last executing test programs: 17m42.113979733s ago: executing program 32 (id=422): ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000002c0)='./bus\x00', 0x1800840, &(0x7f0000000180)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c756e695f786c6174653d302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c757466383d302c756e695f786c6174653d312c696f636861727365743d69736f383835392d31342c636f6465706167653d3935302c696f636861727365743d6d616363656e746575726f2c757466383d302c73686f72746e616d653d6c6f7765722c00eb35cd69a309a1cd59f889d47f6ece19f2f93c7c42fee6d42a74a07aedee8d38362cec0a8a369a2bd5754fa3f8c0626979e68e9ae4cf36"], 0x1, 0x367, &(0x7f0000000840)="$eJzs3U9oHFUYAPBvO0k2KdTkIBQFYfQmaOgfPOgppaRQ3IvKUvXkYlOVbCxkcTE9dBsv4lHwqCcv4kEPHnoWQRFvHrxaQariQXsrWH2yu7PZ2ewmpsK2Fn+/w/Lle++b995mkp1Msi8vrcT6+dm4cOPG9Zifr8TMyumVuFmJpchi4EqMm5uQAwDuDTdTit9T3wFLKlOeEgAwZb3X/1eOlDJvfblf/+TVHwDuecXP/wv79Znfq+HiVKYEAEzZ2P3/R0aa50Z/1T9T+qsAAOBe9dwLLz59qhbxbJ7PR2y83a636/HUsP3UhXgtmrEWx2IxbkX0LxS6D5Xe45mztdVjeZ534qelqHcr2vWIjU673r9SOJX16qtxPBZjqagvrjZSStmZz2qrx/OeiLjS6Y0fG5V2fTYOF+N/fzjW4kTkcf9YfcTZ2uqJvDhAfWNQ34nYHt636M5/ORbj25fjYjTj/MK5SGlwWVNbvXw8z0+n2kh9u16N8zvPwp53QAAAAAAAAAAAAAAAAAAAAAAA4F9Zzncs7ex/k4b79ywvT2jv7Y/Try/2B9ru7w+UqilS+u3Nx+vvZDGyP9Du/Xna9Zk4dHeXDgAAAAAAAAAAAAAAAAAAAP8Zra25aDSba5utrUvr5aCz2do6FBHdzOtff/LFQoz3+Ydgphij1JQXqUvrjZQNOqdspE8RZN3BB5mPr+7MuNynurOKidOo7t3UbB55+Mf3h5mHssGR/xr2yWLyArNd0ygHG/f1p3Q7T9Slk0VwYnKfwTKb11JKk4/zZ0pp/MhRiZi5/U/cSJDvzqRu8NX1Vx842Tr6RC/zeep79LHFc9fe+/CX9UazO3Jvyh/NbbZupfVG8fHkk23vICudP5XoB5XymTCzX/n2aKaRfffr8w+++83BRk/lzBsT+mT95Xy62dqqFF8pvaZK/7Tp5nZVLTTPZhG7jjM74eSfQnD0g5XG1cs//HzQqtI3CRt1AAAAAAAAAAAAAAAAAADAHVF6r3iheLPv7H5VTz4z/ZkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ0z/P//pWB7LHOQ4I9OjDdV1zZbEXN3e5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzP/R0AAP//pSBp3g==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x147040, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x5, 0x11, r0, 0x0) madvise(&(0x7f00007fe000/0x800000)=nil, 0x800000, 0x19) 15m57.02302265s ago: executing program 33 (id=770): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f00000016c0)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000003c0)={r2, 0x0, 0x20}, 0xc) 14m59.910181283s ago: executing program 34 (id=919): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x6d89, 0x400, 0x40000, 0x105}, &(0x7f0000000400)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x2001, 0x1, {0x3}}) io_uring_enter(r1, 0x8aa, 0x0, 0x0, 0x0, 0x0) 10m24.319010078s ago: executing program 6 (id=1781): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0) getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, 0x0, &(0x7f00000000c0)) 10m23.701429163s ago: executing program 6 (id=1783): syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x14444, &(0x7f0000000280)=ANY=[@ANYBLOB="696f636861727365743d6b6f69382d72752c766f6c756d653d3030303030303030303030300000000063686f723d30303030303030303030303030303030303030342c6e6f6164696e6963622c6769643d69676e6f72652c7569643d6967ee6f7200006769643dc7865530221d5cf1ffa33f314577d414dd0f02989f344aa1daf1517b816480770a92f1eaeab3d78957fc83df545faf189820845d1a3ae48728ee6ed8684b4f3acff28b7d51848813c91e8e6278a3cfa72eec120ebbc7baaaf78c062300000000000000", @ANYRESDEC, @ANYRESDEC], 0xfe, 0xc17, &(0x7f0000001180)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 10m21.334640667s ago: executing program 6 (id=1789): mkdir(&(0x7f0000000200)='./file0\x00', 0x88) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 10m20.063751901s ago: executing program 6 (id=1793): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x40}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000780)=[{0x18, 0x29, 0x37, 'W'}], 0x18}}], 0x1, 0x4000000) 10m19.097171435s ago: executing program 6 (id=1796): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0xcd0a, 0x10100, 0xfffffffe, 0xfffffffd}, &(0x7f0000001240)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 10m16.998995966s ago: executing program 35 (id=1796): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0xcd0a, 0x10100, 0xfffffffe, 0xfffffffd}, &(0x7f0000001240)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 9m19.373224286s ago: executing program 5 (id=1964): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000006c0)=@v1={0x0, @adiantum, 0x4, @desc4}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0x400c6615, 0x0) 9m18.225472593s ago: executing program 1 (id=1967): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,allow_utime=000000000034,usefree,check=strict,dots,\x00'/70], 0x1, 0x1e9, &(0x7f00000002c0)="$eJzs2k1rVFcYB/Bz05SkCXkppS3Jpoe2i3ZzabIsXSSUBEoHFM0IKkhuyESHGWfC3FnMiItZu/IjuBaX7gTJF8h3cOEuCNFVVl7R0bwRFyrJCPn9NvOHPwPn4cDhWdydf+7frm3k6UbWDkNJEoYWQi/sJWE6DIUPeuHP3/9+ee/y1Wv/L5ZKS5diXF5cmZuPMU7+8vT63Ue/brXHrzyefDIStqdv7OzOP9/+aXtm5/XKrWoeq3lsNNsxi2vNZjtbq1fiejWvpTFerFeyvBKrjbzSOtJv1Jubm92YNdYnxjZblTyPWaMba5VubDdju9WN2c2s2ohpmsaJscCXKD/cK4qwW3y7Goqi+O5BGN8KE8/CVEi+j8kPC8mPq8nPvWRmtyimBn1UToX7P98OPeqjIbzodcqdcv+33y//V1r6K74zffCvV51O+Zv9fq7fx6P9SBh738+f2I+GP37r92+7fy+UjvWzYf30xwcAOHfSuO/E/S5NP9b306H98Nj+Nhxmh89sDD5T3r1Ty+r1SksQBGE/DPpl4iwcXPqgTwIAAAAAAAAAAMCnOIvPCQc9IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8HV7EwAA///n0Xgk") fchdir(r1) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f00000020c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) 9m18.06197056s ago: executing program 5 (id=1970): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x1, 0x2, 0x6, 0x1, 0xa8, 0x40, 0x3, 0x8, 0x1, 0x1, 0x78, 0x8, 0x9f, 0x5}, 0xe) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xe0ffffff00000000}}, 0x1c) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x4, 0x0) 9m16.990962215s ago: executing program 1 (id=1973): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r1 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f00000001c0)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f0000000200)}, 0x20) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 9m16.57779398s ago: executing program 5 (id=1975): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000050000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r0}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f0000000e00)=[{r0, 0xa000}], 0x1, &(0x7f0000000e80), 0x0, 0x0) 9m16.077610026s ago: executing program 1 (id=1977): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240)={'#! ', './file1/file0'}, 0x11) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) 9m15.780026624s ago: executing program 5 (id=1978): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x2210018, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000000dc0)="$eJzs3M1vG0UbAPBn13H65k0hoZSvlo9AQVQIkqYt0AMHQCBxKBISHOBoJaEqTQtqgkSrSKQcygkhJO6II/8CJ7ggxAmJK9xRpQr1QsvJaL27iZ3YTtPYcYt/P8ntM/vhmce7Y8/u2AlgaE1l/yQReyPi94iYyIutG0zl/12/tjJ349rKXBL1+tt/JY3t/r62MlduWu433lyIJA62qXfpwsUztcXFhfNFeWb57EczSxcuPnf6bO3UwqmFc0dPnDh+bPbFF44+35M8xyMtojfe++rNk1+05L8hjx6Z6rbyqXq9x9UN1l1N8cgA28H2VIrjVW30/4moNB29iXj9s7XCpwNqINA39Xq9Pt559Wod+A9LorWsy8OwKD/oy+vfdtfBL/dt9DF4V1/JL4CyvK8Xj3zNyNodg+qG69temoqId1f/+SZ7RH/uQwAAtPghG/88m412Vuayscf6+CON+5u2u7uYG5qMiHsiYl9E3BvnYn9E3BfR2PaBiHhwm/U3TZI0hpmbxz/plVtO7iZk47+Xirmt1vFfOfqLyUqjdCEvRDV5//TiwpHiNTkc1T1ZebZLHT++9tuXndY1j/+yR1Z/ORYs2nFlZE/rPvO15dqtZ9zq6qWIAyPt8k/WZgKSiHgoIg60e4J06zpOP/Pdw53WbZ1/Fz2YaKp/G/F0fvxXY0P+paT7/OTM/2Jx4chMeVZs9suvl9/qVP+O8u+B7Pj/v+35v5b/ZNI8X7u0/Tou//F5x2uaqWoRbOP8X60t10aTdxrxaLHsk9ry8vnZiNHkZN7o5uVH1/cty+X2Wf6HD7Xv//ti/ZU4GBHZSfxIRDwaEY8Vx+7xiHgiIg51yf/nV5/8YOOysTL/2+D4z2/r+K8Ho9G6JG2zTRZUzvz0fUulk+thkf+N7u9/xxvR4WLJzbz/bW5F+2Cnrx8AAADcCdKI2BtJOr0Wp+n0dP4d/v351Hfm43Pz+W8EJqOalne6Jpruh84Wl/V5+VJE5F8tKNcfi7Rx3/jrylijPD334eL8QDMHxjv0/8yflUG3Dug7P9iC4aX/w/Dq2v+ru9cOYPdt6v9d+/yevrYF2F1tPv/HBtEOYPe1G//7ez8wHDb0f9N+METc/4fhpf/D8NL/YSgtjcXWP5LvGpTPdIu7bxVMROy0hYMJonpbNKNvQaR9r2K0v6dW34LkDmzzpmBw70kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC99G8AAAD//1KFzjw=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42900, 0xc8) getdents64(r0, &(0x7f0000001f80)=""/4102, 0x1006) 9m15.172239453s ago: executing program 1 (id=1982): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x120c40a, &(0x7f0000000a00)={[{@noblock_validity}, {@dioread_lock}, {@nobh}, {@usrjquota}, {@inlinecrypt}, {@usrjquota, 0x2e}, {@sb={'sb', 0x3d, 0x7}}, {@nodiscard}, {@jqfmt_vfsv0}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@test_dummy_encryption}], [], 0x2c}, 0x81, 0x463, &(0x7f0000000480)="$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") mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x949442, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x205) 9m14.159496643s ago: executing program 5 (id=1985): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000a40)={&(0x7f0000000140)=[{0x18, 0x4000, 0x1, &(0x7f00000001c0)='\x00'}, {0x2, 0x4000, 0x0, 0x0}], 0x2}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 9m13.511728489s ago: executing program 1 (id=1987): r0 = io_uring_setup(0x7d1, &(0x7f0000000580)={0x0, 0xddf9, 0x2, 0xfffffffe, 0x183}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) close_range(r0, r0, 0x0) 9m12.351072521s ago: executing program 5 (id=1991): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x10, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ppoll(&(0x7f00000000c0)=[{r0, 0x8}], 0x1, 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f00000009c0)='./file0\x00', 0x0, 0xa6029, 0x0) 9m11.946322953s ago: executing program 1 (id=1994): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) io_setup(0x8, &(0x7f0000000180)=0x0) read$FUSE(r0, &(0x7f0000003140)={0x2020, 0x0, 0x0}, 0x2020) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x2, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) write$FUSE_GETXATTR(r0, &(0x7f00000002c0)={0x18, 0x0, r2, {0x2}}, 0x18) 9m9.510676523s ago: executing program 36 (id=1991): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x10, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ppoll(&(0x7f00000000c0)=[{r0, 0x8}], 0x1, 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f00000009c0)='./file0\x00', 0x0, 0xa6029, 0x0) 9m9.262878702s ago: executing program 37 (id=1994): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) io_setup(0x8, &(0x7f0000000180)=0x0) read$FUSE(r0, &(0x7f0000003140)={0x2020, 0x0, 0x0}, 0x2020) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x2, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) write$FUSE_GETXATTR(r0, &(0x7f00000002c0)={0x18, 0x0, r2, {0x2}}, 0x18) 6m8.525889615s ago: executing program 9 (id=2494): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x1, 0x0, 0x0, 0x0, 0x1}, [@mark={0xc, 0x15, {0x350759, 0x81}}]}, 0xc4}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}}, 0xb8}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0) 6m7.74067566s ago: executing program 9 (id=2498): syz_mount_image$ext4(&(0x7f0000000d00)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x200040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@barrier_val={'barrier', 0x3d, 0xde2}}]}, 0xfd, 0x27b, &(0x7f0000002400)="$eJzs3T1oJFUcAPD/7Idxk0WiNoL4ASKigRA7wSY2CgEJQURQISJiJYkQE+yyVjYWWqsEBJsgWhktxSZck+PgqtxdilxzcBeuuHDFHcceu5MNyWaXcPsxe+z+fjDMm7z35v8mO/83y8LMBDCyJiNiNiLyETEVEcWISE42eDldJo82N0rbixHV6ge3k3q7dDvV6DcREZWIeCui0Khb2/pk/+7ue6/9sFp89fetj0tNUTJxsL/3/uGv89//Pffm2sXLN+eTmI3yqePqvVZHWUginulHsMdEUmhbtdMotG9CVha+/fNKLe+fjYhX6vlfjNzRJ/PjyhP/F+ONX9r1/enWpeezHCvQe9VqsXYNrFSBkZOLiHIkuemISMu53PR0+h3+an4899XyyjdTXy6vLn0x6JkK6JVyJHvv/jv2z0RT/t/Ip/kPDK9yxN6HC5vXauXDfHPtg4GMCeiD0onyC+mqlv9Tn62/Hi3zHxhmXeV/sT9jArLh+g+jS/7DEOgwd+U/jK5u8v/JPo0J6Lm/Wv3R9R+G2PFv9JWW1fIfRpf8hyH12/n31sp/GF0n8x8AGC3VsUHfgQwMyqDnHwAAAAAAAAAAAAAAAAAA4KyN0vZiY8kq5oWfIw7eiYhCq/j5+vuIG08bH7+T1JodS9JuXfn0pS530KU/enb3damjXk9d71X8zuy82J/9fnd6s+0/Z30polJrPFMonD3/kqPzr3NPn1Nf/LzLAI+o+amAb3+Ubfxm9zczDtj03sK53Yj/avPPTKv5JxfP1det559yD16D+PW9LncAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZh4GAAD//6TscHA=") mknod$loop(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x1) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x3, 0x0, &(0x7f0000000140)) creat(&(0x7f0000002080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x79) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 6m4.869620463s ago: executing program 9 (id=2503): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@local}, {@local}, 0x400, "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"}, 0x418, 0x7fffffff}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f0000000000)={&(0x7f00000006c0)={{@local, 0xf}, {@local, 0xff}, 0x400, "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"}, 0x418, 0xe5bb}) 6m3.822680679s ago: executing program 9 (id=2507): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000880)={[{@nodioread_nolock}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@nodioread_nolock}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x161090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) 6m2.737879757s ago: executing program 9 (id=2512): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x1) fchdir(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) 5m56.849248281s ago: executing program 9 (id=2535): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)=ANY=[@ANYBLOB='journal_async_commit,heartbeat=none,usrquota,barrier=000000000\x000000000007,heartbeat=none,nointr,\x00'], 0x1, 0x4703, &(0x7f0000004800)="$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") openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x1cb543, 0x8c) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 5m54.620949671s ago: executing program 38 (id=2535): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)=ANY=[@ANYBLOB='journal_async_commit,heartbeat=none,usrquota,barrier=000000000\x000000000007,heartbeat=none,nointr,\x00'], 0x1, 0x4703, &(0x7f0000004800)="$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") openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x1cb543, 0x8c) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 1m27.875368891s ago: executing program 3 (id=3395): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=@can={{0x2, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "771a06000000656b"}, 0x10}, 0x1, 0x0, 0x0, 0x20048010}, 0x48010) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/10, 0xa}, {0x0}], 0x2}, 0x5f}], 0x1, 0x2, 0x0) 1m27.361861645s ago: executing program 3 (id=3397): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0xdb2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20040800, &(0x7f0000000180)={0xa, 0x4e24, 0x8041, @ipv4={'\x00', '\xff\xff', @local}, 0x627bcafb}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4110, 0x41}, 0x7ffffffe}], 0x1, 0x40002000, 0x0) 1m26.509711248s ago: executing program 3 (id=3401): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setuid(0xee01) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000003c0)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x10000, 0x8000, 0xffff, 0x5, 0x2, 0x0, 0x0, 0x20, 0x80000001}}, 0x50) 1m25.832222543s ago: executing program 3 (id=3403): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000000)={[{@usrquota}, {@nojournal_checksum}, {@usrquota}, {@errors_remount}]}, 0x21, 0x4bd, &(0x7f00000006c0)="$eJzs3c9vVFsdAPDvvf1JKbQoCzUqiCgawkw7QENY4UZjCImRuHIBtR2apjOdpjNFWlmU/8FEElf6J7gwcWHCyr073bnBhQkq0Udf8hbzcu9MS1+Zgb7QN0M6n09ycu+5p8z3nLm55wxf6JwABtb5iNiOiNGIuB8RU+3rSbvErVbJfu7Vy8cLOy8fLyTRbN79T5K3Z9di35/JnGy/5nhE/PRHEb9I3oxb39xama9UyuvterFRXSvWN7euLFfnl8pL5dVSaW52bubG1eulIxvrueofXvxw+fbP/vynbzz/6/b3f5V1a7Ldtn8cR6k19JG9OJnhiLj9RQTrg6H2eEYPXO9wy/kApRHxpYi4kD//UzGU300A4DhrNqeiObW/DgAcd2meA0vSQjsXMBlpWii0cnhnYyKt1OqNyw9qG6uLrVzZdIykD5Yr5Zl2rnA6RpKsPpufv66XDtSvRsSZiPj12Im8XlioVRb7+cEHAAbYyQPr///HWus/AHDMjfe7AwBAz1n/AWDwWP8BYPBY/wFg8Fj/AWDwWP8BYPBY/wFgoPzkzp2sNHfa33+9+HBzY6X28Mpiub5SqG4sFBZq62uFpVptKf/Onuq7Xq9Sq63NXouNR8VGud4o1je37lVrG6uNe/n3et8rj/RkVADA25w59+zvSURs3zyRl9i3l4O1Go63tN8dAPpmqN8dAPrGbl8wuPwdH3jXfq1d/4vQ06PvC9Abl74q/w+DSv4fBpf8Pwwu+X8YXM1mYs9/ABgwcvyAf/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAz28yL0laaO8FPhlpWihEnIqI6RhJHixXyjMRcToi/jY2MpbVZ/vdaQDgPaX/SuKj9jaAFycPto4mH4/lx4j45W/v/ubRfKOxPptd/+/e9cbT9vVSzzsPABzC7jq9u47vevXy8cJu6WV/XvygtbloFnenXVotwzGcH8cj+3Ay8b+kXW9JImLoCOJvP4mIr3Qaf5LnRqbbO58ejJ/FPtXT+Oln4qd5W+uYvRdfPoK+wKB5ls0/tzo9f2mcz4+dn//xfIZ6f7vz384b81+6N/8NdZn/zh82xrW//Hi0W9uTiK8Nd4qf7MVPusS/eMj4//j6Ny90a2v+LuJSdI6/P1axUV0r1je3rixX55fKS+XVUmludm7mxtXrpWKeoy7uZqrf9O+bl093i5+Nf6JL/PzO35nsOv7vHHL8v//k/s+/9Zb43/t25/t/Nj92fv+zNfG7h4w/P/HHrtt3Z/EXu4z/Xff/8iHjP//n1uIhfxQA6IH65tbKfKVSXnfiZO9k95Peh9Kf7ifNqVZPP5T+HJ+Tfs5KQC+8fuj73RMAAAAAAAAAAAAAAKCbXvw6Ub/HCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwPH1aQAAAP//sHnUnw==") socket$inet_tcp(0x2, 0x1, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) listxattr(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) 1m24.485431906s ago: executing program 3 (id=3407): syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x1, 0x8a, &(0x7f0000000180)="$eJzszqENAkEUBNDhDKhrAEEH1wOlECQ4FISEimiFEugAgcUcYsGsxCy5vJf8n0zGzO11XaZPxksyVg7H026zLz9MUpdknmSRZNWX/FiXbvbp78/z9nut9wIAAL/rMtR5aDYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4A+9AwAA///rYCNS") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x25080, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x2000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e029a4c66810000000000d300e6d602090000000000000000000001", [0x204]}) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) 1m23.360828763s ago: executing program 3 (id=3412): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) 1m5.069963902s ago: executing program 39 (id=3412): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) 1m2.433656159s ago: executing program 8 (id=3449): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b, 0x200000534e8a}) 1m0.509952177s ago: executing program 8 (id=3453): creat(&(0x7f0000000000)='./file0\x00', 0xa3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r1, 0x708, 0x41e3, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 59.58608428s ago: executing program 8 (id=3456): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x1}}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r2, &(0x7f0000000080)=[{0x1e, 0x0, 0x0, 0xfd, @time, {}, {}, @result}], 0x1c) 58.458023351s ago: executing program 8 (id=3459): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$eJzs3M1rHOcZAPBnRquVbKtduZRS91KVUmwoXUsuMrUp1C4uvfRQaK8Fq/LKCK0/kFRcyTqskn8gX+dALoEkJiGH+OxLQnLNJbGvCTkETFCsBEJIFGY/pI2lleR4V6PIvx+8mvedd7TP8+ywO/PC7gbwxBrJ/qQRxyLiYhJRau5PI6JY7w1G1BrHra4sTX65sjSZxNravz5LIomIBytLk63HSprbI83BYES8/9ckfvb05rhzC4szE9VqZbY5Pjl/5frJuYXFP0xfmbhcuVy5Onb6T+Onxk+PnhnvWq1ffXTu9he/+fsnta9f/ebW58+/nMS5GGrOtdfRLSMxsv6ctCtExES3g+Wkr1lPe51JYYd/SnucFAAAHaVt93C/iFL0xcbNWyne/iDX5AAAAICuWOuLWAMAAAAOuMT6HwAAAA641ucAHqwsTbZavp9I2Fv3z0fEcKP+1WZrzBSiVt8ORn9EHH6QRPvXWpPGvz22kYj4+N6ZN7IWPfoe8nZqyxHxy63Of1Kvf7j+Le7N9acRMdqF+CMPjX9M9Z/rQvy86wfgyXTnfONCtvn6l67f/8QW17/CFteuHyLv61/r/m910/3fRv19He7//rnLGDdfefFGp7ms/j/f/tvrrZbFz7aPVdQjuL8c8avCVvUn6/UnHeq/uMsYpW9vVDrN5V3/2ksRx2Pr+luS7X+f6OTUdLUy2vi7ZYzl98Zf6xQ/7/qz83+4Q/2t33/qdP6v7zLGfy5ceHPTznsb3e3rTz8tJv+u94rNPf+fmJ+fHYsoJv/YvP/U9rm0jmk9Rlb/id9u//rfqv7sPaHWfB6ytcByc5uNn3oo5l9u3XyrUz6t9V+e5/9Sh/PfXv+7hc3n/5ldxvjdO8+d6DTXvv7NWha/tRYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJY0IoYiScvr/TQtlyOORMTP43BavTY3//upa/+7eimbixiO/nRquloZjYhSY5xk47F6f2N86qHxHyPiaES8UDpUH5cnr1Uv5V08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA645ExFAkaTki0ohYLaVpuZx3VgAAAEDXDeedAAAAANBz1v8AAABw8Fn/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0GNHf33nbhIRtbOH6i1TbM7155oZ0Gtp3gkAuenLOwEgN4W8EwBy84hrfLcLcAAlO8wPdpwZ6HouAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOxfx4/duZtERO3soXrLFJtz/blmBvRa2tZPcswD2Ht9200W9i4PYO95icOTyxof2GntP7hxTO37MwM9ywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/Weo3pK0HBHF5r5yOeInETEc/cnUdLUyGhE/jYgPS/0D2Xgs55wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADovrmFxZmJarUym3XSaHbW9/Sg09eM3MMQvekkjbxr+yWfg90ZeHanY/4bjxmiGPui0n3ayfNdCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvMwtLM5MVKuV2bm8MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyNrewODNRrVZme9jJu0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzXQAAAP//jAsGRw==") openat(0xffffffffffffff9c, 0x0, 0x6200, 0x2a) syz_usb_connect$hid(0x5, 0x3f, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=@known='trusted.overlay.impure\x00', &(0x7f0000000180)='\x00', 0x1, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 55.674617661s ago: executing program 8 (id=3464): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) shutdown(r2, 0x0) 49.144707602s ago: executing program 8 (id=3479): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r1, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff2f00000000000001"]) 46.647790577s ago: executing program 40 (id=3479): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r1, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff2f00000000000001"]) 10.139684002s ago: executing program 0 (id=3443): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$P9_RLERRORu(r0, &(0x7f0000003600)=ANY=[@ANYBLOB="90"], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r0, 0x0) 7.438023808s ago: executing program 2 (id=3582): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) r1 = syz_io_uring_setup(0x88e, &(0x7f00000003c0)={0x0, 0x304e, 0x0, 0x2, 0xdf}, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r1, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x4000000, 0x0, 0x3}) 6.664736911s ago: executing program 0 (id=3584): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x4, 0x7fffffff, 0x36, 0x0, 0x11}) r1 = syz_io_uring_setup(0x239, &(0x7f0000000980)={0x0, 0x0, 0x10100}, &(0x7f0000000300)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) 5.883903591s ago: executing program 0 (id=3587): r0 = socket(0x10, 0x80003, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)}], 0x1}}], 0x1, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) 5.872490622s ago: executing program 4 (id=3588): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) 5.589682691s ago: executing program 2 (id=3589): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fanotify_init(0xf00, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r1, 0x455, 0x40000008, r2, 0x0) fanotify_mark(r1, 0x41, 0x8000038, r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.158996169s ago: executing program 4 (id=3591): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xfbb6ed645798e374, 0x12) 5.010374068s ago: executing program 0 (id=3592): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x105, 0x0, 0x400000000000a, 0x4, 0x5, 0x2, 0xfffffffffffffffa, 0x80000000}, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) 4.602324254s ago: executing program 2 (id=3593): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x40, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f00000008c0)="84", 0x1}], 0x2}}], 0x1, 0x4404c880) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 4.517829285s ago: executing program 7 (id=3594): r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x77) r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x10) truncate(&(0x7f0000000000)='./bus\x00', 0x9471) lsetxattr$security_ima(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), &(0x7f0000000080)=@sha1={0x1, "df0ed20f9239fa7d648cf014ad4f16d302f796d1"}, 0x15, 0x1) dup3(r1, r0, 0x80000) finit_module(r1, 0x0, 0x0) 4.413823204s ago: executing program 4 (id=3595): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0x8010, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') syz_fuse_handle_req(r0, &(0x7f00000007c0)="a2e2a159075e75837324ab175a58f1f5800ae8a07763cd2d8bc6652904a07970a0af80b38c34708c1bb11cbab8f2382ac68467f71abf12b4adf620243dfebaceeaad8d7673e10b5a828f5d54fc3f81e04bce5a3a3a3b24d0927d7c29c7bfc031b2ddb33d76ad6609ed094845c149b16d46e07c79116dad6f2cd20650f3ee6f8bf2912d3a618219f033ce7bdf62e4e4ab3b8513deb1316b858bcdc1d42eca81ddb684d3fd6b28def22b4e556cdfbf155242b36fef20e3f8329f2be22a0a9b4fa8198140284edc8bca7e626a57beb5fba36d4870b60ee19ddcd8bedf5a660f7d2c6ed11eec46428cf7791a6990796090e473ba7a91c1e384dc43ea5b27ee50c0a6bb6eda84c68628300ab62d05cd4c303f2f3fe112ee6010262f671a2f9ee391974f20eddf984891420404708f6f2a3cae26f32a76e3cc2821347f9c3a45698b2e50033deb5363787d8a8e5b91c58f1e509f22255dda8a49678cb2bd751ded5207110c8291fe4c1fbce1d5c3d34e20a482fb39280aa61697a7b6b56372633211630cef287623eb7ba9dbbaa2a6bea801a5187e980d0f72bed914f8f3f46e57719c241dc8cfcb80ff170feb562d81863c11021f7a153805822e8862a3e55ba16791503e278dfe65b0327ab56782cca69958e069bfc64c8ffc3988dc5b5ea8af3eaf18c46773123f63688196c62fed1f423a7f838d8c247e1fb214febc6fb95e2602c9177148029c1d11f80feb224e31b5ab9686a16d5e5859069c30329c71bf55e06d35d3620712b05a2cdb960802143ac4eac665337c8c03a60131d61589ebfd6ce014143a22c3c81a1bd75440bb1c6d9bda38f3ad3f6103042deb2a1ffbdaa0c132417c2cbb4f0dbc8b37c918ce0ee2d212f9acf9f4cc79aa8246fec873c79044327cecb53e17a2b259d3701b649c5cd8e874e7423635a029a0fbdfe0a57876eb52a6f50bef1acc4169724cef34f038bd6a7f57030bef5092958b141ded42b7eeefb65df0c39e0f6f37d0a8652e0d0fae71ccb738fbacd5dc0480065a703c328cea0da4204865802f0704bcbd438c5a7a342ba218a47dc4ef36436af4fa6ffcf9bf5281f8b402714b01696b9c2ecfb069b53807922cfbcebd3dda39f6bd9ddace2dd7aef04aea22d7690787f1516d63c229ddece143a5ee89190c36fd188040a89608b3ab7508847dc06bc250761ad071265ba5d61ea6a00b0576fe43917cc22809b5bdb93467920ebb5af1f86c2c19cf0113536a8dcc763d24a66668fc5fa531f300d84541860f7eaef3d66ef2af76b7385cf2d0816738d732f60db684f0caaddc26603aa6aeb32ab7fb8ca470c4c9160e7803d095388259f326e869dd87f849c9ec11564f2aac3267595f623d92c5b32817c003065a46c6259b430b9740701b9e9a43db247756b096a727c40371e14a0b821ab392073f9427faf82b15b5297f97fdfb6d99a395d4da8d71ec7b3781ff183967b9fe3631f9aea44fc63d966001a7dcc606f7dc2d4973a45c059c57f6ba38ec9efb804723abb3c4652fa0901c7b879150fe21a70e701fdf3c241c5bbbc02c2395d72a95bb987b7cda7cae9d1c998898a4a8723bb8981af0984c74472859afab221b128d6e2e3eeef763b8c10d8605d4755a7d3d26a219bbaf697c362490f8583355d1452c11af85095f59ef1b57cb4c971494498254ae8637c9d2f28ca5e5cfd49f9ca9b3e116e21b887f1085fb588aa5be1fa3f50d90bd3fb678bf590a4376e60522c9d52f796621d22aced6f72f14cdff1aa90da09995b7a7a8f419598f86dc7910c4a0f6ac7687cc3d7a5d34f0008e09ce5f48a80774ea2d1b4e7293feee01065dea352b60efaa5e2e332670b5762a2b580da668ca560a7dd34c44d1cd5f14c1b2ccb832c979ffcd41cfe4e0c7dc0de66100762aaf6f82a8bcfb0a51a72aaaf47be59744b389d3369318547b12ad1c4ada9ce0bc02e619094b5f07d1d2902ad0a341f8f57354e756ea4e1655305e9b6d053465d736c6df48d01b843764f1b6b9006bc740af4fb8c7e9bddeba99ab03a85e55c2ed7c72d5807a296042b27023b5bb345587cbadc9c845951b965aa28908062eb76e3c07da87b599e0870fabf5328b96e119b4f7253b161ef14c0a1cbb278c314784234fd41481a1850f5422e44e6753803f96a74c3c9872a1f580f0c08328c4ee57f2391af89106916bacf3d0244251b83bcfefddc7b414983b8010445131091c9c84bf51e8f1f4e64e87767931859fd4cb040d62a1be4468e26c103a3839087d4fdaf13e033f2319ef62e2909feda0949e25a89a985de57aa14ea298439811ba71d124754e6e14176db47a671a810b958f6151ad569fab60afae999622acd18a6b9ad05984aee1094e41ce591bb428e0199c9bf680d9ed970cc8b5efd7600edce61feb73d423a57d0bdd2e832e3e19ee3e6a57ee841d96c2e9db571996f173cd707864fa3e106eeeca417cbe9b95755df65c336a9349c320e55b84067270b239fbd46360a1723aaeeaa53d718c6db842f70a2caf2d049df8515beb377998e9a82fc6cd701f2e241787c5548f5d2cdba504390ec29a081601e9f652b2f0c8375f49f80ea556870e1edbb16615671a07399502a6917cb6c7eb1662557594da93406d61bbb50a96d79df869488a4bfcd9ff2ac562bd7b7d9c580af0f1eb5fff36489b1210d6b6e6d079799050a8f52dcd3c1a617c83a4819485cce3dfa5c028277460e56bcf80a3e47d2d0ec35a49ee640454e5999d9b5392c1d02b4fb5ba1b2b5390891f44b27be33e3e3672a96bbdf7528f70f22207ed78208fb8fa795eca1fd6f02483603ae32568957a0527bcd7ea6841c45fbbe58d27c41f29dce9c3d0fb4c93bc3c7b3bafcefb84d7123e06de37f2e84a8d2b4a5e51f44796a9e6d0e22fa6bf6ae0ac295664dfabc27fa1f2aded7073dc9096b6b449ba71294e5c968be449e10c14957833e99e1195eb843d87a95113401e4abb74795b28f76d8ea198628c5ce4d7ba131d3cd63f3847a3dce85bd2d615aef74e7c37cd1de82accb20feb30f263e05a4f810f0805fec1152eb0b871178bf0d88bca7e0bfa89d5a1d9ff496ac1d9b364749868e20d435d102b5ffcf3786e480d8dc40bc7e93e49fb94526cb4de45239ddcbf6c8224b3bbefa35bb0c9793923b7a298f6858de0ceb6427d776924b3e541901c04e5d50a2015fa6960ae3842d1da00e543d4162e1128d48e625602111ee369c6967505ee82f79eecb014e92fb3bd552846dac439c7e99e15ba1d11d3be624fefdc5cd27619d724ead06d11165864cac0194eba02db1593667b5ee9d8d7cfa724a314fbeee7e9f20be9dba61476a7df3b53cefa959c5ef4efc0a42677a1bfbcf52263006569f9fb5adb5996889304beb0168e322b6fc03cc6918a99a485cd267294be92717787f88db4f06a00257a636683f8fe57b1b2dd650f016a2630466099e959bd619f3dbce138df6d676b2f1b3c847f4562b9f2eabe9f6a55342452a36562033032c895f86d52967940039e1b79177772159e1aeed9a44cdc8a0fda9d72116f16dd88c4e310b991cba0368ac324a1d1c8b4afe03d22ddc094a311527ee46371e3d9895a173892b63b9caeb936fc8767a154a43d13c940409d087465393967841037e333a69667498d04f5c64fc70f6b15ccef77a143c1c19294769348ef29aec8c02a98ed7dcfbc224893bc5ccee8c23dd7d8abbaed587d98e290b256ad37d8a60cd3a23c2be2a8efb3a2eb1e0dea6af9a94b39dc2b019ac37735bd5b238fc250b2cc626e2a360567293b3c81702c06e8e0ce0d13ddd696fc7e969ead4c04948eeadbee3987b622428870ebbbd9f511512aef40d51e6d94c345227e4d5813c3b88c0595db4591767f032c72cfdb3280eb5afe7ba5e49d44fa599a52202a811c75342acccba74bbbd7cd629aa51b7e0cf9ec7f62c32d7a7a6b7e05ab232c07ae1525c4db403a16562fdcb09f1789ac4caf2dd51dad83ed70fc5e398b79a37fac1a5c434798c393ba7ac1bf17fe2fbef465dfed25b01d008cfd734685e254ace47535e1eae101f2f904646f77788cc43fdddae8fe264fd3d2cd402cfc82f344eeb1c0cf76986a0241ad4b9fe5da9d87fb126df572b8f748f37bae15f2dafa6abce013807024ad9912b01cdb007d75724ac52cc75fc8ea881fdd3ef8e361248428f4d0cac019fcb97daa732675d9011bfe2a2a48cfdef92cdd99e3482ce0dd3df577ba24eb9bb178031d5749e12e64e645ee284d425c6cd02a1b05d152e5649ac5f263e1f7085ad407451fd3feb8a423807426e60832daa9b5e20714c3348e753c6d98293b43fc0ce8e2d6ad20e7a7ab4c10ce18af9ae0a56b8a532f5404798ddc7e78c2ce8aff1a66b0fffd5404901af1c1b97732213c0f7044899c5d8a109fd5d2eda3d13569afcb2d34fd09aa8426759825151f0cbfc2869c16b6ed5bdbfda71966340037b8060f6f7cfa63f90a5ae54355fde23fd9ab9f4a22b1d91e42219832f6a09c091f41d6f7717464b9ea667f88d08b22b4e56e2ca727af24f0a6243b0befc4b4dd98a6ab6870fa55b14ae7c100cd7c84ae717a525f3a257c2310dac10afecd85fbc0a11b903cce663acb48369fc2f300179c4b3c7a5314a505be2637f7bb8abc6c92713754574152c2116a82a5c071f5d5dff0d086dbbd814abd39b16b4f151f8fe9fdeb3e52f3cf9c29a0c6665dd9ff5ab190d02d0555fb78fa6b63d91664f3f52b57256fb7c6ff2f37fa79367df467b3284414c04b521e7f86ad9026ec8643d96cf8e73da7244179081c98c1525067ffb0e41a4932e02135b1323b9a5d01555a2215f1634db5cd770728add4ef83e2832428026ea807740778b67542879d96a5d39325610a39af08dd3786771f1b51b909ac3f493df656b965cedcb46aba6c24a6de7390169f28b0b4e60115f4eeea03b16a74ec956d7d48f5389881d04314efb0b3279dff20ff1aab0ced2f0070857d44b41dc9a52ea961a487284a203218aeb1affc595653921b7709eb63bf1b53a6f4b24f754c3aa277473a5e5370818af18e5c9a43ac51978365bb64dbb41ff418bbc697ce867fd4add91f17808b4874b0d2b5ae2777e6845f5e405a8b2758c05fc555722a4009ab63c9fcecdd1874fcc287308a3494490bc3a20721b70cf4b81d8322dbee526a58d0ee448931eb8d94630b99c7f1f752c7c8e1fe4309b30c9b36008ea04592a1ba4705e4a72697be0de29d8bd9026cfd0b05226a782ebababed3b543d7affd67c3bfa8b209741bf151bb68d4d9734747a1dadfda6702ca89c62ce62d7b894704fa04ae5c00674af425a20ac0d9f0e7f96688a3db7cee7fb283ed9b50fd494ed83e413c443ee3d09c7aa5be1aac8e3d0ae893c72410f8d642e7fd1ddd5624087b44393fb214db2773f8eb4d9f1bc070a2ebec5e083b2ccff52ffc6ce0bcd5682975a85e27c662a83a1ab5bad656d49dedb99ff510bed9748c6011fc0e30013c1deb428696381516e3c453d1fcaac96c93ccbdcd4ca2ad4e0d4adcb257b665f21694c8fc537271cd2b83a21b6e612de121068270b5abe60aeae845f4dcc6cc46f2cbc13444d75a6da601c68d25fe580c92d1f2417f1b241aff713626b24b25558a7d92b3b39064b5fd942bcc9c807ed33ee0ccdb41745cc582f002a0831d0b53687d520d1a75c40320e4e942d890c83f147c022c5b31f0eb2c784acb0d2e82f85b00df3f191d048b16585681c1b10783fee11c79c2bb5eff21568351fe64ea8594c34d62a3d87ab242668ddb906e6dc3312bf82040c809c91177a956c28cb12deeeae125f78a0b6fe4e5e0af947ebcf5684320b44b57c7d32db75f69d8a0fc02464e5e261e5bde0c8c3a11c1f9678655cf38634c72f9f7306989b9062072f6040e0a13f72c9f122ed9ffd9394d9b62b7899afa83602f2691c1443e68b23de8acb5cfe0a18736372f7f9bbafaa2043eb3ca522a028ecffeb32d05c61cff503f62b7f59bee2e5c339917c1f866b1e6df6f604d1f99d46a9c586d1b174ea78bd3e82c0fcf1065725fe95ae6fc9b6774155e1b315e50512428d19e56e478e31e236af95c81e7d481c8aef80e16d5a5109a8004602349b748d8bf4ae90e995870ae6e46be8ace8237d74f50ddbf572a71ab31266fa228c9a5a203796f4dbb5619b572be35da5520a812fdefb482692fb273aa94768ebda2e60abdf3d28030acddcd9434aa7f64f32f28644dd276791667de06eada168236173121f38a57ef171d700299097716604d206b2855d75921e0e399effb691c32586e085ed56cbaf522048c2c32f8214ac3d760ac77ff15bf86dad56654c5f15f61aac38f9198c92ba4415b9e0dd8c03aa4e5e17780d6c3c6c9bcd32e74c3e790dcab41e3f374501c17d8f503284a730c4637c8db103685afd56df5efae7f85bc4c7c4ad1a0dad86234ba0829dd66a228ab91cfd365e309773b2ab53ceb9e0002f89cc8202e35c820ca6525fd9613d6d91bfdd55376b6ab1ad744ed4f1299cb43defd5940537d427536c514af797cbd9e8ea9c2e763b1264c1f59caeec162358611933e76397f8f98b2abceab73b5a7dba6712016495341e1b361cc7650234220512e49bad02474dd00ec73ca383db95bb0ca74888165e85d85e1a22e9229b8de6a1732e3d2ab99e5d30ed184d12060a73dc852ed3e850038b1186cd04de74479119705180be1d8b6bc892123c57be34c3e6e37fea1529131b1f9119302594ab932d44f6b3186f736bdcdcadd426cef86a30b8441bd2cc1ec7fce628ffdacaba233d7f90d1979e8c3978123c4d05006bbf37bfce58c9a7ddda0e7855a53dff472265ebfd49a82e359b69de1abd7dacc5c3692b3891994e6ae0039c6731c30e84076736bf06ac45d36edc071fc1f23ff3da3c8573f3ceee5b78a94e1460dcacee1c7604818ccdb9444708a522670a836b74ebf8c4d8c0f249f3332af2fcebc6cefb365bc0924e3acb29022a78a001fa67af7a17f277a284fe6893113e26d61075ffdb444e3d53cbc0212f79fd808e74a61f06706e6653bdb4c587da247128fc346b1fbbb246d6f31de06464d174fb2da73a175e4d88f84f73f94c374fc3a47b1fb7d5f62c155916aafa2b4931a0b18ba98d99dfda4438aa8d71956bdc6475f9f48f5ac695aad7722e4f00bfb94881ff66f7a9483700d2f396f9e6ce8778ac1af6866b70b8d7d56c5211efb869333141a985808d640ab5d48ad1689cc566ebe6ba8077776a6fd69b1fd86f53deebe903c2e783f4f7b26f07332a4e3b0207ba4e04bbaed9af71a1550197292bebeacb0f279729633adfcd552d06e26c63ec470ab2f5316e0bb83542fef05592f4542a49688ed88b932bfcffd83f67d72ba24cc63857751e1d2a4bd9d85ac9ee18c5f2aff9508c09ca795fc88dc5bdce6613b3e6d5cf52fdd4065f4d48df7272816fdba6a6ab8d1110578af50e53fd2bd9d3a92d22ca1eb30b5fc0362f72c078dad39f3a262c5f2e8e3273eeeef9045e22544c4f624af0c80cf50dc707be5eadb8fe6a807dd104899a8dfadafd3fd5ddc487ccd9807067fac8e51e5e5f5f9bf90adf36e0eeed69eb5addf0f88771b2f8e88ec7dcd4c6da87408c6a294067ae1670fc35e450fb38cb933d3bf5631cce9853b9b69326f06714c68f40fb40bb4c7a780708260d4c7b6d3279297f2f100f7ed119da12219d8316bcd30df2f096d50d19e1991cde1c207a0f95069022f29cbcc4c762be50dfb587924f61d06eb44687a92de230a064ecf901dc18974281a8de4ee572d0bc7f650d968832a40f966ae03560971f5bc1c817d694f8a9407c0a656f6d369aa1dcf75db35e82461e108e75cbebde10ccacd2012aade4ce9eb293fe9fa0e4053a01609d5be20e44001e7301deb0d8f25e78cb6f2e50b2b29c9f98832ee1eaaefb8d9cc6d0717118bb61a4a742bfb5740397ceb583b13482479b96dbccbf5a4698c4e385f0b3e49be2a2cae4a99a0a716a7ea6a4cb7936f7aad5d38a7ae6f63a63abb1de666aaf5a4463dc77e0e5a91d8ad0489e259982e7f52789d3f32421feac68bd244517d58b811ec878a2025b8397b21af72162b788c46923aa73f5c843ad55938ad9e630167892566ba8addb25a5d4c4ad3a0156a50aacff488f537be6fc4f4e9c7ab3311a3e6bbd84b919e4aa77e5e29fed53ed6faae1f2dedc8c7b4a149d3fc3d00be7f7a9960f0ec999b69f197a589a79a05e6a8585f7ba1808a2167841baff3b6687cd195890acc49250ed65c60b3b16abaa9c09cddce9158297aeb1a176af758dadfb921f1229e2fa88814a889ead1e5b668f7ca88d8e8afbece83e225ada0553f753f5081461af6be98072e7e361c87492c394e6f0ed38f5d97cbc6b36a3a9d9403eb609838c78e567640b78354c5c6135ac9a1a31910fadbf399df2db018333f7d237812094a32a0500dc064407f236106d0d4407b0f779ef304a62396b738b9bf7f0727fa496a9ea293ee62126c815eb9333472aba255f40f2260ce99b3c8afc97504717774f8789792367bc8105a422502a4dea8eae932c1637fb0c9f72eb56edf68fff0cb06599596635174f58d6ac1afa3652d3c62c58077edf01fad9eb80bd2ecc0d90d80a49427b554accdb440dda4eb236ef8237630d5ccad391c3494faa2274ae1249bca1f37079c95d446e26fe779c74719719953a6e41d6520b9091849ffb2e596a691cb98510337587fa1296168906b41293612381d3853f43c6b8a2d217e8dfae01e837f587ca55045c9becde5e9ca26e638452e1a83f05cddd79f11e4eb18450b511c2d16ca85ec2c7c63f7dde6ced440d709dd5cf9c44bbe6d1f30fd828b15b01fb49aee11704d4aa8346cdd40cea8b8cd44dd4e0b48781676020070fbf0bafce6cdbd26eab1f34cf72f1beea1b0a9b718635e1e08bf1a8eb3fb36ef2b69c90fa16b3c852e22e022a742b472a2a630288a946aef9bff13588fd24ad40a1fb719151fddc338c3bfc20808b5a1e049cf453e13591c9e1c5700c6e3c460c46eff976d1daf34f6ab0f5a0a8fa9c15437a9ec4f6b690b04d99592c65d094869b4e1b4db8beb4c6dc4ff269fb270a87b536621c7f850b400f7eec0fb72bfea735cb466370d6e99d1e9beafe62c260bef10e5235b0a9e97c274fe2b2482dfbe0787facf6f4cedb80555d51345ce6a99bcd4c703d9d5ff52c36bda2ba1bcb4792300c493d8de385b92154c95eaa76da00c551a7248ea7a4e594b0de24d94950415085cff2e0efc60a3d10f8c7140a3a3890ceb95f07facead703e432c91aa72ef7ece249082624c35e88e37b9483cf776a3be16703a6125f1be55b9ae2274adb6cec11cecb1e82cc0107807112c206bd80ac75ab293880ac5ceb8c6f8c7e0c2618554147dcd149d4e5af769a25c988a308ae583158d19d5ffdeddac5c9e9f7a8b2203d0381e6cfba80f967005375006e75a616a7345278db6b1b63b831719e318288d30ab5efada460cdab2f9e9f5ee2586b802b970dd91bd3ed1e53a9895370ed14abaf4293123a2c96bbe19a0cfca70620f9932315300b1d260edf2b8fce1c7f527a58ce722603891bea7c54022444e46529fba511fc70af8752b71f18c8ec2d063639f6c842f7f4aa90d6a01a797ecf3cee95455d298051ffaee72c82248fbcce173db21d957670c32f6195c1f78dfccc2cb952e5821d88aa47509ac58151027feb001c9e9523d0692f04ce4f048aaa15a5df13a86d8e157a1ef773123202ae3aa95c78e75f6b5d4f37839ea86daed6c10c5aab3bef5293ff3e29955cb8b30cd1bef99d9456cc82de1082077e5c9a4fe249c897ebd56ab99352f7d29e4a0b8e2dc02cc61216b19f2ade6cc0e7137e7a51cd121d0f0b4cc0b8cd7212620022505802ee494741d0c7e24828e2534aa8a89600fb1bac9f1614c228813ea354665be7d4d41f0e619ecf1d4cae919c384970e57441501f2626fa78dce5ef14ed98a199cc610814aacd5a6e3638e44624b7fc12299244945f046bf2d5b55980d98005c90b5ee133152ed52712f4b5961ce16383d1f112b16f59e24befd11d4a3a1b8ec15f05978b411533d44032f708658da71df233eb97ecee6edd4c7d98645319920715d3ed0f09105f2407903716b6bc0e99d099db25d1366e4282019e46d6649bb90a1480cffe4edb767bd3ad64d423eeed39c19fb0f472b2dd78f2a9525ac88660b114e719b8d7723a0465b9d95bcab703d9ea6447bf739d2c996aeacd0d2bd3bc99aae467e3f0fc3752f33b9a0508d1a88a5bbfe6a73fbea2a81112dafcfdc9e69981e1ea661f107bc27cf63e11ca0d728e092798e9ccb933d57d2030cdbad244ef2a30fec387f4a5a77a854ef6460322c4636ee22f7dba78c1e0c137b611cca7c26c2557cf8c9b26d36fc15627dfa0ff5d2e73123e3354e4073e8484b39b33dddca06338b5f974ccc744d4428e1f81b8bc041693fbf09c858c604ac0f59293de57e8fc2d8ee198feb4ed9812e22356819c5a3117905a100e0b34135ca5728a26d682b6719c41fa9ea317c296d4d330c7725dfa03ec86f922c715982eb6d7a2daee555f35d3c4dce2e24741addc04de2c3fc4bd54a7ce5291317777ecdb0905605f52d1c3b21cc3d5b03712587ce4ece01644e6d3ba77f03a60e750f44e12da8fa228f016b3291dce24b0906e754bdf12ae306db65520b26372951a4049a0f7ce9e551b3d4988f6979f966533ae480ca0560d393c4b843fc218badd8571479f06100dabb0b2f76003a1a4340cdf5fa8cca3de18c56de34ec3a8121316bc82c675d37c3dd5b00e51a09298dabdcd2380a81f2dbf8a5faf7250b2b658c1da30b84d19c518c061565ed3be70a66f78f1a5bc709b7d5b32fad46eb40d6d7192e8ec62df7e8d474565812303c1ca2f3d09f65c18e93426cb7e8cea70c061fdb2629490cc0ae83b181f5b3954bf1efdbb5df4940ed9ec4c2341a228607aab95c76f0cf3002dd4c66507f25a21698d2da8eaa3d5f93b77a3fa215f45d64e7de9bc179df7f49713e42296ee6b0d0e4c24173c00135142d8e489650795c1ce02ea37fcab9127964a258ec85ab7c82c6f750b01a3d1b8039ddab0e6b590018963725e8204a54b3a751d2d47bb92b65355e38e42ef2961d0f452ef719a0815b37e3009a945424d84c87fe47e5e113f9e5125e1caf4557efa1426a26941271eb3c9a877a06770d2502c8311545519cb38044e08dd527db188a8483e1ccf20b380a85d814499682996f34ce7ce21a8de7663945033e749915290cc7a9949886187467ecb71e6d2fd7c21e9203f4b542f4402f01c331a5195e39ee42bb5a5e7999f7f13904e3b4c7d0a077b2ebc405616f88c8db81df0a84d314464217516fe8e34c6339f33107a58b0ad13e4f5c0025c99e551bceddf1054ef9b006b1bb8b581a53c02fbb917ee69b177aba96547e9dc027cdeef1528eb55e4eaf1f3e0598c2e3f184a7f106203238ac750f773bb65c714e2df574b621be9310e2f941d811c7a0747a3f568d1925151e7a77b0c3fbfb8a521f47be9bbf473bb3b1ea097e1d1a75adf9bc5d99893ab9a385daf9901e0bd83e777f08340be7e0b8c770751166d", 0x2000, &(0x7f0000000500)={&(0x7f00000003c0)={0x50, 0xffffffffffffffda, 0x40000000, {0x7, 0x2d, 0xa747, 0x2402100, 0x8, 0x4, 0x5, 0x3, 0x0, 0x0, 0x10, 0x8e61}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.860557755s ago: executing program 7 (id=3596): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) memfd_create(&(0x7f0000000080)='-B\xd5\x9appp\xf0\x00\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}\x00\x10\x00\x00\x00\x00\x00\x00\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x11\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @empty, 0x3}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x59a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 3.860359986s ago: executing program 4 (id=3597): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2], 0x70}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=@getchain={0x2c, 0x11, 0x839, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0x7}, {0x3}}, [{0x8, 0xb, 0xb60}]}, 0x2c}}, 0x0) 3.851641665s ago: executing program 2 (id=3598): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r0, 0x6000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r3, 0x0, 0x6, 0x8) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000000d00)="74be6dd9a771", 0x6}], 0x1, 0x9) 3.7446785s ago: executing program 0 (id=3599): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 2.942677166s ago: executing program 2 (id=3600): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f0000000000)={[{@uqnoenforce}]}, 0x1, 0x990f, &(0x7f0000013080)="$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") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f00000001c0)=ANY=[], 0xfe37, 0x0) llistxattr(&(0x7f0000000140)='./file1\x00', 0x0, 0x35) 2.728808265s ago: executing program 7 (id=3601): r0 = socket(0x1e, 0x1, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x133d, 0x0, 0x8, 0x0, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) 2.328493508s ago: executing program 7 (id=3602): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000003a80)=0x80000000, 0x4) recvmmsg(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000005dc0)=""/17, 0x11}, 0x3}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)}, 0xffff8000}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000023c0)=""/214, 0xd6}, 0x80}], 0x3, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 1.781059392s ago: executing program 7 (id=3603): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f0000000080)={[{@auto_da_alloc}, {@mblk_io_submit}]}, 0x1, 0x569, &(0x7f0000000a00)="$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") chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x82400, 0x8c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) lseek(r0, 0x52, 0x1) getdents(r0, 0x0, 0x40) 1.504512666s ago: executing program 4 (id=3604): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) flock(r0, 0x6) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x7}) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/4\x00') read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) 906.315483ms ago: executing program 7 (id=3605): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r0, &(0x7f0000000100)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x9, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x2c, &(0x7f00000002c0)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f0000000000)=0x10) 740.936072ms ago: executing program 4 (id=3606): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000004480)='./file0\x00', 0x10040, &(0x7f00000000c0)={[{@journal_async_commit}, {@noacl}, {@coherency_full}, {@heartbeat_none}, {@journal_async_commit}, {@user_xattr}]}, 0x1, 0x444c, &(0x7f000000cd40)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) write$P9_RUNLINKAT(r0, &(0x7f00000017c0)={0x57, 0x4d, 0x1}, 0x7) fallocate(r0, 0x0, 0xbf5, 0x2000402) 712.984702ms ago: executing program 0 (id=3607): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="7000028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004"], 0x8c}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880) 654.029356ms ago: executing program 2 (id=3608): socket$packet(0x11, 0x2, 0x300) r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000380)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000040)="02042700ea0e0300000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828bda305775c43824cee8440000", 0x31}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551010000008d3b", 0x4a}, {&(0x7f0000001540)="1006000000000000ee8de7932b326f8a310f654fb0c4ae439862807a8921bb681296c1971990fd4ba2e7d7a31589836c734d2341f74276871bf8465fc0583fdc0b8a34bb550ef977b001d46df69747826840d196606f75ef1cbe3bed88eb2291b63c95dbb54b10e45adfc5c5d7758ef5ae2b74254a1b76f50f4af91fdd935cb3dbf63760b0bd22d7dc30b5132dfc677970", 0x91}, {&(0x7f0000000400)="df3b46a1330000000000000000000000000000f116878ec6681583392eb29f350235231be5495bc3b6ad35ad20bc5feceb317e800dbe16efa29cce9c1417049b9aafee7f19a91501e37b42ed50d947953bd8d66754dff6b8ef0b3457b86e542dacde831a17000000000000000051fd75ae0bd6", 0x73}, {&(0x7f00000005c0)="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", 0xde0}], 0x5}, 0x40000) 0s ago: executing program 6 (id=3480): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0xcc0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$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") symlink(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000004980)=""/177, 0xb1) kernel console output (not intermixed with test programs): e found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1114.946636][T13414] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.965917][T14117] ocfs2: Unmounting device (7,3) on (node local) [ 1115.449889][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1115.576327][T13414] mcp2221 0003:04D8:00DD.0022: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 1116.565084][T14891] loop7: detected capacity change from 0 to 32768 [ 1116.920666][T14891] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1117.138782][T13414] usb 3-1: USB disconnect, device number 21 [ 1117.422474][T14891] XFS (loop7): Ending clean mount [ 1117.502710][T14891] XFS (loop7): Quotacheck needed: Please wait. [ 1117.719641][T14891] XFS (loop7): Quotacheck: Done. [ 1118.303719][ T8835] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1121.492996][T14940] loop2: detected capacity change from 0 to 32768 [ 1121.518947][T14940] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2778 (14940) [ 1121.651494][T14940] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1121.663059][T14940] BTRFS info (device loop2): using crc32c checksum algorithm [ 1121.670979][T14940] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1121.942022][T14940] BTRFS info (device loop2): rebuilding free space tree [ 1121.980657][T14940] BTRFS info (device loop2): disabling free space tree [ 1121.988169][T14940] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1121.998342][T14940] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1122.081592][T14940] BTRFS info (device loop2): enabling ssd optimizations [ 1122.091366][T14940] BTRFS info (device loop2): turning on async discard [ 1122.098590][T14940] BTRFS info (device loop2): enabling disk space caching [ 1122.105844][T14940] BTRFS info (device loop2): force clearing of disk cache [ 1122.113462][T14940] BTRFS info (device loop2): use zstd compression, level 3 [ 1122.236808][T14963] input: syz1 as /devices/virtual/input/input25 [ 1122.301515][T14962] loop3: detected capacity change from 0 to 128 [ 1122.478930][T14962] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1122.581312][T14962] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1122.596337][ T5778] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1123.362729][T14117] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1123.429576][T14976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2783'. [ 1124.554462][T14978] loop7: detected capacity change from 0 to 40427 [ 1124.564532][T14978] F2FS-fs: heap/no_heap options were deprecated [ 1124.579628][T14978] F2FS-fs (loop7): Insane cp_payload (553648128 >= 504) [ 1124.586843][T14978] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1124.607412][T14978] F2FS-fs (loop7): build fault injection type: 0x0 [ 1124.689951][T14978] F2FS-fs (loop7): invalid crc value [ 1124.988292][T14978] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1124.999236][T14978] F2FS-fs (loop7): Try to recover 1th superblock, ret: -30 [ 1125.006700][T14978] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1125.227337][T14986] loop3: detected capacity change from 0 to 256 [ 1128.007441][ T5783] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1128.223105][ T5783] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1128.266865][ T5783] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1128.373639][T15008] loop7: detected capacity change from 0 to 1024 [ 1128.392784][ T5783] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1128.441066][ T5783] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.495060][T15008] EXT4-fs: Ignoring removed oldalloc option [ 1128.512422][ T5783] usb 9-1: Product: syz [ 1128.516843][ T5783] usb 9-1: Manufacturer: syz [ 1128.555101][T15008] EXT4-fs (loop7): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1128.576453][ T5783] usb 9-1: SerialNumber: syz [ 1128.717298][ T5783] cdc_mbim 9-1:1.0: skipping garbage [ 1128.817639][T15008] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1128.942169][T15006] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1129.601944][ T8835] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1129.824996][T15006] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1129.878565][ T5783] cdc_mbim 9-1:1.0: setting tx_max = 32 [ 1129.924571][ T5783] cdc_mbim 9-1:1.0: cdc-wdm0: USB WDM device [ 1130.010209][ T5783] wwan wwan0: port wwan0mbim0 attached [ 1130.178249][ T5783] cdc_mbim 9-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.8-1, CDC MBIM, 16:0a:b4:1f:d6:8c [ 1130.314054][ T5783] usb 9-1: USB disconnect, device number 13 [ 1130.350014][ T5783] cdc_mbim 9-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.8-1, CDC MBIM [ 1130.671732][T15037] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2801'. [ 1130.768694][T15037] bond0: invalid ARP target 0.0.0.0 specified for addition [ 1130.771532][ T5783] wwan wwan0: port wwan0mbim0 disconnected [ 1130.822564][T15037] bond0: option arp_ip_target: invalid value (0) [ 1131.796157][T15047] overlayfs: failed to set uuid (618/file0, err=-1); falling back to uuid=null. [ 1131.887426][T15047] overlayfs: failed to verify upper root origin [ 1131.932214][T15048] loop3: detected capacity change from 0 to 512 [ 1140.684575][T15153] loop2: detected capacity change from 0 to 2048 [ 1140.823109][T15153] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1140.878588][T15153] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 1140.942306][T15153] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1141.038761][ T5783] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1141.228621][ T5783] usb 4-1: Using ep0 maxpacket: 32 [ 1141.283709][ T5783] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1141.331004][ T5783] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1141.379766][ T5783] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1141.425191][ T5783] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.549651][ T5783] usb 4-1: config 0 descriptor?? [ 1142.324255][ T5783] ft260 0003:0403:6030.0023: chip code: 6424 8183 [ 1142.564348][T15176] netlink: 'syz.4.2848': attribute type 12 has an invalid length. [ 1142.575186][ T5783] ft260 0003:0403:6030.0023: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 1142.630763][T15176] netlink: 'syz.4.2848': attribute type 29 has an invalid length. [ 1142.732517][T15176] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2848'. [ 1142.784714][ T5783] ft260 0003:0403:6030.0023: failed to retrieve status: -71, no wakeup [ 1142.808735][T15176] netlink: 'syz.4.2848': attribute type 2 has an invalid length. [ 1142.819925][ T5783] ft260 0003:0403:6030.0023: failed to retrieve status: -71 [ 1142.838568][T15176] netlink: 'syz.4.2848': attribute type 3 has an invalid length. [ 1142.879190][ T5783] ft260 0003:0403:6030.0023: failed to reset I2C controller: -71 [ 1143.058262][ T5783] usb 4-1: USB disconnect, device number 7 [ 1144.248779][T15195] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1144.369518][T15195] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1145.203664][T15197] loop7: detected capacity change from 0 to 32768 [ 1145.245263][T15203] loop2: detected capacity change from 0 to 64 [ 1145.353826][T15197] JBD2: Ignoring recovery information on journal [ 1145.518759][T15197] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1146.034532][ T8835] ocfs2: Unmounting device (7,7) on (node local) [ 1146.864906][T15223] loop8: detected capacity change from 0 to 128 [ 1146.875392][T15224] loop2: detected capacity change from 0 to 512 [ 1147.011343][T15224] EXT4-fs: Ignoring removed nobh option [ 1147.566644][T15224] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1148.552605][T15231] loop7: detected capacity change from 0 to 32768 [ 1148.633891][T15224] ext4 filesystem being mounted at /629/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1148.760004][T15231] [ 1148.760004][T15231] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1148.760004][T15231] [ 1148.883902][T15231] ERROR: (device loop7): diWrite: ixpxd invalid [ 1148.883902][T15231] [ 1148.932478][T15231] ERROR: (device loop7): txAbort: [ 1148.932478][T15231] [ 1148.983348][T15233] ERROR: (device loop7): diWrite: ixpxd invalid [ 1148.983348][T15233] [ 1149.124594][T15233] ERROR: (device loop7): txAbort: [ 1149.124594][T15233] [ 1149.229499][T15224] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 3: comm syz.2.2862: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 1149.256130][T15231] jfs_create: dtSearch returned -17 [ 1149.708406][ T8835] [ 1149.708406][ T8835] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1149.708406][ T8835] [ 1149.828995][ T8835] [ 1149.828995][ T8835] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1149.828995][ T8835] [ 1150.160940][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1150.997290][T15256] netlink: 'syz.8.2873': attribute type 7 has an invalid length. [ 1151.081070][T15256] netlink: 'syz.8.2873': attribute type 7 has an invalid length. [ 1153.613538][T15266] loop8: detected capacity change from 0 to 65536 [ 1153.622973][T15278] loop3: detected capacity change from 0 to 512 [ 1153.768804][T15266] XFS (loop8): DAX unsupported by block device. Turning off DAX. [ 1153.781412][T15278] EXT4-fs (loop3): filesystem is read-only [ 1153.796094][T15278] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1153.819340][T15266] XFS (loop8): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1153.863164][T15278] EXT4-fs (loop3): filesystem is read-only [ 1153.888189][T15278] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1153.905404][T15278] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #16: comm syz.3.2880: iget: bad i_size value: -504403158265486552 [ 1153.970543][T15278] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1153.973017][T15278] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2880: couldn't read orphan inode 16 (err -117) [ 1153.982918][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1153.983012][ C1] EXT4-fs (loop3): initial error at time 1771008006: ext4_orphan_get:1391: inode 16 [ 1153.983186][ C1] EXT4-fs (loop3): last error at time 1771008006: ext4_orphan_get:1391: inode 16 [ 1154.127167][T15278] loop3: lost filesystem error report for type 5 error -117 [ 1154.134768][T15278] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1154.257601][T15266] XFS (loop8): Ending clean mount [ 1154.524712][T11536] XFS (loop8): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1155.090784][T14117] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1155.352015][T15304] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1156.447519][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1156.460438][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1156.500195][T15317] netlink: 'syz.2.2888': attribute type 10 has an invalid length. [ 1156.731582][T15319] netlink: 'syz.2.2888': attribute type 10 has an invalid length. [ 1156.743172][T15310] loop3: detected capacity change from 0 to 40427 [ 1156.775897][T15310] F2FS-fs (loop3): Image doesn't support compression [ 1156.783064][T15310] F2FS-fs (loop3): build fault injection rate: 690 [ 1156.809519][T15310] F2FS-fs (loop3): invalid crc value [ 1156.972281][T15317] team0: Port device dummy0 added [ 1157.214835][T15310] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1157.270959][T15310] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1157.371842][T15319] team0: Port device dummy0 removed [ 1157.487319][T15319] dummy0: entered promiscuous mode [ 1157.565984][T15319] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1157.742966][T15330] overlayfs: failed to clone upperpath [ 1159.600691][T15338] loop2: detected capacity change from 0 to 40427 [ 1160.222620][T15344] loop8: detected capacity change from 0 to 32768 [ 1160.300663][T15338] F2FS-fs (loop2): invalid crc value [ 1160.300722][T15344] [ 1160.300722][T15344] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1160.300722][T15344] [ 1160.591629][T11536] [ 1160.591629][T11536] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1160.591629][T11536] [ 1160.673985][T15353] loop6: detected capacity change from 0 to 7 [ 1160.735032][T11536] [ 1160.735032][T11536] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1160.735032][T11536] [ 1160.753824][T15338] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1160.786018][T15353] Dev loop6: unable to read RDB block 7 [ 1160.811891][T15338] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1160.841682][T15353] loop6: unable to read partition table [ 1160.887203][T15353] loop6: partition table beyond EOD, truncated [ 1160.931575][T15338] F2FS-fs (loop2): Stopped filesystem due to reason: 0 [ 1160.988346][T15353] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1164.241718][T15376] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2899'. [ 1164.522918][T15378] loop3: detected capacity change from 0 to 512 [ 1164.659689][T15378] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2892: bg 0: block 5: invalid block bitmap [ 1164.738725][T15378] loop3: lost filesystem error report for type 5 error -117 [ 1164.748337][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1164.762655][ C0] EXT4-fs (loop3): initial error at time 1771008017: ext4_validate_block_bitmap:432 [ 1164.772535][ C0] EXT4-fs (loop3): last error at time 1771008017: ext4_validate_block_bitmap:432 [ 1164.801374][T15378] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 1164.828442][T15374] loop7: detected capacity change from 0 to 4096 [ 1164.852936][T15378] loop3: lost filesystem error report for type 5 error -117 [ 1164.893439][T15378] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2892: invalid indirect mapped block 3 (level 2) [ 1165.029985][T15378] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1165.055673][T15378] EXT4-fs (loop3): 1 orphan inode deleted [ 1165.177435][T15378] EXT4-fs (loop3): 1 truncate cleaned up [ 1165.255109][T15378] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1166.049407][T14117] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1166.450848][T15395] loop8: detected capacity change from 0 to 128 [ 1166.806682][T15395] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1166.942051][T15395] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1167.220221][T15395] fscrypt (loop8, inode 12): Unsupported encryption modes (contents 0, filenames 2) [ 1168.439900][T11536] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1169.365348][T15420] loop2: detected capacity change from 0 to 2048 [ 1169.503053][T15420] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1169.876227][T15431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2920'. [ 1171.247495][ T5783] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 1171.499569][ T5783] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1171.568584][ T5783] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1171.682165][ T5783] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1171.743530][ T5783] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.753886][T15446] loop7: detected capacity change from 0 to 32768 [ 1171.872672][T15446] JBD2: Ignoring recovery information on journal [ 1172.158931][T15446] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1172.275783][ T5783] usb 9-1: usb_control_msg returned -32 [ 1172.311672][ T5783] usbtmc 9-1:16.0: can't read capabilities [ 1172.456434][ T8835] ocfs2: Unmounting device (7,7) on (node local) [ 1173.697444][T15466] loop3: detected capacity change from 0 to 32768 [ 1173.723330][T15466] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2932 (15466) [ 1173.757117][T15466] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1173.769610][T15466] BTRFS info (device loop3): using sha256 checksum algorithm [ 1173.848627][T12771] Bluetooth: hci1: command 0x0406 tx timeout [ 1173.991849][T15466] BTRFS info (device loop3): rebuilding free space tree [ 1174.035406][T15466] BTRFS info (device loop3): turning off barriers [ 1174.042458][T15466] BTRFS info (device loop3): turning on sync discard [ 1174.049567][T15466] BTRFS info (device loop3): enabling free space tree [ 1174.056560][T15466] BTRFS info (device loop3): force clearing of disk cache [ 1174.064483][T15466] BTRFS info (device loop3): max_inline set to 0 [ 1174.302192][T14117] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1174.484027][ T5783] usb 9-1: USB disconnect, device number 14 [ 1175.424564][T15497] loop8: detected capacity change from 0 to 2048 [ 1175.647273][T15510] loop7: detected capacity change from 0 to 128 [ 1175.832825][T15497] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1175.953998][T15510] syz.7.2940: attempt to access beyond end of device [ 1175.953998][T15510] loop7: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 1176.156138][T15510] syz.7.2940: attempt to access beyond end of device [ 1176.156138][T15510] loop7: rw=8388608, sector=138, nr_sectors = 2 limit=128 [ 1176.585371][T15517] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.2942'. [ 1176.769702][T10526] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1176.936762][T10526] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 28 with error 28 [ 1177.048881][T10526] EXT4-fs (loop8): This should not happen!! Data will be lost [ 1177.048881][T10526] [ 1177.078306][T10526] EXT4-fs (loop8): Total free blocks count 0 [ 1177.097604][T10526] EXT4-fs (loop8): Free/Dirty block details [ 1177.168350][T10526] EXT4-fs (loop8): free_blocks=2415919504 [ 1177.206455][T10526] EXT4-fs (loop8): dirty_blocks=32 [ 1177.260793][T10526] EXT4-fs (loop8): Block reservation details [ 1177.331708][T10526] EXT4-fs (loop8): i_reserved_data_blocks=2 [ 1177.443290][T11536] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1177.855957][T15521] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2944'. [ 1178.318411][ T5783] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1178.588431][ T5783] usb 4-1: Using ep0 maxpacket: 32 [ 1178.668529][ T5783] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1178.737864][ T5783] usb 4-1: config 0 has no interface number 0 [ 1178.792371][ T5783] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1178.888869][ T5783] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1178.938570][ T5783] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.995285][ T5783] usb 4-1: Product: syz [ 1179.047080][ T5783] usb 4-1: Manufacturer: syz [ 1179.077891][ T5783] usb 4-1: SerialNumber: syz [ 1179.152750][ T5783] usb 4-1: config 0 descriptor?? [ 1179.371644][ T796] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1179.625030][ T796] usb 8-1: Using ep0 maxpacket: 16 [ 1179.689916][ T796] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1179.800679][ T796] usb 8-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 1179.898927][ T796] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.023191][ T796] usb 8-1: config 0 descriptor?? [ 1180.091551][ T5783] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1180.178750][ T5783] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1180.286778][ T5783] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1180.442132][ T5783] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1180.508266][ T5783] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1180.598250][ T5783] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 1180.663225][ T5783] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 1180.857492][T13414] usb 8-1: USB disconnect, device number 13 [ 1180.865501][ T5783] usb 4-1: USB disconnect, device number 8 [ 1183.760871][T15564] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2957'. [ 1183.847775][T15564] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 1184.659317][T15578] loop8: detected capacity change from 0 to 8 [ 1184.880130][T15578] netlink: 128 bytes leftover after parsing attributes in process `syz.8.2961'. [ 1185.828987][T15594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1185.896620][T15594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1185.939301][T12095] kernel write not supported for file bpf-map (pid: 12095 comm: kworker/0:2) [ 1186.008441][T15594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1186.572001][T15608] loop7: detected capacity change from 0 to 512 [ 1186.665989][T15608] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1186.888371][T15608] EXT4-fs (loop7): 1 truncate cleaned up [ 1186.897554][T15608] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1187.501206][ T8835] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1188.290070][T15633] loop3: detected capacity change from 0 to 128 [ 1188.381211][T15633] EXT4-fs: Ignoring removed nobh option [ 1188.545711][T15633] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1188.584433][T15633] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1189.240938][T14117] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1189.694165][T15644] loop8: detected capacity change from 0 to 8 [ 1189.730545][T15644] Dev loop8: unable to read RDB block 8 [ 1189.736496][T15644] loop8: unable to read partition table [ 1189.840163][T15644] loop8: partition table beyond EOD, truncated [ 1189.846697][T15644] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1190.063616][T15649] loop3: detected capacity change from 0 to 1024 [ 1190.236624][T15649] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1190.319304][T15649] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1190.444328][T15649] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: block 3: comm syz.3.2983: lblock 3 mapped to illegal pblock 3 (length 3) [ 1190.555652][T15649] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 1190.792923][T15649] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1190.792923][T15649] [ 1191.472711][T15671] netlink: 304 bytes leftover after parsing attributes in process `syz.2.2987'. [ 1192.324735][ T12] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:0: lblock 8 mapped to illegal pblock 8 (length 8) [ 1192.516934][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 1192.651445][ T12] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1192.651445][ T12] [ 1192.839681][T15677] nbd2: detected capacity change from 0 to 63 [ 1192.872926][T14117] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1192.939388][T15679] block nbd2: NBD_DISCONNECT [ 1192.969969][T15679] block nbd2: Disconnected due to user request. [ 1193.020891][T15679] block nbd2: shutting down sockets [ 1193.107830][ C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1193.117690][ C1] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1193.125821][ C1] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1193.135650][ C1] Buffer I/O error on dev nbd2, logical block 1, async page read [ 1193.143727][ C1] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1193.153542][ C1] Buffer I/O error on dev nbd2, logical block 2, async page read [ 1193.161601][ C1] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1193.171425][ C1] Buffer I/O error on dev nbd2, logical block 3, async page read [ 1193.200612][ T5942] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1193.277605][ T5942] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1193.328708][ T5942] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1193.396449][ T5942] Buffer I/O error on dev nbd2, logical block 1, async page read [ 1193.459499][ T5942] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1193.547123][ T5942] Buffer I/O error on dev nbd2, logical block 2, async page read [ 1193.568357][ T5942] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1193.578587][ T5942] Buffer I/O error on dev nbd2, logical block 3, async page read [ 1193.586777][ T5942] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1193.611364][ T5942] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1193.684868][ T5942] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1193.749788][ T5942] Buffer I/O error on dev nbd2, logical block 1, async page read [ 1193.801958][ T5942] ldm_validate_partition_table(): Disk read failed. [ 1193.849303][T15687] netlink: 'syz.4.2992': attribute type 1 has an invalid length. [ 1193.879954][ T5942] Dev nbd2: unable to read RDB block 0 [ 1193.897632][T15687] netlink: 'syz.4.2992': attribute type 6 has an invalid length. [ 1193.924645][ T5942] nbd2: unable to read partition table [ 1193.936301][T15687] netlink: 'syz.4.2992': attribute type 3 has an invalid length. [ 1194.000769][T15687] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2992'. [ 1194.047049][T15689] loop2: detected capacity change from 0 to 128 [ 1194.074969][ T5942] ldm_validate_partition_table(): Disk read failed. [ 1194.164509][ T5942] Dev nbd2: unable to read RDB block 0 [ 1194.221040][ T5942] nbd2: unable to read partition table [ 1194.342556][T15689] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1194.356488][T15689] ext4 filesystem being mounted at /651/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1194.506507][T15693] loop7: detected capacity change from 0 to 512 [ 1194.591852][T15693] EXT4-fs: Ignoring removed oldalloc option [ 1194.625658][T15696] loop3: detected capacity change from 0 to 256 [ 1194.692775][T15696] exfat: Deprecated parameter 'namecase' [ 1194.743908][T15693] EXT4-fs (loop7): 1 truncate cleaned up [ 1194.776324][T15696] exfat: Deprecated parameter 'utf8' [ 1194.820568][T15693] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1194.982149][ T5778] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1195.032466][T15696] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 1195.926696][T15710] 9pnet: p9_errstr2errno: server reported unknown error st6 [ 1196.407567][ T8835] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1197.261258][T15731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3004'. [ 1198.420779][ T29] audit: type=1800 audit(1771008050.842:138): pid=15744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3009" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 1198.674424][T15747] loop3: detected capacity change from 0 to 512 [ 1199.680290][T15747] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1199.832210][T15749] loop2: detected capacity change from 0 to 40427 [ 1199.847498][T15749] F2FS-fs (loop2): Invalid log blocks per segment (1) [ 1199.854862][T15749] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1199.866934][T15749] F2FS-fs (loop2): Image doesn't support compression [ 1199.875892][T15749] F2FS-fs (loop2): build fault injection rate: 690 [ 1199.882970][T15749] F2FS-fs (loop2): build fault injection type: 0x35f7 [ 1199.900645][T15749] F2FS-fs (loop2): invalid crc value [ 1200.219475][T15747] EXT4-fs (loop3): 1 truncate cleaned up [ 1200.227530][T15747] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1200.291371][T15749] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1200.316829][T15749] F2FS-fs (loop2): Start checkpoint disabled! [ 1200.424608][T15749] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 1200.449018][T15749] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1200.456447][T15749] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1200.673396][ T29] audit: type=1800 audit(1771008053.082:139): pid=15747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3011" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 1201.180664][T10503] kworker/u8:21: attempt to access beyond end of device [ 1201.180664][T10503] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1201.248953][T10503] CPU: 1 UID: 0 PID: 10503 Comm: kworker/u8:21 Tainted: G L syzkaller #0 PREEMPT(full) [ 1201.249136][T10503] Tainted: [L]=SOFTLOCKUP [ 1201.249185][T10503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1201.249297][T10503] Workqueue: writeback wb_workfn (flush-7:2) [ 1201.249537][T10503] Call Trace: [ 1201.249589][T10503] [ 1201.249640][T10503] __dump_stack+0x26/0x30 [ 1201.249811][T10503] dump_stack_lvl+0x14c/0x1c0 [ 1201.249986][T10503] dump_stack+0x1e/0x25 [ 1201.250136][T10503] f2fs_handle_critical_error+0xa6f/0xc20 [ 1201.250376][T10503] f2fs_stop_checkpoint+0x65/0x80 [ 1201.250567][T10503] f2fs_write_end_io+0x1013/0x2470 [ 1201.250825][T10503] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1201.251025][T10503] bio_endio+0xf92/0x10e0 [ 1201.251235][T10503] submit_bio_noacct+0x533/0x28d0 [ 1201.251496][T10503] submit_bio+0x57a/0x620 [ 1201.251721][T10503] f2fs_submit_write_bio+0x115/0x2d0 [ 1201.251911][T10503] __submit_merged_bio+0x16f/0x6a0 [ 1201.252091][T10503] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1201.252298][T10503] __submit_merged_write_cond+0x703/0x990 [ 1201.252515][T10503] f2fs_submit_merged_write+0x31/0x40 [ 1201.252693][T10503] f2fs_sync_node_pages+0x1fd7/0x20c0 [ 1201.252860][T10503] ? ocfs2_mknod+0x3170/0x4cc0 [ 1201.253055][T10503] ? kmsan_get_metadata+0xf1/0x160 [ 1201.253328][T10503] f2fs_write_node_pages+0x3c5/0xb30 [ 1201.253499][T10503] ? kmsan_get_metadata+0xf1/0x160 [ 1201.253687][T10503] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1201.253892][T10503] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 1201.254062][T10503] do_writepages+0x3f2/0x860 [ 1201.254260][T10503] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1201.254458][T10503] ? writeback_sb_inodes+0x11/0x1f10 [ 1201.254627][T10503] ? kmsan_get_metadata+0xf1/0x160 [ 1201.254829][T10503] __writeback_single_inode+0x101/0x1030 [ 1201.255009][T10503] ? kmsan_get_metadata+0xf1/0x160 [ 1201.255192][T10503] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1201.255390][T10503] writeback_sb_inodes+0xb2d/0x1f10 [ 1201.255668][T10503] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1201.255881][T10503] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1201.256081][T10503] wb_writeback+0x4d0/0xc00 [ 1201.256261][T10503] ? queue_io+0x4b1/0x790 [ 1201.256431][T10503] wb_workfn+0x397/0x1900 [ 1201.256646][T10503] ? kmsan_get_metadata+0xf1/0x160 [ 1201.256855][T10503] ? __pfx_wb_workfn+0x10/0x10 [ 1201.257055][T10503] process_scheduled_works+0xae7/0x1d60 [ 1201.257279][T10503] worker_thread+0xede/0x1580 [ 1201.257479][T10503] kthread+0x53f/0x600 [ 1201.257666][T10503] ? __pfx_worker_thread+0x10/0x10 [ 1201.257837][T10503] ? __pfx_kthread+0x10/0x10 [ 1201.258005][T10503] ret_from_fork+0x20f/0x910 [ 1201.258154][T10503] ? __switch_to+0x51c/0x750 [ 1201.258349][T10503] ? __pfx_kthread+0x10/0x10 [ 1201.258532][T10503] ret_from_fork_asm+0x1a/0x30 [ 1201.258742][T10503] [ 1201.620102][T10503] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1201.627499][T10503] CPU: 1 UID: 0 PID: 10503 Comm: kworker/u8:21 Tainted: G L syzkaller #0 PREEMPT(full) [ 1201.627695][T10503] Tainted: [L]=SOFTLOCKUP [ 1201.627754][T10503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1201.627877][T10503] Workqueue: writeback wb_workfn (flush-7:2) [ 1201.628115][T10503] Call Trace: [ 1201.628179][T10503] [ 1201.628237][T10503] __dump_stack+0x26/0x30 [ 1201.628412][T10503] dump_stack_lvl+0x14c/0x1c0 [ 1201.628586][T10503] dump_stack+0x1e/0x25 [ 1201.628752][T10503] f2fs_handle_critical_error+0xa6f/0xc20 [ 1201.628988][T10503] f2fs_stop_checkpoint+0x65/0x80 [ 1201.629205][T10503] f2fs_write_end_io+0x1013/0x2470 [ 1201.629472][T10503] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1201.629676][T10503] bio_endio+0xf92/0x10e0 [ 1201.629888][T10503] submit_bio_noacct+0x533/0x28d0 [ 1201.630177][T10503] submit_bio+0x57a/0x620 [ 1201.630390][T10503] f2fs_submit_write_bio+0x115/0x2d0 [ 1201.630578][T10503] __submit_merged_bio+0x16f/0x6a0 [ 1201.630761][T10503] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1201.630964][T10503] __submit_merged_write_cond+0x703/0x990 [ 1201.631182][T10503] f2fs_submit_merged_write+0x31/0x40 [ 1201.631403][T10503] f2fs_sync_node_pages+0x1fd7/0x20c0 [ 1201.631567][T10503] ? ocfs2_mknod+0x3170/0x4cc0 [ 1201.631759][T10503] ? kmsan_get_metadata+0xf1/0x160 [ 1201.632027][T10503] f2fs_write_node_pages+0x3c5/0xb30 [ 1201.632208][T10503] ? kmsan_get_metadata+0xf1/0x160 [ 1201.632387][T10503] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1201.632601][T10503] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 1201.632769][T10503] do_writepages+0x3f2/0x860 [ 1201.632959][T10503] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1201.633150][T10503] ? writeback_sb_inodes+0x11/0x1f10 [ 1201.633307][T10503] ? kmsan_get_metadata+0xf1/0x160 [ 1201.633502][T10503] __writeback_single_inode+0x101/0x1030 [ 1201.633679][T10503] ? kmsan_get_metadata+0xf1/0x160 [ 1201.633854][T10503] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1201.634064][T10503] writeback_sb_inodes+0xb2d/0x1f10 [ 1201.634344][T10503] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1201.634562][T10503] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1201.634746][T10503] wb_writeback+0x4d0/0xc00 [ 1201.634922][T10503] ? queue_io+0x4b1/0x790 [ 1201.635089][T10503] wb_workfn+0x397/0x1900 [ 1201.635305][T10503] ? kmsan_get_metadata+0xf1/0x160 [ 1201.635519][T10503] ? __pfx_wb_workfn+0x10/0x10 [ 1201.635714][T10503] process_scheduled_works+0xae7/0x1d60 [ 1201.635949][T10503] worker_thread+0xede/0x1580 [ 1201.636153][T10503] kthread+0x53f/0x600 [ 1201.636317][T10503] ? __pfx_worker_thread+0x10/0x10 [ 1201.636482][T10503] ? __pfx_kthread+0x10/0x10 [ 1201.636651][T10503] ret_from_fork+0x20f/0x910 [ 1201.636809][T10503] ? __switch_to+0x51c/0x750 [ 1201.636987][T10503] ? __pfx_kthread+0x10/0x10 [ 1201.637169][T10503] ret_from_fork_asm+0x1a/0x30 [ 1201.637385][T10503] [ 1201.960850][T10503] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1202.625848][T14117] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1203.256643][T15771] loop8: detected capacity change from 0 to 32768 [ 1203.266862][T15771] xfs: Deprecated parameter 'attr2' [ 1203.272475][T15771] XFS: attr2 mount option is deprecated. [ 1203.382537][T15771] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1203.759230][T15783] A link change request failed with some changes committed already. Interface sit1 may have been left with an inconsistent configuration, please check. [ 1203.845041][T15771] XFS (loop8): Ending clean mount [ 1203.859504][T15771] XFS (loop8): Quotacheck needed: Please wait. [ 1204.061998][T15771] XFS (loop8): Quotacheck: Done. [ 1204.593448][T11536] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1204.782535][T15793] input: syz1 as /devices/virtual/input/input26 [ 1206.161005][T15806] loop3: detected capacity change from 0 to 64 [ 1206.388852][ T29] audit: type=1800 audit(1771008058.802:140): pid=15806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3026" name="file1" dev="loop3" ino=22 res=0 errno=0 [ 1206.485916][T15806] hfs: keylen 1794 too large [ 1206.559517][T15806] hfs: keylen 1794 too large [ 1206.569028][T15810] hfs: keylen 1794 too large [ 1208.238640][ T5783] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1208.484988][ T5783] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1208.541511][ T5783] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1208.614922][ T5783] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1208.686161][ T5783] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1208.717551][ T5783] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.780308][ T5783] usb 3-1: config 0 descriptor?? [ 1209.306556][T15835] loop3: detected capacity change from 0 to 128 [ 1209.313792][ T5783] plantronics 0003:047F:FFFF.0025: reserved main item tag 0xd [ 1209.361034][T15835] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1209.400891][T15835] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1209.620580][ T5783] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1209.759270][ T5783] usb 3-1: USB disconnect, device number 22 [ 1209.984833][T10503] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1210.147184][T15844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1210.236074][T15844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1210.555773][T15839] loop7: detected capacity change from 0 to 40427 [ 1210.607800][T15839] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x1f52010) [ 1210.616487][T15839] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 1210.633039][T15839] F2FS-fs (loop7): Image doesn't support compression [ 1210.640217][T15839] F2FS-fs (loop7): build fault injection type: 0x4 [ 1210.659621][T15839] F2FS-fs (loop7): invalid crc value [ 1210.979046][T15839] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1211.011516][T15839] F2FS-fs (loop7): Start checkpoint disabled! [ 1211.038295][T15839] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0 [ 1211.082901][T15839] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 1211.090336][T15839] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 1211.324127][T10503] kworker/u8:21: attempt to access beyond end of device [ 1211.324127][T10503] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1211.418233][T10503] CPU: 1 UID: 0 PID: 10503 Comm: kworker/u8:21 Tainted: G L syzkaller #0 PREEMPT(full) [ 1211.418425][T10503] Tainted: [L]=SOFTLOCKUP [ 1211.418482][T10503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1211.418612][T10503] Workqueue: writeback wb_workfn (flush-7:7) [ 1211.418845][T10503] Call Trace: [ 1211.418893][T10503] [ 1211.418949][T10503] __dump_stack+0x26/0x30 [ 1211.419121][T10503] dump_stack_lvl+0x14c/0x1c0 [ 1211.419298][T10503] dump_stack+0x1e/0x25 [ 1211.419462][T10503] f2fs_handle_critical_error+0xa6f/0xc20 [ 1211.419708][T10503] f2fs_stop_checkpoint+0x65/0x80 [ 1211.419893][T10503] f2fs_write_end_io+0x1013/0x2470 [ 1211.420158][T10503] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1211.420362][T10503] bio_endio+0xf92/0x10e0 [ 1211.420589][T10503] submit_bio_noacct+0x533/0x28d0 [ 1211.420869][T10503] submit_bio+0x57a/0x620 [ 1211.421089][T10503] f2fs_submit_write_bio+0x115/0x2d0 [ 1211.421284][T10503] __submit_merged_bio+0x16f/0x6a0 [ 1211.421460][T10503] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1211.421669][T10503] __submit_merged_write_cond+0x44a/0x990 [ 1211.421896][T10503] f2fs_write_data_pages+0x4d65/0x5810 [ 1211.422213][T10503] ? kmsan_get_metadata+0xf1/0x160 [ 1211.422430][T10503] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1211.422639][T10503] ? __pick_eevdf+0x894/0x1800 [ 1211.422823][T10503] ? kmsan_get_metadata+0xf1/0x160 [ 1211.422997][T10503] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1211.423194][T10503] ? kmsan_get_metadata+0xf1/0x160 [ 