last executing test programs: 1m48.057388317s ago: executing program 3 (id=370): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000002c0)=""/72, 0x48}, {&(0x7f0000000340)=""/244, 0xf4}, {&(0x7f0000000700)=""/207, 0xcf}, {&(0x7f0000003940)=""/235, 0xeb}, {&(0x7f0000000440)=""/143, 0x8f}, {&(0x7f0000003a40)=""/210, 0xd2}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x7}, 0x22120) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 1m46.766918567s ago: executing program 3 (id=373): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0xfffffffd) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a339f2d30afddbdf4d200f070700000000000025862f00000001ffffffc3000000060000000087c32be695bfd3ead0084f", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x14040006) 1m46.002078039s ago: executing program 3 (id=375): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x20) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x48001011, r1, 0x0) splice(r0, &(0x7f0000000040)=0x2, r1, 0x0, 0x889, 0x8) 1m44.359049236s ago: executing program 3 (id=380): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$eJzs3c1vVFUbAPDnTj9oKXk7kDcqLqSJMZAoLS1gGuMCtoY0+BE3urDSgkiBhtZo0YSS4MbEuDHGxJUL8b9QIltWunLhxpUhIWpYmjjmztxbOu1Mv2jnEu7vlwxz7zlze86lfeace+acOwGU1lD6TyVif0TMJhGDyeJSXndkmUON193/+5Mz6SOJWu31P5NIsrT89Un2PJAd3BcRP/+UxL6u1eXOLVy9MDkzM30l2x+Zvzg7Mrdw9fD5i5Pnps9NXxp7cWz8+LHj46NHtnRe11qknbrx/oeDn0289d03/ySj3/82kcSJeCV74fLz2C5DMVT/P0lWZw2Mb3dhBenK/k5qtVotT0u6i60TG5f//noi4skYjK548MsbjE9fLbRywI6qJY33bqCMEvEPJZX3A/Jr+5XXwZVCeiVAJ9w72RgAWB3/3Y2xweirjw3svp/E8mGdJCK2NjLXbE9E3Lk9cePs7YkbsUPjcEBri9cj4qlW8Z/U478afVGtx3+lKf7TfsHp7DlNf22L5a8cKhb/0DmN+O9bM/6jTfy/kz5fa8Twu1ssv/pg873+pvjv3+opAQAAAAAAQGndOhkRL7T6/L+yNP8nWsz/GYiIE9tQ/tCK/dWf/1fubkMxQAv3Tka83HL+byWf/VvtWraEtRo9ydnzM9NHIuJ/EXEoenal+6NrlHH4831ft8sbyub/5Y+0/DvZXMCsHne7dzUfMzU5P/kQpwxk7l2PeLrl/N9kqf1PWrT/6TvD7AbL2PfczdPt8taPf2Cn1L6NONiy/X9w14pk7ftzjNT7AyN5r2C1Zz7+4od25W81/t1iAh5e2v7vXjv+q8ny+/XMbb6MowvdtXZ5W+3/9yZv1O8q1JulfTQ5P39lNKI3OdWVpjalj22+zvA4yuMhj5c0/g89u/b4X6v+f39ELK742clfzWuKc0/8O/B7u/ro/0Nx0vif2lT7v/mNsZvVH9uVv7H2/1i9rT+UpRj/g4av8jDtbU5vEY7drbI6XV8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBxUImJPJJXhpe1KZXg4YiAi/h+7KzOX5+afP3v5g0tTaV79+/8r+Tf9Djb2k/z7/6vL9sdW7B+NiL0R8WVXf31/+MzlmamiTx4AAAAAAAAAAAAAAAAAAAAeEQNt1v+n/ugqunbAjusuugJAYVrE/y9F1APoPO0/lJf4h/IS/1Be4h/KS/xDea0d/2+Pd6wiQMdp/6G8xD8AAAAAADxW9h649WsSEYsv9dcfqd4sr6fQmgE7rVJ0BYDCuMUPlJepP1BervGBZJ38vrYHrXfkWmbPPMTBAAAAAAAAAAAAAFA6B/db/w9lZf0/lJf1/1Be+fr/AwXXA+g81/hArLOSv+X6/3WPAgAAAAAAAAAAAAC209zC1QuTMzPTV2y8+WhUo5MbtVrtWvpX8KjUZ/s3kmyGekcKzafCd/5Mezdygvlav4395OLekwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGb/BQAA//8wviV5") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000040)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x2b, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 1m42.888385498s ago: executing program 3 (id=383): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000002c0)={0x400002, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000100)={0x1, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x1}) 1m41.643622785s ago: executing program 3 (id=389): r0 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000080)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00') unlinkat(r2, &(0x7f0000000040)='./file0\x00', 0x0) 6.460471332s ago: executing program 5 (id=694): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x74, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x44, 0x2, {{0xfffffffb, 0x3, 0x8, 0x3, 0xfffffffd, 0x5}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xd9de}}, @TCA_NETEM_REORDER={0xc, 0x3, {0x4, 0x8}}, @TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0xff, 0xe}}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 6.138669081s ago: executing program 0 (id=695): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r1, r1, 0x0, 0xe3aa6ea) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, r1, 0xbff4, 0x100000002}) 5.817004328s ago: executing program 5 (id=696): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) r3 = dup2(r2, r1) readv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/81, 0x51}], 0x10000000000000a1) 5.751343871s ago: executing program 4 (id=698): syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') fchdir(r0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close(0x3) 5.739175402s ago: executing program 1 (id=699): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2000000, &(0x7f0000000240)=ANY=[@ANYBLOB="747a3d5554432c756e695f786c6174653d312c646973636172642c757466383d302c756e695f786c6174653d312c726f6469722c757466383d312c00ee284a015f4d897833fb742704c70630c7e3804afc5fe645f66ca614e17a7c3e5fcafc620b6af31b1896c6c50b36c73b7ad41b37f80916dee79d4e30902beed2"], 0x1, 0x247, &(0x7f0000000840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 5.24646881s ago: executing program 2 (id=700): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffebe}, 0x90) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000b80)={0x0, 0x2000000, 0x10100, 0x0, 0x215}, &(0x7f0000000280)=0x0, &(0x7f0000000240)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x8, 0x0, @fd, 0x10, 0x0, 0xfffdfff9, 0x5, 0x259792cd96d38d81}) io_uring_enter(r0, 0x2d3e, 0x0, 0x28, 0x0, 0x0) 5.053195826s ago: executing program 4 (id=701): syz_open_dev$dri(0x0, 0x20, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0x3, 0xfffffff9, 0x9, 0x101, 0x2, 0xffff}}}}]}, 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.816128527s ago: executing program 0 (id=702): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x862b01) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x3c00, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000b40)={0x52, 0x1, 0x6, {0x1017, 0x1}, {0x61, 0x1}, @cond=[{0x5, 0x6, 0x8, 0x8003, 0x3ecb, 0x9}, {0x600, 0x8000, 0x4, 0x4, 0x1ab1, 0xe00}]}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 4.803775053s ago: executing program 1 (id=703): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0x25) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000005d80)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000000)="bf", 0x1}], 0x1, &(0x7f0000000480)=ANY=[], 0xc}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000a80)="cb", 0x1}], 0x1, &(0x7f0000000500)=ANY=[], 0x10}}], 0x2, 0x4044044) 4.566887518s ago: executing program 2 (id=704): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x1214080, &(0x7f00000000c0)=ANY=[@ANYBLOB="756d61736b3d3000000000011167a16d303030303030303030303132362c636f6465706167653d69736f3833342c6769643d00000000", @ANYRESHEX=0x0, @ANYBLOB="2c6469725f756d61736b3d30303030303030303030303030303030303030303030342c696f636861727365743d63703835322c706172743d3078303030303030303030303030303830302c63726561746f723d5863953a2c00"], 0x11, 0x31c, &(0x7f0000000940)="$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") syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000001080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20c28, 0x0, 0x3, 0x0, &(0x7f0000000080)) syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000280)='./bus\x00', 0xdb9303c4987113b7, 0x0, 0x1, 0x0, &(0x7f0000000080)) chdir(&(0x7f00000003c0)='./bus\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x3, 0x0, &(0x7f0000000140)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) rename(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)='./bus\x00') 4.291724741s ago: executing program 4 (id=705): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb4, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in6=@empty, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x1, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb4}, 0x1, 0x0, 0x0, 0x90}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 4.262403991s ago: executing program 5 (id=706): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xa, 0x8, "ff000000000000000000000000000200"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000200)={0xfffe, 0x81, 0x8, 0xb3, 0xb, "0300"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xd) 4.082113749s ago: executing program 1 (id=707): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x4, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x219d88b, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x1) 3.886328047s ago: executing program 2 (id=708): r0 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000008095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffe01}, 0x94) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x2, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.560797627s ago: executing program 5 (id=709): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 3.560448674s ago: executing program 4 (id=710): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000240)={0x3ff, 0x2924, 0xfffe, 0x9e02, 0xf}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x8, 0xfffffff9, 0x1, 0x13, "0032b3b5c7000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x17) 3.300774865s ago: executing program 1 (id=711): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000003a40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) close_range(r0, r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0xfc, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0xca, 0x0, 0x1000}}}}}}, 0x0) 2.989762299s ago: executing program 0 (id=712): bind$phonet(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x14}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e22, 0x800d, @remote, 0x6459}}, 0x0, 0x0, 0x45, 0x0, "bb02a3c364ca41d6357e544508474004000b42a1ffe9000000000010208a0e2f964e0000c534a632cd6193fcf19b2df3eea18afaa4ff1f56c54dc46d8b6d2ccd00a0cf0a007bbe00"}, 0x5a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f5"], 0x78) 2.222537547s ago: executing program 2 (id=713): ioctl$UFFDIO_MOVE(0xffffffffffffffff, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000bfc000/0xb000)=nil, &(0x7f0000005000/0x3000)=nil, 0xb000, 0x3}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49db, 0x0, 0xfff9, 0xbfff, 0x18, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0xffffef7b, 0x0, 0xb2, 0x10, "1b09000040000000000000e678000000001000"}) r1 = syz_open_pts(r0, 0x20800) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x44) 2.168083598s ago: executing program 4 (id=714): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') syz_usb_connect(0x0, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB="11010000733336088dee1adb2361000000010902"], 0x0) r0 = socket$netlink(0x10, 0x3, 0xb) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, 0x6, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x85}, 0x4) 2.112316202s ago: executing program 1 (id=715): fchdir(0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ppoll(&(0x7f0000000280)=[{r0, 0x10000}, {r0, 0x8210}], 0x2, 0x0, 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000001080)='.\x00', 0x0, &(0x7f0000000140)={0x0, 0x8a, 0x20000, {r0}}, 0x20) 2.049687933s ago: executing program 0 (id=716): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0xfd7, @rand_addr=' \x01\x00'}]}, &(0x7f0000000000)=0x10) shutdown(r0, 0x0) shutdown(r0, 0x1) r2 = fcntl$dupfd(r0, 0x406, r0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000100)={r1, 0xfffffffc}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000001c0)={r3, 0x1000, 0x6, 0x0, 0xffff}, 0x14) 438.238893ms ago: executing program 33 (id=715): fchdir(0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ppoll(&(0x7f0000000280)=[{r0, 0x10000}, {r0, 0x8210}], 0x2, 0x0, 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000001080)='.\x00', 0x0, &(0x7f0000000140)={0x0, 0x8a, 0x20000, {r0}}, 0x20) 379.313817ms ago: executing program 0 (id=718): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3e, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000020c0)="c6cfdab7e6f83fe5e44dd3a8d886a720a29cfb7e50ef99fcf38be6c3b9a9f8c9fdb7b1332c99b85247977ad2d66a577e6f0853366c7561476cb35cf07e6fc1c21d33853a21771a8835a50d941d35a4ccb511cb67ed64259c99811f0e6f176fba1e0fa45fefe030a588f0cf64895fb12a794fd0bd176a38440328d3c6c24c85f50e95c5190eb03fb04f1eb34cae287ed75c8ca8fab2c04dc1fafa14ef93e2a721a12238700dfdabd057e94e697534e1af81921756270313d22a185c146852a5e94300bc8de9904e8c6948d5d2aed05337b9572ee74b77209c6b4710e87fa6661b19283079a46f70a538d96f484b63171bdc3622fcbab6d9bafeaacd755923209c07b8c2f39c04ea713020bcd9e6f1120ea3fbc8dd0b55986c05aa0c0b13ad52f250e9505ba53a887ed7c857e0f56282d6dd5932930efe384bbb198c50aae4b9a65e6a6ccc2904a9121a28df865011c39a54fb0f890cc1f7ef5f5172754f1c2aa8e8acf8c754f22efa88ffea91f2a14133e0a7a8a06bc80d042ce1affa2ebc74b49b48169404b33c62915e54c554d10bc432ec988f7081a8690335d58d0a819d33296db1377af876d84fd557f9a2018ee91f7d39819fc72b0a9bbdd05d6efe6cc459cd42e16f955dcb1a6a2b8b2a71b3a7e1bfa82816abf8c7d3688d53decbc480eaa3821cef557290284d9c504a63768852e15b39841ef3648f14c7edab006a30c7bd518f300df6ff307c0740150dddfdab1e408edb96b2e6ed612b0bc2fca570fa1813d86160a766fe6c11cdbc7a67014fa7645b4b1d3aad378bcce27aa4725ecf7675b2682cc5a15673136e7181ed5ef122017dc72df65af147dcb9ac702f8a6a2eb3f6824ba7db3c32fa4bfbf63dcd45e42a49b6edee22856fc2a43aeb6a3eea91dbd53a231b559ca7b38564853be3bdee7f820966faa916ed4fd335159328f8b727ba068b0ade0e11c9f2c2af4d5244f5d49f9c9f94105a6fe4c71112bcacf9c3dd2861d06cb3fa6b2159bc2028e513298b594ca7da60f4ed30edd7b066c23ca7d9b7d9555b47e687b43b7b5ca3210d939e34dd3d176d8b3d3d2f32f28518aa8b5169362fee4a4ede7d3d218db0ecc3de14789344df20188d907093bbf621fe67ab2a1f29221b2ec334dadc15345fc829005f4f81fc13ad0f5590742295812a7f2108cbbbc37387a7d4174592bf4f94f272306942e6c44b23e96d92911ef416b4159e81b19f267aad20c2aabf7fd285330cbf4c1bb8ac86493e0ef84de88eb7953fcf833e6cc5ebdd50b706bcc148971d24e9d3736ed66e28f75e6a1e2c9a4e2abba887b27815d2f5739fe5f8afe7240841337bfe7a69308186180fed5736fe3cbc2892cb991d0f4400d66952459c54a16448f06fd49995aa65501631d5c42e2abd8f0d890a6bbe49b384bfe27599afd536493981be5f7dbb15bfbc198fcd8ebfca182c53156742e237df31c1dca495e40cf030623a8a081e3bec3b8e5109ba05c0830ef00ff98a4419bae14762d8e0a790c1d517f1f683bb1712a6a0951f024a46efb5c2122460495fa0f4ebaae86286b8a626be2052874f947f18b0c2860ce681a33d5f4217415363fe7a6f8fca125742f03433988d88a5b8e2bf4f3079eb990b6e1ff381b7199717fb885f4f37351bf18bedbeeca351b7bfca5b791b91be0dcf8d169914c449829669e0577d1ebc4fa783d57e0c695cafae201014831a16d8fec47f22d9b79c2acc820f4dba9d1a2986731681ed1f8dd1e83bc2d491302d2f769e6b0bc470404930cad6511492b3adadc6f5073220590d1ce89a520b6d51d6903dd54360cd7047aed76e0a6cd3c3625e67b7c1636fd627aa48f1ee6dd567730c6ec19d1634f62a77f70c64736532455f0d2ae85003e7bb32f06b480a9f7fba5e6917305fd77e38f6936e49c1a3b2a07e242ccc2f9d629d7992937a035574b3efefd515096e30058cb60cc89d8565205f15e71d805ba5d1c4f7b971918e32bd81611a574fc651bc8094f7f3aef8a3ebf95aef1c062ec66e288b1d1ee17ab75723bc46b031744a25cf055c1bc8b083313e38d0fd5d60e832ef28fbff4c93d2d2ed283575a486167c7158e08fe7094d23984bdf38cf6000db39c5d0f7db72325af909b18247d8fddd89eff8831c294d52194a11dae2339938a79ae903eb63bc6e5535796e1c0416cdad01e1493a3075930a0b3b50ad904ff760bec5c6406b10808bf13251df73b4d6fd149a378ac277ccbbfddd9536abdf5c7a8d29e128a290f0d56c9635540f4c9a3ff1d3e0e2b974b50497ebd690dc9393f8b3acfd1650627db8ab784233727f997dab536f1e993980a41f510fa0128d6bf2c8445ed1578b25a36e05f7170b9fbe8ca63e1b4a7235c27f56790c4dd38168ce26358d12b143e9dbae1d01406778250f1c77c80643016ffd4a7a6703b9c3dfa4e7b51fa1d59605d57c9712159eb34c306a988ac95eeb15c3225ccd022d2ccf5f31a81009d2a25891b83e60efe8f718d6c124202f108d23e5e6c89e269890bda8e5681315db361cdf30e4269f2cb530a188f26621a8b263f22bb385d779b3c4eebd16656451087457892e15074abb1c796f0b7f635b9496f3a17220716c449c11c0e82b67b8f1ee6a2709a20676f40f2751df3d74db503db6cb73c955ae1d6983da44de4d349004f3d9db4ba40124416a67bd18d1d9b3c1e4706ddbb2099a2ae16e99c144860d46ef66bc6844963c0563fe2cb8c4049dea32ce5656fbfec6d1aff7ef48bac92c932c9787d9e4cb0c78fc3d70f730c452c20d077b4d9ea304f1b8a2967b1e7af7f05fd35f84d633bf5095b1af53a506f6f61abc99186eba707843e9db2a18fc1c6c77dd79ab9353eaad6457245709acbe9cb381d4458eb5571fa4f4df069ae668b1df2c97f91271be5fc2040031c3980c7555af2d4186875ea4599c873ffaf47aa08c27a0580ceef6251dce4cfd6eb175a1bf36c1fd750826f4e14966e6f196b68da0a524baf86f49ce8c09430554b50a0b387c02ebd59fae9caa1054cba1304aa6732f3990ce6b7bca6b65237f0fc3c79a102e2989dcf3f884002f2efe83e25a3fb217c24c4f66e0973e7ca62483bb52c943ccfbf31324f2b7938de0555a54f47256c903ab65489906c382d7d1022f7f302b186d18b5775e042ba83b874793420a6d854aaec01e3c819d0b11b51558fb9c10b1e2ff96639fb119d90f80aa302c9a6420b4b1230d79fd1e8105259c4ebf9cc3f1eac67f15bcb9d49ae537084c96994ad08214ac07db663c1bbce6499b5665fb5a949ab3d65062467824a2065a9de2f1edc243e03ad38f0ef227519de50a3dc2e8f4a38538be5557c5de56d0110a0759fe96b0e66d20fcb6066995f77fba9c7468434a53ffffffff000000008bd2ea3b1da2a1178acf50249d77757353943cd126b511098230698782ca88d018381f233f4331d3980f72f30caf915a18794de1253734b89303f25826a80ddd75a9bdf14c6f01690833190872ca5431ab92ab3dca92595983b11de0076125059234720906641119dab9c96be9c10d60fb54267bda61fcb85a491df037cd563b229eea02cd192796d36803b04691d385471a5f68bb76afafe9df28f50dcabfefc8e2eb334bcace928b8eb8f6449116fb5a0fa4a0c51e21b8b1f99308d396db60418cb5385bdf6bce7227e514f6cbc9a9fc50b79e8b0530fd51b21679ea1c404dba52811b3c9487f670e622ac7b1ce8028eadbd882d4325663d8dc4f0960c047c5f3099c90c6256bc11e8eef6b325e0f1ed00279a695f2828762f28ecacdc726aedf42064727ec100ffa74d38d47f383946b9f856e53cb939f98df1bb5af2a12810a619f205e030a302628ffb9b2cfcc2e881e239f33844a118a4de2a5c3d6b857c5105db775a61c5d54d1d82048670e8cd2c44a032904005125eb9f999e845efba3a063e3e26b06298f28799975b51118eece2b7fec02d4b888bfb90919bec287aba71296c66dcf749efa3abcddfccee6ef80d03a1638045f18fb96131cbd9a93e657c29eb74de40f433969e1988ac335bdd9c671b5b75ce6e2440be247775f9d597b4d8523c283e774ed0987e10b88e0c5616720502149db329babc91b225359927f88e0b42f02d41a4c9e0ad7c55a0d2c52cf45da6152c0c742f661b562c3a8ecff1145cac3f63fc053e1a14fe7a57742ab709581604fabe54ff13172b5049434d12f6ed9623265af643f725efea21e2ac1b82365033b9cff4158318f40c8894d2bcffdc954fcf7068c97ca2d2b1bf19b9232b918864e3f63fd59f4c8c578821ec5083e46363d9158451c5a92b425e68081b2c7572df44658a4aae41a439c6bb4bdd2f26ff2a357fa2946e5be5cd97ba25f73bbcc6c05fa966d0aa0cf2e45f22e0021468b37d5afebbfba3233e2cd4fd64e1578be72c38891224cd6c70c4cfd146df6a8142f1493772d48650f8fcbd1435ff704e02ec121e9f43de623eff8070f88a623cd395a02b6b1ffe4ea7ae7f443dc8bdac2cfaa126d4ac9d7788dc972c88fd87d3c8758853f1882532e4ff298b466e7d198daa9015127f2937544b34aaf545f39ee00d74e0e1017a30ff2edff701d53f3a13fc61b31fe7d9032a6c4a517c7527e48c0c44a2beebc9a9f9e6f989bc6c255e05bec5ff99547658143d9eb43a1d96aa5288638b4477aa1f84c59d41194335c09d9d5d660640acb84b53520482fb200ca616e1a6f486e6da3e6721479e85d0676ba142d95ecdf1acc76a49e9bf016f951d8b95adc7e8d4317ddbb28b678135a4a9b98fb8b8b5948b682ee70e04a31f7e3c49c52a11acbb29bd8152bbb4fedd2aae8e7ad5330365213d207677855e6cd72bf93502c14b11bd2f2d6e797efc2cc5bc198730e5cc51c92751ece5c167b3328a6deed4bd73c62623bb3874c9ef18e24997e3ac93b0ad9ca7ddd4c0401ec1b942cb21dfe6abfd3aefe2588ac1684bf6b37dc09d9b9d932d5534c707ef8fe0812a403e057d00955559ca3e0f7e70d3cdfab918b8d125061fd53374c97bd0c9d19e68bacb3db46974d36cb1c96b4475acaf4d46b88a578ed570ce09eb540f30cce4c3f853a9fd669ca36c36ff1f0432713f60e6d6bc789fdae7c7fcf4049e6166b63a12aaa3da6fc35d8783020ceb92f7f90082d4826735618905fc9fdbeb65990882ce130a7e5ebfcdc796ef293019925e80af5074bfed5f62833d9d98e324dd54e30e1d69a15e4beed5da9c6ec01a32978aa29cd26c5703a28e504e7c9264e0421718422b88ef90f6fb4e51c619f29b5fc2f600f88be036eaf28d7f5433715bd493ce55811901a59964f20ac0b06dc3a555eac123c40d3b397053501523a51e8b53a92bbd99ec3bdcd57904cfac3c0d7bcc6613b11a771d32f0f6c60c05449b42820c0a41f757ea1efebebb37f8ea567b2f7dcc4a67ebbdc00716a70f5fe255b9232e27ba05888e034fc50ac0934a43c84577183b83019008edbeb27546e8be7d8402a4c1852198c0e050b96129fd66247c39abff19338300fc3cbe20a395e5805d8bc64c2d87ba27264716e211ab023765e8d454b637aa1320cb18eb4a3dbfa94027a4d75a9a2cc784cbdc22694a8f7e97bd6cea5a4e26b538be9a9dde5637be2d386a85a79ed4df541ab7d0b1370d99d2cfd1f7bf1458bedd0a53f5e6972ee424ed08acb4b49db83cae427d315d1fea4e680258e73b3fc50fdb77692c8798bcda57ac0c34823d69a8ead14c41e9613813838ef80f63138cc9ba3a6b83dfc77b6aa1248678409bd96b64c0b625e88e33262fa0bbee94fec8f3bffedaf8b12d229d0f637848a1dba01892d80f5a5596d37ac1c9c54d32dec3ca56b49aa1157583074af418d0d95a5a46fc3c234814e377963dd4c9c8a5f7cc35aacc892afb9bcede477760688e06f0b2c5a702954f4532c715151eda02f78830129b2612de8fc62fb992d1ba52da164920eb1d1dbc7d1f8f16e31c763581f4c478cf7a84cf01ca904160475a1eabae393bcb852fd550374002bad1ba0827dadcf3f6a2354a3f8f67e6da4f567fe21f55cc34840e79f6af947561c79a141721f6da4625a20fb203f96bd1a3b7322a14a0ab4a38835e1f