: writeback wb_workfn (flush-7:0) [ 334.463678][ T3981] Call Trace: [ 334.463723][ T3981] [ 334.463767][ T3981] __dump_stack+0x26/0x30 [ 334.463908][ T3981] dump_stack_lvl+0x14c/0x1c0 [ 334.464068][ T3981] dump_stack+0x1e/0x25 [ 334.464194][ T3981] f2fs_handle_critical_error+0xa6f/0xc20 [ 334.464385][ T3981] f2fs_stop_checkpoint+0x65/0x80 [ 334.464538][ T3981] f2fs_write_end_io+0x101c/0x1bc0 [ 334.464728][ T3981] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 334.464880][ T3981] bio_endio+0xf96/0x10f0 [ 334.465010][ T3981] submit_bio_noacct+0x2009/0x2930 [ 334.465178][ T3981] submit_bio+0x57c/0x630 [ 334.465304][ T3981] f2fs_submit_write_bio+0x92/0x250 [ 334.465448][ T3981] __submit_merged_bio+0x16f/0x6a0 [ 334.465586][ T3981] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 334.465754][ T3981] __submit_merged_write_cond+0x44a/0x990 [ 334.465913][ T3981] f2fs_write_data_pages+0x4cf3/0x57a0 [ 334.466194][ T3981] ? kmsan_get_metadata+0xfb/0x160 [ 334.466346][ T3981] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 334.466507][ T3981] ? kmsan_get_metadata+0xfb/0x160 [ 334.466658][ T3981] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 334.466810][ T3981] ? kmsan_get_metadata+0xfb/0x160 [ 334.466961][ T3981] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 334.467123][ T3981] ? kmsan_get_metadata+0xfb/0x160 [ 334.467275][ T3981] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 334.467427][ T3981] ? kmsan_get_metadata+0xfb/0x160 [ 334.467579][ T3981] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 334.467736][ T3981] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 334.467886][ T3981] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 334.468076][ T3981] do_writepages+0x3f2/0x860 [ 334.468192][ T3981] ? stack_depot_save_flags+0x35/0x790 [ 334.468321][ T3981] ? kmsan_get_metadata+0xfb/0x160 [ 334.468479][ T3981] ? kmsan_get_metadata+0xfb/0x160 [ 334.468648][ T3981] __writeback_single_inode+0x101/0x1190 [ 334.468790][ T3981] ? kmsan_get_metadata+0xfb/0x160 [ 334.468954][ T3981] writeback_sb_inodes+0xb2d/0x1f10 [ 334.469212][ T3981] wb_writeback+0x4ce/0xc00 [ 334.469358][ T3981] ? queue_io+0x451/0x790 [ 334.469493][ T3981] wb_workfn+0x397/0x1910 [ 334.469606][ T3981] ? kmsan_get_metadata+0xfb/0x160 [ 334.469779][ T3981] ? __pfx_wb_workfn+0x10/0x10 [ 334.469888][ T3981] process_scheduled_works+0xb91/0x1d80 [ 334.470121][ T3981] worker_thread+0xedf/0x1590 [ 334.470263][ T3981] kthread+0xd5c/0xf00 [ 334.470378][ T3981] ? __pfx_worker_thread+0x10/0x10 [ 334.470507][ T3981] ? __pfx_kthread+0x10/0x10 [ 334.470626][ T3981] ret_from_fork+0x208/0x710 [ 334.470771][ T3981] ? __switch_to+0x53d/0x790 [ 334.470897][ T3981] ? __pfx_kthread+0x10/0x10 [ 334.471024][ T3981] ret_from_fork_asm+0x1a/0x30 [ 334.471191][ T3981] [ 334.570178][ T7564] loop1: detected capacity change from 0 to 512 [ 334.579712][ T3981] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 334.969445][ T7564] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.513: bad orphan inode 11862016 [ 334.987228][ T7564] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 335.004229][ T7564] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.424431][ T5857] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 335.540254][ T5803] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 335.734738][ T5857] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 335.744287][ T5857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.753041][ T5857] usb 4-1: Product: syz [ 335.757372][ T5857] usb 4-1: Manufacturer: syz [ 335.762271][ T5857] usb 4-1: SerialNumber: syz [ 336.338565][ T5857] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 336.350842][ T5857] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 336.993209][ T5857] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 337.005701][ T5857] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 337.016615][ T5857] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 337.131611][ T5857] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 337.266029][ T5857] usb 4-1: USB disconnect, device number 7 [ 338.444394][ T7601] loop1: detected capacity change from 0 to 1024 [ 338.487517][ T7606] evm: overlay not supported [ 338.724431][ T7594] loop0: detected capacity change from 0 to 65536 [ 338.792082][ T7594] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 339.151265][ T7594] XFS (loop0): Ending clean mount [ 339.313041][ T5810] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 339.323386][ T12] hfsplus: b-tree write err: -5, ino 4 [ 340.264848][ T7620] loop3: detected capacity change from 0 to 40427 [ 340.289570][ T7620] F2FS-fs (loop3): invalid crc value [ 340.572842][ T7620] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 340.655415][ T7620] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 340.721323][ T30] audit: type=1800 audit(1768397013.480:107): pid=7620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.530" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 340.840118][ T5800] syz-executor: attempt to access beyond end of device [ 340.840118][ T5800] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 340.855542][ T5800] CPU: 1 UID: 0 PID: 5800 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(none) [ 340.855691][ T5800] Tainted: [L]=SOFTLOCKUP [ 340.855733][ T5800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 340.855809][ T5800] Call Trace: [ 340.855853][ T5800] [ 340.855893][ T5800] __dump_stack+0x26/0x30 [ 340.856041][ T5800] dump_stack_lvl+0x14c/0x1c0 [ 340.856179][ T5800] dump_stack+0x1e/0x25 [ 340.856301][ T5800] f2fs_handle_critical_error+0xa6f/0xc20 [ 340.856488][ T5800] f2fs_stop_checkpoint+0x65/0x80 [ 340.856738][ T5800] f2fs_write_end_io+0x101c/0x1bc0 [ 340.856960][ T5800] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 340.857121][ T5800] bio_endio+0xf96/0x10f0 [ 340.857261][ T5800] submit_bio_noacct+0x2009/0x2930 [ 340.857443][ T5800] submit_bio+0x57c/0x630 [ 340.857587][ T5800] f2fs_submit_write_bio+0x92/0x250 [ 340.857744][ T5800] __submit_merged_bio+0x16f/0x6a0 [ 340.857891][ T5800] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 340.858063][ T5800] __submit_merged_write_cond+0x44a/0x990 [ 340.858229][ T5800] f2fs_write_data_pages+0x4cf3/0x57a0 [ 340.858513][ T5800] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 340.858668][ T5800] ? kmsan_get_metadata+0xfb/0x160 [ 340.858832][ T5800] ? folio_batch_move_lru+0x6a6/0x6e0 [ 340.858996][ T5800] ? __msan_warning+0x1b/0x30 [ 340.859142][ T5800] ? filter_irq_stacks+0x13f/0x190 [ 340.859291][ T5800] ? stack_depot_save_flags+0x35/0x790 [ 340.859449][ T5800] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 340.859615][ T5800] ? kmsan_get_metadata+0xfb/0x160 [ 340.859805][ T5800] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 340.859967][ T5800] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 340.860128][ T5800] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 340.860304][ T5800] do_writepages+0x3f2/0x860 [ 340.860419][ T5800] ? _raw_spin_unlock+0x30/0x50 [ 340.860545][ T5800] ? wbc_attach_and_unlock_inode+0x131/0x680 [ 340.860748][ T5800] filemap_fdatawrite+0x207/0x260 [ 340.860963][ T5800] f2fs_sync_dirty_inodes+0x2ab/0x9e0 [ 340.861115][ T5800] f2fs_write_checkpoint+0x10a4/0x3730 [ 340.861316][ T5800] ? stack_depot_save_flags+0x35/0x790 [ 340.861486][ T5800] kill_f2fs_super+0x321/0x9a0 [ 340.861639][ T5800] ? __pfx_kill_f2fs_super+0x10/0x10 [ 340.861766][ T5800] deactivate_locked_super+0xcb/0x3c0 [ 340.861918][ T5800] deactivate_super+0x12f/0x140 [ 340.862058][ T5800] cleanup_mnt+0x7a2/0x820 [ 340.862183][ T5800] ? __pfx___cleanup_mnt+0x10/0x10 [ 340.862299][ T5800] __cleanup_mnt+0x22/0x30 [ 340.862407][ T5800] task_work_run+0x209/0x2b0 [ 340.862559][ T5800] exit_to_user_mode_loop+0x301/0x1b70 [ 340.862724][ T5800] ? user_path_at+0x241/0x3e0 [ 340.862874][ T5800] ? __x64_sys_umount+0x1dc/0x250 [ 340.863035][ T5800] do_syscall_64+0x1e1/0xf80 [ 340.863193][ T5800] ? clear_bhb_loop+0x40/0x90 [ 340.863326][ T5800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.863451][ T5800] RIP: 0033:0x7fe707390a77 [ 340.863541][ T5800] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 340.863642][ T5800] RSP: 002b:00007ffe563b9318 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 340.863757][ T5800] RAX: 0000000000000000 RBX: 00007fe707413d7d RCX: 00007fe707390a77 [ 340.863843][ T5800] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe563b93d0 [ 340.863920][ T5800] RBP: 00007ffe563b93d0 R08: 0000000000000000 R09: 0000000000000000 [ 340.864000][ T5800] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe563ba460 [ 340.864088][ T5800] R13: 00007fe707413d7d R14: 00000000000532f4 R15: 00007ffe563ba4a0 [ 340.864205][ T5800] [ 341.231228][ T5800] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 341.771364][ T7638] capability: warning: `syz.1.534' uses deprecated v2 capabilities in a way that may be insecure [ 341.836090][ T7638] GUP no longer grows the stack in syz.1.534 (7638): 200000004000-20000000a000 (200000002000) [ 341.847674][ T7638] CPU: 1 UID: 0 PID: 7638 Comm: syz.1.534 Tainted: G L syzkaller #0 PREEMPT(none) [ 341.847839][ T7638] Tainted: [L]=SOFTLOCKUP [ 341.847881][ T7638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 341.847952][ T7638] Call Trace: [ 341.847996][ T7638] [ 341.848038][ T7638] __dump_stack+0x26/0x30 [ 341.848183][ T7638] dump_stack_lvl+0x14c/0x1c0 [ 341.848327][ T7638] dump_stack+0x1e/0x25 [ 341.848461][ T7638] __get_user_pages+0x4522/0x5f50 [ 341.848597][ T7638] ? kmsan_get_metadata+0xfb/0x160 [ 341.848781][ T7638] ? filter_irq_stacks+0x49/0x190 [ 341.848947][ T7638] ? kmsan_get_metadata+0xfb/0x160 [ 341.849131][ T7638] get_user_pages_remote+0x468/0x13a0 [ 341.849270][ T7638] ? stack_depot_save_flags+0x35/0x790 [ 341.849430][ T7638] ? kmsan_get_metadata+0xfb/0x160 [ 341.849604][ T7638] ? access_remote_vm+0x4e/0x70 [ 341.849743][ T7638] __access_remote_vm+0x2f8/0xff0 [ 341.849915][ T7638] access_remote_vm+0x4e/0x70 [ 341.850052][ T7638] proc_pid_cmdline_read+0xa75/0x19e0 [ 341.850230][ T7638] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 341.850363][ T7638] vfs_readv+0x931/0xf30 [ 341.850522][ T7638] ? kmsan_get_metadata+0xfb/0x160 [ 341.850676][ T7638] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 341.850845][ T7638] __x64_sys_preadv+0x2a3/0x510 [ 341.851012][ T7638] x64_sys_call+0x3033/0x3e70 [ 341.851157][ T7638] do_syscall_64+0xd3/0xf80 [ 341.851305][ T7638] ? clear_bhb_loop+0x40/0x90 [ 341.851435][ T7638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.851559][ T7638] RIP: 0033:0x7fa38158f749 [ 341.851648][ T7638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.851750][ T7638] RSP: 002b:00007fa3824e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 341.851861][ T7638] RAX: ffffffffffffffda RBX: 00007fa3817e5fa0 RCX: 00007fa38158f749 [ 341.851947][ T7638] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 341.852021][ T7638] RBP: 00007fa381613f91 R08: 0000000000000000 R09: 0000000000000000 [ 341.852095][ T7638] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 341.852175][ T7638] R13: 00007fa3817e6038 R14: 00007fa3817e5fa0 R15: 00007ffd37fcfa58 [ 341.852296][ T7638] [ 343.411413][ T7654] batadv_slave_0: entered allmulticast mode [ 343.464761][ T7654] pimreg: entered allmulticast mode [ 343.484615][ T7654] pimreg: left allmulticast mode [ 343.500755][ T5927] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 343.607456][ T7653] batadv_slave_0: left allmulticast mode [ 343.641213][ T7658] loop3: detected capacity change from 0 to 256 [ 343.690798][ T5927] usb 3-1: config 0 has no interfaces? [ 343.696515][ T5927] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 343.707689][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.747256][ T7658] exFAT-fs (loop3): failed to test first cluster bit of root dir(5) [ 343.769702][ T5927] usb 3-1: config 0 descriptor?? [ 344.341032][ T5857] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 344.521917][ T5857] usb 2-1: Using ep0 maxpacket: 8 [ 344.578892][ T5857] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 344.588345][ T5857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.596543][ T5857] usb 2-1: Product: syz [ 344.601163][ T5857] usb 2-1: Manufacturer: syz [ 344.605937][ T5857] usb 2-1: SerialNumber: syz [ 344.629077][ T5857] usb 2-1: config 0 descriptor?? [ 344.634777][ T5927] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 344.659884][ T5857] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 344.920856][ T5927] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 344.932399][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.941756][ T5927] usb 4-1: Product: syz [ 344.946085][ T5927] usb 4-1: Manufacturer: syz [ 344.952328][ T5927] usb 4-1: SerialNumber: syz [ 344.978338][ T5927] usb 4-1: config 0 descriptor?? [ 346.063914][ T5927] usb 4-1: non-Atmel transceiver xxxxab54 [ 346.272321][ T5927] usb 4-1: Firmware version (0.0) predates our first public release. [ 346.280751][ T5927] usb 4-1: Please update to version 0.2 or newer [ 346.351598][ T5927] usb 4-1: atusb_probe: initialization failed, error = -19 [ 346.383798][ T24] usb 3-1: USB disconnect, device number 3 [ 346.530420][ T5927] usb 4-1: USB disconnect, device number 8 [ 346.700509][ T7676] loop0: detected capacity change from 0 to 40427 [ 346.711195][ T5857] gspca_sonixj: reg_w1 err -71 [ 346.720975][ T7676] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 346.730125][ T7676] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 346.743321][ T7676] F2FS-fs (loop0): invalid crc value [ 346.758282][ T5857] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 346.792671][ T5857] usb 2-1: USB disconnect, device number 7 [ 347.058359][ T7676] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 347.072365][ T7681] loop2: detected capacity change from 0 to 1024 [ 347.105824][ T7676] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 