1211.423375][T10503] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1211.423554][T10503] ? kmsan_get_metadata+0xf1/0x160 [ 1211.423745][T10503] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1211.423931][T10503] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1211.424136][T10503] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1211.424334][T10503] do_writepages+0x3f2/0x860 [ 1211.424527][T10503] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1211.424731][T10503] ? kmsan_get_metadata+0xf1/0x160 [ 1211.424909][T10503] ? kmsan_get_metadata+0xf1/0x160 [ 1211.425115][T10503] __writeback_single_inode+0x101/0x1030 [ 1211.425299][T10503] ? kmsan_get_metadata+0xf1/0x160 [ 1211.425484][T10503] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1211.425689][T10503] writeback_sb_inodes+0xb2d/0x1f10 [ 1211.425948][T10503] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1211.426170][T10503] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1211.426371][T10503] wb_writeback+0x4d0/0xc00 [ 1211.426556][T10503] ? queue_io+0x4b1/0x790 [ 1211.426736][T10503] wb_workfn+0x397/0x1900 [ 1211.426941][T10503] ? kmsan_get_metadata+0xf1/0x160 [ 1211.427155][T10503] ? __pfx_wb_workfn+0x10/0x10 [ 1211.427356][T10503] process_scheduled_works+0xae7/0x1d60 [ 1211.427587][T10503] worker_thread+0xede/0x1580 [ 1211.427796][T10503] kthread+0x53f/0x600 [ 1211.427971][T10503] ? __pfx_worker_thread+0x10/0x10 [ 1211.428129][T10503] ? __pfx_kthread+0x10/0x10 [ 1211.428293][T10503] ret_from_fork+0x20f/0x910 [ 1211.428443][T10503] ? __switch_to+0x51c/0x750 [ 1211.428644][T10503] ? __pfx_kthread+0x10/0x10 [ 1211.428818][T10503] ret_from_fork_asm+0x1a/0x30 [ 1211.429034][T10503] [ 1211.878666][T10503] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1212.019649][T15853] fido_id[15853]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1212.294263][T15862] loop2: detected capacity change from 0 to 64 [ 1217.876571][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1217.884017][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1217.987334][T15912] IPVS: Scheduler module ip_vs_ not found [ 1218.022067][T15918] IPVS: length: 24 != 36888 [ 1218.169557][T15921] loop2: detected capacity change from 0 to 1024 [ 1218.242486][T15921] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1218.480706][T15921] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1218.799245][T11915] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1219.100392][T11915] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1219.160543][T11915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.200843][T11915] usb 4-1: config 0 descriptor?? [ 1219.216350][T11915] cp210x 4-1:0.0: cp210x converter detected [ 1219.612741][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1219.712842][T11915] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1219.736387][T11915] cp210x 4-1:0.0: GPIO initialisation failed: -524 [ 1219.816576][T11915] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1219.955351][T13414] usb 4-1: USB disconnect, device number 9 [ 1220.009649][T13414] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1220.044622][T13414] cp210x 4-1:0.0: device disconnected [ 1220.143597][T15950] loop2: detected capacity change from 0 to 128 [ 1220.491350][T15950] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1220.819629][T15950] ext4 filesystem being mounted at /664/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1220.946260][T15951] loop8: detected capacity change from 0 to 32768 [ 1220.970988][T15951] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.3073 (15951) [ 1221.007398][T15951] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1221.018680][T15951] BTRFS info (device loop8): using sha256 checksum algorithm [ 1221.492809][T15951] BTRFS info (device loop8): enabling ssd optimizations [ 1221.500414][T15951] BTRFS info (device loop8): turning on async discard [ 1221.508700][T15951] BTRFS info (device loop8): enabling free space tree [ 1221.526154][ T5778] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1221.684374][ T29] audit: type=1800 audit(1771008074.082:141): pid=15951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3073" name="file2" dev="loop8" ino=261 res=0 errno=0 [ 1222.099696][T11536] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1222.155401][T15975] loop3: detected capacity change from 0 to 2048 [ 1222.430629][T15975] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1222.632595][T15975] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1222.757343][T15975] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 1222.838374][T15975] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1222.838374][T15975] [ 1222.988898][T15975] EXT4-fs (loop3): Total free blocks count 0 [ 1223.008915][T15975] EXT4-fs (loop3): Free/Dirty block details [ 1223.015125][T15975] EXT4-fs (loop3): free_blocks=2415919504 [ 1223.098166][T15975] EXT4-fs (loop3): dirty_blocks=48 [ 1223.103551][T15975] EXT4-fs (loop3): Block reservation details [ 1223.208211][T15975] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 1223.679741][T14117] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1225.348702][T16019] netlink: 'syz.8.3089': attribute type 6 has an invalid length. [ 1225.509606][T16021] xt_hashlimit: size too large, truncated to 1048576 [ 1225.851681][T16025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3091'. [ 1226.264092][T16028] netlink: 'syz.8.3092': attribute type 3 has an invalid length. [ 1229.409789][T16063] xt_hashlimit: size too large, truncated to 1048576 [ 1229.633750][T16064] loop3: detected capacity change from 0 to 2048 [ 1229.800343][T16064] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1229.981294][ T29] audit: type=1800 audit(1771008082.392:142): pid=16064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3103" name="file1" dev="loop3" ino=1313 res=0 errno=0 [ 1230.823757][T16081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3109'. [ 1230.883997][T16081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3109'. [ 1231.190069][T16081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3109'. [ 1231.199769][T10507] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1231.258608][T10507] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1231.267724][T10507] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1231.328372][T16081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3109'. [ 1231.382409][T10526] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1235.118991][T16127] loop7: detected capacity change from 0 to 32768 [ 1235.130348][T16127] btrfs: Deprecated parameter 'usebackuproot' [ 1235.136695][T16127] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1235.148563][T16127] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3123 (16127) [ 1235.186755][T16127] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1235.200291][T16127] BTRFS info (device loop7): using crc32c checksum algorithm [ 1235.208366][T16127] BTRFS warning (device loop7): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1235.434910][T10526] BTRFS warning (device loop7): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1235.469256][T16127] BTRFS error (device loop7): failed to load root extent [ 1235.476674][T16127] BTRFS warning (device loop7): try to load backup roots slot 1 [ 1235.487406][T10526] BTRFS warning (device loop7): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1235.501806][T16127] BTRFS warning (device loop7): couldn't read tree root [ 1235.510248][T16127] BTRFS warning (device loop7): try to load backup roots slot 2 [ 1235.605840][T10526] BTRFS error (device loop7): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1235.671286][T16127] BTRFS warning (device loop7): couldn't read tree root [ 1235.678769][T16127] BTRFS warning (device loop7): try to load backup roots slot 3 [ 1235.738988][T16127] BTRFS info (device loop7): rebuilding free space tree [ 1235.811332][T16127] BTRFS info (device loop7): disabling free space tree [ 1235.819937][T16127] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1235.830143][T16127] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1235.857865][T16127] BTRFS info (device loop7): enabling ssd optimizations [ 1235.865301][T16127] BTRFS info (device loop7): turning off barriers [ 1235.872200][T16127] BTRFS info (device loop7): turning on sync discard [ 1235.879277][T16127] BTRFS info (device loop7): enabling disk space caching [ 1235.886534][T16127] BTRFS info (device loop7): force clearing of disk cache [ 1235.894052][T16127] BTRFS info (device loop7): enabling auto defrag [ 1235.901297][T16127] BTRFS info (device loop7): trying to use backup root at mount time [ 1235.909792][T16127] BTRFS info (device loop7): max_inline set to 0 [ 1236.924247][ T8835] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1237.336753][T16165] netlink: 'syz.3.3132': attribute type 13 has an invalid length. [ 1237.376572][T16165] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3132'. [ 1239.380190][ T40] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1239.648667][ T40] usb 3-1: Using ep0 maxpacket: 32 [ 1239.722498][ T40] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 1239.839154][ T40] usb 3-1: config 0 has no interface number 0 [ 1239.908482][ T40] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1240.164432][ T40] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1240.228255][ T40] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.288766][ T40] usb 3-1: Product: syz [ 1240.299502][ T40] usb 3-1: Manufacturer: syz [ 1240.339637][ T40] usb 3-1: SerialNumber: syz [ 1240.367037][ T40] usb 3-1: config 0 descriptor?? [ 1240.418611][T16180] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1240.753755][T16180] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1241.688083][ T40] asix 3-1:0.188 (unnamed net_device) (uninitialized): invalid PHY address: 227 [ 1241.907231][ T40] usb 3-1: USB disconnect, device number 23 [ 1242.076309][T16208] overlayfs: failed to clone upperpath [ 1245.001342][T16242] netlink: 'syz.2.3157': attribute type 25 has an invalid length. [ 1245.047840][T16242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3157'. [ 1246.759015][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1246.783866][T16242] netlink: 'syz.2.3157': attribute type 25 has an invalid length. [ 1246.794661][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 1246.836731][T16242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3157'. [ 1247.497039][T16261] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1247.547003][T16261] overlayfs: failed to set xattr on upper [ 1247.574052][T16261] overlayfs: ...falling back to redirect_dir=nofollow. [ 1247.629641][T16261] overlayfs: ...falling back to index=off. [ 1247.636423][T16261] overlayfs: ...falling back to uuid=null. [ 1247.675719][T16261] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 1248.596827][T16275] bridge_slave_1: entered promiscuous mode [ 1249.785862][T16287] loop8: detected capacity change from 0 to 128 [ 1249.825801][T16287] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1249.868482][T16287] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1249.875373][T16287] EXT4-fs: Ignoring removed nobh option [ 1249.927833][T16287] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1250.005841][T16287] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1250.158583][T16287] ext4 filesystem being mounted at /268/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1250.612061][T16287] fscrypt (loop8): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1250.890587][T16304] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3175'. [ 1250.930033][T16304] tipc: Started in network mode [ 1250.953710][T16304] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 1251.031758][T16304] tipc: Enabled bearer , priority 10 [ 1251.155378][T11536] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1252.148695][T11915] tipc: Node number set to 4269801494 [ 1252.355542][T16311] loop8: detected capacity change from 0 to 32768 [ 1252.408084][T16311] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.3179 (16311) [ 1252.437037][T16311] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1252.447634][T16311] BTRFS info (device loop8): using crc32c checksum algorithm [ 1252.660887][T16311] BTRFS info (device loop8): enabling ssd optimizations [ 1252.668387][T16311] BTRFS info (device loop8): turning on async discard [ 1252.675394][T16311] BTRFS info (device loop8): enabling free space tree [ 1253.098854][T11536] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1253.268748][T12095] libceph: connect (1)[c::]:6789 error -13 [ 1253.314931][T12095] libceph: mon0 (1)[c::]:6789 connect error [ 1253.345575][T13414] libceph: connect (1)[b::]:6789 error -13 [ 1253.401620][T13414] libceph: mon0 (1)[b::]:6789 connect error [ 1253.679018][T13414] libceph: connect (1)[c::]:6789 error -13 [ 1253.685321][T13414] libceph: mon0 (1)[c::]:6789 connect error [ 1253.749397][T12095] libceph: connect (1)[b::]:6789 error -13 [ 1253.763834][T12095] libceph: mon0 (1)[b::]:6789 connect error [ 1253.916161][T16337] ceph: No mds server is up or the cluster is laggy [ 1253.936183][T16341] ceph: No mds server is up or the cluster is laggy [ 1254.796927][T16354] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1255.838474][T13414] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1255.858138][T12095] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1256.040158][T13414] usb 4-1: Using ep0 maxpacket: 16 [ 1256.056318][T12095] usb 3-1: Using ep0 maxpacket: 32 [ 1256.116014][T12095] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1256.178758][T12095] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 1256.208985][T13414] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1256.243005][T13414] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1256.265046][T12095] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1256.312012][T12095] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1256.353007][T13414] usb 4-1: config 0 descriptor?? [ 1256.371147][T12095] usb 3-1: Product: syz [ 1256.391409][T12095] usb 3-1: Manufacturer: syz [ 1256.449812][T12095] usb 3-1: SerialNumber: syz [ 1256.461007][T13414] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1256.513018][T12095] usb 3-1: config 0 descriptor?? [ 1256.571825][T16375] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3198'. [ 1256.636583][T16375] netlink: 'syz.7.3198': attribute type 5 has an invalid length. [ 1256.645223][ T29] audit: type=1326 audit(1771008109.052:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16372 comm="syz.8.3197" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb63399bf79 code=0x0 [ 1256.679273][T16375] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3198'. [ 1256.695357][T12095] hub 3-1:0.0: bad descriptor, ignoring hub [ 1256.832403][T12095] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1256.911762][T16375] geneve2: entered promiscuous mode [ 1256.933169][T16375] geneve2: entered allmulticast mode [ 1257.078398][ T154] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 8192 - 0 [ 1257.125813][ T154] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 8192 - 0 [ 1257.182352][ T154] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 8192 - 0 [ 1257.187344][T12095] usb 3-1: reset high-speed USB device number 24 using dummy_hcd [ 1257.240593][ T154] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 8192 - 0 [ 1257.874502][T11915] usb 3-1: USB disconnect, device number 24 [ 1258.003680][T13414] gspca_sonixj: reg_w1 err -71 [ 1258.048532][T13414] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 1258.128389][T13414] usb 4-1: USB disconnect, device number 10 [ 1258.148576][T11915] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1258.342279][T11915] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1258.398173][T11915] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1258.437630][T11915] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1258.485461][T11915] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1258.530793][T11915] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.573347][T11915] usb 8-1: config 0 descriptor?? [ 1259.176255][T11915] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1259.396189][T12095] usb 8-1: USB disconnect, device number 14 [ 1260.026619][T16389] fido_id[16389]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1261.871690][T16402] loop3: detected capacity change from 0 to 32768 [ 1261.911006][T16402] [ 1261.911006][T16402] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1261.911006][T16402] [ 1261.945249][T16402] [ 1261.945249][T16402] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1261.945249][T16402] [ 1261.957277][T16402] [ 1261.957277][T16402] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1261.957277][T16402] [ 1261.968228][T16402] [ 1261.968228][T16402] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1261.968228][T16402] [ 1261.979009][T16402] [ 1261.979009][T16402] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1261.979009][T16402] [ 1261.989967][T16402] [ 1261.989967][T16402] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1261.989967][T16402] [ 1262.079096][ T111] [ 1262.079096][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1262.079096][ T111] [ 1262.178880][T10507] [ 1262.178880][T10507] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1262.178880][T10507] [ 1262.268424][T10507] [ 1262.268424][T10507] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1262.268424][T10507] [ 1262.342715][ T110] [ 1262.342715][ T110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1262.342715][ T110] [ 1262.412544][T14117] [ 1262.412544][T14117] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1262.412544][T14117] [ 1262.456215][T14117] [ 1262.456215][T14117] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1262.456215][T14117] [ 1267.615278][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 1270.229831][T12095] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1270.442783][T12095] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1270.478544][T12095] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.517003][T12095] usb 4-1: config 0 descriptor?? [ 1271.344944][T16467] loop8: detected capacity change from 0 to 32768 [ 1271.405979][T16467] JBD2: Ignoring recovery information on journal [ 1271.513620][T16463] uprobe: syz.7.3227:16463 failed to unregister, leaking uprobe [ 1271.590169][T16467] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 1271.866325][T12095] usb 4-1: Cannot set autoneg [ 1271.939918][T12095] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1272.113272][T12095] usb 4-1: USB disconnect, device number 11 [ 1272.155148][T11536] ocfs2: Unmounting device (7,8) on (node local) [ 1273.278457][T16487] loop7: detected capacity change from 0 to 128 [ 1273.897534][T16491] loop8: detected capacity change from 0 to 256 [ 1273.969187][T16490] input: syz0 as /devices/virtual/input/input28 [ 1274.001931][T16491] exfat: Deprecated parameter 'utf8' [ 1274.007597][T16491] exfat: Deprecated parameter 'utf8' [ 1274.078522][T16491] exfat: Deprecated parameter 'utf8' [ 1274.347110][T16493] loop2: detected capacity change from 0 to 2048 [ 1274.375382][T16491] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1274.483311][T16493] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1274.616632][T16493] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1277.887603][T16513] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3251'. [ 1278.148251][T11915] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1278.328655][T11915] usb 3-1: Using ep0 maxpacket: 8 [ 1278.370266][T11915] usb 3-1: config 0 interface 0 altsetting 41 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1278.428655][T11915] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1278.436706][T11915] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 1278.498214][T11915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1278.577245][T11915] usb 3-1: config 0 descriptor?? [ 1278.989536][T12095] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1279.022343][T16520] loop8: detected capacity change from 0 to 128 [ 1279.167049][T11915] logitech-hidpp-device 0003:046D:C086.0027: hidraw0: USB HID v0.09 Device [HID 046d:c086] on usb-dummy_hcd.2-1/input0 [ 1279.178794][T12095] usb 8-1: Using ep0 maxpacket: 32 [ 1279.224730][T12095] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 1279.286572][T12095] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1279.319880][T11915] usb 3-1: USB disconnect, device number 25 [ 1279.334657][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1279.348603][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1279.395557][T12095] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1279.427216][T12095] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1279.441147][T12095] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1279.482608][T12095] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 