235f772a18643824cbb9f76664b1212c785055ae17e89f590fdb1b81535e1e3e8a726a9aaf67ae2a8e67eab8f32781bc21027cb1babd932d63bafe7faf48bc57820c5e32288583db4cf369a7fbb479e1e97ca67f63b1880fb33ccf2661d7af9041ea1afc0e90ee0b4b510d094268e4576584a17fcb21b3c3f68bf1e1c4748177cb4cab92df4c254e0d0759d507e5eb096861efcf1aa66805474e3bd32f7055a7d53d47f416d24a5ac7d5fc953206db3a012234d8693e0ff662457ddaf9407a7ade1fa8eaf85b6e1b1456aec3064ee858742f4e22f2d6084e3881a4783b3a9086009202eb6eb77fc1ce2236d6384cbc62c7db9cecd2fdb06f328d49c066562cf1dee863d33b48288fbb1d4d5bcafcd1b6391879e670c7189bbebafe48214d6e2b405e36192e1067eb8d0363777a174e630467673ca968ea51476b0b8a04d598f6fc593d3f3267ab37e17831dab86a67aac3ec8336c5b6e9e416b1f46d0a9e8ec6c515d86e773baa409e2afae30ea1744f2bc777af11c42f2bf6177e95245c6d601f7cb7b589ccda76a2a314dab023da8128c667a0df682f5c7bbf842a2bb51d4d842cd09d02d67444e5d8ae1f3260c4ef2da5a1c4121fdd47e953d03ff6fea10e35db2c0c110704f513b9d1c57c9da80881ced16d92faf1be60471dc4d82529ea50fd6060be18e8e6deffb15e0a0df4e36117dc22d78bd43b3fedb24cba54c2f2e3bba015bc4c817f70fc1e8b21adb04a9d8c229e9ec178fee0f35d4f169bb7dadd14f46ddc13fc62da4e21e42270a4ed0d60b4034db31ee1e13c97d8d941b2627b255d4283cf0af9044a65765ba88dcb2010fae98a6aeb0a5605d8a904d1cfa0cf8fa67a9d29670a108f014a1b21862e20d4f0f3f0cb99c97f289c657dbd08237aba2f616804ebb0e71819fa46df1a018d8336b534391596cd24b0720dd8a95e5c74b9d047da1da93d653b2aa98e67a65c3868a0c464ad24d427c3c81b41f0b2fb78f6aecd5487c29f4fd871bec21f54d22b661eeed67c866cdf057d585beace568ed52a4399dfdcc8c9a80c94f3cb92f0974b9b33ed893e8db33cf95220e03f3d28edd8b80991b0754010e7252392d1e846011defb6c46c73ee015bcb9b288f6945771af90ddd8c548eb6649efff32b0a2b36e743e46135e47fc65d1eb3f7a580104c22bbcc75ec041813cf2496a4793d17112f40333e3c874e0bcbcd889a6bb484e43632b2f9a628a461a2a5d58808b848751642b5c426c50fd82398894dc78c56ed1f0358b626cde2a0167dcb210c8ae2f6d9c95356331cf2a21ed0dfd5165bcac2681ce070f60ffffe69dd75836c4be0aa7f8630bf345a32d246c838552cbb35a6dfdb6ea54c4ecf0ad16990901b7a72280872fc807eda1de4fdce2c223fd089e0f0eac84c1e2980b9b5a032dd1294bd2eb49372f55b9b4cf4d3c1b14050bec1344d71a8316e173bd36f5917100de4dfedfff896517a04468006e5c632c8ad15521324f3abd72545b47df874a4a95d3bb30915ebcc3ed371528f89c7e943286a8cf4ff2cca3f3496ded16b139658bd5d3323ae9007b4dab665cd24e7888735de2cce7bc1b3af39a6d92d787dd237f8d72283f7aab1d99985f3783e5cb0661cadb552293f189f75e7f3fa933c775a27415a3ad22239986364ba7a582f2d9c31e7247aa8d44d5a7e8169fec65daaf62756b34dd307ebc7fbe8a8023aac1553fbf15b48a8ee3bd0c35c7ced684f667500ab2997aa75382475eb35888e72b30ad5aad3910c5ead6797f4182adce92dafc2073f1529ff5f1a42daf3c78e499039864e8e768fb11b33c0d7779e6128579d882761f9b21fcc0696da03eeb049c90b86da8dba548058f0caddb83ec9051a04f3133341e9a17a17b72ac20cd9e242fb383365f6a2f5c795087c7ee682555adadb7305bfe2886a57f3718f30f24b52d481aa35eb2c40417df5ea9d8af1b7b871ce37fb1c84402d269e3a01a5c9a00d3c7d6ff21c90d437066850ea92773288ba925294f9368b74fd1f3c4512800000006b73641507480f3db07634df10fca86bb4431664ade710d5a8894c368660c95f7a0b8ce5ffcdae136b5c8b4ed8c3b4cd9b71079dfd6d1501df9b7f1477b516f3cceecb2def619c05061502b253af7e3deccc839de56292c95a3912e809b100897a85705cf59af66e194143d13c12b6dc1a31cd15a74fe57666931e3fd6b75512d22f063c68576b1bd6a1ab6d7f4065447daee300b7d4fe330daeda866beb44eb8ed4041d0a36bfa49871e0623eb6f5d7b967e8f969985063e2fc4f4097c2a5189b10c1776713f78193c6e0e847025936b36eaa2e817ebb45c375f18350247f6586214a200f2f17536b52b8fa196d4a6a77317807075d130a77badf745a6076b1241e47942501cba893fd0db02545e49f559e9712a60ffce9f3154459c69984de49e11192266196497c81b7c5b45997c1369c8e8490b1a748985fd4c9ab8929d17a51c331dc160c8ae8d2961351ef103e3427299e4f28faff6ac1905be2814cb02511472c7232bd104ac438d846b4a727df2ed24364e061f157c2447e7d5265b1cd75797603e220a9d2e280868f3c2c56befbc6b1b1a07be1070b293adf324b3aee5140ef5f643c952726d9b770989b07f2cdea2e1d6951027e8b386faccff07b2547dd78aa85cc113b599ab168ef602e40fc097396341a8e5b97b59032110ddf114129feaed96e85237bb4bb886b287279b96234c18947ce7d2d5e92dd5c68829edd271bfccff21b87f6a061c9b43b51252add291c8f59be1a222d00fb7719664a8b89c452e78cf1d491a036107f0a521545fd96d2548735847e278065c196153028b91f59c7b70f9883f14cfb3343bb230f4af9bd51132cc62ee5459e34e77bb2983d30e65e65ab769fa0a0578bed01f33c76f4138208659a97fbbf380f1321336c14d21012f3cc4ee2101d42321f0123d51377e319e4ff4551f7f83ca62ff9448a28b6134da582f609be7dea5d70370772ef2552f12e97cf390ee2697022168d622ae0c813d86a43c25c758162ab0aadf25c84c790fb32a459997068be01325e473871cb024ff030070434d197558b8df442e1d2ad0c7b33fe021fa6cd57b7477dd76c6a802ddf405e909d48d23321e986d791b44d32d417d63638246fcdd661e6a1453d1411ec85fa0b750354aecdd4f4b90a420d2d4f67c514f15a8fe590735f660dc5eaa7f2873c7841edaf2c0d46a92fc07c6cd22fc978f74bac72e468d96ba370fb88f9a629d4de0a8a83d43c1949aae33fe24859c1bbf8663adc6936e305cf9c56aacc84e7515caf18d0d049bec2f0a484b75a8c2c23abbca66b039a52e606f08df0a3cdd2dc6449e84ce463206d2878de0e4d0f438764a0fe360e95494e9e61581001785b081254971197024460a68ec029052f2d8841dac7e714798027696067e739cd1525df28ac9514c02e25f8ea1146e356fc5941e4661cd244dccee4a1450e4334a20cb572b842d44a8431abf4d5bb82ac6b78ce3c6d394e5969c6fe8216805f6e2db2889f27849e0dd26a5a387958a36c833a8b3d861033c00ffef267e4b09350ca1b819d5c83025e4ad69328970db92520e6ce569d5632caeb6dc42c8f6f8759256ad9c1ffe8c30a92b795bf00544714c957d5d982a4e91ec7a30dfdcacbd41ceb61f208e5442f7f7ce19ba2f0dddf50020ed1c271afe5007277e2496c3bc7f3101d6fa7f0ea2627a99de0c441a11c6afbb721037dcfc897fc5d9e0ed644b9c3aee328bc2beb3801d2bf43b1e360759c1056c74a63aa33cb6e5933b7a0b4f654113ea5830de7e8374e939e4c794be77f1f0c1e1bcedc8f584a56db0c38b6c8da60bad62b41d754d9b6cbf3379374a6126db0ef1ee2da5862acaf117408ad26c66ec8ee4f9f1844fb4cc64bc61212b303c7c622f05d29b7fd540bdc253bc948d373886e5cd4dc9bc1b551dfc514f12cc64ecc3b276ab43a4adc2142fea9c5ecf983b0841729d1771b51c2ff787ac2439f305ca3fe31cdbe24f034fcd3d41141cc0ed5cdd82e3171be1381ad4f0bf81b3be200524c98cad5a3dee3ee618c97d0678c7b4fbf729dbc2baaa2385fb63e6b906b08681c19d55200924c0edb4c3b48463fd9c2ac86510ce1e0a641def11e9e7b7fa74a629895221b06a15c995cafe55dee6c06e01b34f4f18e5ffeb76ffb412277bdfa4cee10823a1e55832c3d1d19ba5b84560668b33fafc672cfba1a85c60c61c45bd562506d9d28542c4b4795ed011a8005862f7add9dc2533dd29d0ddd534eb0a3b537b391c423b527b3ae4ce0c829a6efcf8671e9e5224df6ed6c1f20452cb46cd578a620788f9af325d45825ced3043ef3693ffebf7b881518ba2c71587251edf150772ae1e24f4415f9d9307151b8fbcb83d0da908f4b6c762b777dc406991353e962f181bc06e892ff9e49e557639dafd09b291f79720b866e46bcf14d5bd1ed15a468a8996ecec8ce3d9890fb45c96804dddfe5b7280c0e30934f129e14b344506f70d484eea40baac63b89dc71b030a6c8149ffca2434c773bffe76bbf2e778f0034666970a96bf336ee5240e765ea3715382bd8fe19c5ce5a8814717d87d4d6304a3b0d6581a6fed44975ef8a8186c19a513f5c6c0610acbd31fd58e2cb683162464cf7f50ade879461ee91f433b09d1febe058c101a0ff96cbffd547c2beab15ca343cfe592ea435f980ff03e0aeadcc80d64383d287997a6a937fc22221cec2a1aa6e8dfc1dc6e0f2e02060a18c09957376a72e165728acddf73873a958f43bcd2e9c6c71a83f744bf14c75f5e8308523a7d39bcbfd832c6597b2928b07630ae50540bb71b44b5b4040a1d172fabe8dbfb96a99e7498b12dcc8ed9e43fb36c202d019b4fbe11f715f5de76bede175c22d8355323eb004c5021d892fbe48fa7b6bf382eb03d0e447a38c63bb7fa1154c2cdf08a1cf5fa95ec75a5aa9037ebf8916cb78e6da650016a0c7ed34290e25e2122be24e4373c49c4fc81c39ec1a1ce4b658e1b80562bf911a1f6a5fc2e69d2554d4abf5ad79d9c9b7d9ac8c4122c11f590a35dcee3fbe185027832b4e2a71ebc591a60bb874b36b415b455bd942fe1a69a92b70ce1a1c867c85138449529cab5f63feab609a2ba3344191c416d8409b59962bcee1c4a40874069e28432fcade20f07c9259dec75fb978a6b84b6e8f50fdb341c7c19f55a8fa389cf085f44661c9618d56d32be0bdb3b2928fc2c372e86ea109afaee022bb832e80e869c7cb1053921b862b27599d3665f7fabfd6436743ea893ec43e4e4daa598127df8ee3249be4668d717117a038f0e734a894457df4c64dd76a9d9d42efc29f2311085c9e6fcef385f40af94f283edca078797e96b79719875aed3900252c3acc6a92e23083b3fa24057d9ebf7886df99d652e7d18cbd445560a0afc81bf7c011777837f94b32094fa1bc99472cc2a40bff245abb27d3f628b1b649fd00", 0x2000, &(0x7f0000000700)={&(0x7f0000000280)={0x50, 0x0, 0xd, {0x7, 0x2b, 0x9, 0x800000, 0x0, 0x6, 0xe9f, 0xffffffff, 0x0, 0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f000000c0c0)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) readlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000400)=""/39, 0x27) stat(&(0x7f0000000040)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f00000040c0)="217e85b50586813ca8a29f0bdf5bb78bdd034138e14fa3a60caaf3caa33ef3ac5446d296c0b5a5b2157c745e6457352b974be5d8495b0cfa2fd9e415a7463985c43b2564de27eef8faa79255da6af97b1e19a8e727bb964a9a3fb93940601c7dc725320e1de1a10f8992426b7f0d0ff3673cc472b2abfdb32c6cbf971b5f7cdea13c5291b7c5287ce6a6cd32a5a8ca4ab7cc4f3a1fc30c0cb02053cdd7fc9d102abf87d5e1cef13cf43dcd650235f0026b894b6bb5294daaf514e9617d38da63fde1dcc8d40e1ca0493e90b7e2f0398d649e8f69684bcc313fc26d49911b0ffaaf4a7ab1086dcaf191ab50b635a0342f36c4831e232edc85015f78357bdc17ada03b92b7fdc851b4659fe1d258e3109eba19622fbebb132ecfcd1aa0081bede5ecb8787200fedd2661e5e0bdbce9b19452db8d2d986a97ab8d2ea573820b4d951ad616aac4eff68334f4a07bdaeddf2baf7e7b0a87b09fb022b4ef85c199e9a99e79a4eb37fd58266f679ded3c0ea8dfc64ba57c3d319a4d9787a189de901bb28cd022c44a2024a617f7deee79cbfde0c0eeac0f18baace936480d489c0ddb1350bc5594a5182438e1278095a249aabcfe98de26fab3871d83fe674eb12a2538737fe416fe75473b6253b9bd23559b0be2131fdf644171f4684500f1bc0ebf91a8010f3853123a5e2357bb5fac0e3cc74ad6d7a3b2a4972481ca3ba3c1af3c18387849af8f21f3d81f0770fa667a9e07c1210106e9c81cfedadc39dc4d5668be6a0ac01f957a3bf8ae9de500201bb288888ac969660c05bf71dfcdff1098b5a134affd08d5316d0c4e99df5751e2cab9444b7655d37ff65fc0c1de768f4ebf01aa3533809108ed4853c2c0cfe07824c6ade0b1863bdaa464d06332402b30bbfc2599e16531e3e3afc90be506e114bbb3fd72a86b1f571a5380fb0c8635b350c11ce5538b3706b2a690c89de7b39588f92cf9a47d4f3b63bf789a61c1f5bec772e131a6fc079bc311b0c56ae75bc01d8c7437f296c2fb2974a822ead41c9f333d4834a4d6a58dbe579b3577a5998659765ef83b2efb601eeb7e7725925c4a1f6786d1abb971a3e18b624e303dd9b1b2a7a284e4ffd9ddcbe9ed0968ed3241dd9be99de9d6140668663c6a931bcd86e4cc5df973296b62ac7bba1ce6761c2f1562d3033cd1d731fe976ac29503a044c7eb66b8cd2037b2b66f6cc7cf5a33698f6bf4d602741d25345bfea19336599fec791a0c64f13ba537bc156e62c8eace5e117f2652b2851800064ab021ee2addc40ed8b3c67ad0c98f71de6e7e68112fa9d689141c6d5a15da4e472176e77315df003f97f0db3bd6b7d55b804e5f809c3f2773d1e4db7ba762d22715889dd09e9d8ebd87ade42da1e85a98524f48777773a95c97fc3cb6e7a2416b871164a01a7ff32bf444bd905176f5a0a87d13b37499aa33b38ce14720980012fe0dc7dc07061eff65f7a66df8c16489c99de167feea2527869be27520192e3cacc78b43ce4dbfae087d4e1785fbd0ab3d5c4f2a8c178dce6c32c73ba6c0d0d2767b938559f66038aaa6ee766e568062a56556b2dc5d0064af675d422b8bd676ddc236d4d271518cf5ddec3c3a230e38377ee08dc25d5784db2cfa6c779de55afb6f82e49d56e79c488fb9bf8ad771e518b03187e07ef8bdd5bc9bab3dd6dd0bbdc5d04adbe8ee210069f0ec51759b102597063532168935731781e3281e0a971b502fd8a563ec0724571fb61f0c32355956b3cd8b9bc3279eecdfc81151b2657e58305d332a711c05031b93d03a233d770d4717f0dc9bd97f807bc343f806be3e9030a83b6dc6a3d731dc1daae0109b73c00386a379e84fa661ff41300a712af3b1f9a2858a5f5d191c5dde9f95c250277be32b760b95f453de22dbd6dd970622e3f5d6830375850a9b2e275a913e48f808d8dda5c07d32e464179257fab8ce92e33f086484ff8448ae41010400000000000077b26d5aee75cbf1f2a5a06079cb534b67718ebb51f704985c19f2580241728bb2faff29ebd81a67eabd2142337b1b50764ecce4b08af6f44e61ad42a5da18f939da47ddc52474871521ac733da45cf1a521ab3196996553261ae53478fae33afd36b7e2125ad7dc38b62657e35748809191997377ed18bca857822f21e4e66960060ab48539725e316e1f8244b35e805cf6f01b32c95abb527a1954870d9d11cde762e19788b2ac837f7d0726231090a22431366ffd8b8fa12a8aa3c3793c2970152fe7f75955d34580e00049628b1bfeab69378a38106f7451cc7e3f8336966a6f2e362912ebe34fbf5aa33d56bfe5dfe4c3c0e2298ad11053bb83816c744b3df38aab86202a2362543c511ea66a0ec3c4711c626cc4e377ee764c9dd51b7dd77fff5c2783bf403e1ceac5ce7dd5f8e4a95a38d491c690d6403e83e899d2ce2dd44f309418e8381fd93823206811edcbab2bd3d3a210b1c1392fe4abbb85eab303792f0dc393d2cac4003f30e77cc8d7541e532ba11397670f280b6f9388cf61108a56483488c3fa7e358eede7b5314549f52bb4ef295fafa6092fa8dbba94b27380258f4a4b3ee37185b16fd73c75b730d46a05efa868cc90b2b3617cd7de1b3de758d55cdc53a1f2ddf0211caa9a5d9a864becfa74e9a47fa31d7856a9a30bda4743b60ab4d4b36d588abcd0b4dfd2d835d10d5bef098e2fd0f617fd59468859cd13664329cc011ac4e677336516d1c853e8c5a37e09c2f7168d78998a9584ce5a666f418f9fba55857c6e80caf101daf48566c3b1e69bcf5b32bdd756b39da5268c1c38a859e8d0f80d16cbd8db33b1d3d4784259234733511701eb5c889f39051a499f9403566199a8b0fe06ec5c41beca27115befebbd1c0281a3722fc2d77d092c4509fe5589525c868be4ff1e2df53be13e28d725a7c1da6905e1ee0b8c26ba5029763e805c1946d404cc60b65ea516bff59d7258c8a5fdab53123aac6e12e6c4ddcbe01ff2e7950aaafd6970b5b05f45ed1985aa2322fed508850aa0674e0c855f58a557c301e8d1d7d60599fcf67a0d10c5064fcdc1df9759e181c734b9cc5ac00773890c37f719288efb6ab9903d11f1d3caf78cbd885fb45cd52c00b04a421a76c38aa3f75fef04b48840ee05e49f80b104f086d3c5ffa517356030101e9752a600a6f67399897dbc3698616508b6a70ab8aca3547a798a1716cebe5d5af4a366bc77848470be6bf91f4c115568870d830cf1ccae377dcb7cdd6b5b9ee64de6529a0cd683ea80569b57d81c0f529bf3d6df3e930d3af6585911d46d5d8954c97747b05ecae1437af3ac9a3760fa5d60da3778b040c40259ee7f632f8db2da53c768365908d6e4281bea8ecbc13d88d87533f048fd5629937a5e79fa0bf993ceb11304dfb210e68a39cb53969203fbaebe084c61f3a9c38b6b89791a2285c4584ea977d47e31b7d4cf98b19b9fbfbb0229d3033bbf9973f106a93952126599ee4574bdd47cdfa5094eb970b24b9d44b7041a422ec06fb698a7c0638731bcef5354657248119095b484e90d96021e79875c353076ec8b96e2c3448f6575cb4cdf730cd37189ccaedea1e8de21a722fd72ad28b38d11fd0a49007eeea677c5aa16ad3e6177481cb848bc7eb860e005a9ffccee69670941c1d70938fcfea92b8b434cbeaf37a02306ce348dc2a841d6cbaeecbe7a0276cccd9f0292e59f51aa99f16430991258f1c208454ac122f9b5c43642b326535c8a795757ddc10cd4ed8391d6cabc42a584e10d93988b6e36ed37bba5d7bbc6ba1b15c77945587a50e22d71ed3f6465a8c7ae90eb21e71f31e17a62cba7711dd12984ca0e7c07c481639d87e249c6ebd1ca437104005ee9b15752b273ef98e0d352e72a13ef21bfbed0fc9d5d5bde441692478d9e40bd59013fcdb55aa3323328a9ea77354b1ec7635cde81fae541676d06b324de2efe1fa286bd1faa6b9890fae9800ab4cde88e6be93c733537ccaaed0101bfd2416cf48b17455c1a9dc5353c48c2d07e1daec97f785850ff72e4dd0092bf7d0da19a61075fd395fcf86203b119ae1de4024c2002367a316a6443ff723437c6bf4ea33b07d8b81dfd56fd4749d6bc3fe6b1a65f09479b17d04f89a93ddde114ae2ffad05e6fe15a70145dca7c9bdd3b1f6706e9f78ab7af02553586a7fd950974137cb974ad4307a965efa529aa219d0f4f5075d10b3442cb02017af4b6519fb49d47c9020a3b12bbd391c442fa5ebdd0d3716ae2442604c678ce4af0b9dc21f66685b4c3ba7fbba6a9bcd2eeda1eb216185bdfdfc6971c5ed277b165e07dba10e7e7bd861f5e0755fe200000e1f7bace178011853c740294683f15709ff2cfc42580342bb0a1408e78658d1aa49aa87f35c89eb17a6b99c18ce6d6c6d2fc46b98cb4b0e7f9ffb4852fe9d068977582c29d070f2d533f47a1d069eccf5ff85006c324f342ffa8275a1df254fc7c7e3844aef51b00b2ef655b5fcd4664021f79bd9f118665b24668053ab692ebffb4ea4daa2ea4fce9b32d18204bfdee826a11c9e10f48bfc338a46e7d58ab52749d979b5ab2ce630e9fa73842774896ecb367e8d1724a2a964177f5f2555e046d0da97d75aa1cb7869b11dc781537482408f1565c41a7581a00cbdb823e8865068056664ee1d696f02b6dfa0a0e659a9d6a0ad4fe378cc15a2963c4d0f049dae9aa8c3617ab692124a741511be9f1cb445351312d013168d7eee8f12d48126757ca06bee5e43f05284efe9c6cbd7b1f623139e93d8fcadd7e2fc53cf4c00f7fb0493292d753170cc67af99ac69757d71cbc54b1c1bdaa96eb73eab23a6163d5506aac1def5190dd7f73de5e27c8df56fe3b5079b1a28032450e09022095098f26d29d976b6891febd0346dbe917b725aa7dc28ce70c3503cf7fb0257a23fd179da04e141502117e39f5a208b17dcae08a3b5ce63f95baa61b2b9dfd358ac11e532b9a188e317b91c6ad11c67f9c933be582bcd87846088c98e00c26394292d2265f27595c45393210ca03211108e686fb0ff569e3085584daf7d4d2eab0380fbb3a7a5a25730997f59cf465c64ae4002c895e2a7de0ad735c3c6214e3df2bec29012324a298e4768fdcb560c07839cb4479c06d4499a7f984e3f4a8593fab553d144851441c6e91759b8e97b4a625effd6a5a197995da366bcdcff8bac79838ced68b6c31d242e60bed0853f150d103c81f2fd19e247d407ec00156c4b4e384f1a6bb86424f53fb9dded096e9f75bdc8c6d8c2a4b1c4f8afd728976c5ba804f9a2d3f5f94f73988431621808f67f35d0feda71238084411276150c0fb067a475ec2800bdb5b966c968187fccb7cefc43ecce8392a14962ed82eb34b7d118792efd0cf67061c43f240c5f82d723730153d38290968a405fd6ab4388079bc5b5b2392ab4f1cb16b6323822f174a324624c322224bcc709d9fd96d91e6bb244f510ed507d4d49a97330f6e12da2a1a274ff41b587f664af0ff775ab7379e49dd3f4c9ae00f4e1b309724f1defeb6bed948c047e94688d0ddc8bad8605e88fe810f9a89a072c4e2b6feddad1feae1ac92dc8b1f07b86d623b1ad4f3df359b03b829cdcede14b6dd29a58e7c5c6e1340d345b62a8ff8150d2dd22a631bc557f8760c26be00647d62291504f70c4f0d1c919d0beede001d3e8d24fc2ec95be1f33c44c7bb0b9764c9e5c38405bf7788da5c7883af3c31ad5c8ddb7b9f84a792d50b1597dc6454a2bc1254321f0a9d633437310fb25db7733c201371f0eb73506f4ecdb58b4c3e0b7a223ff20dbdeafd449de5968078eae4d758878fc18065a20c519a505d3bb07c4801634dea3410824e5f35d4caae801bdd2630141b944c1cbced4eaf1c74b4c59f7d00c97a7cc94084cfd84e4104c317a39f0b8ff9c4c8afefcd94833aa10fba9268d364af3e26a96cfead99f9b31e53725613343fc102c90d99bcdeaf43aa5052d9caf68953a0add5cffca28d3b23ae5dd6ae898325b6adbf95105afe7bd415839ea26db9fbd06b7de8747780d779f9589994e3d4efc717a5556073965b0fd35f2499120481baacb3f60563f68da9bbe1096484855b842b6b5f4d1e3f357e8001572bba4b366d9eeeb197832306af70f24610c6bb95cf58e484d25f4f11f2afadc5642a92717bda44cc5dba5d9e85474f8b49a042ceb8f0788bfca8168b54457a44ee0816bd4be191d18f67389766c41377da920036b1220ae14f05a332b59c5ecf66f50c4906834cd12a86d925dd58cb9ce7b502faf6859bdff36bf99020748307c38dbf110ffaf61491b7a5866e7f57314140f696fa4af9be0d83a1ce88b9eaa66581471aeb1cf15d8dd7362fa9f540515025aec1f2e98b141c97829d8a3edff5fb9f6881dc7486085658434504a5f24c597bcd1783ceec8c82fd17f29c5cb056764102bfd174aa82e17f7a4fc8720e7af98cf23a1dbe64dcc3d3420b4386e58798e0e0f46fc4feb11578ae384a8badd3828fd5118d6615fad7558387841199084b08d20ba3ebea818fc13d502f303dd2c192f3ee536e17889419c6f4024e2d130f4f60b956934df00fabe44739b1d356bf8e8cbe4f20eda6686bcb8c3922d767a9f99c9e99e65a3bf002635ba5f1bd724057e1809976d11a87b6d31731577b0a8ff572ecf83a23807673e4e475f7cc0a96840e25b31c4b9064eef35502b681bb7f2c74071848aa2e92d73221e965df1aba81169436a809400caa4beaf44972411bcaa1770177b964635e9b45b42ddeea85f5643031cb421b8b90f95200960dc6b008baf4c1efcd9a267cb136450fb3c38bb6030589de0d666090c2259f1b4cd97083e092e8f28e617e510f66baa15d93111b0696a12e590f0b14f3834dce2a50413b8aa67c0ab18b4b182dfd81dcaa2dec1ff79a2248404af4261c4d238e55d6e5c613ad9a06651cec8aa76fb0e458919795aae4e5c2f29b0f4ee062c83a09ff100bc4f95d3dd1852a8b727afc2b69e82d648f6bf67e6a2c9b3f13550a53b6219cd3c95c5bde422fd5e554585f81e3c5abd2c32bdc70c61f298cff392af03bbb12ac42590744eddbf79d85591a152d5b4d8062262a222afa343609e7bd48344610c7ca1d17837a33c6e5cf2843bfe65af61dc597fd9c56add05defbcba3735a2784506742b27dfd3d2301667d257c84f06a79eb43fbaadda1ec74a39ef30b51945d3d0ef217a3b9b3d96bf6c1ae06d9cfe1f44d37c7306aaf801ee99a599975833799de20b2837b0684f5af828401a83cc0f530e746997d187894ac95a3133216fefdec90ecdca21c96f76e5bf32094e62d700306cfee229f02f96eaf6956bf07278891aa8e4740813be862bee760e8c8ee61c51607238a9daad12f68c9633b4f000703256e0fffaedd88f4386472578b38fc11dcb7367d7489bda56a78c94f3140c8b1abf2960d5ca0dd438eafd47fb499f6a9279f4eb5546c229bf7cf27cd655e91efc0c845e1afc9791afd87bba759ef1486493e99d01e99afd017fbfca764f690abdd2201dcd21b44164b38742cb27866aba9077b744c2c686191e5313477b7baeb7fdeae840b250e8339fcf4b709a5b6706972bbb48458881b4b68c228867a096454a36d869089446a3c784841d4e97aacead4d43c24062a15a8f3506ca8c860314fe4103bd4d39c090d80df4bfd773f468a71b332bb18c9416000b0b79d14369e922fa5f617aff95508c53287d0c780f2b4902f47f1c0741d4f919c64fc8198c995caefca90008ab94d337c41fd4e89a937a972bf4210925b3d2db1e0b3ec73d5b24308f5361ef0a8a3aff1e2c88bff171ddb2c57023ab709c73f3fd58060d99c7d04b7915e1b83c26ebe5dbaa3be454157b77b0f95a10ed9c028f9c5748684da343d61972e73ef35d82638476481395e62e9840465a20ed6b55ef42557869e071fe7e52aee1481fa12f4baf60c7dea1d8da27e51c76bb37a67cd3165c3865797f8a125e822e15b0c5749de618a62c3894e1a1e3a8c7f75001dbfc26fd62540bd5f58d2116f357ca73b157850d722b3b43ceac1b22849773b0c08e263993a86215e2e3b670c271f9aff66da80a991516e65d29a5586269993aea24ac5bf6aa5a1a5480b25cce76ff6914139d925f1b270102f38084334bd105c50658330eb3b1a96045b8f46397eee5e5db2980e23ff7aa59075a8083f8da0120a6f090a512d9995551bad82eaad75e12817f8b3e235ff93a08f454c3f3afc9bd1e99cbaaab16abf57a729ed2ea5374e328074fe709861916aaad610dc1949ae917569982d42d54108f6d0a532e59d7699cea8bf4e3fc5a66e9d399700b079c94ac22044ae6dbae5d3942e1b4076b10213749b54d80ca0d682713481c2c1630853e133682b0ea0bb4ff6e045d085c03881ec84e83cc0f9c4cacd1e3dc7a71e8c7c49e008820e2382db7eccd726dcb12800cffc195faaffa409e2cfcf94425af3b19f60fab2f5b601c3593aeeca90d60bf6f41fbf3a07808689842f3be70d08e9f1ade2a196330264206b1cdbdf3dbaa13bac630a6021b59c593716a80f8adeff1f155fbc44c281aa4b968d480184967554923fd08b43e239c49d0d7df6f7ed078d9d147a5cbbcbca837b2f55d6e888200813e6eb4453e9142206f93a7f89