last executing test programs: 6m7.633293996s ago: executing program 32 (id=50): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}, 0x1}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 5m39.20639545s ago: executing program 33 (id=105): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 4m8.375943596s ago: executing program 0 (id=351): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xf, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x9, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x800], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x800, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz1\x00', {0x7, 0x800, 0xcb2, 0x4}, 0x1e, [0x8, 0x9, 0x2, 0xdc, 0x800, 0x1, 0x3, 0x9, 0xf07, 0x1, 0x7fffffff, 0xfff, 0x7f, 0xfffffffb, 0x2, 0x3ff, 0x8, 0x2, 0x3, 0x9, 0x10000, 0x0, 0x10001, 0x100, 0x1, 0x3, 0x10000, 0x6, 0x3, 0x7fffffff, 0x7, 0x8, 0xdc3, 0x6, 0x7, 0x800, 0x5, 0xfffffff8, 0x7, 0xa33, 0x3, 0x6, 0x101, 0x5, 0x3ff, 0x9, 0x4, 0x8, 0x7, 0xffffff7f, 0x4, 0x5, 0xb, 0x4, 0x6, 0x5, 0x3, 0xf, 0x3, 0x401, 0x6, 0x2, 0xd, 0x46b1], [0x1ff, 0x10000, 0x1000, 0xd, 0x9, 0x0, 0x2, 0xb, 0x4, 0xfffffffc, 0x4, 0x4, 0xecb, 0x3ff, 0x7, 0x1e, 0x263b, 0x8, 0x2bad511e, 0x7fff, 0x1, 0x10000, 0x1, 0x5, 0xa2, 0x3, 0x4, 0xaea, 0xfff, 0xffffffff, 0xe, 0x4, 0x5, 0x2, 0x4, 0x58, 0xfffffe01, 0x6, 0xfffffff8, 0x4f, 0x3, 0x7, 0x5, 0x4, 0x1, 0xc42, 0x2, 0x8, 0xfffffff8, 0x80, 0x3, 0xd832, 0x3f, 0x5, 0x8, 0x5, 0x2, 0x4, 0x4, 0x84d2, 0x8, 0x8, 0x7fff, 0x8], [0x0, 0x1, 0x7, 0x9, 0x2, 0xfffffc00, 0x4, 0xffff, 0x1, 0x6, 0xfffffffd, 0x480, 0x0, 0x4, 0x33668993, 0x80000001, 0x547f, 0x0, 0x2, 0x3, 0x6, 0x6, 0x5, 0x200, 0xbe0e, 0x4, 0x7, 0x5bec, 0x9, 0x10000, 0xb, 0x200, 0x2, 0x40000000, 0x8000, 0xfffffff2, 0x0, 0x6, 0x2, 0x7fff, 0x7, 0x10000, 0x10001, 0xffffffff, 0x1, 0x1, 0xa5, 0x9c, 0x2fe, 0x1, 0x80000000, 0x0, 0x6, 0x8, 0x4, 0x1000, 0x8, 0x3, 0x6, 0x7, 0x40, 0x200, 0x3, 0x5], [0xb8200000, 0x10001, 0x4, 0x7fff, 0x13, 0x9c89, 0x8, 0x0, 0x6, 0xfffffe01, 0x400, 0x0, 0x4, 0x2000000, 0x4, 0x8, 0x5, 0x0, 0x3b3, 0xe726, 0xfffffffd, 0x4, 0x2, 0x10000, 0x3, 0x471, 0x101, 0x5, 0x7, 0x1, 0x4, 0x800, 0x2, 0x4, 0x8, 0x9, 0x7ff, 0x5, 0xfffffffb, 0x94e, 0x7, 0x587, 0xd, 0x9, 0x1ff, 0xc, 0x0, 0x9e1, 0x7ff, 0x4, 0x5, 0x0, 0xb, 0xfffffffb, 0x5, 0xa, 0x4, 0x93f5, 0x8, 0x100, 0x2, 0x4, 0x5, 0x5]}, 0x45c) 4m7.235214533s ago: executing program 0 (id=355): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @empty, 0x5}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000140)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x0, "eea2ce15f073cfc7b867a8f1eae374992b05d96de4fee8723648ec884824c0fa", "dad132180b5c87e3c4ce5aace7bd878f", {"bfb382e7c4f35588608b6b77d4179781", "5c1eec4feb340aa2a2dfcc3569d1153d"}}}}}}}, 0x0) 4m6.297702394s ago: executing program 0 (id=359): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 4m2.908258055s ago: executing program 0 (id=367): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x264) 4m2.183918479s ago: executing program 0 (id=368): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(r0) 3m55.415258074s ago: executing program 0 (id=391): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd28, 0xfffffffd, {0x0, 0x0, 0x12, r2, {0xfff3}, {0xffff, 0xffff}, {0x2}}}, 0x24}}, 0x0) 3m51.931946394s ago: executing program 34 (id=391): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd28, 0xfffffffd, {0x0, 0x0, 0x12, r2, {0xfff3}, {0xffff, 0xffff}, {0x2}}}, 0x24}}, 0x0) 3m13.330742154s ago: executing program 6 (id=539): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r1 = fspick(r0, &(0x7f0000000000)='.\x00', 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000180)={'pcl818\x00', [0x4f27, 0x5, 0x3, 0x4, 0x5, 0xcc9, 0xf, 0x7, 0xa, 0x0, 0xefb, 0x4, 0x6, 0x1, 0x6, 0x101, 0x1000, 0x1a449, 0x3, 0x40000007, 0x99, 0xcaa7, 0x4, 0x20001e58, 0x4, 0xe69, 0x3c, 0x8, 0x2, 0x0, 0xfffffff8]}) ioctl$COMEDI_CHANINFO(r2, 0x80306403, 0x0) ioctl$KVM_SET_MSRS(r0, 0xc008ae88, &(0x7f0000000400)=ANY=[@ANYRES16=r1, @ANYRES8=r0, @ANYRESOCT=r1, @ANYRES32, @ANYBLOB="bf2bc02e6255a044912aeadb9ae3d37f64095e20c1df32c5c627bc06307eea7fb7ddb33beef9a744d0d9bd6970fe1bf845d3ef244b50d93a6ad655ce4a407e4b9b4172d91bb65b3f9de329ae4b951aebfd0826391a6ccf27ef9c", @ANYRES8=r2, @ANYRES64=r2, @ANYRES64=r1, @ANYRESDEC=r2]) 3m12.689987534s ago: executing program 6 (id=542): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000080)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000040)=0xd50, 0x4) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) close(r0) 3m11.884033593s ago: executing program 6 (id=545): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000280)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00F\x00', @ANYBLOB="c770ee18914110e7c19b01ac039e3b014b5aec34"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 3m11.568914045s ago: executing program 6 (id=548): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="71756965742c636f6465706167653d69736f383835392d31352c706172743d3078303030303030300000000000000000662c00a20000000700000000ede9debf530c3cc4d04b548919aca0c2937d4da1fc31dc42fc2e3e", @ANYBLOB="23341129bfb4fcc388a80c49b4f4d96254cb9356759776b03b581050240d2d9a5cf3440e76c886f1e5c860656a3648101223fc288fc5274f0e609cfed0fc738d84eb544791dd1cb959421db9fbcb634df876aa2133fd62e245fb6b1ead07ca04772d78564af8f42015e5be557ab3bd60824768691005cbd3d295402693d934226595deeba1ff748b7dde9c617749aa38096ef667700a6b3668cb7296b024fbcf9f74e50bf0f834159f51737baac184f94dd13a9793b76946208f290637d8def94e5f56f1181da3eed500440f", @ANYBLOB="2b86cc0866f043ae112177e8d069d03a337454fddb71ccf58cf87c0c9166ec375c1658949bd54b1b401001d954", @ANYRES16, @ANYRESHEX], 0x11, 