347.113591][ T7676] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 347.310756][ T7681] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 347.323880][ T7681] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 347.411341][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.418147][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 347.543818][ T7689] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.550: bg 0: block 112: padding at end of block bitmap is not set [ 347.650350][ T7681] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: block 3: comm syz.2.550: lblock 3 mapped to illegal pblock 3 (length 1) [ 348.295366][ T5814] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 348.425615][ T7692] loop4: detected capacity change from 0 to 32768 [ 348.435099][ T7692] btrfs: Deprecated parameter 'usebackuproot' [ 348.441562][ T7692] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 348.456232][ T7692] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.554 (7692) [ 348.481487][ T7692] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 348.492088][ T7692] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 348.728019][ T4634] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 348.744869][ T7692] BTRFS error (device loop4): failed to load root extent [ 348.752450][ T7692] BTRFS warning (device loop4): try to load backup roots slot 1 [ 348.763129][ T4634] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 348.777101][ T7692] BTRFS warning (device loop4): couldn't read tree root [ 348.784755][ T7692] BTRFS warning (device loop4): try to load backup roots slot 2 [ 348.876739][ T4634] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 348.888285][ T7692] BTRFS warning (device loop4): couldn't read tree root [ 348.895411][ T7692] BTRFS warning (device loop4): try to load backup roots slot 3 [ 348.990296][ T7692] BTRFS info (device loop4): rebuilding free space tree [ 349.026470][ T7692] BTRFS info (device loop4): checking UUID tree [ 349.053685][ T7692] BTRFS info (device loop4): enabling ssd optimizations [ 349.061085][ T7692] BTRFS info (device loop4): turning off barriers [ 349.067663][ T7692] BTRFS info (device loop4): turning on sync discard [ 349.074629][ T7692] BTRFS info (device loop4): enabling free space tree [ 349.081859][ T7692] BTRFS info (device loop4): force clearing of disk cache [ 349.089288][ T7692] BTRFS info (device loop4): enabling auto defrag [ 349.095954][ T7692] BTRFS info (device loop4): trying to use backup root at mount time [ 349.104412][ T7692] BTRFS info (device loop4): use zstd compression, level 3 [ 349.111912][ T7692] BTRFS info (device loop4): max_inline set to 0 [ 349.513488][ T5808] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 349.730042][ T7714] loop2: detected capacity change from 0 to 32768 [ 349.745180][ T7714] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.557 (7714) [ 349.771884][ T7714] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 349.782454][ T7714] BTRFS info (device loop2): using blake2b (blake2b-256-lib) checksum algorithm [ 350.416258][ T7714] BTRFS info (device loop2): enabling ssd optimizations [ 350.426388][ T7714] BTRFS info (device loop2): turning on async discard [ 350.433560][ T7714] BTRFS info (device loop2): enabling free space tree [ 350.760008][ T7740] overlayfs: refusing to follow metacopy origin for (/file1) [ 350.775034][ T7721] loop1: detected capacity change from 0 to 40427 [ 350.786378][ T7721] F2FS-fs (loop1): Invalid log blocks per segment (1) [ 350.793567][ T7721] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 350.805243][ T7721] F2FS-fs (loop1): Image doesn't support compression [ 350.812329][ T7721] F2FS-fs (loop1): build fault injection rate: 690 [ 350.819115][ T7721] F2FS-fs (loop1): build fault injection type: 0x35f7 [ 350.852166][ T7721] F2FS-fs (loop1): invalid crc value [ 350.916616][ T5814] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 351.145195][ T7721] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 351.155532][ T7721] F2FS-fs (loop1): Start checkpoint disabled! [ 351.165087][ T7721] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 351.181840][ T7721] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 351.191107][ T7721] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 351.345919][ T12] kworker/u8:0: attempt to access beyond end of device [ 351.345919][ T12] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 351.360861][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G L syzkaller #0 PREEMPT(none) [ 351.361023][ T12] Tainted: [L]=SOFTLOCKUP [ 351.361070][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 351.361162][ T12] Workqueue: writeback wb_workfn (flush-7:1) [ 351.361313][ T12] Call Trace: [ 351.361357][ T12] [ 351.361400][ T12] __dump_stack+0x26/0x30 [ 351.361539][ T12] dump_stack_lvl+0x14c/0x1c0 [ 351.361693][ T12] dump_stack+0x1e/0x25 [ 351.361820][ T12] f2fs_handle_critical_error+0xa6f/0xc20 [ 351.362014][ T12] f2fs_stop_checkpoint+0x65/0x80 [ 351.362173][ T12] f2fs_write_end_io+0x101c/0x1bc0 [ 351.362367][ T12] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 351.362515][ T12] bio_endio+0xf96/0x10f0 [ 351.362639][ T12] submit_bio_noacct+0x2009/0x2930 [ 351.362825][ T12] submit_bio+0x57c/0x630 [ 351.362957][ T12] f2fs_submit_write_bio+0x92/0x250 [ 351.363112][ T12] __submit_merged_bio+0x16f/0x6a0 [ 351.363253][ T12] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 351.363424][ T12] __submit_merged_write_cond+0x44a/0x990 [ 351.363599][ T12] f2fs_write_data_pages+0x4cf3/0x57a0 [ 351.363903][ T12] ? kmsan_get_metadata+0xfb/0x160 [ 351.364063][ T12] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 351.364237][ T12] ? kmsan_get_metadata+0xfb/0x160 [ 351.364400][ T12] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 351.364573][ T12] ? __update_load_avg_cfs_rq+0xe9/0x1010 [ 351.364709][ T12] ? __update_load_avg_se+0x194/0x11c0 [ 351.364835][ T12] ? kmsan_get_metadata+0xfb/0x160 [ 351.364989][ T12] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 351.365153][ T12] ? kmsan_get_metadata+0xfb/0x160 [ 351.365314][ T12] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 351.365478][ T12] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 351.365638][ T12] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 351.365800][ T12] do_writepages+0x3f2/0x860 [ 351.365917][ T12] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 351.366091][ T12] ? kmsan_get_metadata+0xfb/0x160 [ 351.366246][ T12] ? kmsan_get_metadata+0xfb/0x160 [ 351.366424][ T12] __writeback_single_inode+0x101/0x1190 [ 351.366579][ T12] ? kmsan_get_metadata+0xfb/0x160 [ 351.366763][ T12] writeback_sb_inodes+0xb2d/0x1f10 [ 351.366990][ T12] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 351.367181][ T12] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 351.367357][ T12] wb_writeback+0x4ce/0xc00 [ 351.367510][ T12] ? queue_io+0x451/0x790 [ 351.367655][ T12] wb_workfn+0x397/0x1910 [ 351.367830][ T12] ? kmsan_get_metadata+0xfb/0x160 [ 351.368005][ T12] ? __pfx_wb_workfn+0x10/0x10 [ 351.368118][ T12] process_scheduled_works+0xb91/0x1d80 [ 351.368344][ T12] worker_thread+0xedf/0x1590 [ 351.368495][ T12] kthread+0xd5c/0xf00 [ 351.368617][ T12] ? __pfx_worker_thread+0x10/0x10 [ 351.368783][ T12] ? __pfx_kthread+0x10/0x10 [ 351.368907][ T12] ret_from_fork+0x208/0x710 [ 351.369062][ T12] ? __switch_to+0x53d/0x790 [ 351.369201][ T12] ? __pfx_kthread+0x10/0x10 [ 351.369328][ T12] ret_from_fork_asm+0x1a/0x30 [ 351.369512][ T12] [ 351.671967][ T12] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 352.332951][ T7751] Invalid ELF header magic: != ELF [ 352.743418][ T7750] loop3: detected capacity change from 0 to 4096 [ 352.843629][ T7750] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 352.938297][ T7750] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 353.243923][ T7757] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 353.497457][ T7750] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 353.742984][ T7750] Remounting filesystem read-only [ 353.750886][ T7750] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 354.010217][ T7750] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 354.203623][ T7750] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 354.669497][ T5800] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 356.260159][ T7780] loop2: detected capacity change from 0 to 256 [ 357.230966][ T7786] loop4: detected capacity change from 0 to 32768 [ 357.307356][ T7786] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.576 (7786) [ 357.474866][ T7791] netlink: 182 bytes leftover after parsing attributes in process `syz.2.578'. [ 357.612135][ T7788] loop0: detected capacity change from 0 to 32768 [ 357.633743][ T7786] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 357.645728][ T7786] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 357.760600][ T7788] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 357.816636][ T7786] BTRFS info (device loop4): enabling ssd optimizations [ 357.824015][ T7786] BTRFS info (device loop4): turning on async discard [ 357.833980][ T7786] BTRFS info (device loop4): enabling free space tree [ 357.926205][ T7788] XFS (loop0): Ending clean mount [ 357.943109][ T7788] XFS (loop0): Quotacheck needed: Please wait. [ 357.975625][ T7786] BTRFS info (device loop4): balance: start -s [ 357.982723][ T7786] BTRFS info (device loop4): left=0, need=98304, flags=2 [ 357.993017][ T7786] BTRFS info (device loop4): space_info SYSTEM (sub-group id 0) has 0 free, is not full [ 358.003214][ T7786] BTRFS info (device loop4): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 358.017133][ T7786] BTRFS info (device loop4): global_block_rsv: size 1441792 reserved 1441792 [ 358.026486][ T7786] BTRFS info (device loop4): trans_block_rsv: size 0 reserved 0 [ 358.037216][ T7786] BTRFS info (device loop4): chunk_block_rsv: size 0 reserved 0 [ 358.045179][ T7786] BTRFS info (device loop4): delayed_block_rsv: size 0 reserved 0 [ 358.053250][ T7786] BTRFS info (device loop4): delayed_refs_rsv: size 0 reserved 0 [ 358.068412][ T7786] BTRFS info (device loop4): relocating block group 1048576 flags system [ 358.119578][ T7788] XFS (loop0): Quotacheck: Done. [ 358.181369][ T7786] BTRFS info (device loop4): balance: ended with status: 0 [ 358.349311][ T5810] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 358.725587][ T7826] netlink: 'syz.0.584': attribute type 4 has an invalid length. [ 358.776050][ T5154] udevd[5154]: worker [6021] terminated by signal 33 (Unknown signal 33) [ 358.779303][ T5808] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 358.815123][ T7826] netlink: 'syz.0.584': attribute type 4 has an invalid length. [ 358.827928][ T5154] udevd[5154]: worker [6021] failed while handling '/devices/virtual/block/loop4' [ 360.053954][ T7846] capability: warning: `syz.1.592' uses 32-bit capabilities (legacy support in use) [ 360.553120][ T5154] udevd[5154]: worker [5975] terminated by signal 33 (Unknown signal 33) [ 360.639107][ T5154] udevd[5154]: worker [5975] failed while handling '/devices/virtual/block/loop0' [ 361.646784][ T7854] loop2: detected capacity change from 0 to 256 [ 362.194095][ T7854] FAT-fs (loop2): Directory bread(block 64) failed [ 362.201725][ T7854] FAT-fs (loop2): Directory bread(block 65) failed [ 362.208965][ T7854] FAT-fs (loop2): Directory bread(block 66) failed [ 362.215662][ T7854] FAT-fs (loop2): Directory bread(block 67) failed [ 362.222691][ T7854] FAT-fs (loop2): Directory bread(block 68) failed [ 362.229587][ T7854] FAT-fs (loop2): Directory bread(block 69) failed [ 362.241931][ T7854] FAT-fs (loop2): Directory bread(block 70) failed [ 362.248884][ T7854] FAT-fs (loop2): Directory bread(block 71) failed [ 362.255744][ T7854] FAT-fs (loop2): Directory bread(block 72) failed [ 362.262754][ T7854] FAT-fs (loop2): Directory bread(block 73) failed [ 363.743741][ T7867] loop2: detected capacity change from 0 to 4096 [ 364.233758][ T30] audit: type=1800 audit(1768397036.980:108): pid=7867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.600" name="file1" dev="loop2" ino=33 res=0 errno=0 [ 365.230375][ T7897] macvlan1: entered promiscuous mode [ 365.309188][ T7896] macvlan1: left promiscuous mode [ 366.594883][ T7909] loop1: detected capacity change from 0 to 40427 [ 366.632421][ T7909] F2FS-fs (loop1): build fault injection rate: 771 [ 366.648698][ T7909] F2FS-fs (loop1): invalid crc value [ 366.909291][ T7909] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 366.968636][ T7909] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 367.238670][ T7926] loop4: detected capacity change from 0 to 1024 [ 367.332360][ T7926] EXT4-fs: Ignoring removed orlov option [ 367.653796][ T7926] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.792355][ T7937] netlink: 'syz.2.625': attribute type 12 has an invalid length. [ 368.199097][ T5808] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.798905][ T7945] loop4: detected capacity change from 0 to 2048 [ 368.834497][ T7945] EXT4-fs: Ignoring removed bh option [ 369.078655][ T7945] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.665846][ T7959] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 370.319688][ T7958] loop1: detected capacity change from 0 to 32768 [ 370.356014][ T7948] loop2: detected capacity change from 0 to 32768 [ 370.369851][ T7958] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.633 (7958) [ 370.396800][ T7958] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 370.397677][ T7948] BTRFS info: device /dev/loop2 (7:2) using temp-fsid c14edc6f-109a-498f-88de-2687996058e6 [ 370.408543][ T7958] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 370.417360][ T7948] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.630 (7948) [ 370.431030][ T7958] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 370.468860][ T7948] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 370.480857][ T7948] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 370.875340][ T7958] BTRFS info (device loop1): rebuilding free space tree [ 370.881113][ T7985] warning: `syz.3.634' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 370.920449][ T7958] BTRFS info (device loop1): disabling free space tree [ 370.927933][ T7958] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 370.943122][ T7958] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 370.985400][ T7958] BTRFS info (device loop1): enabling ssd optimizations [ 370.991414][ T7948] BTRFS info (device loop2): enabling ssd optimizations [ 370.992915][ T7958] BTRFS info (device loop1): turning on async discard [ 370.999798][ T7948] BTRFS info (device loop2): turning on async discard [ 371.006511][ T7958] BTRFS info (device loop1): enabling disk space caching [ 371.013429][ T7948] BTRFS info (device loop2): enabling free space tree [ 371.028009][ T7958] BTRFS info (device loop1): force clearing of disk cache [ 371.035291][ T7958] BTRFS info (device loop1): enabling auto defrag [ 371.048446][ T7958] BTRFS info (device loop1): force zlib compression, level 3 [ 371.057152][ T7958] BTRFS info (device loop1): max_inline set to 0 [ 371.335774][ T7992] netlink: 20 bytes leftover after parsing attributes in process `syz.0.635'. [ 371.396344][ T12] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 371.402536][ T5803] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 371.440703][ T7992] netlink: 20 bytes leftover after parsing attributes in process `syz.0.635'. [ 371.472893][ T5808] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.280696][ T8001] loop4: detected capacity change from 0 to 2048 [ 372.403637][ T8001] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 372.494911][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880508c0600: rx timeout, send abort [ 372.549885][ T30] audit: type=1800 audit(1768397045.310:109): pid=8001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.637" name="file1" dev="loop4" ino=1367 res=0 errno=0 [ 372.923310][ T5857] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 372.995573][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804f149400: rx timeout, send abort [ 373.005967][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880508c0600: abort rx timeout. Force session deactivation [ 373.118206][ T5857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 373.129821][ T5857] usb 2-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.00 [ 373.139308][ T5857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.256072][ T5857] usb 2-1: config 0 descriptor?? [ 373.264363][ T8006] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 373.504289][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804f149400: abort rx timeout. Force session deactivation [ 373.550306][ T5814] BTRFS info (device loop2): last unmount of filesystem c14edc6f-109a-498f-88de-2687996058e6 [ 373.864382][ T5857] apple 0003:05AC:0241.0002: collection stack underflow [ 373.871758][ T5857] apple 0003:05AC:0241.0002: item 0 0 0 12 parsing failed [ 373.945819][ T5857] apple 0003:05AC:0241.0002: parse failed [ 373.952324][ T5857] apple 0003:05AC:0241.0002: probe with driver apple failed with error -22 [ 374.619984][ T8016] loop4: detected capacity change from 0 to 32768 [ 374.687434][ T8016] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.643 (8016) [ 374.718529][ T8014] overlayfs: statfs failed on './file0' [ 374.951023][ T8022] netlink: 16 bytes leftover after parsing attributes in process `syz.3.645'. [ 374.960826][ T8022] netlink: 204 bytes leftover after parsing attributes in process `syz.3.645'. [ 374.992108][ T8016] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 375.002754][ T8016] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 375.435844][ T8016] BTRFS info (device loop4): rebuilding free space tree [ 375.484577][ T8016] BTRFS info (device loop4): disabling free space tree [ 375.492572][ T8016] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 375.502569][ T8016] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 375.512315][ T5857] usb 2-1: USB disconnect, device number 8 [ 375.526099][ T8016] BTRFS info (device loop4): turning off barriers [ 375.533187][ T8016] BTRFS info (device loop4): force clearing of disk cache [ 375.540758][ T8016] BTRFS info (device loop4): use zstd compression, level 3 [ 375.671261][ T30] audit: type=1800 audit(1768397048.420:110): pid=8016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.643" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 375.963148][ T8043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.647'. [ 376.012326][ T5808] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 377.291296][ T8058] loop2: detected capacity change from 0 to 4096 [ 377.432312][ T8064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.656'. [ 377.663202][ T8058] ntfs3(loop2): failed to convert "0000" to iso8859-6 [ 377.716054][ T8058] ntfs3(loop2): failed to convert "0030" to iso8859-6 [ 377.734329][ T8058] ntfs3(loop2): failed to convert name for inode 1e. [ 377.741639][ T8058] ntfs3(loop2): failed to convert "0032" to iso8859-6 [ 377.776123][ T8058] ntfs3(loop2): ino=1f, mi_enum_attr [ 377.781900][ T8058] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 378.790024][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 378.966735][ T8081] input: syz0 as /devices/virtual/input/input7 [ 379.491672][ T8085] netlink: 24 bytes leftover after parsing attributes in process `syz.2.660'. [ 379.504050][ T8079] loop4: detected capacity change from 0 to 32768 [ 379.513634][ T8079] BTRFS warning: excessive commit interval 2147483648, use with care [ 379.522232][ T8079] btrfs: Deprecated parameter 'usebackuproot' [ 379.528637][ T8079] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 379.547933][ T8079] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.661 (8079) [ 379.563521][ T8085] netlink: 24 bytes leftover after parsing attributes in process `syz.2.660'. [ 379.574589][ T8079] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 379.585940][ T8079] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 379.868866][ T4634] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 379.882764][ T8079] BTRFS error (device loop4): failed to load root extent [ 379.890211][ T8079] BTRFS warning (device loop4): try to load backup roots slot 1 [ 379.899294][ T5084] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 379.913177][ T8079] BTRFS warning (device loop4): couldn't read tree root [ 379.921065][ T8079] BTRFS warning (device loop4): try to load backup roots slot 2 [ 379.929927][ T4310] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 379.940869][ T8079] BTRFS warning (device loop4): couldn't read tree root [ 379.953859][ T8079] BTRFS warning (device loop4): try to load backup roots slot 3 [ 380.015578][ T8079] BTRFS info (device loop4): rebuilding free space tree [ 380.055719][ T8079] BTRFS info (device loop4): checking