d264f013345162564aa49a6fe0f51184ccf9a0743df5873450b06d5ff90b6c3cbcccb66f4f1998eabcca5e0ffb452ad32f2816f575de99ffb56260d339cf2a2a36e9fbd8e911e9b240de3819afa860f8998940ab55c49189718a3f445c8254a74b2f3ca7340b7643e0d1a9f5bb22bfc1ba134762566df2af9bd5f12d36289aa1348e6966837260e79390c9f205b11a909994d21329c3ce4c33d0100de5aa63caae95de56ca34fff766e9589ae364b88e482e62428505554a6ffd25e28356531a39c393af359d80918fe3d7c0333db79a7a45d9afcee10da3285434a11cb3e1953348c02a41aa763cf92a34fa69f4ddfd992e3156c3163cdccbfaf28bce5412e744d8859b44d2166ee9ed7fb15d22a96de8301798216850ecfbeb2a32781082c1a6c758b98e8f2320d9b5cc1ae2d3b8d22de4e4bf23314f987e5d59a34c2a80177ef111b3b0109ff4af1d198ac058746168796a60d769ba4b53bb791e3a8bc1baa73b0eaa33830776ca8a810ff99f67f22de4fdd566823b4bea4f7ee38ccbe3298b04d567a6f4cbad957f6a2f4886af4ba357f2f4cb6b8f01be26120e83c8728da8ed86057b44d27ef783c70043b63034032072533f0705e9bc31b676c8bb0bd70ab478525b071388cd4b6be2c9ba3314323a938fc89548703599c6a78fd770129e3bd53a9a71e6b3b4fbbd7f8fd744c7a12a3cdfd98ba206b372ae643640f1e6e78adc23f859493f30fc560f67ad91cd988074f8a5b503cc0b332486696cbd786cf7556744762ad2874771a78a79a51946fb59989a19d3056aae52d988e9db95e9bb7209398ffd1b5301d88909131308377705089ef4747918d12402b54fe246c6589caec249bff4ffee2b6a135c108ea457bf3cafcac7582737ea7a1b65dc24bee4544cff0f6ce806384f6a28b7af0251a1fa5b4630e4710ff652a3ee72b0e6259f30ec16a52dcfeff64fb1b6f4c10c06e998ebda1cce43f926d82382a86d7b533fd7a65eb54ae6cb66276199888cc5ea4216ceb04db6bf5ece68a20b645b7792aba12702397cec110f9bdc58aa6819b7605eff0e68ce2a83d4f99319e391f35d7f810714d97318e01c0d91d8fecf3a1549cd51295da3b92c56eee965cab7db912c3fba86365693bfd2f357c4210737ce3697145852195336cbe89e6b7c0ee8620715ab330046cc2faf98bcce66d764b42b02451f665cb906558da6ed1c0a67e0cd1259dab5536e66988271256eadca86edf0ce071326abe01a20937aa62db7460d013dcbc2fb911de352cd5dc4480a09a393777e3ea7eb456feb9b94b8cf1df36355aa6bd635939e1981130c52d4195f90000845c0e0717b69148a3d78af78370593cc6ed18398ce7a36d1b2fa9a9b6041054e2899f135263a49b43d7cb207cacfb9cdc38beb4c2ec8edb128bab00ecf95906c82814b3b02230e1f94cb2811073d75da43d0d7c5ae5ad54d594a27a513cfd2c01e2ab33f4a9682d64cd4c5d9ee9d9c18684cd670f49849b8a3a8eefa0624bbf84fcea69c2d768a832f4433a563936131963f15de4ee43b6865a033b0129ee6ef26e5070a3ede03cefdb05dceef804f0aae68a59db56c64f5447ed9a2e865b5b81eee816ea18b1efbede2e71ac1dc45353431f5bdf361c1bb0d2fcf74b2af95ab47aec8563f60cceba7295a21b58baccd076b49faed2de8e4beb7c10694f86bf4aee05f5e64b21c4652eea9aa71fc3ec25205b5d06fa6c327e64df753cfe64233972639aad0a8f452379f1f598fb49e044d9572076d75a4726bdc8f03a9c51b000ea80cfb42716cdc23d990e5adf071a711b0512b2151d4c51465d73f0a90194fe71214d0ec867e67e5c6c57ad4fb76217559018e9572082c6ec99ab02c056c5c561efc254f6d3a551cff108195b74bbe21ccaab79bc942d32d976deb15b2926faa5459a9a34887555c0793912f93a60bb8a9fdf7164c6fecbdccfa6318bce178584221d1f4a445dab00c4a7acf28104bee65723141a4e2e31ce51aa54158e0ad875d852c89dbf02d371c08217bc84ac8ab8e6af7f5d81d8b428e8e1e4cb7c0cc33642440506ac4c5f0c91fa1d3a75246aa024ec5e6f72341a500b9308862ba45d588b1a5fa903a4dde04054d50d1241e0682c7479e237642168f9918fd133c0c32e570b7775901492b3aea72770f6f86e6443b9b04c384693ef7f2f085ae08c767f231dc8435ec123db3de1e44ae6c88216aaae35b23583152806225cbea39aecb768e37c8ef2635a910d1657fe5c32fd8415b1afe3d1e530fdcfde0173623de4f6cf7bceaa9e8e7ae45b865289b8cd640721a07f48895e0af73acb7610253b4267be9488d9922bcb183a6e8f0b4d549b53ec3166a3e5ce9739ef650af8b10600a94f1afb7cc281227408a7e48b29a86dc9d2bd410c54465dd7acc1ac062b761bdb298a9d609a71b4b905d7dae8bc27f24d8f1e9acb5501934da6c0807996f61252b60e04105e311248c1b8b0cdda7ee77db36a507bc4b476d9d88b7ece67c6bbccee8f6a85b0f1d7b70a14ea4a9e033778ce05de5503dcff0ec317f7ad2f40e773592a04d2109d757e8a274ecc4605acd2dd29173476dc2603507ae0486e1f3ae5b057b9c4f759fc071d9e1da59ee87343d8dfbad6d51920228148b2a9ae5d1d7e53cad8c5b09423c90c2abd098ed359e90982040000000000000030541eb63e85553068e62e07bb764fe81b2d723d90d280a7eba95c581865c33d2ee5d112b58a1640283948379e894109c07eb39422cb55c9d690a9f55b9853ba030db2234eb3636cf2c981a907d710bfbbe666e701baba9aee635e664e83603662a8ff41ac146aae68df29010158f453b2027d54dc6976ca29533f8fff64f316cd3fd7b2f3bfcf7c07107d9725375bef48027bf27fa17c6eedec5e6500000000df675761397abdd30c8aa263e89008e0516cd199e10b60b8", 0x2000, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x90, 0x0, 0x0, {0x4, 0x40000000000000, 0x3, 0x0, 0x5, 0x100f, {0xffffffffffffffff, 0x5, 0x0, 0x0, 0x1, 0x3, 0x3, 0x0, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x1000006}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 378.903691ms ago: executing program 2 (id=719): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) 378.611145ms ago: executing program 5 (id=720): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x8}, {0x4}}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x50, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xffe0, 0xffe4}, {}, {0xc, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @mcast2}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @empty}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x48080}, 0x24000840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 11.938265ms ago: executing program 2 (id=721): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000001740)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000080)="df", 0x1}], 0x1}}], 0x1, 0x24088804) sendto$inet6(r0, &(0x7f0000000ec0)='\n', 0x1, 0x20048080, &(0x7f0000000300)={0xa, 0x100, 0x7f, @private2={0xfc, 0x2, '\x00', 0xfd}, 0x8}, 0x1c) shutdown(r0, 0x1) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x0) getsockopt$bt_hci(r0, 0x84, 0x6c, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) 0s ago: executing program 4 (id=722): r0 = socket$inet6(0xa, 0x1, 0x40000) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, 0x0, 0x0) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x800, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) epoll_create1(0x80000) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000040)={'custom0\x00'}) kernel console output (not intermixed with test programs): ino=33 res=0 errno=0 [ 234.762887][ T29] audit: type=1804 audit(1771764123.820:7): pid=6125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.49" name=2F6E6577726F6F742F31302F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F66696C6531 dev="loop2" ino=33 res=1 errno=0 [ 236.549526][ T30] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 236.761241][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 236.852861][ T30] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 236.914896][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.931601][ T30] usb 5-1: Product: syz [ 236.944583][ T6133] loop2: detected capacity change from 0 to 164 [ 236.958636][ T30] usb 5-1: Manufacturer: syz [ 236.979196][ T30] usb 5-1: SerialNumber: syz [ 237.014829][ T30] usb 5-1: config 0 descriptor?? [ 237.261299][ T30] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 237.526631][ T30] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 237.641179][ T30] usb 5-1: USB disconnect, device number 2 [ 238.826140][ T6140] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.836226][ T6140] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.147196][ T6154] evm: overlay not supported [ 240.075715][ T6140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.109928][ T6140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.159333][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 240.394072][ T9] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 240.440986][ T9] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 240.504591][ T9] usb 3-1: Product: syz [ 240.510347][ T9] usb 3-1: Manufacturer: syz [ 240.515248][ T9] usb 3-1: SerialNumber: syz [ 240.617535][ T9] usb 3-1: config 0 descriptor?? [ 240.667853][ T9] ch341 3-1:0.0: ch341-uart converter detected [ 240.736535][ T6164] loop3: detected capacity change from 0 to 2048 [ 241.623500][ T57] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.664837][ T57] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.737235][ T57] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.772619][ T9] usb 3-1: ch341-uart converter now attached to ttyUSB0 [ 241.796305][ T57] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.010281][ T9] usb 3-1: USB disconnect, device number 2 [ 242.052277][ T9] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 242.106876][ T9] ch341 3-1:0.0: device disconnected [ 242.427369][ T6179] loop3: detected capacity change from 0 to 8 [ 242.679337][ T794] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 242.914912][ T794] usb 1-1: Using ep0 maxpacket: 8 [ 242.987561][ T794] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 243.029871][ T794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 243.059623][ T794] usb 1-1: Product: syz [ 243.064032][ T794] usb 1-1: Manufacturer: syz [ 243.068837][ T794] usb 1-1: SerialNumber: syz [ 243.107801][ T794] usb 1-1: config 0 descriptor?? [ 243.194765][ T6187] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 243.229824][ T794] gspca_main: sq905-2.14.0 probing 2770:9120 [ 244.236896][ T6190] loop3: detected capacity change from 0 to 32768 [ 244.252824][ T6190] btrfs: Deprecated parameter 'usebackuproot' [ 244.261856][ T6190] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 244.316081][ T794] gspca_sq905: bulk read fail (-22) len 0/4 [ 244.324642][ T6190] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.80 (6190) [ 244.374135][ T6190] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 244.374410][ T794] sq905 1-1:0.0: probe with driver sq905 failed with error -5 [ 244.384729][ T6190] BTRFS info (device loop3): using sha256 checksum algorithm [ 244.581295][ T794] usb 1-1: USB disconnect, device number 2 [ 244.806407][ T6190] BTRFS info (device loop3): rebuilding free space tree [ 244.871393][ T6190] BTRFS info (device loop3): disabling free space tree [ 244.878831][ T6190] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 244.889172][ T6190] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 244.926225][ T6190] BTRFS info (device loop3): turning on async discard [ 244.933660][ T6190] BTRFS info (device loop3): force clearing of disk cache [ 244.941268][ T6190] BTRFS info (device loop3): trying to use backup root at mount time [ 244.949846][ T6190] BTRFS info (device loop3): force lzo compression, level 1 [ 245.152226][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 245.183931][ T5774] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 245.390771][ T9] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 245.437389][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.509577][ T9] usb 2-1: Product: syz [ 245.524627][ T9] usb 2-1: Manufacturer: syz [ 245.535548][ T9] usb 2-1: SerialNumber: syz [ 245.598642][ T9] usb 2-1: config 0 descriptor?? [ 246.559264][ T794] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 246.736439][ T794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 246.801744][ T794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.877285][ T794] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 246.907648][ T9] usb 2-1: f81604_read: reg: 100e failed: -EPROTO [ 246.919530][ T794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.998247][ T794] usb 3-1: config 0 descriptor?? [ 247.059813][ T9] usb 2-1: f81604_read: reg: 200f failed: -EPROTO [ 247.086897][ T794] hub 3-1:0.0: USB hub found [ 247.116164][ T9] usb 2-1: USB disconnect, device number 3 [ 247.316427][ T9] usb 2-1: f81604_read: reg: 100f failed: -ENODEV [ 247.357773][ T794] hub 3-1:0.0: 16 ports detected [ 247.375867][ T794] hub 3-1:0.0: insufficient power available to use all downstream ports [ 247.538131][ T9] usb 2-1: f81604_read: reg: 200f failed: -ENODEV [ 247.603824][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 247.612894][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 247.627251][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 247.644034][ T794] hub 3-1:0.0: hub_hub_status failed (err = -32) [ 247.671455][ T794] hub 3-1:0.0: config failed, can't get hub status (err -32) [ 247.796887][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 247.812988][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 247.827513][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 247.836453][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 247.845130][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 247.853191][ T794] usbhid 3-1:0.0: can't add hid device: -32 [ 247.860249][ T794] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 247.977778][ T794] usb 3-1: USB disconnect, device number 3 [ 248.428835][ T6238] loop4: detected capacity change from 0 to 256 [ 248.682858][ T6238] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3967cd3a, utbl_chksum : 0xe619d30d) [ 248.911514][ T6238] exFAT-fs (loop4): valid_size(150994954) is greater than size(10) [ 248.994832][ T29] audit: type=1800 audit(1771764138.120:8): pid=6238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.96" name="file1" dev="loop4" ino=1048608 res=0 errno=0 [ 250.070846][ T6243] loop2: detected capacity change from 0 to 32768 [ 250.187320][ T6243] jfs_strtoUCS: char2uni returned -22. [ 250.193710][ T6243] charset = cp950, char = 0xb9 [ 251.074303][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 251.978670][ T6262] loop4: detected capacity change from 0 to 32768 [ 252.008668][ T6262] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.106 (6262) [ 252.090067][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 252.147835][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.160387][ T6262] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 252.171091][ T6262] BTRFS info (device loop4): using blake2b checksum algorithm [ 252.211944][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.249412][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 252.262430][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.301846][ T9] usb 2-1: config 0 descriptor?? [ 252.584996][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 252.608481][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 252.630899][ T9] usb 2-1: USB disconnect, device number 4 [ 252.721569][ T6262] BTRFS info (device loop4): enabling ssd optimizations [ 252.729236][ T6262] BTRFS info (device loop4): turning on async discard [ 252.736225][ T6262] BTRFS info (device loop4): enabling free space tree [ 252.749532][ T6262] BTRFS info (device loop4): use zstd compression, level 3 [ 252.898864][ T6285] netlink: 'syz.0.110': attribute type 8 has an invalid length. [ 252.975914][ T6285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.110'. [ 253.091542][ T6285] bond0: entered promiscuous mode [ 253.100986][ T6285] bond_slave_0: entered promiscuous mode [ 253.107973][ T6285] bond_slave_1: entered promiscuous mode [ 253.291865][ T6285] gretap0: entered promiscuous mode [ 253.359818][ T6285] bond0: left promiscuous mode [ 253.386355][ T6285] bond_slave_0: left promiscuous mode [ 253.486033][ T6285] bond_slave_1: left promiscuous mode [ 253.555398][ T5783] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 253.583872][ T6285] gretap0: left promiscuous mode [ 253.776013][ T6290] loop3: detected capacity change from 0 to 1024 [ 254.038347][ T6295] Bluetooth: MGMT ver 1.23 [ 254.298538][ T6290] hfsplus: catalog searching failed [ 254.397396][ T6297] input: syz0 as /devices/virtual/input/input6 [ 254.728127][ T1037] hfsplus: b-tree write err: -5, ino 3 [ 254.749278][ T6299] loop0: detected capacity change from 0 to 512 [ 254.831259][ T6299] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 254.909438][ T6299] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 254.939562][ T6304] bridge0: entered allmulticast mode [ 254.982613][ T6304] bridge0: left allmulticast mode [ 255.160752][ T6299] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 255.269751][ T6299] EXT4-fs (loop0): 1 truncate cleaned up [ 255.320630][ T6299] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.066645][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.726513][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 256.950572][ T9] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 256.979608][ T794] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 257.000807][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.081830][ T9] usb 5-1: config 0 descriptor?? [ 257.136652][ T9] cp210x 5-1:0.0: cp210x converter detected [ 257.215619][ T794] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 257.261482][ T794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.332093][ T794] usb 3-1: config 0 descriptor?? [ 257.410514][ T6335] netlink: 'syz.0.130': attribute type 4 has an invalid length. [ 257.649831][ T9] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 257.700927][ T794] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 257.904324][ T794] [drm:udl_init] *ERROR* Selecting channel failed [ 258.037136][ T9] usb 5-1: cp210x converter now attached to ttyUSB0 [ 258.090134][ T794] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 258.097139][ T794] [drm] Initialized udl on minor 2 [ 258.135662][ T794] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 258.156073][ T9] usb 5-1: USB disconnect, device number 3 [ 258.167631][ T6337] input: syz0 as /devices/virtual/input/input7 [ 258.180488][ T794] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 258.191067][ T24] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 258.219908][ T24] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 258.230242][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 258.258560][ T794] usb 3-1: USB disconnect, device number 4 [ 258.273719][ T24] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 258.367833][ T9] cp210x 5-1:0.0: device disconnected [ 259.476417][ T6354] loop4: detected capacity change from 0 to 512 [ 259.652414][ T6354] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.766364][ T6354] ext4 filesystem being mounted at /27/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.777642][ T794] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 259.982472][ T794] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 260.054653][ T794] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.084866][ T794] usb 2-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 260.126919][ T794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.226192][ T794] usb 2-1: config 0 descriptor?? [ 260.458632][ T5783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.747736][ T794] hid-rmi 0003:1532:011D.0001: item fetching failed at offset 0/2 [ 260.849354][ T794] hid-rmi 0003:1532:011D.0001: parse failed [ 260.877274][ T794] hid-rmi 0003:1532:011D.0001: probe with driver hid-rmi failed with error -22 [ 260.901256][ T49] Bluetooth: hci0: command 0x0c1a tx timeout [ 260.914208][ T30] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 260.980956][ T30] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 261.025579][ T794] usb 2-1: USB disconnect, device number 5 [ 261.265161][ T6379] loop0: detected capacity change from 0 to 128 [ 261.265598][ T6376] loop2: detected capacity change from 0 to 8192 [ 261.318650][ T29] audit: type=1800 audit(1771764150.440:9): pid=6376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.141" name="file1" dev="loop2" ino=1048609 res=0 errno=0 [ 261.541584][ T6379] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 261.589626][ T6379] ext4 filesystem being mounted at /27/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 262.053435][ T6379] process 'syz.0.142' launched './file1' with NULL argv: empty string added [ 262.122718][ T6396] fuse: Bad value for 'fd' [ 262.744759][ T5779] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 263.435729][ T6410] loop0: detected capacity change from 0 to 2048 [ 263.539223][ T30] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 263.539347][ T49] Bluetooth: hci1: command 0x0c1a tx timeout [ 263.605281][ T30] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 263.687755][ T6410] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.869397][ T5828] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 264.042182][ T6410] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 264.091674][ T5828] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.150620][ T5828] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 264.169492][ T6410] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 