1279.568683][T12095] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1279.626239][T16522] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3255'. [ 1279.641397][T12095] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1279.721295][T12095] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1279.778303][T12095] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.839627][T12095] usb 8-1: config 0 descriptor?? [ 1279.873382][T16518] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1280.333371][T12095] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1280.448672][T16525] loop8: detected capacity change from 0 to 512 [ 1280.527749][T16525] EXT4-fs: Ignoring removed oldalloc option [ 1280.640217][T16523] fido_id[16523]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1280.726623][T16525] EXT4-fs (loop8): 1 truncate cleaned up [ 1280.830310][T16525] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1281.067258][T16525] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000. [ 1281.565426][T11536] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1281.771831][T12095] usb 8-1: USB disconnect, device number 15 [ 1281.801180][T12095] usblp0: removed [ 1282.010241][T16543] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3261'. [ 1282.050161][T16543] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3261'. [ 1282.340330][T16543] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3261'. [ 1282.350095][T10500] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1282.415600][ T2965] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1282.439305][T16543] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3261'. [ 1282.465090][ T2965] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1282.516000][ T2965] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1282.668511][T16546] vcan0: tx drop: invalid da for name 0xffffffffffffffff [ 1282.846232][T16549] loop3: detected capacity change from 0 to 64 [ 1283.894357][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880561a2c00: rx timeout, send abort [ 1283.950430][ T29] audit: type=1326 audit(1771008136.362:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16556 comm="syz.3.3268" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f23fad9bf79 code=0x0 [ 1284.402978][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880561a2c00: abort rx timeout. Force session deactivation [ 1285.418813][T16576] loop7: detected capacity change from 0 to 1024 [ 1285.569280][T16576] hfsplus: invalid file type 0174377 for inode 21 [ 1285.589453][T16576] hfsplus: invalid file type 0174377 for inode 21 [ 1285.742195][T16585] hfsplus: invalid file type 0174377 for inode 21 [ 1286.372964][T16588] netlink: 'syz.4.3281': attribute type 4 has an invalid length. [ 1287.665053][T16606] loop8: detected capacity change from 0 to 512 [ 1287.873609][T16606] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1287.964849][T16606] ext4 filesystem being mounted at /293/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1288.134573][T16606] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #2: comm syz.8.3289: corrupted inode contents [ 1288.208505][T16606] EXT4-fs error (device loop8): ext4_dirty_inode:6450: inode #2: comm syz.8.3289: mark_inode_dirty error [ 1288.242799][T16606] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #2: comm syz.8.3289: corrupted inode contents [ 1288.333257][T16606] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #2: comm syz.8.3289: mark_inode_dirty error [ 1288.354328][T16618] EXT4-fs warning (device loop8): ext4_es_cache_extent:1082: inode #2: comm syz.8.3289: ES cache extent failed: add [0,1,20,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 1288.354328][T16618] [ 1288.463615][T16606] EXT4-fs error (device loop8): ext4_get_first_dir_block:3538: inode #18: comm syz.8.3289: directory missing '.' [ 1288.757464][T16620] sctp: [Deprecated]: syz.3.3293 (pid 16620) Use of int in max_burst socket option deprecated. [ 1288.757464][T16620] Use struct sctp_assoc_value instead [ 1288.869762][T11536] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1289.629787][T16627] loop8: detected capacity change from 0 to 1024 [ 1289.840354][T16627] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1290.456187][T11536] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1291.676217][T16649] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3306'. [ 1292.331127][T16656] loop3: detected capacity change from 0 to 512 [ 1292.438335][T16656] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 1292.446910][T16656] UDF-fs: Scanning with blocksize 512 failed [ 1292.578359][T16656] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 1292.586015][T16656] UDF-fs: Scanning with blocksize 1024 failed [ 1292.692259][T16656] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 1292.732843][T16656] UDF-fs: Scanning with blocksize 2048 failed [ 1292.770849][T16656] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1292.795265][T16656] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1293.205992][T16664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1293.252540][T16664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1293.311248][T16664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1293.356255][T16664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1293.434313][T16664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1293.490205][T16663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1294.158482][T11915] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1294.370861][T11915] usb 4-1: Using ep0 maxpacket: 32 [ 1294.394302][T11915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1294.429264][T11915] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1294.488591][T11915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1294.536950][T11915] usb 4-1: config 0 descriptor?? [ 1294.601765][T11915] hub 4-1:0.0: USB hub found [ 1294.847084][T11915] hub 4-1:0.0: 1 port detected [ 1295.964929][T11915] usb 4-1-port1: cannot reset (err = -71) [ 1295.965107][T12095] usb 4-1: USB disconnect, device number 12 [ 1296.026222][T11915] usb 4-1-port1: attempt power cycle [ 1296.419205][T13414] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1296.618780][T13414] usb 9-1: Using ep0 maxpacket: 32 [ 1296.652763][T13414] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 1296.682619][T13414] usb 9-1: config 0 has no interface number 0 [ 1296.722296][T13414] usb 9-1: config 0 interface 184 has no altsetting 0 [ 1296.802148][T13414] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1296.848793][T13414] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.857101][T13414] usb 9-1: Product: syz [ 1296.908227][T13414] usb 9-1: Manufacturer: syz [ 1296.913097][T13414] usb 9-1: SerialNumber: syz [ 1296.989089][T13414] usb 9-1: config 0 descriptor?? [ 1298.320907][T13414] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1298.475253][T13414] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1298.620445][T13414] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1298.721787][T13414] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1298.858264][T13414] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1298.988913][T13414] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1299.089662][T13414] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -71 [ 1299.435878][T13414] usb 9-1: USB disconnect, device number 15 [ 1300.740591][T12095] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1300.928627][T16728] loop2: detected capacity change from 0 to 4096 [ 1300.968786][T16728] EXT4-fs: Ignoring removed mblk_io_submit option [ 1300.998653][T12095] usb 9-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1301.018391][T12095] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.068306][T16728] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1301.080791][T12095] usb 9-1: config 0 descriptor?? [ 1301.326782][T16728] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1301.868171][T16741] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1301.948587][T16741] overlayfs: upper fs does not support tmpfile. [ 1302.013244][T16741] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1302.390247][T12095] pegasus 9-1:0.0: can't reset MAC [ 1302.419350][T12095] pegasus 9-1:0.0: probe with driver pegasus failed with error -5 [ 1302.568840][T12095] usb 9-1: USB disconnect, device number 16 [ 1302.759973][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1303.751197][T16762] loop2: detected capacity change from 0 to 1024 [ 1304.005466][ T29] audit: type=1800 audit(1771008156.412:145): pid=16762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3346" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 1304.083172][T16762] syz.2.3346: attempt to access beyond end of device [ 1304.083172][T16762] loop2: rw=8388608, sector=5778, nr_sectors = 2 limit=1024 [ 1304.188519][T16762] buffer_io_error: 138 callbacks suppressed [ 1304.188610][T16762] Buffer I/O error on dev loop2, logical block 2889, async page read [ 1304.223672][T16767] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3351'. [ 1304.281993][T16762] syz.2.3346: attempt to access beyond end of device [ 1304.281993][T16762] loop2: rw=8388608, sector=393216, nr_sectors = 2 limit=1024 [ 1304.352946][T16762] Buffer I/O error on dev loop2, logical block 196608, async page read [ 1304.544511][T16762] syz.2.3346: attempt to access beyond end of device [ 1304.544511][T16762] loop2: rw=8388608, sector=393218, nr_sectors = 2 limit=1024 [ 1304.671965][T16762] Buffer I/O error on dev loop2, logical block 196609, async page read [ 1304.718685][T16762] syz.2.3346: attempt to access beyond end of device [ 1304.718685][T16762] loop2: rw=8388608, sector=393220, nr_sectors = 2 limit=1024 [ 1304.828330][T16762] Buffer I/O error on dev loop2, logical block 196610, async page read [ 1304.836978][T16762] syz.2.3346: attempt to access beyond end of device [ 1304.836978][T16762] loop2: rw=8388608, sector=393222, nr_sectors = 2 limit=1024 [ 1304.891207][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1304.945645][T16762] Buffer I/O error on dev loop2, logical block 196611, async page read [ 1304.995114][T16762] syz.2.3346: attempt to access beyond end of device [ 1304.995114][T16762] loop2: rw=8388608, sector=393224, nr_sectors = 2 limit=1024 [ 1305.049248][T16762] Buffer I/O error on dev loop2, logical block 196612, async page read [ 1305.112753][T16762] syz.2.3346: attempt to access beyond end of device [ 1305.112753][T16762] loop2: rw=8388608, sector=393226, nr_sectors = 2 limit=1024 [ 1305.178227][T16762] Buffer I/O error on dev loop2, logical block 196613, async page read [ 1305.235511][T16762] syz.2.3346: attempt to access beyond end of device [ 1305.235511][T16762] loop2: rw=8388608, sector=393228, nr_sectors = 2 limit=1024 [ 1305.294115][T16762] Buffer I/O error on dev loop2, logical block 196614, async page read [ 1305.331956][T16762] syz.2.3346: attempt to access beyond end of device [ 1305.331956][T16762] loop2: rw=8388608, sector=393230, nr_sectors = 2 limit=1024 [ 1305.407316][T16762] Buffer I/O error on dev loop2, logical block 196615, async page read [ 1305.427184][T16762] syz.2.3346: attempt to access beyond end of device [ 1305.427184][T16762] loop2: rw=8388608, sector=393232, nr_sectors = 2 limit=1024 [ 1305.442753][T16762] Buffer I/O error on dev loop2, logical block 196616, async page read [ 1306.148370][T16791] netlink: 'syz.4.3360': attribute type 1 has an invalid length. [ 1306.156377][T16791] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3360'. [ 1309.424287][T13415] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1309.647819][T13415] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1309.697100][T13415] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1309.748440][T13415] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1309.758214][T13415] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.766461][T13415] usb 4-1: Product: syz [ 1309.793751][T13415] usb 4-1: Manufacturer: syz [ 1309.834394][T13415] usb 4-1: SerialNumber: syz [ 1309.913969][T13415] usb 4-1: config 0 descriptor?? [ 1309.956092][T16836] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1309.969166][T16836] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1310.237126][T16836] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1310.283866][T16836] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1310.944705][T13415] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 1311.040521][T13415] usb 4-1: USB disconnect, device number 17 [ 1312.982830][T16873] loop7: detected capacity change from 0 to 512 [ 1313.151446][T16873] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1313.208924][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1313.218389][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1313.488199][T16873] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.3391: iget: bad i_size value: 38620345925642 [ 1313.668690][T16873] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1313.678091][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1313.694306][ C0] EXT4-fs (loop7): initial error at time 1771008166: ext4_orphan_get:1391: inode 15 [ 1313.704260][ C0] EXT4-fs (loop7): last error at time 1771008166: ext4_orphan_get:1391: inode 15 [ 1313.746019][T16873] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.3391: couldn't read orphan inode 15 (err -117) [ 1313.867573][T16873] loop7: lost filesystem error report for type 5 error -117 [ 1313.875844][T16873] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1314.119867][T16873] EXT4-fs (loop7): shut down requested (1) [ 1314.720687][ T8835] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1315.710863][T16905] loop3: detected capacity change from 0 to 512 [ 1315.846402][T16905] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1315.939377][T16905] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1316.098714][T16905] EXT4-fs (loop3): shut down requested (1) [ 1316.454247][T14117] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1316.855702][T16914] loop3: detected capacity change from 0 to 64 [ 1317.213228][T16914] loop3: detected capacity change from 64 to 0 [ 1317.218145][ C1] blk_print_req_error: 138 callbacks suppressed [ 1317.218595][ C1] I/O error, dev loop3, sector 7 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1317.236596][T16919] BFS-fs: find_inode(): Unable to read inode loop3:00000002 [ 1318.906601][T16928] loop7: detected capacity change from 0 to 32768 [ 1318.918315][T16928] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3413 (16928) [ 1318.967869][T16928] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1318.979274][T16928] BTRFS info (device loop7): using crc32c checksum algorithm [ 1319.309018][T13415] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1319.330669][T16928] BTRFS info (device loop7): enabling ssd optimizations [ 1319.338172][T16928] BTRFS info (device loop7): turning on async discard [ 1319.345150][T16928] BTRFS info (device loop7): enabling free space tree [ 1319.698418][T13415] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1319.749180][T13415] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1319.807163][T13415] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1319.848581][T13415] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1319.938701][T13415] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1319.964375][T13415] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.010745][ T8835] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1320.064427][T13415] usb 3-1: config 0 descriptor?? [ 1320.928764][T13415] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1322.143166][T16964] loop8: detected capacity change from 0 to 32768 [ 1322.161490][T16964] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.3421 (16964) [ 1322.244214][T16964] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1322.254818][T16964] BTRFS info (device loop8): using crc32c checksum algorithm [ 1322.568123][T16964] BTRFS info (device loop8): setting nodatasum [ 1322.576051][T16964] BTRFS info (device loop8): setting nodatacow [ 1322.582736][T16964] BTRFS info (device loop8): turning on async discard [ 1322.589844][T16964] BTRFS info (device loop8): enabling free space tree [ 1322.596836][T16964] BTRFS info (device loop8): enabling auto defrag [ 1322.603815][T16964] BTRFS info (device loop8): max_inline set to 0 [ 1322.953467][T11915] usb 3-1: USB disconnect, device number 26 [ 1323.013176][T11536] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1325.612865][T16997] overlayfs: failed to resolve './file0': -2 [ 1325.777528][T17000] loop7: detected capacity change from 0 to 256 [ 1326.100036][T17000] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 1326.328209][T17000] exFAT-fs (loop7): valid_size(562949953421322) is greater than size(10) [ 1327.517261][T17004] loop8: detected capacity change from 0 to 8192 [ 1327.655439][T17007] loop2: detected capacity change from 0 to 1024 [ 1328.920480][T10500] hfsplus: b-tree write err: -5, ino 3 [ 1329.246742][T17016] loop8: detected capacity change from 0 to 128 [ 1329.426470][T17016] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1329.518894][T17016] hpfs: filesystem error: improperly stopped [ 1329.525179][T17016] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1329.628476][T17016] hpfs: You really don't want any checks? You are crazy... [ 1329.637548][T17016] hpfs: hpfs_map_sector(): read error [ 1329.739295][T17016] hpfs: code page support is disabled [ 1330.268483][T17016] hpfs: hpfs_map_4sectors(): unaligned read [ 1330.295153][T17017] loop7: detected capacity change from 0 to 40427 [ 1330.304983][T17016] hpfs: hpfs_map_4sectors(): unaligned read [ 1330.325091][T17017] F2FS-fs (loop7): Image doesn't support compression [ 1330.333416][T17017] F2FS-fs (loop7): build fault injection rate: 690 [ 1330.343419][T17017] F2FS-fs (loop7): invalid crc value [ 1330.359618][T17016] hpfs: filesystem error: unable to find root dir [ 1330.597386][T17016] hpfs: hpfs_map_4sectors(): unaligned read [ 1330.756852][T17017] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1330.774345][T17017] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1331.336831][ T8835] bio_check_eod: 26 callbacks suppressed [ 1331.336930][ T8835] syz-executor: attempt to access beyond end of device [ 1331.336930][ T8835] loop7: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1331.474071][ T8835] CPU: 0 UID: 0 PID: 8835 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1331.474270][ T8835] Tainted: [L]=SOFTLOCKUP [ 1331.474332][ T8835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1331.474424][ T8835] Call Trace: [ 1331.474481][ T8835] [ 1331.474541][ T8835] __dump_stack+0x26/0x30 [ 1331.474729][ T8835] dump_stack_lvl+0x14c/0x1c0 [ 1331.474910][ T8835] dump_stack+0x1e/0x25 [ 1331.475074][ T8835] f2fs_handle_critical_error+0xa6f/0xc20 [ 1331.475314][ T8835] f2fs_stop_checkpoint+0x65/0x80 [ 1331.475514][ T8835] f2fs_write_end_io+0x1013/0x2470 [ 1331.475780][ T8835] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1331.475990][ T8835] bio_endio+0xf92/0x10e0 [ 1331.476201][ T8835] submit_bio_noacct+0x533/0x28d0 [ 1331.476467][ T8835] submit_bio+0x57a/0x620 [ 1331.476689][ T8835] f2fs_submit_write_bio+0x115/0x2d0 [ 1331.476879][ T8835] __submit_merged_bio+0x16f/0x6a0 [ 1331.477060][ T8835] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1331.477257][ T8835] __submit_merged_write_cond+0x703/0x990 [ 1331.477463][ T8835] f2fs_submit_merged_write+0x31/0x40 [ 1331.477646][ T8835] f2fs_sync_node_pages+0x1fd7/0x20c0 [ 1331.477830][ T8835] ? sync_inode_metadata+0xa4/0xe0 [ 1331.477992][ T8835] ? kmsan_get_metadata+0xf1/0x160 [ 1331.478170][ T8835] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1331.478395][ T8835] f2fs_write_checkpoint+0x16d1/0x3720 [ 1331.478720][ T8835] kill_f2fs_super+0x320/0x990 [ 1331.478906][ T8835] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1331.479053][ T8835] deactivate_locked_super+0xcb/0x3c0 [ 1331.479288][ T8835] deactivate_super+0x12f/0x140 [ 1331.479498][ T8835] cleanup_mnt+0x7eb/0x870 [ 1331.479722][ T8835] ? __pfx___cleanup_mnt+0x10/0x10 [ 1331.479929][ T8835] __cleanup_mnt+0x22/0x30 [ 1331.480127][ T8835] task_work_run+0x208/0x2b0 [ 1331.480328][ T8835] exit_to_user_mode_loop+0x306/0x1b60 [ 1331.480531][ T8835] ? user_path_at+0x1fc/0x330 [ 1331.480694][ T8835] ? __x64_sys_umount+0x1dc/0x250 [ 1331.480881][ T8835] do_syscall_64+0x24d/0xf80 [ 1331.481064][ T8835] ? clear_bhb_loop+0x50/0xa0 [ 1331.481228][ T8835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1331.481392][ T8835] RIP: 0033:0x7f544259d1d7 [ 1331.481509][ T8835] Code: a2 c7 05 bc e3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1331.481653][ T8835] RSP: 002b:00007fff599166f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1331.481795][ T8835] RAX: 0000000000000000 RBX: 00007f5442631c3b RCX: 00007f544259d1d7 [ 1331.481899][ T8835] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff599167b0 [ 1331.481995][ T8835] RBP: 00007fff599167b0 R08: 00007fff599177b0 R09: 00000000ffffffff [ 1331.482097][ T8835] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff59917840 [ 1331.482197][ T8835] R13: 00007f5442631c3b R14: 0000000000144eac R15: 00007fff59917880 [ 1331.482337][ T8835] [ 1331.810872][ T8835] F2FS-fs (loop7): Remounting filesystem read-only [ 1331.817889][ T8835] CPU: 1 UID: 0 PID: 8835 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1331.818066][ T8835] Tainted: [L]=SOFTLOCKUP [ 1331.818126][ T8835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1331.818207][ T8835] Call Trace: [ 1331.818266][ T8835] [ 1331.818320][ T8835] __dump_stack+0x26/0x30 [ 1331.818525][ T8835] dump_stack_lvl+0x14c/0x1c0 [ 1331.818715][ T8835] dump_stack+0x1e/0x25 [ 1331.818893][ T8835] f2fs_handle_critical_error+0xa6f/0xc20 [ 1331.819137][ T8835] f2fs_stop_checkpoint+0x65/0x80 [ 1331.819344][ T8835] f2fs_write_end_io+0x1013/0x2470 [ 1331.819611][ T8835] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1331.819831][ T8835] bio_endio+0xf92/0x10e0 [ 1331.820045][ T8835] submit_bio_noacct+0x533/0x28d0 [ 1331.820323][ T8835] submit_bio+0x57a/0x620 [ 1331.820545][ T8835] f2fs_submit_write_bio+0x115/0x2d0 [ 1331.820738][ T8835] __submit_merged_bio+0x16f/0x6a0 [ 1331.820930][ T8835] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1331.821131][ T8835] __submit_merged_write_cond+0x703/0x990 [ 1331.821346][ T8835] f2fs_submit_merged_write+0x31/0x40 [ 1331.821525][ T8835] f2fs_sync_node_pages+0x1fd7/0x20c0 [ 1331.821714][ T8835] ? sync_inode_metadata+0xa4/0xe0 [ 1331.821886][ T8835] ? kmsan_get_metadata+0xf1/0x160 [ 1331.822071][ T8835] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1331.822302][ T8835] f2fs_write_checkpoint+0x16d1/0x3720 [ 1331.822594][ T8835] kill_f2fs_super+0x320/0x990 [ 1331.822795][ T8835] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1331.822948][ T8835] deactivate_locked_super+0xcb/0x3c0 [ 1331.823183][ T8835] deactivate_super+0x12f/0x140 [ 1331.823404][ T8835] cleanup_mnt+0x7eb/0x870 [ 1331.823618][ T8835] ? __pfx___cleanup_mnt+0x10/0x10 [ 1331.823837][ T8835] __cleanup_mnt+0x22/0x30 [ 1331.824034][ T8835] task_work_run+0x208/0x2b0 [ 1331.824239][ T8835] exit_to_user_mode_loop+0x306/0x1b60 [ 1331.824448][ T8835] ? user_path_at+0x1fc/0x330 [ 1331.824610][ T8835] ? __x64_sys_umount+0x1dc/0x250 [ 1331.824807][ T8835] do_syscall_64+0x24d/0xf80 [ 1331.824990][ T8835] ? clear_bhb_loop+0x50/0xa0 [ 1331.825163][ T8835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1331.825330][ T8835] RIP: 0033:0x7f544259d1d7 [ 1331.825443][ T8835] Code: a2 c7 05 bc e3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1331.825579][ T8835] RSP: 002b:00007fff599166f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1331.825726][ T8835] RAX: 0000000000000000 RBX: 00007f5442631c3b RCX: 00007f544259d1d7 [ 1331.825830][ T8835] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff599167b0 [ 1331.825927][ T8835] RBP: 00007fff599167b0 R08: 00007fff599177b0 R09: 00000000ffffffff [ 1331.826034][ T8835] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff59917840 [ 1331.826154][ T8835] R13: 00007f5442631c3b R14: 0000000000144eac R15: 00007fff59917880 [ 1331.826305][ T8835] [ 1332.203489][T10509] BFS-fs: find_inode(): Unable to read inode loop3:00000001 [ 1332.558409][ T8835] F2FS-fs (loop7): Remounting filesystem read-only [ 1333.189419][T10509] BFS-fs: find_inode(): Unable to read inode loop3:00000000 [ 1333.891553][T10503] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1334.416309][T10503] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1334.627708][T10503] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1334.925032][T10503] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.538998][T10503] bridge_slave_1: left allmulticast mode [ 1335.544989][T10503] bridge_slave_1: left promiscuous mode [ 1335.569311][T10503] bridge0: port 2(bridge_slave_1) entered disabled state [ 1335.659567][T10503] bridge_slave_0: left allmulticast mode [ 1335.665562][T10503] bridge_slave_0: left promiscuous mode [ 1335.719614][T10503] bridge0: port 1(bridge_slave_0) entered disabled state [ 1336.293676][T17035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1336.345853][T17035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1336.409740][T17035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1336.456630][T17036] loop2: detected capacity change from 0 to 1024 [ 1337.092060][T17031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1337.188221][T17031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1337.522639][T17041] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1337.538170][T17041] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1337.568824][T17041] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1337.572723][T10503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1337.644065][T17041] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1337.681244][T17041] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1337.806719][T10503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1337.874865][T10503] bond0 (unregistering): Released all slaves [ 1339.771478][ T5782] Bluetooth: hci1: command tx timeout [ 1339.923647][T17053] loop2: detected capacity change from 0 to 32768 [ 1339.951163][T17053] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3450 (17053) [ 1339.978688][T17053] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1339.989323][T17053] BTRFS info (device loop2): using sha256 checksum algorithm [ 1340.004598][T17053] workqueue: max_active 33554440 requested for btrfs-worker is out of range, clamping between 1 and 2048 [ 1340.108851][T17053] workqueue: max_active 33554440 requested for btrfs-delalloc is out of range, clamping between 1 and 2048 [ 1340.184645][T17053] workqueue: max_active 33554440 requested for btrfs-endio is out of range, clamping between 1 and 2048 [ 1340.239185][T17053] workqueue: max_active 33554440 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048 [ 1340.268417][T17053] workqueue: max_active 33554440 requested for btrfs-rmw is out of range, clamping between 1 and 2048 [ 1340.289574][T17053] workqueue: max_active 33554440 requested for btrfs-endio-write is out of range, clamping between 1 and 2048 [ 1340.507114][T17053] BTRFS info (device loop2): rebuilding free space tree [ 1340.559379][T10503] hsr_slave_0: left promiscuous mode [ 1340.594378][T17053] BTRFS info (device loop2): disabling free space tree [ 1340.601904][T17053] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1340.612366][T17053] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1340.637801][T17053] BTRFS info (device loop2): disabling tree log [ 1340.645293][T17053] BTRFS info (device loop2): turning on async discard [ 1340.652606][T17053] BTRFS info (device loop2): force clearing of disk cache [ 1340.679219][T10503] hsr_slave_1: left promiscuous mode [ 1340.687653][T10503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1340.758134][T10503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1340.770486][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1340.778082][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1340.891427][T10503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1340.948422][T10503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1341.118795][T10503] veth1_macvtap: left promiscuous mode [ 1341.124590][T10503] veth0_macvtap: left promiscuous mode [ 1341.168574][T10503] veth1_vlan: left promiscuous mode [ 1341.174227][T10503] veth0_vlan: left promiscuous mode [ 1341.312711][T17080] loop7: detected capacity change from 0 to 1024 [ 1341.527526][T17080] hfsplus: b-tree write err: -5, ino 2 [ 1341.621143][T17080] hfsplus: b-tree write err: -5, ino 2 [ 1341.850810][ T5782] Bluetooth: hci1: command tx timeout [ 1341.887288][ T5778] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1342.306099][T16751] hfsplus: b-tree write err: -5, ino 25 [ 1342.329424][T16751] hfsplus: b-tree write err: -5, ino 4 [ 1342.343851][T16751] hfsplus: b-tree write err: -5, ino 2 [ 1343.458581][T17094] loop8: detected capacity change from 0 to 4096 [ 1343.703070][T17094] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1343.762591][ T40] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 1343.931542][ T5782] Bluetooth: hci1: command tx timeout [ 1344.102490][ T40] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1344.165087][ T40] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.198531][ T40] usb 3-1: Product: syz [ 1344.203613][ T40] usb 3-1: Manufacturer: syz [ 1344.230999][ T40] usb 3-1: SerialNumber: syz [ 1344.302268][ T40] usb 3-1: config 0 descriptor?? [ 1344.768553][ T40] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1344.879419][T10503] team0 (unregistering): Port device team_slave_1 removed [ 1345.067052][T10503] team0 (unregistering): Port device team_slave_0 removed [ 1345.548420][T11536] EXT4-fs error (device loop8): ext4_readdir:265: inode #12: block 80: comm syz-executor: path /335/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 1345.615967][ T40] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1345.679448][T11536] EXT4-fs error (device loop8): ext4_empty_dir:3094: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 1345.770675][ T40] usb 3-1: USB disconnect, device number 27 [ 1345.845592][T11536] EXT4-fs warning (device loop8): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 1345.932725][T11536] EXT4-fs error (device loop8): ext4_readdir:265: inode #12: block 80: comm syz-executor: path /335/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 1346.018412][ T5782] Bluetooth: hci1: command tx timeout [ 1346.055462][T11536] EXT4-fs error (device loop8): ext4_empty_dir:3094: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 1346.188925][T11536] EXT4-fs warning (device loop8): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 1346.282439][T11536] EXT4-fs error (device loop8): ext4_readdir:265: inode #12: block 80: comm syz-executor: path /335/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 1346.409221][T11536] EXT4-fs error (device loop8): ext4_empty_dir:3094: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 1346.558485][T11536] EXT4-fs warning (device loop8): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 1346.611223][T11536] EXT4-fs error (device loop8): ext4_readdir:265: inode #12: block 80: comm syz-executor: path /335/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 1346.764492][T11536] EXT4-fs error (device loop8): ext4_empty_dir:3094: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 1346.975174][T11536] EXT4-fs warning (device loop8): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 1347.004513][T11536] EXT4-fs error (device loop8): ext4_readdir:265: inode #12: block 80: comm syz-executor: path /335/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 1347.091172][T17122] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1347.108758][T11536] EXT4-fs error (device loop8): ext4_empty_dir:3094: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 1347.268220][T11536] EXT4-fs warning (device loop8): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 1347.331058][T11536] EXT4-fs warning (device loop8): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 1347.399741][T11536] EXT4-fs warning (device loop8): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 1347.489353][T11536] EXT4-fs warning (device loop8): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 1347.608596][T11536] EXT4-fs warning (device loop8): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 1347.693738][T11536] EXT4-fs warning (device loop8): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 1348.271941][T17040] chnl_net:caif_netlink_parms(): no params data found [ 1350.295288][T17040] bridge0: port 1(bridge_slave_0) entered blocking state [ 1350.305702][T17040] bridge0: port 1(bridge_slave_0) entered disabled state [ 1350.338572][T17040] bridge_slave_0: entered allmulticast mode [ 1350.380155][T17040] bridge_slave_0: entered promiscuous mode [ 1350.455784][T17040] bridge0: port 2(bridge_slave_1) entered blocking state [ 1350.498955][T17040] bridge0: port 2(bridge_slave_1) entered disabled state [ 1350.540087][T17040] bridge_slave_1: entered allmulticast mode [ 1350.560310][T17040] bridge_slave_1: entered promiscuous mode [ 1351.067002][T16890] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1351.102255][T17040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1351.194460][T17040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1351.655951][T17040] team0: Port device team_slave_0 added [ 1351.746522][T17040] team0: Port device team_slave_1 added [ 1352.354277][T10526] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1352.431467][T10526] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.693925][T10526] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1352.728238][T10526] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.789967][T17040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1352.797165][T17040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1352.898288][T17040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1352.949042][T17040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1352.956216][T17040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1353.018100][T17040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1353.084136][T10526] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1353.112947][T10526] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1353.271466][T10526] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1353.308941][T10526] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1353.612383][T17040] hsr_slave_0: entered promiscuous mode [ 1353.639946][T17040] hsr_slave_1: entered promiscuous mode [ 1355.560058][T17041] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1355.580347][T17041] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1355.590133][T17041] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1355.607275][T17041] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1355.635571][T17041] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1356.222266][T10526] bond0 (unregistering): Released all slaves [ 1357.688118][T17041] Bluetooth: hci2: command tx timeout [ 1357.764157][T10526] hsr_slave_0: left promiscuous mode [ 1357.797557][T10526] hsr_slave_1: left promiscuous mode [ 1357.812609][T17206] loop2: detected capacity change from 0 to 128 [ 1357.858903][T10526] veth1_macvtap: left promiscuous mode [ 1357.864694][T10526] veth0_macvtap: left promiscuous mode [ 1357.898790][T10526] veth1_vlan: left promiscuous mode [ 1357.904428][T10526] veth0_vlan: left promiscuous mode [ 1357.974469][T17206] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1358.101504][T17206] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1358.608434][ T40] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1358.786264][ T40] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1358.825091][ T40] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1358.876143][ T40] usb 8-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1358.896684][ T40] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.917510][ T40] usb 8-1: Product: syz [ 1358.923917][ T40] usb 8-1: Manufacturer: syz [ 1358.944926][ T40] usb 8-1: SerialNumber: syz [ 1358.984425][ T40] usb 8-1: config 0 descriptor?? [ 1359.026042][T17212] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1359.046086][T17212] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1359.394867][T17212] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1359.415130][T17212] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1359.528279][T17216] loop2: detected capacity change from 0 to 128 [ 1359.655625][T17216] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1359.773231][T17041] Bluetooth: hci2: command tx timeout [ 1359.809095][T17216] ext4 filesystem being mounted at /745/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1359.911001][ T40] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 1360.087245][T17220] EXT4-fs (loop2): shut down requested (1) [ 1360.563843][ T40] dm9601 8-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 1360.762197][ T40] dm9601 8-1:0.0 eth10: register 'dm9601' at usb-dummy_hcd.7-1, Davicom DM96xx USB 10/100 Ethernet, 72:62:64:49:f1:f6 [ 1360.806798][ T40] usb 8-1: USB disconnect, device number 16 [ 1360.821829][ T40] dm9601 8-1:0.0 eth10: unregister 'dm9601' usb-dummy_hcd.7-1, Davicom DM96xx USB 10/100 Ethernet [ 1360.855086][ T5778] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1361.848143][T17041] Bluetooth: hci2: command tx timeout [ 1362.314816][T17040] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1362.552661][T17040] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1362.876590][T17040] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1363.075515][T17040] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1363.191857][T17186] chnl_net:caif_netlink_parms(): no params data found [ 1363.491002][T17242] loop2: detected capacity change from 0 to 128 [ 1363.929869][T17041] Bluetooth: hci2: command tx timeout [ 1364.591660][T10509] kworker/u8:24: attempt to access beyond end of device [ 1364.591660][T10509] loop2: rw=1, sector=145, nr_sectors = 8 limit=128 [ 1364.688416][T10509] kworker/u8:24: attempt to access beyond end of device [ 1364.688416][T10509] loop2: rw=1, sector=161, nr_sectors = 8 limit=128 [ 1364.748714][T10509] kworker/u8:24: attempt to access beyond end of device [ 1364.748714][T10509] loop2: rw=1, sector=177, nr_sectors = 8 limit=128 [ 1364.812403][T10509] kworker/u8:24: attempt to access beyond end of device [ 1364.812403][T10509] loop2: rw=1, sector=193, nr_sectors = 8 limit=128 [ 1364.904794][T17040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1365.008731][T17259] loop7: detected capacity change from 0 to 512 [ 1365.109821][T17259] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.3509: inode has both inline data and extents flags [ 1365.184257][T17259] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1365.185355][T17259] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.3509: couldn't read orphan inode 15 (err -117) [ 1365.195053][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1365.195163][ C1] EXT4-fs (loop7): initial error at time 1771008217: ext4_orphan_get:1391: inode 15 [ 1365.195348][ C1] EXT4-fs (loop7): last error at time 1771008217: ext4_orphan_get:1391: inode 15 [ 1365.328901][T17259] loop7: lost filesystem error report for type 5 error -117 [ 1365.331998][T17259] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1365.368384][T17186] bridge0: port 1(bridge_slave_0) entered blocking state [ 1365.380035][T17186] bridge0: port 1(bridge_slave_0) entered disabled state [ 1365.398112][T17186] bridge_slave_0: entered allmulticast mode [ 1365.479506][T17186] bridge_slave_0: entered promiscuous mode [ 1365.552558][T17186] bridge0: port 2(bridge_slave_1) entered blocking state [ 1365.602546][T17186] bridge0: port 2(bridge_slave_1) entered disabled state [ 1365.637120][T17259] Invalid argument reading file caps for ./file0 [ 1365.644116][T17186] bridge_slave_1: entered allmulticast mode [ 1365.665929][T17186] bridge_slave_1: entered promiscuous mode [ 1366.073396][ T8835] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1366.206332][T17040] 8021q: adding VLAN 0 to HW filter on device team0 [ 1366.302384][T17186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1366.404217][T17186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1366.803755][T17186] team0: Port device team_slave_0 added [ 1366.914421][T17186] team0: Port device team_slave_1 added [ 1367.186935][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1367.194663][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1367.601304][T17186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1367.624405][T17186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1367.667767][T17186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1367.705389][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 1367.713046][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1367.768362][T17186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1367.776253][T17186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1367.853887][T17186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1368.233118][T17290] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1368.716794][T17186] hsr_slave_0: entered promiscuous mode [ 1368.760742][T17186] hsr_slave_1: entered promiscuous mode [ 1368.801883][T17186] debugfs: 'hsr0' already