UUID tree [ 380.067387][ T8079] BTRFS info (device loop4): enabling ssd optimizations [ 380.074867][ T8079] BTRFS info (device loop4): using spread ssd allocation scheme [ 380.083113][ T8079] BTRFS info (device loop4): turning on sync discard [ 380.090209][ T8079] BTRFS info (device loop4): enabling free space tree [ 380.097138][ T8079] BTRFS info (device loop4): force clearing of disk cache [ 380.104503][ T8079] BTRFS info (device loop4): enabling auto defrag [ 380.111226][ T8079] BTRFS info (device loop4): trying to use backup root at mount time [ 380.276368][ T5857] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 380.403801][ T5808] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 380.470069][ T5857] usb 2-1: Using ep0 maxpacket: 32 [ 380.493635][ T5857] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 380.506053][ T5857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 380.517297][ T5857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 380.528127][ T5857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 380.539578][ T5857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 380.560371][ T5857] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 380.574501][ T5857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.584272][ T5857] usb 2-1: Product: syz [ 380.588839][ T5857] usb 2-1: Manufacturer: syz [ 380.593591][ T5857] usb 2-1: SerialNumber: syz [ 380.642392][ T5857] usb 2-1: config 0 descriptor?? [ 381.298673][ T5857] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 381.305173][ T5857] input input8: Device does not respond to id packet M [ 381.442420][ T5857] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 381.449009][ T5857] input input8: Device does not respond to id packet P [ 381.513219][ T5857] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 381.519805][ T5857] input input8: Device does not respond to id packet B [ 381.757922][ T5857] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 381.860797][ T5857] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 381.917228][ T5857] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 381.925434][ T5857] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 381.935547][ T8111] loop0: detected capacity change from 0 to 40427 [ 381.952400][ T8111] F2FS-fs (loop0): invalid crc value [ 381.957588][ T5857] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input8 [ 381.979260][ T8114] block nbd4: server does not support multiple connections per device. [ 382.017552][ T8112] block nbd4: shutting down sockets [ 382.281616][ T5857] usb 2-1: USB disconnect, device number 9 [ 382.416839][ T8111] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 382.433171][ T8111] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 382.512738][ T30] audit: type=1800 audit(1768397055.280:111): pid=8111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.668" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 382.684326][ T5810] syz-executor: attempt to access beyond end of device [ 382.684326][ T5810] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 382.698833][ T5810] CPU: 0 UID: 0 PID: 5810 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(none) [ 382.698987][ T5810] Tainted: [L]=SOFTLOCKUP [ 382.699033][ T5810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 382.699104][ T5810] Call Trace: [ 382.699146][ T5810] [ 382.699188][ T5810] __dump_stack+0x26/0x30 [ 382.699343][ T5810] dump_stack_lvl+0x14c/0x1c0 [ 382.699486][ T5810] dump_stack+0x1e/0x25 [ 382.699616][ T5810] f2fs_handle_critical_error+0xa6f/0xc20 [ 382.699810][ T5810] f2fs_stop_checkpoint+0x65/0x80 [ 382.699974][ T5810] f2fs_write_end_io+0x101c/0x1bc0 [ 382.700176][ T5810] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 382.700422][ T5810] bio_endio+0xf96/0x10f0 [ 382.700558][ T5810] submit_bio_noacct+0x2009/0x2930 [ 382.700741][ T5810] submit_bio+0x57c/0x630 [ 382.700883][ T5810] f2fs_submit_write_bio+0x92/0x250 [ 382.701040][ T5810] __submit_merged_bio+0x16f/0x6a0 [ 382.701188][ T5810] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 382.701366][ T5810] __submit_merged_write_cond+0x44a/0x990 [ 382.701528][ T5810] f2fs_write_data_pages+0x4cf3/0x57a0 [ 382.701813][ T5810] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 382.701963][ T5810] ? kmsan_get_metadata+0xfb/0x160 [ 382.702119][ T5810] ? folio_batch_move_lru+0x6a6/0x6e0 [ 382.702288][ T5810] ? __msan_warning+0x1b/0x30 [ 382.702430][ T5810] ? filter_irq_stacks+0x13f/0x190 [ 382.702583][ T5810] ? stack_depot_save_flags+0x35/0x790 [ 382.702736][ T5810] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 382.702895][ T5810] ? kmsan_get_metadata+0xfb/0x160 [ 382.703051][ T5810] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 382.703206][ T5810] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 382.703365][ T5810] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 382.703514][ T5810] do_writepages+0x3f2/0x860 [ 382.703634][ T5810] ? _raw_spin_unlock+0x30/0x50 [ 382.703764][ T5810] ? wbc_attach_and_unlock_inode+0x131/0x680 [ 382.703953][ T5810] filemap_fdatawrite+0x207/0x260 [ 382.704146][ T5810] f2fs_sync_dirty_inodes+0x2ab/0x9e0 [ 382.704292][ T5810] f2fs_write_checkpoint+0x10a4/0x3730 [ 382.704478][ T5810] ? stack_depot_save_flags+0x35/0x790 [ 382.704659][ T5810] kill_f2fs_super+0x321/0x9a0 [ 382.704805][ T5810] ? __pfx_kill_f2fs_super+0x10/0x10 [ 382.704922][ T5810] deactivate_locked_super+0xcb/0x3c0 [ 382.705063][ T5810] deactivate_super+0x12f/0x140 [ 382.705187][ T5810] cleanup_mnt+0x7a2/0x820 [ 382.705313][ T5810] ? __pfx___cleanup_mnt+0x10/0x10 [ 382.705423][ T5810] __cleanup_mnt+0x22/0x30 [ 382.705524][ T5810] task_work_run+0x209/0x2b0 [ 382.705670][ T5810] exit_to_user_mode_loop+0x301/0x1b70 [ 382.705823][ T5810] ? user_path_at+0x241/0x3e0 [ 382.705957][ T5810] ? __x64_sys_umount+0x1dc/0x250 [ 382.706112][ T5810] do_syscall_64+0x1e1/0xf80 [ 382.706283][ T5810] ? clear_bhb_loop+0x40/0x90 [ 382.706407][ T5810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.706529][ T5810] RIP: 0033:0x7fa957f90a77 [ 382.706622][ T5810] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 382.706723][ T5810] RSP: 002b:00007ffd0f4be328 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 382.706831][ T5810] RAX: 0000000000000000 RBX: 00007fa958013d7d RCX: 00007fa957f90a77 [ 382.706918][ T5810] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd0f4be3e0 [ 382.706989][ T5810] RBP: 00007ffd0f4be3e0 R08: 0000000000000000 R09: 0000000000000000 [ 382.707065][ T5810] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd0f4bf470 [ 382.707141][ T5810] R13: 00007fa958013d7d R14: 000000000005d66b R15: 00007ffd0f4bf4b0 [ 382.707254][ T5810] [ 382.707306][ T5810] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 383.520188][ T8131] tls_set_device_offload: netdev not found [ 383.544075][ T8132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.672'. [ 383.844436][ T8134] loop2: detected capacity change from 0 to 256 [ 383.862509][ T8137] netlink: 'syz.4.677': attribute type 12 has an invalid length. [ 383.871535][ T8137] netlink: 'syz.4.677': attribute type 29 has an invalid length. [ 383.880454][ T8137] netlink: 148 bytes leftover after parsing attributes in process `syz.4.677'. [ 383.889664][ T8137] netlink: 'syz.4.677': attribute type 1 has an invalid length. [ 383.995560][ T30] audit: type=1800 audit(1768397056.750:112): pid=8134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.676" name="file1" dev="loop2" ino=1048610 res=0 errno=0 [ 384.016981][ T30] audit: type=1800 audit(1768397056.760:113): pid=8134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.676" name="file1" dev="loop2" ino=1048610 res=0 errno=0 [ 384.223728][ T8139] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 384.235119][ T8139] FAT-fs (loop2): Filesystem has been set read-only [ 384.242178][ T8139] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 384.438968][ T8139] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 384.447058][ T8139] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 385.567878][ T8150] netlink: 'syz.1.681': attribute type 3 has an invalid length. [ 387.304246][ T8154] loop1: detected capacity change from 0 to 65536 [ 387.352624][ T8154] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 387.736661][ T8154] XFS (loop1): Ending clean mount [ 387.928069][ T8179] loop4: detected capacity change from 0 to 512 [ 387.948092][ T5803] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 388.034037][ T8174] loop2: detected capacity change from 0 to 32768 [ 388.290915][ T113] ERROR: (device loop2): diFree: numfree > numinos [ 388.290915][ T113] [ 388.391931][ T8179] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.405086][ T8179] ext4 filesystem being mounted at /148/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 388.694950][ T8181] loop0: detected capacity change from 0 to 32768 [ 388.734778][ T8181] JBD2: Ignoring recovery information on journal [ 388.744948][ T8181] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75 [ 388.756793][ T8181] JBD2: bad block at offset 32 [ 388.800372][ T8181] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 388.830717][ T30] audit: type=1800 audit(1768397061.600:114): pid=8179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.689" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 389.432677][ T5808] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.460424][ T5810] ocfs2: Unmounting device (7,0) on (node local) [ 390.638547][ T8204] netlink: 'syz.4.699': attribute type 4 has an invalid length. [ 390.740705][ T8204] netlink: 'syz.4.699': attribute type 4 has an invalid length. [ 391.428330][ T5857] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 391.461782][ T8214] loop4: detected capacity change from 0 to 256 [ 391.638303][ T5857] usb 3-1: Using ep0 maxpacket: 32 [ 391.684986][ T5857] usb 3-1: config 0 has an invalid interface number: 16 but max is 0 [ 391.694041][ T5857] usb 3-1: config 0 has no interface number 0 [ 391.701505][ T5857] usb 3-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 391.711896][ T5857] usb 3-1: config 0 interface 16 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 391.824024][ T5857] usb 3-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 391.837324][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.847137][ T5857] usb 3-1: Product: syz [ 391.851542][ T5857] usb 3-1: Manufacturer: syz [ 391.856290][ T5857] usb 3-1: SerialNumber: syz [ 391.902461][ T8210] loop3: detected capacity change from 0 to 8192 [ 391.959828][ T5857] usb 3-1: config 0 descriptor?? [ 391.967467][ T8207] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 392.021211][ T5857] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 392.037247][ T5857] usb 3-1: invalid MIDI in EP 0 [ 392.097400][ T5974] udevd[5974]: failed to send result of seq 12804 to main daemon: Connection refused [ 392.312044][ T5857] snd-usb-audio 3-1:0.16: probe with driver snd-usb-audio failed with error -22 [ 392.391096][ T5857] usb 3-1: USB disconnect, device number 4 [ 393.502256][ T8228] loop4: detected capacity change from 0 to 40427 [ 393.512236][ T8228] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 393.520298][ T8228] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 393.775159][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 393.794418][ T8228] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 393.811870][ T8228] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 393.819176][ T8228] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 393.969450][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 394.007587][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 394.014948][ T5808] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 394.019496][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 394.025931][ T5808] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 394.035163][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.051425][ T5808] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 394.059525][ T5808] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 394.067237][ T5808] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 394.075072][ T5808] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 394.086434][ T5808] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 394.107032][ T24] usb 3-1: config 0 descriptor?? [ 394.126286][ T24] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 395.009304][ T4634] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.210806][ T4634] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.402908][ T4634] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.439814][ T24] gspca_vc032x: reg_w err -71 [ 395.444874][ T24] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 395.469213][ T24] usb 3-1: USB disconnect, device number 5 [ 395.517562][ T4634] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.756632][ T4634] bridge_slave_1: left allmulticast mode [ 395.763892][ T4634] bridge_slave_1: left promiscuous mode [ 395.770762][ T4634] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.784456][ T4634] bridge_slave_0: left allmulticast mode [ 395.790891][ T4634] bridge_slave_0: left promiscuous mode [ 395.797380][ T4634] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.864060][ T8264] loop1: detected capacity change from 0 to 512 [ 395.903258][ T8264] EXT4-fs: Ignoring removed i_version option [ 395.909745][ T8264] EXT4-fs: Ignoring removed nomblk_io_submit option [ 396.099365][ T8264] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2857: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 396.113048][ T8264] EXT4-fs (loop1): 1 truncate cleaned up [ 396.263954][ T8264] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.346259][ T4634] bond2 (unregistering): (slave geneve2): Releasing active interface [ 396.449554][ T4634] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 396.479053][ T4634] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 