264.239826][ T6410] EXT4-fs (loop0): This should not happen!! Data will be lost [ 264.239826][ T6410] [ 264.257237][ T5828] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 264.348590][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.357035][ T6410] EXT4-fs (loop0): Total free blocks count 0 [ 264.431544][ T6410] EXT4-fs (loop0): Free/Dirty block details [ 264.457003][ T5828] usb 4-1: config 0 descriptor?? [ 264.479237][ T6410] EXT4-fs (loop0): free_blocks=2415919504 [ 264.527968][ T6410] EXT4-fs (loop0): dirty_blocks=16 [ 264.580995][ T6410] EXT4-fs (loop0): Block reservation details [ 264.613074][ T6410] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 265.097264][ T5828] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x2 [ 265.166650][ T5828] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x2 [ 265.220026][ T5828] kovaplus 0003:1E7D:2D50.0002: item fetching failed at offset 3/5 [ 265.275040][ T5828] kovaplus 0003:1E7D:2D50.0002: parse failed [ 265.320556][ T5828] kovaplus 0003:1E7D:2D50.0002: probe with driver kovaplus failed with error -22 [ 265.562456][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.569349][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.713238][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.939681][ T49] Bluetooth: hci2: command 0x0c1a tx timeout [ 265.940114][ T30] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 266.028122][ T30] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 266.089332][ T794] usb 4-1: USB disconnect, device number 2 [ 266.318839][ T6439] loop0: detected capacity change from 0 to 256 [ 266.619173][ T29] audit: type=1800 audit(1771764155.740:10): pid=6439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.156" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=1048612 res=0 errno=0 [ 267.078278][ T6446] overlayfs: workdir and upperdir must reside under the same mount [ 268.194140][ T6464] IPv6: Can't replace route, no match found [ 268.342756][ T49] Bluetooth: hci3: command 0x0c1a tx timeout [ 268.345558][ T30] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 268.420117][ T30] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 270.553949][ T6481] loop4: detected capacity change from 0 to 32768 [ 270.579203][ T30] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 270.585496][ T30] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 270.589767][ T49] Bluetooth: hci4: command 0x0c1a tx timeout [ 270.682332][ T6481] JBD2: Ignoring recovery information on journal [ 270.787990][ T6481] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 270.800615][ T6489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.175'. [ 271.115548][ T5783] ocfs2: Unmounting device (7,4) on (node local) [ 271.176108][ T6494] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.176'. [ 272.636241][ T6503] loop3: detected capacity change from 0 to 32768 [ 272.682574][ T6503] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.179 (6503) [ 272.739086][ T6503] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 272.749820][ T6503] BTRFS info (device loop3): using sha256 checksum algorithm [ 272.763614][ T6503] workqueue: max_active 33554440 requested for btrfs-worker is out of range, clamping between 1 and 2048 [ 272.786756][ T6503] workqueue: max_active 33554440 requested for btrfs-delalloc is out of range, clamping between 1 and 2048 [ 272.835670][ T6503] workqueue: max_active 33554440 requested for btrfs-endio is out of range, clamping between 1 and 2048 [ 272.848184][ T794] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 272.870609][ T6503] workqueue: max_active 33554440 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048 [ 272.887012][ T6503] workqueue: max_active 33554440 requested for btrfs-rmw is out of range, clamping between 1 and 2048 [ 272.920478][ T6503] workqueue: max_active 33554440 requested for btrfs-endio-write is out of range, clamping between 1 and 2048 [ 273.003560][ T6503] BTRFS info (device loop3): rebuilding free space tree [ 273.040023][ T6503] BTRFS info (device loop3): disabling free space tree [ 273.047485][ T6503] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 273.057662][ T6503] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 273.084623][ T794] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 273.093220][ T6503] BTRFS info (device loop3): disabling tree log [ 273.102445][ T6503] BTRFS info (device loop3): turning on async discard [ 273.109728][ T6503] BTRFS info (device loop3): force clearing of disk cache [ 273.112817][ T794] usb 2-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 273.189708][ T794] usb 2-1: config 0 interface 0 has no altsetting 0 [ 273.213406][ T794] usb 2-1: New USB device found, idVendor=056a, idProduct=00ce, bcdDevice= 0.00 [ 273.244127][ T29] audit: type=1800 audit(1771764162.360:11): pid=6503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.179" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 273.284648][ T794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.423779][ T794] usb 2-1: config 0 descriptor?? [ 273.597618][ T5774] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 274.133705][ T6528] loop4: detected capacity change from 0 to 2048 [ 274.271045][ T6528] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 274.523478][ T6535] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 275.049579][ T794] usbhid 2-1:0.0: can't add hid device: -71 [ 275.056780][ T794] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 275.103887][ T794] usb 2-1: USB disconnect, device number 6 [ 275.415145][ T6535] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 275.469264][ T6535] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 275.580401][ T6535] Remounting filesystem read-only [ 275.600298][ T5783] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 275.883191][ T6547] loop0: detected capacity change from 0 to 1024 [ 275.923238][ T6547] EXT4-fs: Ignoring removed orlov option [ 276.041079][ T6547] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 276.151715][ T6547] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.016306][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.909970][ T6574] veth0: entered promiscuous mode [ 278.025478][ T6574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.195'. [ 279.358004][ T6591] loop4: detected capacity change from 0 to 512 [ 279.505054][ T6591] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.650618][ T6591] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 279.863849][ T6591] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #2: comm syz.4.200: corrupted inode contents [ 279.981500][ T6591] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #2: comm syz.4.200: mark_inode_dirty error [ 280.109675][ T6591] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #2: comm syz.4.200: corrupted inode contents [ 280.209607][ T6591] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.200: mark_inode_dirty error [ 280.329915][ T6600] EXT4-fs warning (device loop4): ext4_es_cache_extent:1082: inode #2: comm syz.4.200: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 280.329915][ T6600] [ 280.783908][ T6613] loop2: detected capacity change from 0 to 128 [ 280.837652][ T6613] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 280.867894][ T5783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.096875][ T6634] loop4: detected capacity change from 0 to 256 [ 282.132390][ T6630] loop2: detected capacity change from 0 to 512 [ 282.240479][ T6634] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 282.314535][ T6630] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 282.404829][ T6630] ext4 filesystem being mounted at /44/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.414791][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 283.477074][ T6650] input: syz0 as /devices/virtual/input/input8 [ 284.233197][ T6658] loop2: detected capacity change from 0 to 1024 [ 284.284987][ T6660] loop1: detected capacity change from 0 to 256 [ 284.357601][ T6660] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 284.387867][ T6658] hfsplus: b-tree write err: -5, ino 2 [ 284.468784][ T6660] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 284.619295][ T794] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 284.815326][ T13] hfsplus: b-tree write err: -5, ino 25 [ 284.829307][ T794] usb 1-1: Using ep0 maxpacket: 8 [ 284.867012][ T13] hfsplus: b-tree write err: -5, ino 4 [ 284.885875][ T794] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 284.909737][ T13] hfsplus: b-tree write err: -5, ino 2 [ 284.935812][ T13] hfsplus: b-tree write err: -5, ino 26 [ 284.942700][ T794] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 284.989340][ T794] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 285.029448][ T794] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 285.079329][ T794] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 285.104775][ T6670] warning: `syz.4.225' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 285.163619][ T794] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 285.213369][ T794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.576346][ T794] usb 1-1: usb_control_msg returned -32 [ 285.633720][ T794] usbtmc 1-1:16.0: can't read capabilities [ 286.282196][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 286.408812][ T6686] loop2: detected capacity change from 0 to 128 [ 286.519155][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 286.591121][ T9] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 286.639878][ T9] usb 5-1: config 0 has no interface number 0 [ 286.671002][ T9] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 286.742245][ T9] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 286.784310][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.825106][ T9] usb 5-1: Product: syz [ 286.857093][ T9] usb 5-1: Manufacturer: syz [ 286.878052][ T9] usb 5-1: SerialNumber: syz [ 286.945244][ T9] usb 5-1: config 0 descriptor?? [ 287.012913][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 287.031200][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 287.042727][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 287.052202][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 287.096727][ T9] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 287.109535][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 287.119359][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 287.129206][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 287.129358][ T1962] usb 1-1: USB disconnect, device number 3 [ 287.181865][ T9] em28xx 5-1:0.132: Video interface 132 found: [ 287.463024][ T9] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 287.747568][ T6696] loop2: detected capacity change from 0 to 1024 [ 288.005627][ T9] em28xx 5-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 288.079426][ T9] em28xx 5-1:0.132: board has no eeprom [ 288.280136][ T9] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 288.324017][ T9] em28xx 5-1:0.132: analog set to bulk mode. [ 288.350373][ T1962] em28xx 5-1:0.132: Registering V4L2 extension [ 288.440206][ T9] usb 5-1: USB disconnect, device number 4 [ 288.482653][ T9] em28xx 5-1:0.132: Disconnecting em28xx [ 289.733783][ T1962] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 289.784752][ T1962] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 289.813919][ T1962] em28xx 5-1:0.132: No AC97 audio processor [ 289.847998][ T1962] usb 5-1: Decoder not found [ 289.857197][ T1962] em28xx 5-1:0.132: failed to create media graph [ 289.888181][ T1962] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 289.926755][ T6724] loop2: detected capacity change from 0 to 128 [ 289.942043][ T1962] em28xx 5-1:0.132: Remote control support is not available for this card. [ 289.994675][ T9] em28xx 5-1:0.132: Closing input extension [ 290.041836][ T6726] loop1: detected capacity change from 0 to 512 [ 290.053304][ T9] em28xx 5-1:0.132: Freeing device [ 290.076745][ T6724] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 290.097029][ T6724] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 290.137189][ T6726] EXT4-fs: Ignoring removed orlov option [ 290.215684][ T6726] EXT4-fs: Ignoring removed mblk_io_submit option [ 290.349797][ T6726] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.242: corrupted in-inode xattr: e_value size too large [ 290.414450][ T6726] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 290.419085][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 290.435306][ C0] EXT4-fs (loop1): initial error at time 1771764179: ext4_iget_extra_inode:5025: inode 15 [ 290.445893][ C0] EXT4-fs (loop1): last error at time 1771764179: ext4_iget_extra_inode:5025: inode 15 [ 290.476314][ T6726] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.242: couldn't read orphan inode 15 (err -117) [ 290.548454][ T6726] loop1: lost filesystem error report for type 5 error -117 [ 290.556170][ T5782] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 290.559900][ T6726] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.647666][ T6734] loop3: detected capacity change from 0 to 512 [ 290.670297][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 290.710402][ T6734] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 290.826681][ T6726] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #2: block 12: comm syz.1.242: lblock 3 mapped to illegal pblock 12 (length 1) [ 290.854160][ T6734] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.243: inode has both inline data and extents flags [ 290.925493][ T6734] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 290.929212][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 290.945436][ C0] EXT4-fs (loop3): initial error at time 1771764180: ext4_orphan_get:1391: inode 15 [ 290.955232][ C0] EXT4-fs (loop3): last error at time 1771764180: ext4_orphan_get:1391: inode 15 [ 290.966282][ T6734] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.243: couldn't read orphan inode 15 (err -117) [ 291.001749][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.023868][ T6734] loop3: lost filesystem error report for type 5 error -117 [ 291.045023][ T6734] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.066147][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.129508][ T9] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 291.165717][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.301902][ T9] usb 5-1: config 0 descriptor?? [ 291.492353][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.858019][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.065180][ T9] usb 5-1: language id specifier not provided by device, defaulting to English [ 292.278148][ T9] uclogic 0003:256C:006D.0003: failed retrieving Huion firmware version: -71 [ 292.340938][ T9] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 292.379635][ T6748] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 292.386404][ T6748] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 292.387158][ T9] uclogic 0003:256C:006D.0003: probe with driver uclogic failed with error -71 [ 292.436759][ T6748] vhci_hcd vhci_hcd.0: Device attached [ 292.484036][ T6758] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(9) [ 292.490821][ T6758] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 292.616875][ T6750] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 292.623695][ T6750] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 292.655418][ T9] usb 5-1: USB disconnect, device number 5 [ 292.753247][ T6750] vhci_hcd vhci_hcd.0: Device attached [ 292.819958][ T794] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 292.875850][ T6758] vhci_hcd vhci_hcd.0: Device attached [ 292.889951][ T6748] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 292.927940][ T6750] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 293.033910][ T6750] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(14) [ 293.040789][ T6750] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 293.141017][ T6750] vhci_hcd vhci_hcd.0: Device attached [ 293.181925][ T6759] vhci_hcd: connection closed [ 293.183256][ T6765] vhci_hcd: connection closed [ 293.188616][ T1136] vhci_hcd vhci_hcd.2: stop threads [ 293.204553][ T6751] vhci_hcd: connection reset by peer [ 293.210178][ T6752] vhci_hcd: connection closed [ 293.263104][ T1136] vhci_hcd vhci_hcd.2: release socket [ 293.274275][ T1136] vhci_hcd vhci_hcd.2: disconnect device [ 293.319184][ T1136] vhci_hcd vhci_hcd.2: stop threads [ 293.324652][ T1136] vhci_hcd vhci_hcd.2: release socket [ 293.381583][ T1136] vhci_hcd vhci_hcd.2: disconnect device [ 293.414586][ T1136] vhci_hcd vhci_hcd.2: stop threads [ 293.463853][ T1136] vhci_hcd vhci_hcd.2: release socket [ 293.482619][ T1136] vhci_hcd vhci_hcd.2: disconnect device [ 293.513136][ T1136] vhci_hcd vhci_hcd.2: stop threads [ 293.529681][ T1136] vhci_hcd vhci_hcd.2: release socket [ 293.555315][ T1136] vhci_hcd vhci_hcd.2: disconnect device [ 294.010152][ T6770] loop1: detected capacity change from 0 to 4096 [ 294.231240][ T6782] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 294.255941][ T6781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.256'. [ 294.307613][ T6781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.256'. [ 294.418117][ T6784] loop2: detected capacity change from 0 to 512 [ 294.480931][ T6784] EXT4-fs: Ignoring removed orlov option [ 294.515797][ T6784] EXT4-fs: Ignoring removed mblk_io_submit option [ 294.529285][ T35] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.571127][ T35] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.582769][ T6781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.256'. [ 294.613098][ T35] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.657968][ T6781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.256'. [ 294.672618][ T35] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.724402][ T6784] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 294.797142][ T6781] Zero length message leads to an empty skb [ 294.800361][ T6784] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.257: attempt to clear invalid blocks 2 len 1 [ 294.861719][ T6784] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 294.874086][ T6784] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, [ 294.883555][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 294.883668][ C0] EXT4-fs (loop2): initial error at time 1772288472: ext4_clear_blocks:876: inode 13 [ 294.883842][ C0] EXT4-fs (loop2): last error at time 1772288472: ext4_clear_blocks:876: inode 13 [ 294.918796][ T6784] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 294.980644][ T6784] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.257: invalid indirect mapped block 1819239214 (level 0) [ 295.030232][ T6784] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 295.038399][ T6784] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.257: invalid indirect mapped block 1819239214 (level 1) [ 295.102940][ T6792] capability: warning: `syz.4.259' uses deprecated v2 capabilities in a way that may be insecure [ 295.144875][ T6784] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 295.172364][ T6784] EXT4-fs (loop2): 1 truncate cleaned up [ 295.265869][ T6784] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.380261][ T6794] loop1: detected capacity change from 0 to 128 [ 295.390352][ T6784] EXT4-fs (loop2): shut down requested (2) [ 295.493550][ T6794] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 295.594195][ T6794] ext4 filesystem being mounted at /48/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 295.843945][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.886225][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 295.969540][ T6801] netlink: 260 bytes leftover after parsing attributes in process `syz.4.263'. [ 296.104528][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.135287][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 296.169750][ T9] usb 1-1: config 1 has no interface number 0 [ 296.197815][ T9] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.219492][ T5771] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 296.259571][ T9] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 296.298510][ T9] usb 1-1: too many endpoints for config 1 interface 1 altsetting 1: 247, using maximum allowed: 30 [ 