0x2d2, &(0x7f0000000bc0)="$eJzs3U1rE1scx/HfmaRteht6pw+XC3fZa0E3UutG3KRIXoS4ELWJUAwVbQV1YxVXIrp371vwLQhuFN+Arlz5AiIII+fMZJJJJzMxNDMNfj9gmMycM+d/Mg/n/AfsCMAf60rzy9uL3+w/I1VUkV5cljxJNakq6R/9W3uwf7h32Gm3MvbTDRxbyyisaY4V2t1vp9WtKaoR8e23quqD6zAdQRDsfJV0UHYgKJW7+lN40kJ0dbrttcIjy/Z0wnpHJxzHrDFddfVQy2XHAQAoVzT+e9E4X4/m754nbUbD/qkc/yfVLTuAqQsytw6M/y7LCow9vn+7Tf18z6VwdrvXyxLHaXlu6Pu8wjMrMcE0eVmli8VbvL3XaZ/fvdtpeXqmRmSg2Lr7bIWnbk9OtBspuWmGMfpu0meUS64Pc7YP2yPiX5uwxYmZD+aTuW58vVErnv9VA2MPkztS/tCRCuPfGr1H10vfllJ022g0Gl6iyIpr5L+ohUhOL2vpGYl6Z9SKkg8I/Lw4Xa3VoVph7y7k1FoLa+0sJmpt976NqLWeaMv2Jj6bR7c3beaVuWo29F3v1ByY/3s2vk1lXpn9q8ZshkOB+8XD/synN1d1+/SPjRxHulZProl/xYVRof/IvqdhyJOMbS91S5e0fPDo8Z1Kp9O+bxdupizcq8dr5p5LqWVKWPDUX6Oj/qYFhQ8ij9XqDUpFhnruRHdo7x+5he1VVkgHT82ZUMZC82OxJ1IZCwXdo1Cq/kHPLfq+kIBQNDfvCvO/gXxly0327IefMU/PnZBFewzsHDvOgGqJ+qtu6a/fyuCWRmdw4+Zc/5+VzsSrfgY5LfpRnLMhyJr6Waapz7rB838AAAAAAAAAAAAAAAAAAIBZU8R/Jyi7jwAAAAAAAAAAAAAAAAAAAAAAzLr4/b/qvf9X473/d/gvf1fCN7ycyPt/X++L9/8C0/crAAD//zZmik0=") move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000340), 0xa8b40, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) 3m10.874540707s ago: executing program 6 (id=552): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x2100039, 0x0, 0x0, 0x1, 0x57, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x0, 0x100000002, {0x6, 0x281, 0x0, {0x5, 0x6, 0x200000003, 0x6c, 0x7, 0xc9, 0x0, 0xfffff2df, 0x101, 0x6000, 0x80009, 0xffffffffffffffff, 0x0, 0x1, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff, 0x100) 3m10.384222086s ago: executing program 6 (id=555): syz_mount_image$bfs(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x98, &(0x7f00000004c0)=ANY=[], 0xff, 0xa4, &(0x7f00000000c0)="$eJzs0b+pAkEQB+C5e/C4A9EC7OFq0CKswBKMBEEsyFYswdTIwNTkZHFFuGDBQFH4Ptg/P4ZdBuZw3U9jHNFvI/q/eOiT1XoXJf/FKr+gzmeThj655/M8YhYRVaqn7bJZHvMaPF80xd9Hb+sbAAB4XTXIdXTdM53afGk/2RMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAN7kFAAD//z7jFwY=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17a) syz_mount_image$xfs(&(0x7f00000002c0), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f00000000c0)={[{@pquota}, {}, {@prjquota}, {@gquota}, {@prjquota}, {@bsdgroups}, {@inode32}, {@quota}]}, 0xff, 0x9838, &(0x7f0000009780)="$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") sync_file_range(r0, 0x6, 0x0, 0x6) 3m8.782992373s ago: executing program 35 (id=555): syz_mount_image$bfs(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x98, &(0x7f00000004c0)=ANY=[], 0xff, 0xa4, &(0x7f00000000c0)="$eJzs0b+pAkEQB+C5e/C4A9EC7OFq0CKswBKMBEEsyFYswdTIwNTkZHFFuGDBQFH4Ptg/P4ZdBuZw3U9jHNFvI/q/eOiT1XoXJf/FKr+gzmeThj655/M8YhYRVaqn7bJZHvMaPF80xd9Hb+sbAAB4XTXIdXTdM53afGk/2RMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAN7kFAAD//z7jFwY=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17a) syz_mount_image$xfs(&(0x7f00000002c0), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f00000000c0)={[{@pquota}, {}, {@prjquota}, {@gquota}, {@prjquota}, {@bsdgroups}, {@inode32}, {@quota}]}, 0xff, 0x9838, &(0x7f0000009780)="$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") sync_file_range(r0, 