exists in 'hsr' [ 1368.838505][T17186] Cannot create hsr debugfs directory [ 1369.247016][T17040] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1369.311049][T17040] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1369.630548][T17296] loop2: detected capacity change from 0 to 4096 [ 1370.036200][T17292] loop7: detected capacity change from 0 to 65536 [ 1370.138868][T17292] XFS (loop7): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1370.298392][T17292] XFS (loop7): Ending clean mount [ 1370.478131][T17296] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 1370.526149][T17296] ntfs3(loop2): ino=1a, mi_enum_attr [ 1370.551799][T17296] ntfs3(loop2): ino=1a, mi_enum_attr [ 1370.596634][T17296] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 1370.797394][ T8835] XFS (loop7): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1373.960719][T17331] loop7: detected capacity change from 0 to 65536 [ 1374.044108][T17331] XFS (loop7): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1374.222756][T17040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1374.302906][T17331] XFS (loop7): Ending clean mount [ 1374.314503][T17331] XFS (loop7): Quotacheck needed: Please wait. [ 1374.416777][T17331] XFS (loop7): Quotacheck: Done. [ 1374.558850][ T8835] XFS (loop7): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1375.042199][T17186] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1375.159920][T17186] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1375.375807][T17186] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1375.495823][T17186] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1375.789800][T17040] veth0_vlan: entered promiscuous mode [ 1375.937725][T17040] veth1_vlan: entered promiscuous mode [ 1376.841890][T17040] veth0_macvtap: entered promiscuous mode [ 1377.192357][T17040] veth1_macvtap: entered promiscuous mode [ 1377.392040][T17370] netlink: 'syz.4.3539': attribute type 13 has an invalid length. [ 1377.518889][T17370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1377.535896][T17370] 8021q: adding VLAN 0 to HW filter on device team0 [ 1377.572101][T17370] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1378.019079][T17040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1378.393944][T17377] loop2: detected capacity change from 0 to 4096 [ 1379.060789][T17377] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 1379.227031][T17040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1379.487631][T17186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1379.511504][T17377] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 1379.538900][T10503] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1379.575091][ T56] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1379.697082][ T56] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1379.728220][ T56] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1379.974441][T17186] 8021q: adding VLAN 0 to HW filter on device team0 [ 1380.151851][ T2965] bridge0: port 1(bridge_slave_0) entered blocking state [ 1380.159694][ T2965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1380.286667][T13415] kernel read not supported for file /admmidi2 (pid: 13415 comm: kworker/0:17) [ 1380.363796][ T2965] bridge0: port 2(bridge_slave_1) entered blocking state [ 1380.371475][ T2965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1382.012842][T17413] netlink: 'syz.2.3550': attribute type 11 has an invalid length. [ 1383.475145][T17426] loop2: detected capacity change from 0 to 32768 [ 1383.486805][T17426] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3552 (17426) [ 1383.522730][T17426] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1383.536224][T17426] BTRFS info (device loop2): using blake2b checksum algorithm [ 1383.881284][T17426] BTRFS info (device loop2): enabling ssd optimizations [ 1383.888767][T17426] BTRFS info (device loop2): turning on async discard [ 1383.890528][T17186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1383.895744][T17426] BTRFS info (device loop2): enabling free space tree [ 1383.909793][T17426] BTRFS info (device loop2): use zstd compression, level 3 [ 1384.670454][ T5778] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1387.157062][T17491] loop7: detected capacity change from 0 to 1024 [ 1387.176622][T17186] veth0_vlan: entered promiscuous mode [ 1387.290286][T17491] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1387.413775][T17186] veth1_vlan: entered promiscuous mode [ 1388.039957][T17186] veth0_macvtap: entered promiscuous mode [ 1388.187383][T17186] veth1_macvtap: entered promiscuous mode [ 1388.331871][T17506] ------------[ cut here ]------------ [ 1388.337574][T17506] WARNING: fs/exec.c:119 at path_noexec+0x2ac/0x310, CPU#1: syz.7.3568/17506 [ 1388.346878][T17506] Modules linked in: [ 1388.351274][T17506] CPU: 1 UID: 0 PID: 17506 Comm: syz.7.3568 Tainted: G L syzkaller #0 PREEMPT(full) [ 1388.362816][T17506] Tainted: [L]=SOFTLOCKUP [ 1388.367324][T17506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1388.377776][T17506] RIP: 0010:path_noexec+0x2ac/0x310 [ 1388.383409][T17506] Code: 49 89 ff 8b 7d d4 e8 a3 9b e1 ff 4c 89 ff e9 c8 fe ff ff 44 89 e7 e8 93 9b e1 ff 4d 85 ed 0f 85 a3 fe ff ff e8 45 5f 37 ff 90 <0f> 0b 90 48 8b 7d c0 4c 8b 37 e8 85 90 e1 ff 48 8b 00 48 89 45 c8 [ 1388.403594][T17506] RSP: 0018:ffff88812d6bfbc0 EFLAGS: 00010283 [ 1388.410277][T17506] RAX: ffffffff82c5ff2b RBX: ffff888058444d78 RCX: 0000000000080000 [ 1388.418728][T17506] RDX: ffffc90009404000 RSI: 0000000000000056 RDI: 0000000000000057 [ 1388.427188][T17506] RBP: ffff88812d6bfc00 R08: ffffea000000000f R09: 0000000000000003 [ 1388.435577][T17506] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000000 [ 1388.443930][T17506] R13: 0000000000000000 R14: ffff8881007bac20 R15: 0000000000000000 [ 1388.452303][T17506] FS: 00007f54434106c0(0000) GS:ffff8881aa71e000(0000) knlGS:0000000000000000 [ 1388.461754][T17506] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1388.468676][T17506] CR2: 0000001b34021ff8 CR3: 0000000131f6a000 CR4: 00000000003526f0 [ 1388.476881][T17506] Call Trace: [ 1388.480611][T17506] [ 1388.483749][T17506] do_mmap+0x1572/0x1d70 [ 1388.488486][T17506] vm_mmap_pgoff+0x40c/0x760 [ 1388.493420][T17506] ksys_mmap_pgoff+0x51c/0x7d0 [ 1388.498749][T17506] __x64_sys_mmap+0x19c/0x260 [ 1388.503797][T17506] x64_sys_call+0x18cd/0x3ea0 [ 1388.509048][T17506] do_syscall_64+0x134/0xf80 [ 1388.513960][T17506] ? clear_bhb_loop+0x50/0xa0 [ 1388.519067][T17506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1388.525265][T17506] RIP: 0033:0x7f544259bf79 [ 1388.530130][T17506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1388.550791][T17506] RSP: 002b:00007f5443410028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1388.559691][T17506] RAX: ffffffffffffffda RBX: 00007f5442815fa0 RCX: 00007f544259bf79 [ 1388.568157][T17506] RDX: 000000000200001a RSI: 0000000000001000 RDI: 0000200000002000 [ 1388.576734][T17506] RBP: 00007f54426327e0 R08: 0000000000000005 R09: 00000000ffffe000 [ 1388.585436][T17506] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 1388.594033][T17506] R13: 00007f5442816038 R14: 00007f5442815fa0 R15: 00007fff59917488 [ 1388.602529][T17506] [ 1388.605726][T17506] ---[ end trace 0000000000000000 ]--- [ 1388.960093][T17186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1389.032351][T17501] loop2: detected capacity change from 0 to 4096 [ 1389.052088][T10526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1389.081912][T17510] netlink: 'syz.4.3569': attribute type 8 has an invalid length. [ 1389.098769][T10526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1389.161491][T17510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3569'. [ 1389.218347][T17501] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 1389.288447][T17186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1389.433139][T17510] bond0: entered promiscuous mode [ 1389.479238][T17510] bond_slave_0: entered promiscuous mode [ 1389.505292][T17510] bond_slave_1: entered promiscuous mode [ 1389.576735][T17510] gretap0: entered promiscuous mode [ 1389.633179][T17510] hsr1: entered promiscuous mode [ 1389.997456][T10526] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1389.998766][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1390.077488][T10526] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.108751][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1390.167762][T10503] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.193598][ T56] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1391.743088][T17533] ALSA: seq fatal error: cannot create timer (-16) [ 1392.295819][T17539] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 1392.546070][T17544] loop2: detected capacity change from 0 to 1024 [ 1392.969343][T17544] hfsplus: xattr searching failed [ 1393.416794][ T12] hfsplus: bad catalog file entry [ 1393.468506][ T12] hfsplus: b-tree write err: -5, ino 3 [ 1396.768350][T17608] Invalid ELF header magic: != ELF [ 1397.404404][T17616] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3597'. [ 1397.546376][T17623] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3597'. [ 1398.956240][T17625] loop2: detected capacity change from 0 to 32768 [ 1399.048949][T17625] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1399.177522][T17640] loop7: detected capacity change from 0 to 1024 [ 1399.190467][T17640] EXT4-fs: Ignoring removed mblk_io_submit option [ 1399.374071][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1399.419948][T17640] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1399.460780][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1399.468431][T17625] XFS (loop2): Ending clean mount [ 1399.499003][T17625] XFS (loop2): Metadata CRC error detected at xfs_inobt_read_verify+0xaf/0x2c0, xfs_finobt block 0x10 [ 1399.511363][T17625] XFS (loop2): Unmount and run xfs_repair [ 1399.517315][T17625] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1399.525250][T17625] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 1399.534645][T17625] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 1399.544044][T17625] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 1399.554043][T17625] 00000030: 00 00 00 00 0f 8d d2 a2 00 00 18 00 00 00 40 37 ..............@7 [ 1399.563412][T17625] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 1399.572655][T17625] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1399.581947][T17625] 00000060: 00 00 00 00 00 f0 00 00 00 00 00 00 00 00 00 00 ................ [ 1399.591322][T17625] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1399.600547][T17625] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x33d/0x5f0" at daddr 0x10 len 4 error 74 [ 1399.615897][T17625] loop2: lost filesystem error report for type 5 error -117 [ 1399.616519][T17625] XFS (loop2): Failed to initialize disk quotas, err -117. [ 1399.688844][T17041] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1400.023284][T10500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1400.068179][T10500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1400.090504][ T8835] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1400.257522][ T5778] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1400.290532][ T5778] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair. [ 1400.976159][T17650] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3607'. [ 1401.732409][ T5942] ===================================================== [ 1401.739997][ T5942] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0xef3/0x3400 [ 1401.747624][ T5942] _copy_to_iter+0xef3/0x3400 [ 1401.753005][ T5942] copy_page_to_iter+0x482/0x900 [ 1401.758427][ T5942] filemap_read+0x1cd6/0x2300 [ 1401.763318][ T5942] blkdev_read_iter+0x89f/0xb00 [ 1401.768611][ T5942] vfs_read+0x8ec/0xf90 [ 1401.772962][ T5942] ksys_read+0x1d9/0x470 [ 1401.777392][ T5942] __x64_sys_read+0x97/0xf0 [ 1401.782354][ T5942] x64_sys_call+0x311c/0x3ea0 [ 1401.791271][ T5942] do_syscall_64+0x134/0xf80 [ 1401.796112][ T5942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1401.802406][ T5942] [ 1401.805323][ T5942] Uninit was stored to memory at: [ 1401.810850][ T5942] _copy_to_iter+0x130f/0x3400 [ 1401.815798][ T5942] copy_page_to_iter+0x482/0x900 [ 1401.821200][ T5942] shmem_file_read_iter+0x904/0x1140 [ 1401.826683][ T5942] lo_rw_aio+0x1164/0x14a0 [ 1401.831471][ T5942] loop_process_work+0xf05/0x1ff0 [ 1401.836719][ T5942] loop_rootcg_workfn+0x2b/0x40 [ 1401.843467][ T5942] process_scheduled_works+0xae7/0x1d60 [ 1401.849577][ T5942] worker_thread+0xede/0x1580 [ 1401.854461][ T5942] kthread+0x53f/0x600 [ 1401.858919][ T5942] ret_from_fork+0x20f/0x910 [ 1401.863728][ T5942] ret_from_fork_asm+0x1a/0x30 [ 1401.869010][ T5942] [ 1401.871452][ T5942] Uninit was stored to memory at: [ 1401.876796][ T5942] copy_folio_from_iter_atomic+0xea0/0x38b0 [ 1401.883098][ T5942] generic_perform_write+0x8b7/0x1050 [ 1401.888818][ T5942] shmem_file_write_iter+0x2b7/0x2f0 [ 1401.894311][ T5942] lo_rw_aio+0x1164/0x14a0 [ 1401.899151][ T5942] loop_process_work+0xf05/0x1ff0 [ 1401.904471][ T5942] loop_workfn+0x3e/0x60 [ 1401.909695][ T5942] process_scheduled_works+0xae7/0x1d60 [ 1401.915515][ T5942] worker_thread+0xede/0x1580 [ 1401.920621][ T5942] kthread+0x53f/0x600 [ 1401.924904][ T5942] ret_from_fork+0x20f/0x910 [ 1401.929980][ T5942] ret_from_fork_asm+0x1a/0x30 [ 1401.934979][ T5942] [ 1401.937426][ T5942] Uninit was stored to memory at: [ 1401.942914][ T5942] xlog_write+0x1a75/0x20f0 [ 1401.947629][ T5942] xlog_cil_push_work+0x3533/0x5030 [ 1401.953335][ T5942] process_scheduled_works+0xae7/0x1d60 [ 1401.959220][ T5942] worker_thread+0xede/0x1580 [ 1401.964105][ T5942] kthread+0x53f/0x600 [ 1401.968523][ T5942] ret_from_fork+0x20f/0x910 [ 1401.973321][ T5942] ret_from_fork_asm+0x1a/0x30 [ 1401.978499][ T5942] [ 1401.980927][ T5942] Uninit was stored to memory at: [ 1401.986269][ T5942] xfs_inode_item_format_attr_fork+0x6f1/0xa80 [ 1401.992863][ T5942] xfs_inode_item_format+0x2024/0x2280 [ 1401.998698][ T5942] xlog_cil_commit+0x17f8/0x4760 [ 1402.003868][ T5942] __xfs_trans_commit+0x556/0xf20 [ 1402.009799][ T5942] xfs_trans_roll+0xfd/0x600 [ 1402.014631][ T5942] xfs_defer_trans_roll+0x106/0x520 [ 1402.020188][ T5942] xfs_defer_finish_noroll+0xce3/0x1d80 [ 1402.025971][ T5942] xfs_trans_commit+0x165/0x270 [ 1402.031483][ T5942] xfs_attr_set+0x1da1/0x2030 [ 1402.036398][ T5942] xfs_attr_change+0x408/0x5b0 [ 1402.041520][ T5942] xfs_xattr_set+0x1d4/0x2f0 [ 1402.046313][ T5942] __vfs_setxattr+0x742/0x840 [ 1402.051559][ T5942] __vfs_setxattr_noperm+0x224/0xad0 [ 1402.057072][ T5942] __vfs_setxattr_locked+0x1f8/0x510 [ 1402.062723][ T5942] vfs_setxattr+0x276/0x690 [ 1402.067442][ T5942] filename_setxattr+0x396/0xcb0 [ 1402.072766][ T5942] path_setxattrat+0x702/0x800 [ 1402.078096][ T5942] __x64_sys_lsetxattr+0x103/0x1c0 [ 1402.083442][ T5942] x64_sys_call+0x168d/0x3ea0 [ 1402.088580][ T5942] do_syscall_64+0x134/0xf80 [ 1402.093401][ T5942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1402.099629][ T5942] [ 1402.102086][ T5942] Uninit was created at: [ 1402.106700][ T5942] __kmalloc_node_track_caller_noprof+0x4ff/0x1710 [ 1402.114092][ T5942] krealloc_node_align_noprof+0x463/0xf10 [ 1402.120223][ T5942] xfs_broot_realloc+0x361/0x480 [ 1402.125436][ T5942] xfs_bmap_broot_realloc+0x243/0x650 [ 1402.131167][ T5942] xfs_bmap_extents_to_btree+0x1f8/0x1430 [ 1402.137126][ T5942] xfs_bmap_add_extent_hole_real+0x2267/0x3040 [ 1402.143726][ T5942] xfs_bmapi_allocate+0x48d2/0x4f50 [ 1402.149415][ T5942] xfs_bmapi_write+0x10a9/0x26f0 [ 1402.154597][ T5942] xfs_attr_rmtval_set_blk+0x171/0x390 [ 1402.160502][ T5942] xfs_attr_set_iter+0x35f/0x7980 [ 1402.165751][ T5942] xfs_attr_finish_item+0x16c/0x540 [ 1402.199020][ T5942] xfs_defer_finish_one+0x528/0x13c0 [ 1402.204591][ T5942] xfs_defer_finish_noroll+0x1064/0x1d80 [ 1402.211730][ T5942] xfs_trans_commit+0x165/0x270 [ 1402.217467][ T5942] xfs_attr_set+0x1da1/0x2030 [ 1402.222521][ T5942] xfs_attr_change+0x408/0x5b0 [ 1402.227470][ T5942] xfs_xattr_set+0x1d4/0x2f0 [ 1402.232442][ T5942] __vfs_setxattr+0x742/0x840 [ 1402.237333][ T5942] __vfs_setxattr_noperm+0x224/0xad0 [ 1402.243021][ T5942] __vfs_setxattr_locked+0x1f8/0x510 [ 1402.248828][ T5942] vfs_setxattr+0x276/0x690 [ 1402.253560][ T5942] filename_setxattr+0x396/0xcb0 [ 1402.258854][ T5942] path_setxattrat+0x702/0x800 [ 1402.263794][ T5942] __x64_sys_lsetxattr+0x103/0x1c0 [ 1402.269264][ T5942] x64_sys_call+0x168d/0x3ea0 [ 1402.274170][ T5942] do_syscall_64+0x134/0xf80 [ 1402.279148][ T5942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1402.285250][ T5942] [ 1402.287680][ T5942] Bytes 884-887 of 4096 are uninitialized [ 1402.293689][ T5942] Memory access of size 4096 starts at ffff88804130f000 [ 1402.300933][ T5942] Data copied to user address 00007f9f8e376000 [ 1402.307222][ T5942] [ 1402.309814][ T5942] CPU: 0 UID: 0 PID: 5942 Comm: udevd Tainted: G W L syzkaller #0 PREEMPT(full) [ 1402.321186][ T5942] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1402.326535][ T5942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1402.336976][ T5942] ===================================================== [ 1402.344173][ T5942] Disabling lock debugging due to kernel taint [ 1402.656450][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1402.674641][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1402.779772][ T5942] Kernel panic - not syncing: kmsan.panic set ... [ 1402.786401][ T5942] CPU: 1 UID: 0 PID: 5942 Comm: udevd Tainted: G B W L syzkaller #0 PREEMPT(full) [ 1402.797125][ T5942] Tainted: [B]=BAD_PAGE, [W]=WARN, [L]=SOFTLOCKUP [ 1402.803660][ T5942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1402.813862][ T5942] Call Trace: [ 1402.817312][ T5942] [ 1402.820387][ T5942] __dump_stack+0x26/0x30 [ 1402.824939][ T5942] dump_stack_lvl+0x50/0x1c0 [ 1402.829723][ T5942] ? dump_stack+0x12/0x25 [ 1402.834278][ T5942] dump_stack+0x1e/0x25 [ 1402.838654][ T5942] vpanic+0x7b4/0x1430 [ 1402.842974][ T5942] panic+0x15d/0x160 [ 1402.847111][ T5942] kmsan_report+0x31a/0x320 [ 1402.851822][ T5942] ? kmsan_internal_check_memory+0x166/0x240 [ 1402.857998][ T5942] ? kmsan_copy_to_user+0xef/0x190 [ 1402.863308][ T5942] ? _copy_to_iter+0xef3/0x3400 [ 1402.868335][ T5942] ? copy_page_to_iter+0x482/0x900 [ 1402.873624][ T5942] ? filemap_read+0x1cd6/0x2300 [ 1402.878654][ T5942] ? blkdev_read_iter+0x89f/0xb00 [ 1402.883874][ T5942] ? vfs_read+0x8ec/0xf90 [ 1402.888394][ T5942] ? ksys_read+0x1d9/0x470 [ 1402.892995][ T5942] ? __x64_sys_read+0x97/0xf0 [ 1402.897873][ T5942] ? x64_sys_call+0x311c/0x3ea0 [ 1402.902963][ T5942] ? do_syscall_64+0x134/0xf80 [ 1402.907939][ T5942] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1402.914233][ T5942] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1402.920601][ T5942] ? up_read+0x6a/0xf0 [ 1402.924911][ T5942] ? kmsan_get_metadata+0xf1/0x160 [ 1402.930238][ T5942] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1402.936287][ T5942] ? raw_irqentry_exit_cond_resched+0x3f/0x80 [ 1402.942599][ T5942] ? irqentry_exit+0x8f/0x6d0 [ 1402.947484][ T5942] ? kmsan_get_metadata+0xf1/0x160 [ 1402.952798][ T5942] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1402.958841][ T5942] kmsan_internal_check_memory+0x166/0x240 [ 1402.964892][ T5942] kmsan_copy_to_user+0xef/0x190 [ 1402.970057][ T5942] _copy_to_iter+0xef3/0x3400 [ 1402.974910][ T5942] ? kmsan_get_shadow_origin_ptr+0x35/0xb0 [ 1402.980945][ T5942] ? filemap_get_pages+0x398d/0x3cd0 [ 1402.986572][ T5942] copy_page_to_iter+0x482/0x900 [ 1402.991754][ T5942] ? kmsan_get_metadata+0xf1/0x160 [ 1402.997209][ T5942] filemap_read+0x1cd6/0x2300 [ 1403.002215][ T5942] blkdev_read_iter+0x89f/0xb00 [ 1403.007296][ T5942] vfs_read+0x8ec/0xf90 [ 1403.011727][ T5942] ? __pfx_blkdev_read_iter+0x10/0x10 [ 1403.017315][ T5942] ksys_read+0x1d9/0x470 [ 1403.021767][ T5942] __x64_sys_read+0x97/0xf0 [ 1403.026465][ T5942] x64_sys_call+0x311c/0x3ea0 [ 1403.031397][ T5942] do_syscall_64+0x134/0xf80 [ 1403.036197][ T5942] ? clear_bhb_loop+0x50/0xa0 [ 1403.041066][ T5942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1403.047151][ T5942] RIP: 0033:0x7f9f8e4a7407 [ 1403.051718][ T5942] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1403.071515][ T5942] RSP: 002b:00007ffd0fcae480 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 1403.080126][ T5942] RAX: ffffffffffffffda RBX: 00007f9f8eb4f880 RCX: 00007f9f8e4a7407 [ 1403.088260][ T5942] RDX: 0000000000040000 RSI: 00007f9f8e368000 RDI: 0000000000000009 [ 1403.096378][ T5942] RBP: 000055f173116500 R08: 0000000000000000 R09: 0000000000000000 [ 1403.104499][ T5942] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1403.112616][ T5942] R13: 0000000000000000 R14: 000055f173101738 R15: 00007f9f8ec1439c [ 1403.120776][ T5942] [ 1403.124531][ T5942] Kernel Offset: disabled [ 1403.128937][ T5942] Rebooting in 86400 seconds..