296.347267][ T9] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 296.434143][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 296.467733][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.497556][ T9] usb 1-1: Product: syz [ 296.524493][ T9] usb 1-1: Manufacturer: syz [ 296.560078][ T9] usb 1-1: SerialNumber: syz [ 296.631682][ T6805] syzkaller0: refused to change device tx_queue_len [ 297.355994][ T6817] loop3: detected capacity change from 0 to 256 [ 297.767028][ T9] cdc_ncm 1-1:1.1: bind() failure [ 297.860551][ T794] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 297.955036][ T30] usb 1-1: USB disconnect, device number 4 [ 298.998598][ T6820] loop1: detected capacity change from 0 to 40427 [ 299.034981][ T6820] F2FS-fs (loop1): build fault injection rate: 690 [ 299.052589][ T6820] F2FS-fs (loop1): invalid crc value [ 299.378091][ T6820] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 299.405603][ T6820] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 299.786566][ T5771] syz-executor: attempt to access beyond end of device [ 299.786566][ T5771] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 299.845006][ T5771] CPU: 1 UID: 0 PID: 5771 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 299.845206][ T5771] Tainted: [L]=SOFTLOCKUP [ 299.845258][ T5771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 299.845353][ T5771] Call Trace: [ 299.845427][ T5771] [ 299.845482][ T5771] __dump_stack+0x26/0x30 [ 299.845663][ T5771] dump_stack_lvl+0x14c/0x1c0 [ 299.845845][ T5771] dump_stack+0x1e/0x25 [ 299.846005][ T5771] f2fs_handle_critical_error+0xa6f/0xc20 [ 299.846229][ T5771] f2fs_stop_checkpoint+0x65/0x80 [ 299.846420][ T5771] f2fs_write_end_io+0x12e6/0x2560 [ 299.846677][ T5771] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 299.846867][ T5771] bio_endio+0x1006/0x1160 [ 299.847090][ T5771] submit_bio_noacct+0x533/0x2960 [ 299.847361][ T5771] submit_bio+0x57a/0x620 [ 299.847571][ T5771] f2fs_submit_write_bio+0x115/0x350 [ 299.847751][ T5771] __submit_merged_bio+0x16f/0x780 [ 299.847910][ T5771] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 299.848104][ T5771] __submit_merged_write_cond+0x4ba/0xae0 [ 299.848304][ T5771] f2fs_write_data_pages+0x5073/0x5e10 [ 299.848569][ T5771] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 299.848818][ T5771] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 299.849027][ T5771] ? free_unref_folios+0x2a52/0x2ac0 [ 299.849187][ T5771] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 299.849428][ T5771] ? kmsan_get_metadata+0xf1/0x160 [ 299.849616][ T5771] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 299.849819][ T5771] ? kmsan_get_metadata+0xf1/0x160 [ 299.850018][ T5771] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 299.850229][ T5771] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 299.850420][ T5771] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 299.850606][ T5771] do_writepages+0x3f2/0x860 [ 299.850758][ T5771] ? _raw_spin_unlock+0x30/0x50 [ 299.850930][ T5771] ? wbc_attach_and_unlock_inode+0x131/0x660 [ 299.851121][ T5771] filemap_fdatawrite+0x207/0x260 [ 299.851381][ T5771] f2fs_sync_dirty_inodes+0x2aa/0xaa0 [ 299.851620][ T5771] f2fs_write_checkpoint+0x10e1/0x3d20 [ 299.851921][ T5771] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 299.852167][ T5771] kill_f2fs_super+0x320/0x990 [ 299.852408][ T5771] ? __pfx_kill_f2fs_super+0x10/0x10 [ 299.852601][ T5771] deactivate_locked_super+0xcb/0x3c0 [ 299.852775][ T5771] deactivate_super+0x12f/0x140 [ 299.852934][ T5771] cleanup_mnt+0x7eb/0x870 [ 299.853097][ T5771] ? __pfx___cleanup_mnt+0x10/0x10 [ 299.853258][ T5771] __cleanup_mnt+0x22/0x30 [ 299.853398][ T5771] task_work_run+0x208/0x2b0 [ 299.853591][ T5771] exit_to_user_mode_loop+0x306/0x1b60 [ 299.853782][ T5771] ? user_path_at+0x1fc/0x330 [ 299.853942][ T5771] ? __x64_sys_umount+0x1dc/0x250 [ 299.854123][ T5771] do_syscall_64+0x24d/0xf80 [ 299.854320][ T5771] ? clear_bhb_loop+0x50/0xa0 [ 299.854464][ T5771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.854622][ T5771] RIP: 0033:0x7f3ab479d897 [ 299.854749][ T5771] Code: a2 c7 05 5c ee 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 299.854893][ T5771] RSP: 002b:00007ffea2328a18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 299.855033][ T5771] RAX: 0000000000000000 RBX: 00007f3ab4831ef0 RCX: 00007f3ab479d897 [ 299.855137][ T5771] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffea2328ad0 [ 299.855230][ T5771] RBP: 00007ffea2328ad0 R08: 00007ffea2329ad0 R09: 00000000ffffffff [ 299.855330][ T5771] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffea2329b60 [ 299.855422][ T5771] R13: 00007f3ab4831ef0 R14: 000000000004927d R15: 00007ffea2329ba0 [ 299.855562][ T5771] [ 300.318183][ T5771] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 300.864457][ T6850] loop0: detected capacity change from 0 to 512 [ 300.960353][ T6850] EXT4-fs: Ignoring removed bh option [ 301.072627][ T6850] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 301.226450][ T6850] EXT4-fs (loop0): 1 truncate cleaned up [ 301.256936][ T6850] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.442483][ T6857] loop4: detected capacity change from 0 to 8 [ 301.691077][ T29] audit: type=1326 audit(1772288488.016:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6860 comm="syz.3.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9086b9c629 code=0x7ffc0000 [ 301.811320][ T29] audit: type=1326 audit(1772288488.076:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6860 comm="syz.3.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9086b9c629 code=0x7ffc0000 [ 301.843998][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.022638][ T29] audit: type=1326 audit(1772288488.076:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6860 comm="syz.3.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9086b9c629 code=0x7ffc0000 [ 302.129647][ T29] audit: type=1326 audit(1772288488.096:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6860 comm="syz.3.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f9086b9c629 code=0x7ffc0000 [ 302.235048][ T29] audit: type=1326 audit(1772288488.096:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6860 comm="syz.3.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9086b9c629 code=0x7ffc0000 [ 302.345000][ T29] audit: type=1326 audit(1772288488.096:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6860 comm="syz.3.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9086b9c629 code=0x7ffc0000 [ 302.448116][ T29] audit: type=1326 audit(1772288488.096:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6860 comm="syz.3.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9086b9c629 code=0x7ffc0000 [ 302.503866][ T6869] macsec0: entered promiscuous mode [ 302.552596][ T6869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.279'. [ 302.574095][ T6870] loop0: detected capacity change from 0 to 512 [ 302.593551][ T29] audit: type=1326 audit(1772288488.096:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6860 comm="syz.3.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9086b9c629 code=0x7ffc0000 [ 302.620423][ T6871] macsec0: left promiscuous mode [ 302.650135][ T6870] EXT4-fs: Ignoring removed oldalloc option [ 302.692392][ T29] audit: type=1326 audit(1772288488.126:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6860 comm="syz.3.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f9086b9c629 code=0x7ffc0000 [ 302.764854][ T6870] EXT4-fs (loop0): 1 truncate cleaned up [ 302.805441][ T29] audit: type=1326 audit(1772288488.126:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6860 comm="syz.3.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9086b9c629 code=0x7ffc0000 [ 302.934324][ T6870] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.171936][ T6870] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 303.718830][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.346786][ T794] IPVS: starting estimator thread 0... [ 304.419862][ T6891] IPVS: nq: FWM 3 0x00000003 - no destination available [ 304.465275][ T6892] IPVS: using max 192 ests per chain, 9600 per kthread [ 304.477055][ C1] IPVS: nq: FWM 3 0x00000003 - no destination available [ 304.776938][ T6894] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 305.207369][ T6889] loop0: detected capacity change from 0 to 40427 [ 305.217563][ T6889] F2FS-fs: heap/no_heap options were deprecated [ 305.273971][ T6889] F2FS-fs (loop0): build fault injection rate: 19 [ 305.281027][ T6889] F2FS-fs (loop0): build fault injection type: 0x3bfe8c [ 305.292153][ T6889] F2FS-fs (loop0): invalid crc value [ 305.341216][ T6889] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xd0b/0x1e80 [ 305.627044][ T6889] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x1d2/0x4b0 [ 305.645393][ T6889] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 305.662708][ T6889] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 306.573705][ T6903] loop4: detected capacity change from 0 to 4096 [ 306.669723][ T9] IPVS: starting estimator thread 0... [ 306.775871][ T6914] IPVS: using max 192 ests per chain, 9600 per kthread [ 308.062166][ T6916] loop3: detected capacity change from 0 to 32768 [ 308.158677][ T6916] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.303 (6916) [ 308.416631][ T6920] loop1: detected capacity change from 0 to 32768 [ 308.449912][ T6916] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 308.465363][ T6916] BTRFS info (device loop3): using sha256 checksum algorithm [ 308.589129][ T1037] ntfs3(loop4): ino=5, mi_enum_attr [ 308.734244][ T6916] BTRFS info (device loop3): rebuilding free space tree [ 308.765785][ T6916] BTRFS info (device loop3): turning off barriers [ 308.772448][ T6916] BTRFS info (device loop3): turning on async discard [ 308.779642][ T6916] BTRFS info (device loop3): enabling free space tree [ 308.786741][ T6916] BTRFS info (device loop3): force clearing of disk cache [ 308.794087][ T6916] BTRFS info (device loop3): max_inline set to 17 [ 308.931759][ T6916] BTRFS info (device loop3 state M): max_inline set to 17 [ 309.080470][ T5774] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 309.594154][ T794] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 309.834099][ T794] usb 5-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 309.883383][ T794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.926632][ T794] usb 5-1: config 0 descriptor?? [ 310.066843][ T30] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 310.305188][ T30] usb 4-1: Using ep0 maxpacket: 8 [ 310.341370][ T30] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 310.374940][ T30] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 310.402738][ T794] logitech 0003:046D:CA03.0004: unknown main item tag 0x0 [ 310.430319][ T30] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 310.493572][ T794] logitech 0003:046D:CA03.0004: unknown main item tag 0x0 [ 310.530914][ T30] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 310.541922][ T794] logitech 0003:046D:CA03.0004: unknown main item tag 0x0 [ 310.581007][ T794] logitech 0003:046D:CA03.0004: unknown main item tag 0x0 [ 310.601359][ T30] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 310.645550][ T794] logitech 0003:046D:CA03.0004: unknown main item tag 0x0 [ 310.692034][ T30] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 310.714238][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.812400][ T794] logitech 0003:046D:CA03.0004: hidraw0: USB HID v1.01 Device [HID 046d:ca03] on usb-dummy_hcd.4-1/input0 [ 310.854986][ T794] logitech 0003:046D:CA03.0004: no inputs found [ 311.013490][ T794] usb 5-1: USB disconnect, device number 6 [ 311.721310][ T6957] loop0: detected capacity change from 0 to 512 [ 311.737417][ T6958] usbtmc 4-1:16.0: simple control status returned 0 [ 311.741754][ T6957] EXT4-fs: Ignoring removed oldalloc option [ 311.943430][ T30] usb 4-1: USB disconnect, device number 3 [ 311.982824][ T6962] loop1: detected capacity change from 0 to 128 [ 312.032583][ T6957] EXT4-fs (loop0): 1 truncate cleaned up [ 312.187623][ T6957] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.267173][ T6962] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 312.341748][ T6953] fido_id[6953]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 312.366114][ T6962] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.067894][ T5771] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 313.232737][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.410915][ T6974] loop8: detected capacity change from 0 to 7 [ 313.498531][ T6974] Dev loop8: unable to read RDB block 7 [ 313.504436][ T6974] loop8: unable to read partition table [ 313.568071][ T6974] loop8: partition table beyond EOD, truncated [ 313.672931][ T6974] loop_reread_partitions: partition scan of loop8 (ţ被xü—źŃŕ– ) failed (rc=-5) [ 315.375225][ T7003] loop0: detected capacity change from 0 to 256 [ 315.721843][ T7003] FAT-fs (loop0): Directory bread(block 64) failed [ 315.746042][ T7003] FAT-fs (loop0): Directory bread(block 65) failed [ 315.752996][ T7003] FAT-fs (loop0): Directory bread(block 66) failed [ 315.815820][ T7003] FAT-fs (loop0): Directory bread(block 67) failed [ 315.822794][ T7003] FAT-fs (loop0): Directory bread(block 68) failed [ 315.903052][ T7003] FAT-fs (loop0): Directory bread(block 69) failed [ 315.973240][ T7003] FAT-fs (loop0): Directory bread(block 70) failed [ 316.012092][ T7003] FAT-fs (loop0): Directory bread(block 71) failed [ 316.046585][ T7003] FAT-fs (loop0): Directory bread(block 72) failed [ 316.087075][ T7003] FAT-fs (loop0): Directory bread(block 73) failed [ 316.138077][ T30] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 316.356259][ T30] usb 2-1: Using ep0 maxpacket: 32 [ 316.369714][ T30] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.412483][ T30] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.443639][ T30] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 316.476282][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.553531][ T30] usb 2-1: config 0 descriptor?? [ 316.618967][ T7018] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 317.117511][ T30] logitech 0003:046D:C29C.0005: hidraw0: USB HID vb4.30 Device [HID 046d:c29c] on usb-dummy_hcd.1-1/input0 [ 317.463050][ T30] logitech 0003:046D:C29C.0005: no inputs found [ 317.542681][ T30] usb 2-1: USB disconnect, device number 7 [ 317.787133][ T7025] loop0: detected capacity change from 0 to 2048 [ 317.847970][ T7025] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=4096, location=4096 [ 317.887389][ T7025] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 317.939161][ T7025] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 317.999546][ T7025] UDF-fs: Scanning with blocksize 512 failed [ 318.102443][ T7025] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 318.139687][ T7025] UDF-fs: Scanning with blocksize 1024 failed [ 318.261386][ T7025] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 318.292450][ T7025] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 318.313721][ T7025] UDF-fs: Scanning with blocksize 2048 failed [ 318.320311][ T7030] fido_id[7030]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 318.426108][ T7025] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 318.509476][ T7025] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 318.569126][ T7025] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 318.591162][ T7025] UDF-fs: Scanning with blocksize 4096 failed [ 318.599545][ T7025] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 319.295051][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 319.437154][ T7045] input: syz0 as /devices/virtual/input/input10 [ 319.520832][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 319.537116][ T1962] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 319.566295][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.605663][ T9] usb 4-1: Product: syz [ 319.610077][ T9] usb 4-1: Manufacturer: syz [ 319.624914][ T9] usb 4-1: SerialNumber: syz [ 319.765021][ T1962] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 319.774490][ T1962] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.815608][ T1962] usb 3-1: config 0 descriptor?? [ 319.881754][ T1962] cp210x 3-1:0.0: cp210x converter detected [ 320.287548][ T1962] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 320.382263][ T1962] usb 3-1: cp210x converter now attached to ttyUSB0 [ 320.550472][ T30] usb 3-1: USB disconnect, device number 5 [ 320.590138][ T30] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 320.709434][ T30] cp210x 3-1:0.0: device disconnected [ 320.763825][ T9] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 320.783377][ T9] cdc_ncm 4-1:1.0: dwNtbInMaxSize=1 is too small. Using 2048 [ 320.816712][ T9] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 320.993040][ T9] cdc_ncm 4-1:1.0: setting tx_max = 28 [ 321.062920][ T9] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 321.174172][ T9] usb 4-1: USB disconnect, device number 4 [ 321.223195][ T9] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 324.564976][ T7089] loop4: detected capacity change from 0 to 40427 [ 324.583844][ T7089] F2FS-fs (loop4): Image doesn't support compression [ 324.591028][ T7089] F2FS-fs (loop4): build fault injection rate: 690 [ 324.617410][ T7089] F2FS-fs (loop4): invalid crc value [ 324.908998][ T7089] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 324.919630][ T7089] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 325.470157][ T7101] loop1: detected capacity change from 0 to 32768 [ 325.482973][ T5783] syz-executor: attempt to access beyond end of device [ 325.482973][ T5783] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 325.506895][ T7101] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.369 (7101) [ 325.530125][ T7101] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 325.540651][ T7101] BTRFS info (device loop1): using crc32c checksum algorithm [ 325.581219][ T5783] CPU: 0 UID: 0 PID: 5783 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 325.581399][ T5783] Tainted: [L]=SOFTLOCKUP [ 325.581454][ T5783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 325.581544][ T5783] Call Trace: [ 325.581598][ T5783] [ 325.581651][ T5783] __dump_stack+0x26/0x30 [ 325.581827][ T5783] dump_stack_lvl+0x14c/0x1c0 [ 325.582013][ T5783] dump_stack+0x1e/0x25 [ 325.582171][ T5783] f2fs_handle_critical_error+0xa6f/0xc20 [ 325.582391][ T5783] f2fs_stop_checkpoint+0x65/0x80 [ 325.582586][ T5783] f2fs_write_end_io+0x12e6/0x2560 [ 325.582828][ T5783] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 325.583018][ T5783] bio_endio+0x1006/0x1160 [ 325.583215][ T5783] submit_bio_noacct+0x533/0x2960 [ 325.583461][ T5783] submit_bio+0x57a/0x620 [ 325.583664][ T5783] f2fs_submit_write_bio+0x115/0x350 [ 325.583852][ T5783] __submit_merged_bio+0x16f/0x780 [ 325.584020][ T5783] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 325.584235][ T5783] __submit_merged_write_cond+0x4ba/0xae0 [ 325.584469][ T5783] f2fs_write_data_pages+0x5073/0x5e10 [ 325.584798][ T5783] ? update_load_avg+0x14eb/0x25d0 [ 325.585029][ T5783] ? kmsan_get_metadata+0xf1/0x160 [ 325.585215][ T5783] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 325.585443][ T5783] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 325.585640][ T5783] ? kmsan_get_metadata+0xf1/0x160 [ 325.585838][ T5783] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 325.586054][ T5783] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 325.586243][ T5783] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 325.586431][ T5783] do_writepages+0x3f2/0x860 [ 325.586576][ T5783] ? _raw_spin_unlock+0x30/0x50 [ 325.586751][ T5783] ? wbc_attach_and_unlock_inode+0x131/0x660 [ 325.586947][ T5783] filemap_fdatawrite+0x207/0x260 [ 325.587203][ T5783] f2fs_sync_dirty_inodes+0x2aa/0xaa0 [ 325.587437][ T5783] f2fs_write_checkpoint+0x10e1/0x3d20 [ 325.587807][ T5783] kill_f2fs_super+0x320/0x990 [ 325.588054][ T5783] ? __pfx_kill_f2fs_super+0x10/0x10 [ 325.588245][ T5783] deactivate_locked_super+0xcb/0x3c0 [ 325.588425][ T5783] deactivate_super+0x12f/0x140 [ 325.588584][ T5783] cleanup_mnt+0x7eb/0x870 [ 325.588744][ T5783] ? __pfx___cleanup_mnt+0x10/0x10 [ 325.588901][ T5783] __cleanup_mnt+0x22/0x30 [ 325.589046][ T5783] task_work_run+0x208/0x2b0 [ 