0x6, 0x0, 0x6) 2m57.630040529s ago: executing program 4 (id=598): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) listen(r0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) listen(r1, 0x0) 2m57.252135411s ago: executing program 4 (id=600): socket$phonet(0x23, 0x2, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r1, &(0x7f000000ca40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000006c0)="cfe6dde0c37efdbb43dc9b530735ea4ad3bf3cff834a5e80ea0801a83a3b9dbe6b7bf3c289f5c083a73c6d1fdf2caec8388cccb3f13cca087d2a42b6fd5cbcfc4812ae7551c08ea285e17540f689e769433ab0eefa6e88bc818c9c6e10753912699110c240bcbdefe5814fcde6253a65ca23784e8eaea0ca74728e94a95ae45c69ba0602cc340659a9f75dbfad8a54defd2bf6a18952feaac931aa4d4965eb92264168e68234c60546156a8b2ed3d017a61c8a28b4230eab850f917bdb02849424d1bb63e55b134b4d4b35cea53c262246d950818ad77cacb0f17d1388", 0xdd}, {&(0x7f0000001300)="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", 0x31b}, {&(0x7f0000002300)="0dd23afa344be642a8fd50", 0xb}], 0x3}}], 0x1, 0x40) 2m56.796555412s ago: executing program 4 (id=601): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000180), 0x3, r1, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000300)={0x2, r3, r1}) 2m56.290576103s ago: executing program 4 (id=603): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./file0\x00', 0x80000c, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0, @ANYRES16, @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030302c6465636f6d706f73652c666f7263652c6e6f6465636f6d706f73652c626172726965722c6e6f6465636f6d706f73652c747970653db029e1c02c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c747970653dd2100d1b2c7529643dd4f81c66210bbcbf82440a104ab956f2ba5e36e41ccb1b040fa8b829b0b87078de654c66ac22aebaa2c653ef127e38e0aa2229f9cf6a8503", @ANYRESDEC, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0x0, @ANYRES8=0x0], 0x2, 0x6ee, &(0x7f0000032440)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 2m55.31827357s ago: executing program 4 (id=607): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, 0x0}) 2m54.595300152s ago: executing program 4 (id=610): r0 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x39, 0x0, 0x0, 0x62, 0x86cc4097e8288a3a, 0x31, 0x66, 0x34, 0x34, 0x30, 0x62, 0x0, 0x0, 0x0, 0x61, 0x3f]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00", 0x16}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x1d) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r3, 0xb1) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0x21) 2m52.725769957s ago: executing program 36 (id=610): r0 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x39, 0x0, 0x0, 0x62, 0x86cc4097e8288a3a, 0x31, 0x66, 0x34, 0x34, 0x30, 0x62, 0x0, 0x0, 0x0, 0x61, 0x3f]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00", 0x16}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x1d) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r3, 