396.503025][ T4634] bond0 (unregistering): Released all slaves [ 396.557231][ T4634] bond1 (unregistering): (slave lo): Releasing backup interface [ 396.590979][ T4634] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 396.626110][ T4634] bond1 (unregistering): Released all slaves [ 396.656829][ T4634] bond2 (unregistering): Released all slaves [ 396.921758][ T5803] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.170099][ T4634] hsr_slave_0: left promiscuous mode [ 397.178661][ T4634] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.186191][ T4634] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.220371][ T4634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.228050][ T4634] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.298390][ T4634] veth1_macvtap: left promiscuous mode [ 397.304275][ T4634] veth0_macvtap: left promiscuous mode [ 397.311680][ T4634] veth1_vlan: left promiscuous mode [ 397.317186][ T4634] veth0_vlan: left promiscuous mode [ 397.415950][ T8281] netlink: 104 bytes leftover after parsing attributes in process `syz.1.727'. [ 397.935507][ T5805] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 397.973947][ T5805] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 398.017444][ T5805] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 398.017661][ T4634] team0 (unregistering): Port device team_slave_1 removed [ 398.037031][ T4634] team0 (unregistering): Port device team_slave_0 removed [ 398.142245][ T5805] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 398.153352][ T5805] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 398.378384][ T8288] vlan2: entered allmulticast mode [ 398.387132][ T8288] dummy0: entered allmulticast mode [ 399.234196][ T8286] chnl_net:caif_netlink_parms(): no params data found [ 399.260770][ T8286] ===================================================== [ 399.269192][ T8286] BUG: KMSAN: kernel-infoleak-after-free in _copy_to_user+0xcc/0x120 [ 399.277424][ T8286] _copy_to_user+0xcc/0x120 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 399.282383][ T8286] copy_siginfo_to_user+0x3f/0x140 [ 399.288858][ T8286] x64_setup_rt_frame+0x1392/0x2590 [ 399.294252][ T8286] arch_do_signal_or_restart+0x63c/0xc00 [ 399.302870][ T8286] exit_to_user_mode_loop+0x118/0x1b70 [ 399.309343][ T8286] do_syscall_64+0x1e1/0xf80 [ 399.314111][ T8286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.321144][ T8286] [ 399.323530][ T8286] Uninit was stored to memory at: [ 399.329199][ T8286] __dequeue_signal+0x4d6/0x970 [ 399.334205][ T8286] dequeue_signal+0x1c0/0x840 [ 399.340298][ T8286] get_signal+0xbf6/0x2a20 [ 399.344834][ T8286] arch_do_signal_or_restart+0x53/0xc00 [ 399.350940][ T8286] exit_to_user_mode_loop+0x118/0x1b70 [ 399.356557][ T8286] do_syscall_64+0x1e1/0xf80 [ 399.361531][ T8286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.367561][ T8286] [ 399.370031][ T8286] Uninit was created at: [ 399.374434][ T8286] kmem_cache_free+0x2c9/0x13c0 [ 399.379458][ T8286] __sigqueue_free+0x23a/0x270 [ 399.384364][ T8286] __dequeue_signal+0x66b/0x970 [ 399.389442][ T8286] dequeue_signal+0x1c0/0x840 [ 399.394272][ T8286] get_signal+0xbf6/0x2a20 [ 399.398937][ T8286] arch_do_signal_or_restart+0x53/0xc00 [ 399.406971][ T8286] exit_to_user_mode_loop+0x118/0x1b70 [ 399.413384][ T8286] do_syscall_64+0x1e1/0xf80 [ 399.418712][ T8286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.424997][ T8286] [ 399.427369][ T8286] Bytes 12-15 of 48 are uninitialized [ 399.432927][ T8286] Memory access of size 48 starts at ffff88805b1e7d10 [ 399.439893][ T8286] Data copied to user address 00007ffcbc6ffcb0 [ 399.446126][ T8286] [ 399.448734][ T8286] CPU: 1 UID: 0 PID: 8286 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(none) [ 399.460004][ T8286] Tainted: [L]=SOFTLOCKUP [ 399.464399][ T8286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 399.474769][ T8286] ===================================================== [ 399.481838][ T8286] Disabling lock debugging due to kernel taint [ 399.488265][ T8286] Kernel panic - not syncing: kmsan.panic set ... [ 399.494784][ T8286] CPU: 1 UID: 0 PID: 8286 Comm: syz-executor Tainted: G B L syzkaller #0 PREEMPT(none) [ 399.505987][ T8286] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 399.511604][ T8286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 399.521758][ T8286] Call Trace: [ 399.525114][ T8286] [ 399.528114][ T8286] __dump_stack+0x26/0x30 [ 399.532587][ T8286] dump_stack_lvl+0x50/0x1c0 [ 399.537313][ T8286] ? dump_stack+0x12/0x25 [ 399.541789][ T8286] dump_stack+0x1e/0x25 [ 399.546101][ T8286] vpanic+0x435/0xd30 [ 399.550248][ T8286] panic+0x15d/0x160 [ 399.554345][ T8286] kmsan_report+0x31c/0x320 [ 399.559016][ T8286] ? kmsan_internal_check_memory+0x16c/0x230 [ 399.565154][ T8286] ? kmsan_copy_to_user+0xf1/0x190 [ 399.570426][ T8286] ? _copy_to_user+0xcc/0x120 [ 399.575244][ T8286] ? copy_siginfo_to_user+0x3f/0x140 [ 399.580665][ T8286] ? x64_setup_rt_frame+0x1392/0x2590 [ 399.586201][ T8286] ? arch_do_signal_or_restart+0x63c/0xc00 [ 399.592177][ T8286] ? exit_to_user_mode_loop+0x118/0x1b70 [ 399.597986][ T8286] ? do_syscall_64+0x1e1/0xf80 [ 399.602914][ T8286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.609127][ T8286] ? kmsan_get_metadata+0xfb/0x160 [ 399.614417][ T8286] ? kmsan_internal_check_memory+0x9c/0x230 [ 399.620515][ T8286] ? copy_fpstate_to_sigframe+0x126f/0x13d0 [ 399.626591][ T8286] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 399.632579][ T8286] ? kmsan_get_metadata+0xfb/0x160 [ 399.637858][ T8286] ? kmsan_get_metadata+0xfb/0x160 [ 399.643151][ T8286] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 399.649144][ T8286] kmsan_internal_check_memory+0x16c/0x230 [ 399.655146][ T8286] kmsan_copy_to_user+0xf1/0x190 [ 399.660255][ T8286] _copy_to_user+0xcc/0x120 [ 399.664942][ T8286] copy_siginfo_to_user+0x3f/0x140 [ 399.670203][ T8286] x64_setup_rt_frame+0x1392/0x2590 [ 399.675626][ T8286] arch_do_signal_or_restart+0x63c/0xc00 [ 399.681475][ T8286] exit_to_user_mode_loop+0x118/0x1b70 [ 399.687165][ T8286] do_syscall_64+0x1e1/0xf80 [ 399.691917][ T8286] ? clear_bhb_loop+0x40/0x90 [ 399.696714][ T8286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.702720][ T8286] RIP: 0033:0x7fa660b915dc [ 399.707213][ T8286] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 399.726946][ T8286] RSP: 002b:00007ffcbc700130 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 399.735482][ T8286] RAX: 0000000000000038 RBX: 00007fa661914620 RCX: 00007fa660b915dc [ 399.743544][ T8286] RDX: 0000000000000038 RSI: 00007fa661914670 RDI: 0000000000000003 [ 399.751597][ T8286] RBP: 0000000000000000 R08: 00007ffcbc700184 R09: 000000000000000c [ 399.759652][ T8286] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 399.767698][ T8286] R13: 0000000000000000 R14: 00007fa661914670 R15: 0000000000000000 [ 399.775791][ T8286] [ 399.779347][ T8286] Kernel Offset: disabled [ 399.783745][ T8286] Rebooting in 86400 seconds..