325.589253][ T5783] exit_to_user_mode_loop+0x306/0x1b60 [ 325.589468][ T5783] ? user_path_at+0x1fc/0x330 [ 325.589646][ T5783] ? __x64_sys_umount+0x1dc/0x250 [ 325.589860][ T5783] do_syscall_64+0x24d/0xf80 [ 325.590061][ T5783] ? clear_bhb_loop+0x50/0xa0 [ 325.590221][ T5783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.590396][ T5783] RIP: 0033:0x7fc5db99d897 [ 325.590508][ T5783] Code: a2 c7 05 5c ee 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 325.590632][ T5783] RSP: 002b:00007ffddde89498 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 325.590774][ T5783] RAX: 0000000000000000 RBX: 00007fc5dba31ef0 RCX: 00007fc5db99d897 [ 325.590883][ T5783] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffddde89550 [ 325.590975][ T5783] RBP: 00007ffddde89550 R08: 00007ffddde8a550 R09: 00000000ffffffff [ 325.591075][ T5783] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffddde8a5e0 [ 325.591167][ T5783] R13: 00007fc5dba31ef0 R14: 000000000004f67b R15: 00007ffddde8a620 [ 325.591305][ T5783] [ 326.093840][ T7106] loop2: detected capacity change from 0 to 256 [ 326.127629][ T5783] F2FS-fs (loop4): Remounting filesystem read-only [ 326.316492][ T7106] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 326.350675][ T7101] BTRFS info (device loop1): enabling ssd optimizations [ 326.358505][ T7101] BTRFS info (device loop1): turning on async discard [ 326.365867][ T7101] BTRFS info (device loop1): enabling free space tree [ 326.830269][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.856160][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.902835][ T5771] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 328.098632][ T7129] loop0: detected capacity change from 0 to 32768 [ 328.257491][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 328.257577][ T29] audit: type=1800 audit(1772288514.586:63): pid=7129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.377" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 328.723047][ T7134] loop3: detected capacity change from 0 to 1024 [ 328.814051][ T7134] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 328.938320][ T7134] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.130160][ T7134] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 329.278754][ T7134] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 329.708758][ T5774] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 329.760956][ T5774] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 331.003427][ T7152] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 331.160263][ T1088] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.214945][ T1088] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.221929][ T5824] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 331.403311][ T1088] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.427599][ T5824] usb 3-1: Using ep0 maxpacket: 16 [ 331.447628][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.477406][ T1088] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.526126][ T5824] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 331.548419][ T5824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.645364][ T5824] usb 3-1: config 0 descriptor?? [ 331.660103][ T1088] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.718572][ T1088] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.873002][ T1088] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.936374][ T1088] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.168303][ T5824] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0006/input/input11 [ 332.318037][ T5824] cm6533_jd 0003:0D8C:0022.0006: input,hiddev0,hidraw0: USB HID v0.05 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 332.720885][ T30] usb 3-1: USB disconnect, device number 6 [ 332.733556][ T1088] bridge_slave_1: left allmulticast mode [ 332.773823][ T1088] bridge_slave_1: left promiscuous mode [ 332.800382][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.848176][ T1088] bridge_slave_0: left allmulticast mode [ 332.854033][ T1088] bridge_slave_0: left promiscuous mode [ 332.885655][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.035703][ T7158] fido_id[7158]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 334.480164][ T7176] netlink: 4 bytes leftover after parsing attributes in process `syz.4.395'. [ 334.736980][ T7166] loop1: detected capacity change from 0 to 40427 [ 334.750458][ T7166] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x1f52010) [ 334.762189][ T7166] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 334.770798][ T7166] F2FS-fs (loop1): Image doesn't support compression [ 334.777806][ T7166] F2FS-fs (loop1): build fault injection type: 0x4 [ 334.788473][ T7166] F2FS-fs (loop1): invalid crc value [ 334.929643][ T1088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.146190][ T1088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.175479][ T7166] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 335.193320][ T7166] F2FS-fs (loop1): Start checkpoint disabled! [ 335.207161][ T7166] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 335.223242][ T7166] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 335.232160][ T7166] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 335.274188][ T1088] bond0 (unregistering): Released all slaves [ 335.339377][ T7166] capability: warning: `syz.1.392' uses 32-bit capabilities (legacy support in use) [ 335.808820][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 335.829117][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 335.845656][ T5778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 335.868489][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 335.886159][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 336.059027][ T49] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 336.076160][ T49] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 336.088142][ T49] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 336.102205][ T49] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 336.115713][ T49] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 336.943283][ T1088] hsr_slave_0: left promiscuous mode [ 336.970176][ T1088] hsr_slave_1: left promiscuous mode [ 337.004021][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.064777][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.102882][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.139983][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.272586][ T1088] veth1_macvtap: left promiscuous mode [ 337.305164][ T1088] veth0_macvtap: left promiscuous mode [ 337.345632][ T1088] veth1_vlan: left promiscuous mode [ 337.351365][ T1088] veth0_vlan: left promiscuous mode [ 337.569671][ T30] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 337.784828][ T30] usb 1-1: Using ep0 maxpacket: 16 [ 337.802341][ T30] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.835294][ T30] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 337.881938][ T30] usb 1-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00 [ 337.899974][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.955597][ T30] usb 1-1: config 0 descriptor?? [ 338.155499][ T5778] Bluetooth: hci1: command tx timeout [ 338.536230][ T30] logitech-djreceiver 0003:046D:C537.0007: hidraw0: USB HID v0.05 Device [HID 046d:c537] on usb-dummy_hcd.0-1/input0 [ 338.846380][ T5824] usb 1-1: USB disconnect, device number 5 [ 339.169565][ T7207] fido_id[7207]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 339.422936][ T1088] team0 (unregistering): Port device team_slave_1 removed [ 339.649488][ T1088] team0 (unregistering): Port device team_slave_0 removed [ 340.225207][ T5778] Bluetooth: hci1: command tx timeout [ 340.534324][ T7227] loop2: detected capacity change from 0 to 512 [ 340.593940][ T7227] EXT4-fs: Ignoring removed i_version option [ 340.714408][ T7227] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.334248][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.737222][ T1088] IPVS: stop unused estimator thread 0... [ 341.845165][ T30] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 342.035426][ T30] usb 5-1: Using ep0 maxpacket: 32 [ 342.075798][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.109938][ T7187] chnl_net:caif_netlink_parms(): no params data found [ 342.118202][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.143817][ T30] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 342.258923][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.310742][ T5778] Bluetooth: hci1: command tx timeout [ 342.359543][ T30] usb 5-1: config 0 descriptor?? [ 343.000331][ T30] savu 0003:1E7D:2D5A.0008: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 343.144126][ T30] usb 5-1: USB disconnect, device number 7 [ 343.256705][ T29] audit: type=1326 audit(1772288529.586:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7261 comm="syz.0.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91e019c629 code=0x7ffc0000 [ 343.360909][ T29] audit: type=1326 audit(1772288529.586:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7261 comm="syz.0.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91e019c629 code=0x7ffc0000 [ 343.462636][ T29] audit: type=1326 audit(1772288529.626:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7261 comm="syz.0.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91e019c629 code=0x7ffc0000 [ 343.545347][ T29] audit: type=1326 audit(1772288529.636:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7261 comm="syz.0.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91e019c629 code=0x7ffc0000 [ 343.579566][ T29] audit: type=1326 audit(1772288529.646:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7261 comm="syz.0.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f91e019c629 code=0x7ffc0000 [ 343.604025][ T29] audit: type=1326 audit(1772288529.666:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7261 comm="syz.0.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91e019c629 code=0x7ffc0000 [ 343.727515][ T29] audit: type=1326 audit(1772288529.666:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7261 comm="syz.0.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91e019c629 code=0x7ffc0000 [ 343.814978][ T29] audit: type=1326 audit(1772288529.686:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7261 comm="syz.0.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91e019c629 code=0x7ffc0000 [ 343.912664][ T29] audit: type=1326 audit(1772288529.686:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7261 comm="syz.0.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91e019c629 code=0x7ffc0000 [ 343.929065][ T7263] fido_id[7263]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 344.044327][ T29] audit: type=1326 audit(1772288529.726:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7261 comm="syz.0.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f91e019c629 code=0x7ffc0000 [ 344.386127][ T5778] Bluetooth: hci1: command tx timeout [ 344.395172][ T30] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 344.442548][ T7284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.428'. [ 344.452631][ T7284] netlink: 'syz.4.428': attribute type 5 has an invalid length. [ 344.464313][ T7284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.428'. [ 344.573521][ T7284] geneve2: entered promiscuous mode [ 344.580260][ T30] usb 2-1: Using ep0 maxpacket: 16 [ 344.598926][ T30] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.611155][ T7284] geneve2: entered allmulticast mode [ 344.636525][ T30] usb 2-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 344.690914][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.759942][ T30] usb 2-1: config 0 descriptor?? [ 344.783531][ T1088] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 8192 - 0 [ 344.816000][ T1088] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 8192 - 0 [ 344.910588][ T7187] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.968081][ T7187] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.982296][ T7289] syz.2.429 uses obsolete (PF_INET,SOCK_PACKET) [ 345.038466][ T7187] bridge_slave_0: entered allmulticast mode [ 345.135369][ T7187] bridge_slave_0: entered promiscuous mode [ 345.207609][ T1088] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 8192 - 0 [ 345.245254][ T1088] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 8192 - 0 [ 345.309498][ T7187] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.338383][ T7187] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.385593][ T7187] bridge_slave_1: entered allmulticast mode [ 345.406824][ T30] magicmouse 0003:05AC:0269.0009: hidraw0: USB HID v0.00 Device [HID 05ac:0269] on usb-dummy_hcd.1-1/input0 [ 345.422373][ T7187] bridge_slave_1: entered promiscuous mode [ 345.515630][ T30] usb 2-1: USB disconnect, device number 8 [ 345.925553][ T7300] netlink: 'syz.2.432': attribute type 10 has an invalid length. [ 345.997037][ T7187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.138336][ T7295] fido_id[7295]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 346.138325][ T7187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.235643][ T7300] team0: Device dummy0 failed to register rx_handler [ 346.317505][ T7301] netlink: 28 bytes leftover after parsing attributes in process `syz.2.432'. [ 346.850487][ T7187] team0: Port device team_slave_0 added [ 346.944484][ T7187] team0: Port device team_slave_1 added [ 347.493606][ T7187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.529343][ T7187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.745027][ T7187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.964531][ T7187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.003374][ T7187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.201666][ T7187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.525864][ T7321] loop4: detected capacity change from 0 to 40427 [ 348.550732][ T7321] F2FS-fs (loop4): invalid crc value [ 348.903697][ T7321] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 348.920978][ T7321] F2FS-fs (loop4): Start checkpoint disabled! [ 349.868347][ T7335] loop1: detected capacity change from 0 to 40427 [ 349.890795][ T7321] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 349.913394][ T7321] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 349.946722][ T7335] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 349.953576][ T7335] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 350.163546][ T7187] hsr_slave_0: entered promiscuous mode [ 350.283978][ T7187] hsr_slave_1: entered promiscuous mode [ 350.289819][ T7335] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 350.355125][ T7335] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 350.362566][ T7335] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 350.568079][ T5771] syz-executor: attempt to access beyond end of device [ 350.568079][ T5771] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 350.588103][ T5771] CPU: 0 UID: 0 PID: 5771 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 350.588294][ T5771] Tainted: [L]=SOFTLOCKUP [ 350.588349][ T5771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 350.588432][ T5771] Call Trace: [ 350.588485][ T5771] [ 350.588538][ T5771] __dump_stack+0x26/0x30 [ 350.588714][ T5771] dump_stack_lvl+0x14c/0x1c0 [ 350.588898][ T5771] dump_stack+0x1e/0x25 [ 350.589058][ T5771] f2fs_handle_critical_error+0xa6f/0xc20 [ 350.589282][ T5771] f2fs_stop_checkpoint+0x65/0x80 [ 350.589474][ T5771] f2fs_write_end_io+0x12e6/0x2560 [ 350.589727][ T5771] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 350.589916][ T5771] bio_endio+0x1006/0x1160 [ 350.590116][ T5771] submit_bio_noacct+0x533/0x2960 [ 350.590384][ T5771] submit_bio+0x57a/0x620 [ 350.590595][ T5771] f2fs_submit_write_bio+0x115/0x350 [ 350.590801][ T5771] __submit_merged_bio+0x16f/0x780 [ 350.590976][ T5771] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 350.591224][ T5771] __submit_merged_write_cond+0x4ba/0xae0 [ 350.591445][ T5771] f2fs_write_data_pages+0x5073/0x5e10 [ 350.591788][ T5771] ? kmsan_get_metadata+0xf1/0x160 [ 350.591994][ T5771] ? folio_batch_move_lru+0x6a2/0x6d0 [ 350.592195][ T5771] ? __msan_warning+0x1b/0x30 [ 350.592377][ T5771] ? filter_irq_stacks+0x13f/0x190 [ 350.592579][ T5771] ? stack_depot_save_flags+0x35/0x790 [ 350.592790][ T5771] ? kmsan_get_metadata+0xf1/0x160 [ 350.593005][ T5771] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 350.593215][ T5771] ? kmsan_get_metadata+0xf1/0x160 [ 350.593415][ T5771] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 350.593613][ T5771] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 350.593816][ T5771] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 350.594003][ T5771] do_writepages+0x3f2/0x860 [ 350.594156][ T5771] ? _raw_spin_unlock+0x30/0x50 [ 350.594338][ T5771] ? wbc_attach_and_unlock_inode+0x131/0x660 [ 350.594532][ T5771] filemap_fdatawrite+0x207/0x260 [ 350.594780][ T5771] f2fs_sync_dirty_inodes+0x2aa/0xaa0 [ 350.595021][ T5771] f2fs_write_checkpoint+0x10e1/0x3d20 [ 350.595397][ T5771] kill_f2fs_super+0x320/0x990 [ 350.595640][ T5771] ? __pfx_kill_f2fs_super+0x10/0x10 [ 350.595835][ T5771] deactivate_locked_super+0xcb/0x3c0 [ 350.596019][ T5771] deactivate_super+0x12f/0x140 [ 350.596185][ T5771] cleanup_mnt+0x7eb/0x870 [ 350.596359][ T5771] ? __pfx___cleanup_mnt+0x10/0x10 [ 350.596516][ T5771] __cleanup_mnt+0x22/0x30 [ 350.596664][ T5771] task_work_run+0x208/0x2b0 [ 350.596878][ T5771] exit_to_user_mode_loop+0x306/0x1b60 [ 350.597086][ T5771] ? user_path_at+0x1fc/0x330 [ 350.597272][ T5771] ? __x64_sys_umount+0x1dc/0x250 [ 350.597477][ T5771] do_syscall_64+0x24d/0xf80 [ 350.597667][ T5771] ? clear_bhb_loop+0x50/0xa0 [ 350.597817][ T5771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.597968][ T5771] RIP: 0033:0x7f3ab479d897 [ 350.598077][ T5771] Code: a2 c7 05 5c ee 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 350.598191][ T5771] RSP: 002b:00007ffea2328a18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 350.598332][ T5771] RAX: 0000000000000000 RBX: 00007f3ab4831ef0 RCX: 00007f3ab479d897 [ 350.598429][ T5771] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffea2328ad0 [ 350.598521][ T5771] RBP: 00007ffea2328ad0 R08: 00007ffea2329ad0 R09: 00000000ffffffff [ 350.598622][ T5771] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffea2329b60 [ 350.598706][ T5771] R13: 00007f3ab4831ef0 R14: 00000000000553b8 R15: 00007ffea2329ba0 [ 350.598847][ T5771] [ 351.038438][ T5771] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 351.281215][ T1107] kworker/u8:9: attempt to access beyond end of device [ 351.281215][ T1107] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 351.376803][ T1107] CPU: 0 UID: 0 PID: 1107 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 351.377001][ T1107] Tainted: [L]=SOFTLOCKUP [ 351.377053][ T1107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 351.377184][ T1107] Workqueue: writeback wb_workfn (flush-7:4) [ 351.377368][ T1107] Call Trace: [ 351.377418][ T1107] [ 351.377469][ T1107] __dump_stack+0x26/0x30 [ 351.377632][ T1107] dump_stack_lvl+0x14c/0x1c0 [ 351.377803][ T1107] dump_stack+0x1e/0x25 [ 351.377962][ T1107] f2fs_handle_critical_error+0xa6f/0xc20 [ 351.378173][ T1107] f2fs_stop_checkpoint+0x65/0x80 [ 351.378351][ T1107] f2fs_write_end_io+0x12e6/0x2560 [ 351.378596][ T1107] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 351.378779][ T1107] bio_endio+0x1006/0x1160 [ 351.378979][ T1107] submit_bio_noacct+0x533/0x2960 [ 351.379230][ T1107] submit_bio+0x57a/0x620 [ 351.379430][ T1107] f2fs_submit_write_bio+0x115/0x350 [ 351.379609][ T1107] __submit_merged_bio+0x16f/0x780 [ 351.379779][ T1107] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 351.379993][ T1107] __submit_merged_write_cond+0x4ba/0xae0 [ 351.380194][ T1107] f2fs_write_data_pages+0x5073/0x5e10 [ 351.380527][ T1107] ? kmsan_get_metadata+0xf1/0x160 [ 351.380719][ T1107] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 351.380960][ T1107] ? __update_load_avg_cfs_rq+0xc31/0x1060 [ 351.381160][ T1107] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 351.381384][ T1107] ? kmsan_get_metadata+0xf1/0x160 [ 351.381582][ T1107] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 351.381788][ T1107] ? kmsan_get_metadata+0xf1/0x160 [ 351.381992][ T1107] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 