0xb1) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0x21) 1m46.013600701s ago: executing program 3 (id=946): r0 = msgget$private(0x0, 0x1c0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r0, &(0x7f0000000080)=ANY=[@ANYRES8], 0x0, 0x0) msgsnd(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01"], 0x8, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0xff, 0x5, 0xe8}) 1m44.782927714s ago: executing program 3 (id=953): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="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", @ANYRES32], 0x1, 0x4468, &(0x7f0000010780)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file1\x00', 0x40, 0x0, 0x8, 0x0, &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) 1m43.216997833s ago: executing program 3 (id=958): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000002e40)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)="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", 0xab}, {&(0x7f0000001b80)="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", 0xfffffd5b}], 0x2}}], 0x1, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1) 1m41.924122008s ago: executing program 3 (id=966): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00') 1m41.408083287s ago: executing program 3 (id=970): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r3 = epoll_create1(0x80000) read$snddsp(r0, &(0x7f00000000c0)=""/178, 0xb2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) 1m40.891907807s ago: executing program 3 (id=974): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="fd10d80c"], 0x1cb) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 1m39.637443118s ago: executing program 37 (id=974): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="fd10d80c"], 0x1cb) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 1m29.569832159s ago: executing program 8 (id=1020): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000000c0)=0xd95, 0x4019e2060d4e3ac7) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)=""/29, 0x1d}, 0xffff7fff}], 0x1, 0x20102, 0x0) 1m28.924669222s ago: executing program 8 (id=1023): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x63ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000140)=0x76c, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c, 0x0}}], 0x1, 0x40000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0xffffffffffffffac}, 0xdb30}], 0x1, 0x40002042, 0x0) 1m28.362068491s ago: executing program 8 (id=1027): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r1, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x7800, 0xfffffffc, 0xdc64}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r2, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r2, 0x0, 0x0, 0xff, 0x1000, 0xd, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x7, 0x0, 