351.382196][ T1107] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 351.382384][ T1107] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 351.382583][ T1107] do_writepages+0x3f2/0x860 [ 351.382720][ T1107] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 351.382930][ T1107] ? writeback_sb_inodes+0x1/0x1f40 [ 351.383103][ T1107] ? kmsan_get_metadata+0xf1/0x160 [ 351.383319][ T1107] __writeback_single_inode+0xfc/0x1440 [ 351.383527][ T1107] ? kmsan_get_metadata+0xf1/0x160 [ 351.383743][ T1107] writeback_sb_inodes+0xb52/0x1f40 [ 351.384091][ T1107] wb_writeback+0x4f1/0xcd0 [ 351.384299][ T1107] ? queue_io+0x411/0x800 [ 351.384479][ T1107] wb_workfn+0x3b9/0x19b0 [ 351.384645][ T1107] ? kmsan_get_metadata+0xf1/0x160 [ 351.384854][ T1107] ? __pfx_wb_workfn+0x10/0x10 [ 351.385002][ T1107] process_scheduled_works+0xb21/0x1e30 [ 351.385218][ T1107] worker_thread+0xede/0x1580 [ 351.385411][ T1107] kthread+0x53f/0x600 [ 351.385588][ T1107] ? __pfx_worker_thread+0x10/0x10 [ 351.385758][ T1107] ? __pfx_kthread+0x10/0x10 [ 351.385936][ T1107] ret_from_fork+0x20f/0x910 [ 351.386090][ T1107] ? __switch_to+0x51c/0x750 [ 351.386278][ T1107] ? __pfx_kthread+0x10/0x10 [ 351.386453][ T1107] ret_from_fork_asm+0x1a/0x30 [ 351.386668][ T1107] [ 351.723483][ T1107] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 352.105021][ T30] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 352.322066][ T30] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 352.444912][ T30] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.515078][ T30] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 352.574868][ T30] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 352.584199][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.670489][ T30] usb 1-1: config 0 descriptor?? [ 352.788051][ T7354] loop2: detected capacity change from 0 to 4096 [ 353.365972][ T30] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 353.445002][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 353.445084][ T29] audit: type=1800 audit(1772288539.756:88): pid=7359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.448" name="file1" dev="loop2" ino=33 res=0 errno=0 [ 354.641391][ T7187] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 354.714464][ T7187] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 354.826667][ T7187] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 354.930415][ T7187] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 355.306299][ T1962] usb 1-1: USB disconnect, device number 6 [ 356.113031][ T7371] loop0: detected capacity change from 0 to 4096 [ 356.510673][ T7371] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.836348][ T1962] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 356.984337][ T7187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.090269][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.118036][ T1962] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 357.147922][ T1962] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 357.177807][ T1962] usb 2-1: Product: syz [ 357.182294][ T1962] usb 2-1: Manufacturer: syz [ 357.239448][ T1962] usb 2-1: SerialNumber: syz [ 357.311261][ T7187] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.320433][ T1962] usb 2-1: config 0 descriptor?? [ 357.413845][ T1962] ch341 2-1:0.0: ch341-uart converter detected [ 357.432632][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.440255][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.664530][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.672376][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.459824][ T1962] ch341-uart ttyUSB0: break control not supported, using simulated break [ 359.513860][ T7389] loop2: detected capacity change from 0 to 40427 [ 359.548390][ T7394] loop4: detected capacity change from 0 to 1024 [ 359.552971][ T1962] usb 2-1: ch341-uart converter now attached to ttyUSB0 [ 359.614970][ T7389] F2FS-fs (loop2): invalid crc value [ 359.711145][ T1962] usb 2-1: USB disconnect, device number 9 [ 359.762204][ T1962] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 359.873878][ T1962] ch341 2-1:0.0: device disconnected [ 359.972333][ T7389] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 359.994845][ T7389] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 360.063310][ T6091] udevd[6091]: setting owner of /dev/bus/usb/002/009 to uid=0, gid=0 failed: No such file or directory [ 361.511266][ T7187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.385131][ T5824] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 363.588682][ T5824] usb 5-1: Using ep0 maxpacket: 32 [ 363.636147][ T5824] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.693598][ T5824] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.740287][ T5824] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 363.817753][ T5824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.839126][ T7434] loop1: detected capacity change from 0 to 40427 [ 363.885337][ T7434] F2FS-fs (loop1): invalid crc value [ 363.900499][ T5824] usb 5-1: config 0 descriptor?? [ 364.220891][ T7434] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 364.231906][ T7434] F2FS-fs (loop1): Start checkpoint disabled! [ 364.252149][ T7434] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 364.261082][ T7434] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 364.277344][ T5824] usbhid 5-1:0.0: can't add hid device: -71 [ 364.330984][ T5824] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 364.533769][ T5824] usb 5-1: USB disconnect, device number 8 [ 364.792349][ T1107] kworker/u8:9: attempt to access beyond end of device [ 364.792349][ T1107] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 364.867616][ T1107] CPU: 0 UID: 0 PID: 1107 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 364.867791][ T1107] Tainted: [L]=SOFTLOCKUP [ 364.867841][ T1107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 364.867966][ T1107] Workqueue: writeback wb_workfn (flush-7:1) [ 364.868159][ T1107] Call Trace: [ 364.868211][ T1107] [ 364.868261][ T1107] __dump_stack+0x26/0x30 [ 364.868426][ T1107] dump_stack_lvl+0x14c/0x1c0 [ 364.868596][ T1107] dump_stack+0x1e/0x25 [ 364.868754][ T1107] f2fs_handle_critical_error+0xa6f/0xc20 [ 364.868960][ T1107] f2fs_stop_checkpoint+0x65/0x80 [ 364.869156][ T1107] f2fs_write_end_io+0x12e6/0x2560 [ 364.869426][ T1107] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 364.869634][ T1107] bio_endio+0x1006/0x1160 [ 364.869848][ T1107] submit_bio_noacct+0x533/0x2960 [ 364.870105][ T1107] submit_bio+0x57a/0x620 [ 364.870312][ T1107] f2fs_submit_write_bio+0x115/0x350 [ 364.870498][ T1107] __submit_merged_bio+0x16f/0x780 [ 364.870674][ T1107] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 364.870902][ T1107] __submit_merged_write_cond+0x4ba/0xae0 [ 364.871105][ T1107] f2fs_write_data_pages+0x5073/0x5e10 [ 364.871436][ T1107] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 364.871650][ T1107] ? __pick_eevdf+0x894/0x1800 [ 364.871863][ T1107] ? kmsan_get_metadata+0xf1/0x160 [ 364.872100][ T1107] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 364.872325][ T1107] ? update_protect_slice+0x23f/0x330 [ 364.872477][ T1107] ? kmsan_get_metadata+0xf1/0x160 [ 364.872665][ T1107] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 364.872869][ T1107] ? kmsan_get_metadata+0xf1/0x160 [ 364.873063][ T1107] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 364.873282][ T1107] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 364.873470][ T1107] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 364.873656][ T1107] do_writepages+0x3f2/0x860 [ 364.873806][ T1107] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 364.874015][ T1107] ? writeback_sb_inodes+0x1/0x1f40 [ 364.874192][ T1107] ? kmsan_get_metadata+0xf1/0x160 [ 364.874427][ T1107] __writeback_single_inode+0xfc/0x1440 [ 364.874618][ T1107] ? kmsan_get_metadata+0xf1/0x160 [ 364.874832][ T1107] writeback_sb_inodes+0xb52/0x1f40 [ 364.875155][ T1107] wb_writeback+0x4f1/0xcd0 [ 364.875356][ T1107] ? queue_io+0x411/0x800 [ 364.875530][ T1107] wb_workfn+0x3b9/0x19b0 [ 364.875680][ T1107] ? kmsan_get_metadata+0xf1/0x160 [ 364.875898][ T1107] ? __pfx_wb_workfn+0x10/0x10 [ 364.876045][ T1107] process_scheduled_works+0xb21/0x1e30 [ 364.876271][ T1107] worker_thread+0xede/0x1580 [ 364.876467][ T1107] kthread+0x53f/0x600 [ 364.876644][ T1107] ? __pfx_worker_thread+0x10/0x10 [ 364.876843][ T1107] ? __pfx_kthread+0x10/0x10 [ 364.877020][ T1107] ret_from_fork+0x20f/0x910 [ 364.877186][ T1107] ? __switch_to+0x51c/0x750 [ 364.877383][ T1107] ? __pfx_kthread+0x10/0x10 [ 364.877566][ T1107] ret_from_fork_asm+0x1a/0x30 [ 364.877788][ T1107] [ 365.260953][ T1107] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 366.010123][ T7187] veth0_vlan: entered promiscuous mode [ 366.120431][ T7187] veth1_vlan: entered promiscuous mode [ 366.638377][ T7187] veth0_macvtap: entered promiscuous mode [ 366.732823][ T7187] veth1_macvtap: entered promiscuous mode [ 366.943738][ T7466] loop0: detected capacity change from 0 to 2048 [ 367.045380][ T7187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.172174][ T7187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.196526][ T7466] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.325845][ T1107] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.375022][ T1107] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.384333][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.394060][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.675379][ T7481] loop2: detected capacity change from 0 to 7 [ 367.730947][ T5132] loop2: [ 367.734160][ T5132] loop2: partition table partially beyond EOD, truncated [ 367.818124][ T7481] loop2: [ 367.839880][ T7481] loop2: partition table partially beyond EOD, truncated [ 367.884240][ T5132] loop2: [ 367.896458][ T5132] loop2: partition table partially beyond EOD, truncated [ 368.173206][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.369370][ T7509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.485'. [ 372.082164][ T7525] loop0: detected capacity change from 0 to 32768 [ 372.296529][ T7528] loop2: detected capacity change from 0 to 32768 [ 372.306855][ T7528] btrfs: Deprecated parameter 'usebackuproot' [ 372.313176][ T7528] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 372.359219][ T7525] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.489 (7525) [ 372.376429][ T7528] BTRFS info: device /dev/loop2 (7:2) using temp-fsid c1408c76-6163-4f64-8988-33c9e3f5d20f [ 372.388058][ T7528] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.490 (7528) [ 372.423812][ T7528] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 372.434438][ T7528] BTRFS info (device loop2): using crc32c checksum algorithm [ 372.442423][ T7528] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 372.483294][ T7525] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 372.494931][ T7525] BTRFS info (device loop0): using crc32c checksum algorithm [ 372.774942][ T1037] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 372.845146][ T7528] BTRFS error (device loop2): failed to load root extent [ 372.852634][ T7528] BTRFS warning (device loop2): try to load backup roots slot 1 [ 372.867467][ T1107] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 372.903235][ T7525] BTRFS info (device loop0): enabling ssd optimizations [ 372.911070][ T7525] BTRFS info (device loop0): turning on async discard [ 372.918455][ T7525] BTRFS info (device loop0): enabling free space tree [ 372.962877][ T7528] BTRFS warning (device loop2): couldn't read tree root [ 372.975395][ T7528] BTRFS warning (device loop2): try to load backup roots slot 2 [ 372.998224][ T1136] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 373.065492][ T29] audit: type=1800 audit(1772288559.376:89): pid=7525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.489" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 373.092840][ T7528] BTRFS warning (device loop2): couldn't read tree root [ 373.100405][ T7528] BTRFS warning (device loop2): try to load backup roots slot 3 [ 373.177948][ T7528] BTRFS info (device loop2): rebuilding free space tree [ 373.213945][ T7528] BTRFS info (device loop2): disabling free space tree [ 373.221513][ T7528] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 373.231752][ T7528] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 373.269350][ T7528] BTRFS info (device loop2): enabling ssd optimizations [ 373.276822][ T7528] BTRFS info (device loop2): turning on async discard [ 373.283829][ T7528] BTRFS info (device loop2): enabling disk space caching [ 373.291315][ T7528] BTRFS info (device loop2): force clearing of disk cache [ 373.298796][ T7528] BTRFS info (device loop2): trying to use backup root at mount time [ 373.307227][ T7528] BTRFS info (device loop2): force zlib compression, level 3 [ 373.315041][ T7528] BTRFS info (device loop2): max_inline set to 0 [ 373.938279][ T7575] trusted_key: syz.4.494 sent an empty control message without MSG_MORE. [ 373.951210][ T5782] BTRFS info (device loop2): last unmount of filesystem c1408c76-6163-4f64-8988-33c9e3f5d20f [ 374.033080][ T5779] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 375.662595][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.734750][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.823541][ T7598] loop4: detected capacity change from 0 to 16 [ 375.892226][ T7598] erofs (device loop4): mounted with root inode @ nid 36. [ 376.039028][ T7598] syz.4.501: attempt to access beyond end of device [ 376.039028][ T7598] loop4: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 376.110265][ T7598] syz.4.501: attempt to access beyond end of device [ 376.110265][ T7598] loop4: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 376.212160][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.285255][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.361269][ T7598] erofs (device loop4): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 376.484745][ T7598] erofs (device loop4): read error -117 @ 1 of nid 89 [ 376.497773][ T29] audit: type=1800 audit(1772288562.816:90): pid=7598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.501" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 377.368181][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 377.956892][ T7616] loop4: detected capacity change from 0 to 32768 [ 378.046270][ T7616] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.507 (7616) [ 378.120256][ T7616] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 378.130904][ T7616] BTRFS info (device loop4): using crc32c checksum algorithm [ 378.421324][ T7616] BTRFS info (device loop4): setting nodatasum [ 378.431112][ T7616] BTRFS info (device loop4): setting nodatacow [ 378.437835][ T7616] BTRFS info (device loop4): turning on async discard [ 378.444969][ T7616] BTRFS info (device loop4): enabling free space tree [ 378.451980][ T7616] BTRFS info (device loop4): enabling auto defrag [ 378.458803][ T7616] BTRFS info (device loop4): max_inline set to 0 [ 379.290035][ T7638] loop2: detected capacity change from 0 to 2048 [ 379.398870][ T7638] EXT4-fs: Ignoring removed i_version option [ 379.444102][ T5783] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 379.651458][ T7638] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.727516][ T7638] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.771942][ T7643] loop1: detected capacity change from 0 to 1024 [ 379.858391][ T7643] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 379.921928][ T7643] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 379.988458][ T7643] EXT4-fs (loop1): journal inode is deleted [ 380.378092][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.976800][ T7666] loop5: detected capacity change from 0 to 256 [ 382.171403][ T29] audit: type=1326 audit(1772288568.486:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7665 comm="syz.5.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe74279c629 code=0x7ffc0000 [ 382.345795][ T29] audit: type=1326 audit(1772288568.536:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7665 comm="syz.5.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7fe74279c629 code=0x7ffc0000 [ 382.503275][ T29] audit: type=1326 audit(1772288568.536:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7665 comm="syz.5.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe74279c629 code=0x7ffc0000 [ 382.674033][ T29] audit: type=1326 audit(1772288568.536:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7665 comm="syz.5.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe74279c629 code=0x7ffc0000 [ 382.797763][ T29] audit: type=1326 audit(1772288568.556:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7665 comm="syz.5.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe74279c629 code=0x7ffc0000 [ 382.972228][ T29] audit: type=1326 audit(1772288568.556:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7665 comm="syz.5.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe74279c629 code=0x7ffc0000 [ 383.135621][ T29] audit: type=1326 audit(1772288568.576:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7665 comm="syz.5.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe74279c629 code=0x7ffc0000 [ 383.275327][ T29] audit: type=1326 audit(1772288568.576:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7665 comm="syz.5.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe74279c629 code=0x7ffc0000 [ 383.435918][ T29] audit: type=1326 audit(1772288568.576:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7665 comm="syz.5.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe74279b507 code=0x7ffc0000 [ 383.533939][ T7681] loop5: detected capacity change from 0 to 512 [ 383.569306][ T29] audit: type=1326 audit(1772288568.596:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7665 comm="syz.5.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe74279c629 code=0x7ffc0000 [ 383.886480][ T7685] loop2: detected capacity change from 0 to 512 [ 384.143562][ T7685] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.229708][ T7687] loop4: detected capacity change from 0 to 4096 [ 384.237276][ T7685] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 384.377122][ T7685] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #2: comm syz.2.527: corrupted inode contents [ 384.526463][ T7685] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #2: comm syz.2.527: mark_inode_dirty error [ 384.627554][ T7685] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #2: comm syz.2.527: corrupted inode contents [ 384.686049][ T7687] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 384.734080][ T7687] ntfs3(loop4): Failed to load $Extend (-22). [ 384.737275][ T7685] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.527: mark_inode_dirty error [ 384.797480][ T7687] ntfs3(loop4): Failed to initialize $Extend. [ 384.904992][ T7696] EXT4-fs warning (device loop2): ext4_es_cache_extent:1082: inode #2: comm syz.2.527: ES cache extent failed: add [0,1,20,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 384.904992][ T7696] [ 385.117229][ T7687] ntfs3(loop4): ino=1b, "file0" ntfs_readdir [ 385.500568][ C1] hrtimer: interrupt took 544135 ns [ 385.770083][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.714339][ T7717] overlayfs: failed to get inode (-116) [ 386.756704][ T7717] overlayfs: failed to get inode (-116) [ 386.866697][ T7724] tipc: Failed to remove unknown binding: 66,1,1/0:3992478382/3992478384 [ 388.251107][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.258336][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.054352][ T7749] loop0: detected capacity change from 0 to 128 [ 390.746156][ T1037] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x20 [ 391.065693][ T7781] loop2: detected capacity change from 0 to 512 [ 391.219119][ T7781] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.237714][ T7781] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 391.918142][ T7802] loop0: detected capacity change from 0 to 128 [ 392.072940][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.097900][ T7802] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 392.165048][ T7802] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.778538][ T5779] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 395.513158][ T7835] loop0: detected capacity change from 0 to 32768 [ 395.777236][ T7835] JBD2: Ignoring recovery information on journal [ 395.852897][ T7835] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 396.152953][ T5779] ocfs2: Unmounting device (7,0) on (node local) [ 399.186542][ T7884] overlayfs: failed to verify index (index/00fb2100012a119a06a8b146798ac07fb9408948460702cf607a00000000000000, ftype=4000, err=-116) [ 399.308972][ T7887] loop1: detected capacity change from 0 to 256 [ 399.615883][ T7889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.583'. [ 401.934814][ T1962] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 402.126555][ T1962] usb 2-1: Using ep0 maxpacket: 8 [ 402.215325][ T1962] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 402.266005][ T1962] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.304719][ T1962] usb 2-1: Product: syz [ 402.309129][ T1962] usb 2-1: Manufacturer: syz [ 402.375272][ T1962] usb 2-1: SerialNumber: syz [ 402.418059][ T1962] usb 2-1: config 0 descriptor?? [ 402.667206][ T1962] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 403.891140][ T7937] loop0: detected capacity change from 0 to 40427 [ 404.010929][ T7937] F2FS-fs (loop0): invalid crc value [ 404.492389][ T7937] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 404.505183][ T7937] F2FS-fs (loop0): Start checkpoint disabled! [ 404.526101][ T7937] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 404.551366][ T7937] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 404.690934][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 404.691015][ T29] audit: type=1800 audit(1772288591.016:103): pid=7937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.597" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 404.775225][ T7937] syz.0.597: attempt to access beyond end of device [ 404.775225][ T7937] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 404.791770][ T7937] syz.0.597: attempt to access beyond end of device [ 404.791770][ T7937] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 404.808629][ T7937] syz.0.597: attempt to access beyond end of device [ 404.808629][ T7937] loop0: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 404.826572][ T7937] syz.0.597: attempt to access beyond end of device [ 404.826572][ T7937] loop0: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 404.843921][ T7937] syz.0.597: attempt to access beyond end of device [ 404.843921][ T7937] loop0: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 404.861859][ T7937] syz.0.597: attempt to access beyond end of device [ 404.861859][ T7937] loop0: rw=2049, sector=45136, nr_sectors = 16 limit=40427 [ 404.878413][ T7937] syz.0.597: attempt to access beyond end of device [ 404.878413][ T7937] loop0: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 404.895083][ T7937] syz.0.597: attempt to access beyond end of device [ 404.895083][ T7937] loop0: rw=2049, sector=45160, nr_sectors = 8 limit=40427 [ 404.911543][ T7937] syz.0.597: attempt to access beyond end of device [ 404.911543][ T7937] loop0: rw=2049, sector=45168, nr_sectors = 8 limit=40427 [ 404.930860][ T7937] syz.0.597: attempt to access beyond end of device [ 404.930860][ T7937] loop0: rw=2049, sector=45176, nr_sectors = 8 limit=40427 [ 405.272694][ T1962] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 405.294773][ T29] audit: type=1800 audit(1772288591.276:104): pid=7953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.597" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 405.618396][ T1962] usb 2-1: USB disconnect, device number 10 [ 405.700507][ T1088] CPU: 0 UID: 0 PID: 1088 Comm: kworker/u8:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 405.700769][ T1088] Tainted: [L]=SOFTLOCKUP [ 405.700829][ T1088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 405.700952][ T1088] Workqueue: writeback wb_workfn (flush-7:0) [ 405.701142][ T1088] Call Trace: [ 405.701199][ T1088] [ 405.701255][ T1088] __dump_stack+0x26/0x30 [ 405.701430][ T1088] dump_stack_lvl+0x14c/0x1c0 [ 405.701616][ T1088] dump_stack+0x1e/0x25 [ 405.701793][ T1088] f2fs_handle_critical_error+0xa6f/0xc20 [ 405.702016][ T1088] f2fs_stop_checkpoint+0x65/0x80 [ 405.702201][ T1088] f2fs_write_end_io+0x12e6/0x2560 [ 405.702474][ T1088] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 405.702672][ T1088] bio_endio+0x1006/0x1160 [ 405.702878][ T1088] submit_bio_noacct+0x533/0x2960 [ 405.703139][ T1088] submit_bio+0x57a/0x620 [ 405.703356][ T1088] f2fs_submit_write_bio+0x115/0x350 [ 405.703548][ T1088] __submit_merged_bio+0x16f/0x780 [ 405.703725][ T1088] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 405.703946][ T1088] __submit_merged_write_cond+0x4ba/0xae0 [ 405.704154][ T1088] f2fs_write_data_pages+0x5073/0x5e10 [ 405.704462][ T1088] ? kmsan_get_metadata+0xd0/0x160 [ 405.704737][ T1088] ? kmsan_get_metadata+0xf1/0x160 [ 405.704938][ T1088] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 405.705154][ T1088] ? update_load_avg+0x14eb/0x25d0 [ 405.705356][ T1088] ? update_load_avg+0x14eb/0x25d0 [ 405.705574][ T1088] ? kmsan_get_metadata+0xf1/0x160 [ 405.705773][ T1088] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 405.705974][ T1088] ? kmsan_get_metadata+0xf1/0x160 [ 405.706172][ T1088] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 405.706402][ T1088] ? kmsan_get_metadata+0xf1/0x160 [ 405.706614][ T1088] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 405.706818][ T1088] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 405.707003][ T1088] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 405.707192][ T1088] do_writepages+0x3f2/0x860 [ 405.707336][ T1088] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 405.707562][ T1088] ? writeback_sb_inodes+0x1/0x1f40 [ 405.707735][ T1088] ? kmsan_get_metadata+0xf1/0x160 [ 405.707955][ T1088] __writeback_single_inode+0xfc/0x1440 [ 405.708148][ T1088] ? kmsan_get_metadata+0xf1/0x160 [ 405.708368][ T1088] writeback_sb_inodes+0xb52/0x1f40 [ 405.708715][ T1088] wb_writeback+0x4f1/0xcd0 [ 405.708923][ T1088] ? queue_io+0x411/0x800 [ 405.709110][ T1088] wb_workfn+0x3b9/0x19b0 [ 405.709268][ T1088] ? kmsan_get_metadata+0xf1/0x160 [ 405.709497][ T1088] ? __pfx_wb_workfn+0x10/0x10 [ 405.709660][ T1088] process_scheduled_works+0xb21/0x1e30 [ 405.709905][ T1088] worker_thread+0xede/0x1580 [ 405.710114][ T1088] kthread+0x53f/0x600 [ 405.710303][ T1088] ? __pfx_worker_thread+0x10/0x10 [ 405.710484][ T1088] ? __pfx_kthread+0x10/0x10 [ 405.710682][ T1088] ret_from_fork+0x20f/0x910 [ 405.710857][ T1088] ? __switch_to+0x51c/0x750 [ 405.711061][ T1088] ? __pfx_kthread+0x10/0x10 [ 405.711248][ T1088] ret_from_fork_asm+0x1a/0x30 [ 405.711467][ T1088] [ 406.131020][ T1088] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 406.819252][ T7963] loop5: detected capacity change from 0 to 128 [ 406.938915][ T7963] adfs: Bad value for 'gid' [ 406.943650][ T7963] adfs: Bad value for 'gid' [ 408.120839][ T7975] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 408.578266][ T7980] loop5: detected capacity change from 0 to 16 [ 408.608776][ T7980] erofs (device loop5): mounted with root inode @ nid 36. [ 408.692575][ T5778] erofs (device loop5): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000 [ 408.732235][ T7980] erofs (device loop5): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000 [ 408.850134][ T7980] erofs (device loop5): read error -117 @ 2 of nid 89 [ 408.909277][ T29] audit: type=1800 audit(1772288595.226:105): pid=7980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.611" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 412.098608][ T8022] netlink: 40 bytes leftover after parsing attributes in process `syz.2.626'. [ 412.229578][ T8020] binder: 8018:8020 ioctl c0306201 200000000040 returned -14 [ 412.524054][ T8031] netlink: 'syz.2.629': attribute type 12 has an invalid length. [ 412.535169][ T1962] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 412.644135][ T8032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.652830][ T8031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.665309][ T8032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.674211][ T8032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.705882][ T8031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.725826][ T8032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.734920][ T1962] usb 2-1: Using ep0 maxpacket: 16 [ 412.756153][ T8031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.758447][ T1962] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.779702][ T8032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.795318][ T1962] usb 2-1: config 0 interface 0 has no altsetting 0 [ 412.816739][ T1962] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 412.837182][ T8031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.852102][ T1962] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.867750][ T8032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.906965][ T1962] usb 2-1: config 0 descriptor?? [ 413.491850][ T1962] nzxt-smart2 0003:1E71:2009.000B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 413.955101][ T30] usb 2-1: USB disconnect, device number 11 [ 414.274377][ T8041] fido_id[8041]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 415.200027][ T8052] loop4: detected capacity change from 0 to 8 [ 415.450015][ T8057] netlink: 'syz.0.638': attribute type 1 has an invalid length. [ 415.485249][ T8057] netlink: 'syz.0.638': attribute type 4 has an invalid length. [ 415.525670][ T8057] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.638'. [ 415.842647][ T8059] loop2: detected capacity change from 0 to 1764 [ 415.892443][ T8059] iso9660: Unknown parameter 'sbsector˙' [ 416.872523][ T8061] loop5: detected capacity change from 0 to 4096 [ 416.927084][ T8061] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 416.965338][ T8061] NILFS (loop5): mounting unchecked fs [ 417.020103][ T8061] NILFS (loop5): invalid segment: Checksum error in segment payload [ 417.062160][ T8061] NILFS (loop5): unable to fall back to spare super block [ 417.103410][ T8061] NILFS (loop5): error -22 while searching super root [ 418.012370][ T8088] loop4: detected capacity change from 0 to 64 [ 418.287095][ T8092] loop1: detected capacity change from 0 to 512 [ 418.462326][ T8092] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.508925][ T8092] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 418.968809][ T8104] binder: 8102:8104 ioctl c0306201 200000000540 returned -11 [ 419.012100][ T8104] binder: 8102:8104 unknown command 0 [ 419.029054][ T8104] binder: 8102:8104 ioctl c0306201 200000000640 returned -22 [ 419.088432][ T8106] net_ratelimit: 1014 callbacks suppressed [ 419.088516][ T8106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.251180][ T8092] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 419.334370][ T8107] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 419.770153][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.336238][ T8122] loop0: detected capacity change from 0 to 1024 [ 421.317137][ T8140] loop4: detected capacity change from 0 to 128 [ 421.436512][ T8140] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 421.580711][ T8140] ext4 filesystem being mounted at /138/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 421.815254][ T8140] syz.4.669 (pid 8140) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 422.314425][ T5783] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 422.589717][ T8154] dlm: non-version read from control device 2147479552 [ 422.649770][ T8154] dlm: non-version read from control device 2147479552 [ 422.692157][ T8154] dlm: non-version read from control device 2147479552 [ 423.690118][ T8173] netlink: 28 bytes leftover after parsing attributes in process `syz.0.681'. [ 424.649804][ T8187] loop4: detected capacity change from 0 to 256 [ 424.875166][ T8187] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 425.286190][ T8187] exFAT-fs (loop4): start_clu is invalid cluster(0x0) [ 426.611900][ T8206] loop0: detected capacity change from 0 to 512 [ 426.762089][ T8206] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.795439][ T8206] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 426.962757][ T8211] loop1: detected capacity change from 0 to 128 [ 427.841731][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.199994][ T8228] loop2: detected capacity change from 0 to 64 [ 429.565324][ T1962] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 429.761915][ T1962] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 429.782156][ T1962] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 429.813154][ T1962] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 429.859334][ T1962] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 429.885257][ T1962] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 429.957674][ T1962] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 429.989939][ T1962] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 430.025099][ T1962] usb 6-1: Product: syz [ 430.029517][ T1962] usb 6-1: Manufacturer: syz [ 430.041719][ T1962] usb 6-1: SerialNumber: syz [ 430.088091][ T1962] usb 6-1: config 0 descriptor?? [ 430.364978][ T1962] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 430.375941][ T1962] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5 [ 430.541513][ T1962] usb 6-1: USB disconnect, device number 2 [ 431.005480][ T1962] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 431.219032][ T1962] usb 5-1: Using ep0 maxpacket: 8 [ 431.279841][ T1962] usb 5-1: config 0 has no interfaces? [ 431.300134][ T1962] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 431.323857][ T1962] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.436811][ T1962] usb 5-1: config 0 descriptor?? [ 431.738057][ T1962] usb 5-1: USB disconnect, device number 9 [ 432.216452][ T8262] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 432.224366][ T8262] overlayfs: failed to set xattr on upper [ 432.232926][ T8262] overlayfs: ...falling back to redirect_dir=nofollow. [ 432.241604][ T8262] overlayfs: ...falling back to index=off. [ 432.273222][ T8261] netlink: 8 bytes leftover after parsing attributes in process `syz.5.720'. [ 432.527381][ T8265] ===================================================== [ 432.535014][ T8265] BUG: KMSAN: uninit-value in fuse_dentry_revalidate+0x150/0x13d0 [ 432.543103][ T8265] fuse_dentry_revalidate+0x150/0x13d0 [ 432.549144][ T8265] __lookup_slow+0x2ea/0x770 [ 432.553925][ T8265] lookup_slow+0x6a/0xd0 [ 432.559465][ T8265] path_lookupat+0x7d1/0xdf0 [ 432.564283][ T8265] filename_lookup+0x2bc/0x800 [ 432.571289][ T8265] vfs_statx+0xcf/0x290 [ 432.576684][ T8265] __se_sys_newstat+0x97/0x8f0 [ 432.582092][ T8265] __x64_sys_newstat+0x78/0xb0 [ 432.587203][ T8265] x64_sys_call+0x918/0x3ea0 [ 432.592010][ T8265] do_syscall_64+0x134/0xf80 [ 432.597628][ T8265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.603739][ T8265] [ 432.606333][ T8265] Uninit was created at: [ 432.610893][ T8265] kmem_cache_alloc_lru_noprof+0x382/0x1280 [ 432.617226][ T8265] __d_alloc+0x55/0xa00 [ 432.621572][ T8265] d_alloc_parallel+0x99/0x2740 [ 432.628256][ T8265] __lookup_slow+0x138/0x770 [ 432.633044][ T8265] lookup_slow+0x6a/0xd0 [ 432.637890][ T8265] path_lookupat+0x7d1/0xdf0 [ 432.642679][ T8265] filename_lookup+0x2bc/0x800 [ 432.647805][ T8265] do_readlinkat+0xc4/0x7f0 [ 432.652500][ T8265] __x64_sys_readlinkat+0xc0/0x150 [ 432.657994][ T8265] x64_sys_call+0x3464/0x3ea0 [ 432.662889][ T8265] do_syscall_64+0x134/0xf80 [ 432.667897][ T8265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.673993][ T8265] [ 432.676624][ T8265] CPU: 1 UID: 0 PID: 8265 Comm: syz.0.718 Tainted: G L syzkaller #0 PREEMPT(full) [ 432.688092][ T8265] Tainted: [L]=SOFTLOCKUP [ 432.692546][ T8265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 432.702932][ T8265] ===================================================== [ 432.710206][ T8265] Disabling lock debugging due to kernel taint [ 432.725690][ T8265] Kernel panic - not syncing: kmsan.panic set ... [ 432.732293][ T8265] CPU: 0 UID: 0 PID: 8265 Comm: syz.0.718 Tainted: G B L syzkaller #0 PREEMPT(full) [ 432.743264][ T8265] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 432.748910][ T8265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 432.759109][ T8265] Call Trace: [ 432.762489][ T8265] [ 432.765517][ T8265] __dump_stack+0x26/0x30 [ 432.770038][ T8265] dump_stack_lvl+0x50/0x1c0 [ 432.774811][ T8265] ? dump_stack+0x12/0x25 [ 432.779360][ T8265] dump_stack+0x1e/0x25 [ 432.783695][ T8265] vpanic+0x7b4/0x1430 [ 432.787976][ T8265] panic+0x15d/0x160 [ 432.792118][ T8265] kmsan_report+0x31a/0x320 [ 432.796860][ T8265] ? __msan_warning+0x1b/0x30 [ 432.801759][ T8265] ? fuse_dentry_revalidate+0x150/0x13d0 [ 432.807667][ T8265] ? __lookup_slow+0x2ea/0x770 [ 432.812607][ T8265] ? lookup_slow+0x6a/0xd0 [ 432.817186][ T8265] ? path_lookupat+0x7d1/0xdf0 [ 432.822102][ T8265] ? filename_lookup+0x2bc/0x800 [ 432.827222][ T8265] ? vfs_statx+0xcf/0x290 [ 432.831771][ T8265] ? __se_sys_newstat+0x97/0x8f0 [ 432.836879][ T8265] ? __x64_sys_newstat+0x78/0xb0 [ 432.841998][ T8265] ? x64_sys_call+0x918/0x3ea0 [ 432.846973][ T8265] ? do_syscall_64+0x134/0xf80 [ 432.851964][ T8265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.858221][ T8265] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 432.864765][ T8265] ? kmsan_get_metadata+0xf1/0x160 [ 432.870104][ T8265] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 432.876132][ T8265] ? kmsan_get_metadata+0xf1/0x160 [ 432.881454][ T8265] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 432.888027][ T8265] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 432.894307][ T8265] ? _raw_spin_unlock+0x30/0x50 [ 432.899352][ T8265] ? __dentry_kill+0x9a8/0xb20 [ 432.904380][ T8265] ? kmsan_get_metadata+0xf1/0x160 [ 432.909734][ T8265] __msan_warning+0x1b/0x30 [ 432.914512][ T8265] fuse_dentry_revalidate+0x150/0x13d0 [ 432.920215][ T8265] ? d_alloc_parallel+0x2714/0x2740 [ 432.925619][ T8265] ? __pfx_default_wake_function+0x10/0x10 [ 432.931642][ T8265] ? kmsan_get_metadata+0xf1/0x160 [ 432.936971][ T8265] ? __pfx_fuse_dentry_revalidate+0x10/0x10 [ 432.943094][ T8265] ? __pfx_fuse_dentry_revalidate+0x10/0x10 [ 432.949374][ T8265] __lookup_slow+0x2ea/0x770 [ 432.954163][ T8265] lookup_slow+0x6a/0xd0 [ 432.958599][ T8265] path_lookupat+0x7d1/0xdf0 [ 432.963366][ T8265] ? kmsan_get_metadata+0xf1/0x160 [ 432.968706][ T8265] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 432.974747][ T8265] filename_lookup+0x2bc/0x800 [ 432.979698][ T8265] ? stack_depot_save_flags+0x35/0x790 [ 432.985476][ T8265] ? kmsan_get_metadata+0xf1/0x160 [ 432.990796][ T8265] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 432.997376][ T8265] vfs_statx+0xcf/0x290 [ 433.001771][ T8265] __se_sys_newstat+0x97/0x8f0 [ 433.006700][ T8265] ? kfree+0x20/0x1130 [ 433.010984][ T8265] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 433.017523][ T8265] ? kmsan_get_metadata+0xf1/0x160 [ 433.022839][ T8265] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 433.029377][ T8265] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 433.035694][ T8265] ? kcov_ioctl+0x212/0x640 [ 433.040383][ T8265] ? fput+0x113/0x160 [ 433.044549][ T8265] ? kmsan_get_metadata+0xf1/0x160 [ 433.049885][ T8265] ? kmsan_get_metadata+0xf1/0x160 [ 433.055235][ T8265] __x64_sys_newstat+0x78/0xb0 [ 433.060185][ T8265] x64_sys_call+0x918/0x3ea0 [ 433.065004][ T8265] do_syscall_64+0x134/0xf80 [ 433.069813][ T8265] ? clear_bhb_loop+0x50/0xa0 [ 433.074676][ T8265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.080754][ T8265] RIP: 0033:0x7f91e019c629 [ 433.085315][ T8265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.105207][ T8265] RSP: 002b:00007f91de3b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 433.113800][ T8265] RAX: ffffffffffffffda RBX: 00007f91e0416180 RCX: 00007f91e019c629 [ 433.121913][ T8265] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 433.130017][ T8265] RBP: 00007f91e0232b39 R08: 0000000000000000 R09: 0000000000000000 [ 433.138118][ T8265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.146214][ T8265] R13: 00007f91e0416218 R14: 00007f91e0416180 R15: 00007ffdfaa03748 [ 433.154403][ T8265] [ 433.158143][ T8265] Kernel Offset: disabled [ 433.162553][ T8265] Rebooting in 86400 seconds..