0xfffffffc}}) setsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000180)="8032af7b9ce72f57785b7e030f42243ffe122ee0be03938cd9fa117f35001a764ca57a35e19d72ef487ebc155840ead8384ed8c81f00ad2d63d3e822ce460a8a5f524328d5654832d000b5d4ad67a8e43e9419b594ced3a1cd2f16e982766c728f6ebe396da583f74d04d22fb8aeb3db459426f6ee3d5045bea16a3fb00833aa7eb5dee261b949776604fca2ecd24d4217f3a20f988abf3e331f38b48602142097f9e6b658cc5cef3d2e81c17a6a9a211795b7d86321874ab05068d9d2258c52e1298b57f8ef527dcf3667125279c8f253c3c16db9d21ca7c1046104f6287ff881bef0debeb498def8075aa7487f2a08ff", 0xf1) 1m27.926156023s ago: executing program 8 (id=1030): syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000480)={[{@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@umask={'umask', 0x3d, 0x3}}, {@keep_last_dots}, {}, {@umask={'umask', 0x3d, 0x7f}}, {@discard}, {@fmask={'fmask', 0x3d, 0x8}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@allow_utime={'allow_utime', 0x3d, 0xce38}}]}, 0x1, 0x1528, &(0x7f00000037c0)="$eJzs3AuYT9X6OPD3XWvtMSS+TXIZ1lrv5ptclkmSXJLkkiRJkuSWkDTJkYTEEJI0JCG5DEkMIblMTBr3+/2SkCRNkoTklqz/M+FxOnX+p/M7/XKe37yf59mP9X73ftd+9/f9XvbeZubbrkNrNaldvRERwX8EL/yTBACxADAQAPICQAAA5ePKx2Wtzykx6T/bCftzPZh6pStgVxL3P3vj/mdv3P/sjfufvXH/szfuf/bG/c/euP+MZWebphW6hpfsu/D9/+yMv///D8ksM/bLNWWu6wYQ80dTuP/ZG/f//6zgj2zE/c/euP/ZVeyVLoD9F+D3f3aQ45+u4f5nb9x/xrKzK33/+UovEPkvew6O5LzQmL/q+BljjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsb/AaX+ZAoBL4ytdF2OMMcYYY4wxxv48PseVroAxxhhjjDHGGGP/+xAESFAQQAzkgFjICblAAMDVkAfyQgSugTi4FvLBdZAfCkBBKATxUBiKgAYDFghCKArFIArXQ3G4AUpASSgFpcFBGUiAG6Es3ATl4GYoD7dABbgVKkIlqAxV4DaoCrdDNbgDqsOdUANqQi2oDXdBHbgb6sI9UA/uhfpwHzSA+6EhPACN4EFoDA9BE3gYmsIj0AyaQwtoCa3+R/nPQ094AXpBb0iCPtAXXoR+0B8GwEswEF6GQfAKDIZXIRmGwFB4DYbB6zAc3oARMBJGwZswGt6CMTAWxsF4SIEJMBHehknwDkyGd2EKTIVUmAbT4T2YATNhFrwPs+EDmANzYR7MhzT4EBbAQkiHj2ARfAwZsBiWwFJYBsthBayEVbAa1sBaWAfrYQNshE2wGbbAVtgG22EHfAI74VPYBbthD3wGe+HzfzP/1D/kd0NAQIECFSqMwRiMxVjMhbkwN+bGPJgHIxjBOIzDfJgP82N+LIgFMR7jsQgWQYMGCQmLYlGMYhSLY3EsgSWwFJZChw4TMAHL4k1YDstheSyPFbACVsRKWAmrYBWsilWxGlbD6lgda2ANrIW18C68C/tgXayL9bAe1sf6l25PYSNshI2xMTbBJtgUm2IzbIYtsAW2wlbYGltjG2yD7bAdtsf22AE7YCImYkfsiJ2wE3bGztgFu2BX7IrdsDt2z3w+B+AL+AL2xhqiD/bFvtgPk3MMwJfwJXwZB+Er+Aq+isk4BIfia/gavo7D8SSOwJE4CkdhVfEWjsGxSGI8pmAKTsSJOAknYVah7+JUTMVpOB2n4wyciTPxfZyNH+AHOBfn4nxMwzRcgAsxHdNxEZ7CDFyMS3ApLsPluAxX4ipciWtwLa7B9bgeN+JG3IybcStuxe24HT9BBYCf4m7cjcm4F/fiPtyH+3E/HsADmImZeBAP4iE8hIfxMB7BI3gUj+FxPIYn8ASexFN4Gk/jWTyL5/DZ+K8bf1JydTKILEooESNiRKyIFblELpFb5BZ5RB4RERERJ+JEPpFP5Bf5RUFRUMSLeFFEFBFGGEEijAEAERVRUVwUFyVECVFKlBJOOJEgEkRZUVaUE+VEeXGLqCBuFRVFJdHWVRFVRFXRzlUTd4jqorqoIWqKWqK2qC3qiDqirqgr6ol6or6oLxqI+0VD0QcH4IMiqzNNxBBsKoZiM9FcyIufYK3FcGwj2op24nExEkdgB9HaJYqnREcxBjuJv4mx+IzoIsZjV/Gc6Ca6ix7iedFTtHG9RG8xGfuIvmIq9hP9xQDxkpiBNcX7ODtnLfGqSBZDxFDxmpiPr4vh4g0xQowUo8SbYrR4S4wRY8U4MV6kiAlionhbTBLviMniXTFFTBWpYpqYLt4TM8RMMUu8L2aLD8QcMVfME/NFmvhQLBALRbr4SCwSH4sMsVgsEUvFMrFcrBArxSqxWqwRa8U6sV5sEBvFJrFZbBFbxTaxXewQn4id4lOxS+wWe8RnYq/4XOwTX4j94ktxQHwlMsXX4qD4RhwS34rD4jtxRHwvjopj4rj4QZwQP4qT4pQ4Lc6Is+IncU78LM4LL0CiFFJKJQMZI3PIWJlT5pJXydwyuPjsXiPj5LUyn7xO5pcFZEFZSMbLwrKI1NJIK0mGsqgsJqPyellc3iBLyJKylCwtnSwjE+SNsqy8SZaTN8vy8hZZQd4qK8pKsrKsIm+TVeXtEiIX9lFD1pS1ZG15l0yCu2VdeY+sJ++V9eV9soG8XzaUD8hG8kHZWD4km8iHZVP5iGwmm8sWsqVsJR+VreVjso1sK9vJx2V7+YTsIJ+UifIp2VH6iy+RZ2QX+azsKp+T3WR32UP+LM9LL3vJ3hL6gOwrX5T9ZH85IBYA5MtykHxFDpavymQ5RA6Vr8lh8nU5XL4hR8iRcpR8U46Wb8kxcqwcJ8fLFDlBTpRvy0nyHTlZviunyKkyVU6TA+TAX2aaJeW/zH/7d/IH/7L3jXKT3Cy3yK1ym9wud8hP5E65U+6Su+QeuUfulXvlPrlP7pf75QF5QGbKTHlQHpSH5CF5WB6WR+QReVQek2fkD/KE/FGelKfkKXlGnpVn5bmLzwEoVEJJpVSgYlQOFatyqlzqKpVbXa3yqLwqoq5RcepalU9dp/KrAqqgKqTiVWFVRGlllFWkQlVUFVNRdT1efMGoUqq0cqqMSlA3/jv5qri6QZVQJX+Vf6m+pH9SXyvVSrVWrVUb1Ua1U+1Ue9VedVAdVKJKVB1VR9VJdVKdVWfVRXVRXVVX1U11Uz1UD9VT9VS9VC+VpJJUX/Wi6qf6qwHqJTVQvawGqUFqsBqsklWyGqqGqmFqmBquhqsRaoQapUap0Wq0GqPGqHFqnEpRKWqimqgmqUlqspqspqgpKlWlqulqupqhZqhZapaarWarOWqOmqfmqTSVphaoBSpdpatFapHKUIvVYrVULVXL1XK1Uq1Uq9VqtVatVevVepWhNqlNaovaorapbWqH2qF2qp1ql9ql9qg9aq/aq/apfWq/2q8OqAMqU2Wqg+qgOqQOqcPqsDqijqij6qg6ro6rE+qEOqlOqtPqtDqrzqpz6pw6r85nnfYFIhCBClQQE8QEsUFskCvIFeQOcgd5gjxBJIgEcUFckC+4LsgfFAgKBoWC+KBwUCTQgQlsIC42PRpcHxQPbghKBCWDUkHpwAVlgoTgxqBscFNQLrg5KB/cElQIbg0qBpWCykGV4LaganB7UC24I6ge3BnUCGoGtYLawV1BneDuoG5wT1AvuDeoH9wXNAjuDxoGDwSNggeDxsFDQZPg4aBp8EjQLGgetAhaBq3+1Pm9P1ngMddL99ZJuo/uq1/U/XR/PUC/pAfql/Ug/YoerF/VyXqIHqpf08P063q4fkOP0CP1KP2mHq3f0mP0WD1Oj9cpeoKeqN/Wk/Q7erJ+V0/RU3Wqnqan6/f0DD1Tz9Lv69n6Az1Hz9Xz9Hydpj/UC/RCna4/0ov0xzpDL9ZL9FK9TC/XK/RKvUqv1mv0Wr1Or9cb9Ea9SW/WW/RWvU1v1zv0J3qn/lTv0rv1Hv2Z3qs/1/v0F3q//lIf0F/pTP21Pqi/0Yf0t/qw/k4f0d/ro/qYPq5/0Cf0j/qkPqVP6zP6rP5Jn9M/6/PaZ53cZ329G2WUiTExJtbEmlwml8ltcps8Jo+JmIiJM3Emn8ln8pv8pqApaOJNvCliipgsZMgUNUVN1ERNcVPclDAlTClTyjjjTIJJMGVNWVPOlDPlTXlTwVQwFU1FU9lUNreZ28zt5nZzh7nD3GnuNDVNTVPb1DZ1TB1T19Q19Uw9U9/UNw1MA9PQNDSNTCPT2DQ2TUwT09Q0Nc1MM9PCtDCtTCvT2rQ2bUwb0860M+1Ne9PBdDCJJtF0NB1NJ9PJdDadTRfTxXQ1XU030830MD1MT9PT9DK9TJJJMn1NX9PP9DMDzAAz0Aw0g8wgM9gMNskm2Qw1Q80wM8wMN8PNCDPSjMo6UTVvmTFmrBlnxpsUk2ImmolmkplkJpvJZoqZYlJNqpluppsZZoaZZWaZ2Wa2mWPmmHlmnkkzaWaBWWDSTbpZZBaZDJNhlpglZplZZlaYFWaVWWXWmDVmHawzG8wGs8lsMlvMFrPNbDM7zA6z0+w0u8wus8fsMXvNXrPP7DP7zX5zwBwwmSbTHDQHzSFzyBw2h80Rc8QcNUfNcXPcnDAnzElz0pw2p81ZU+Di96U3sTanzWWvsrnt1TaPzWv/MS5oC9l4W9gWsdrmtwV+FRtrbQlb0paypa2zZWyCvfE3cUVbyVa2Vexttqq93Vb7TVzH3m3r2ntsPXuvrW3v+lVc395nG9iHbUNEANvcNrYtbRP7sG1qH7HNbHPbwra07e0TtoN90ibap2xH+/Rv4gV2oV1lV9s1dq3dZXfb0/aMPWS/tWftT7aX7W0H2pftIPuKHWxftcl2yG/iUfZNO9q+ZcfYsXacHf+beIqdalPtNDvdvmdn2Jm/idPsh3a2Tbdz7Fw7z87/Jc6qKd1+ZBfZj22GDWCJXWqX2eV2hV15qVaf1663G+xGu9N+arfYrXab3W53XDoRtrvtHvuZ3Ws/twftN3a//dIesIdtpv36lzjr+A7b7+wR+709ao/Z4/YHe8L+qC5lZx37D/Zne956C4QEJElRQDGUg2IpJ+Wiqyg3XU15KC9F6BqKo2spH11H+akAFaRCFE+FqQhpMmSJKKSiVIyidD1dKq8UlSZHZSiBbqSydBOVo5upPN1CFehWqkiVqDJVoduoKt1O1egOqk53Ug2qSbWoNt1Fdehuqkv3UD26l+rTfdSA7qeG9AA1ogepMT1ETehhakqPUDNqTi2oJbWiR6k1PUZtqC21o8epPT1BHehJSqSnqCM9TZ3ob9SZnqEu9Cx1peeoG3WnHvQ89aQXqBf1piTqQ33pRepH/WkAvUQD6WUaRK/QYHqVkmkIDaXXaBi9TsPpDRpBI2kUvUmj6S0aQ2NpHI2nFJpAE+ltmkTv0GR6l6bQVEqlaTSd3qMZNJNm0fs0mz6gOTSX5tF8SqMPaQEtpHT6iBbRx5RBi2kJLaVltJxW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nXbQJ7STPqVdtJv20Ge0lz6nffQF7acv6QB9RZn0NR2kb+gQfUuH6Tvfm76no3SMjtMPdIJ+pJN0ik7TGTpLP9E5+pnOkycIMRShDFUYhDFhjjA2zBnmCq8Kc4dXh3nCvGEkvCaMC68N84XXhfnDAmHBsFAYHxYOi4Q6NKENKQzDomGxMBpeHxYPbwhLhCXDUmHp0IVlwoTwxrBseFNYLrw5LB/eElYIbw0rhpXCh++tEt4WVg1vD6uFd4TVwzvDGmHNsFZYO7wrrBPeHdYN7wnrhfeG5cL7wgbh/WHD8IGwUfhg2Dh8KGwSPhw2DR8Jm4XNwxZhy7BV+GjYOnwsbBO2DduFj4ftwyfCDuGTYWL4VNgxfPqX9fct/Ofrk8I+Yd/wxfDF0Pt75Lzo/Gha9MPogujCaHr0o+ii6MfRjOji6JLo0uiy6PLoiujK6Kro6uia6Nrouuj66Iboxqj3tXOAQyecdMoFLsblcLEup8vlrnK53dUuj8vrIu4aF+eudfncdS6/K+AKukIu3hV2RZx2xllHLnRFXTEXdde74u4GV8KVdKVcaedcGZfgWrpWrpVr7R5zbVxb18497h53T7gn3JPuSfeU6+iedp3c31xn94zr4p51z7rnXDfX3fVwz7uebkKeC+/JJNfX9XX9XD83wA1wA91AN8gNcoPdYJfskt1QN9QNc8PccDfcjXAj3Cg3yo12o90YN8aNc+NciktxE91EN8lNcpPdZDfFTXGpLtVNd9PdDDfDVZ15YS9z3Bw3z81zaS7NLXBZ54zpbpFb5DJchlvilrhlbplb4Va4VW6VW+PWuHVundvgNrhNbpPb4ra4bW6b2+F2uJ1up9vl816Y1O11+9w+t9/tdwfcVy7Tfe0Oum/cIfetO+y+c0fc9+6oO+aOux/cCfejO+lOudPujDvrfnLn3M/uvPMuJTIhMjHydmRS5J3I5Mi7kSmRqZHUyLTI9Mh7kRmRmZFZkfcjsyMfROZE5kbmReZH0iIfRhZEFkbSIx9FFkU+jmREFkeWRJZGlkWWR7wvvCX0RX0xH/XX++L+Bl/Cl/SlfGnvfBmf4G/0Zf1Nvpy/2Zf3t/gK/lZf0Vfylf0jvplv7lv4lr6Vf9S39o/5Nr6tb+cf9+39E76Df9In+qd8R/+07+T/5jv7Z3wX/6zv6p/z3Xx338M/73v6F3wv39sn+T6+r3/R9/P9/QD/kh/oX/aD/Ct+sH/VJ/shfqh/zQ/zr/vh/g0/wo/0o2Le9KMvXSLDeJ/iJ/iJ/m0/yb/jJ/t3/RQ/1af6aX66f8/P8DP9LP++n+0/8HP8XD/Pz/dp/kO/wC/06f4jv8h/7DP84ks3lf0Kv9Kv8qv9Gr/Wr/Pr/Qa/0W/ym/0Wv9Vv89v9Dv+J3+k/9bv8br/Hf+b3+s/9Pv+F3++/9Af8Vz7Tf+0P+m/8If+tP+y/80f89/6oP+aP+x/8Cf+jP+lP+dP+jD/rf/Ln/M/+PP/OGmOMMcbYHzLh8lD8es2F2/l9fidH/N3GfQHg6q2FMv9+fdYZ5br8F8b9RXz7CAA81bvrg5eWGjWSkpIubpshISg2F+DS/wRliYHL8WJoB09AIrSFsr9bf3/R/Sz9i/mjtwDk+rucWLgcX57/CwBM+p35H3181IIK4em4/8/8cwFKFLuckxMux4uh3S/3V9pCuX9Sf4HW/6L+nF+mALT5u5zccDm+XH8CPAZPQ+KvtmSMMcYYY4wxxi7oLyp3vnT9eeknPn/v+jxeXc7JAZfjf3V9zhhjjDHGGGOMsSvvme49nnw0MbFt539/UO1/lPWHB03hf2tmHvzuwHuAS48oAPgPJwTIGsi/8ig2/yX7Sr741vnHVcvO+AD+O1r5Zwyu8AcTY4wxxhhj7E93+aT/14+rK1UQY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDGWDf0Vf07sSh8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdqX9vwAAAP//kfb+pw==") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a95005, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00') 1m27.177282473s ago: executing program 8 (id=1033): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x194) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1m26.676120406s ago: executing program 8 (id=1035): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f00000000c0)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x297, &(0x7f0000000480)="$eJzs3c1qE18Yx/HfmUyb/P8tdfoignRVLbiSvmzETUFyB25cidpEKIYKWkFdRdfiBbjPLXgBLl2Ja6G7rryA7CLnzBkzSWaSGBonid8PJEw655l5TuZMz3lSSgTgn3Wvet46vLAPI5VUknRXCiRVpFDSVV2rvDo9Ozlr1GvDDlRyEfZhFEeagTbHp/WsUBvnIrzIvgq1mv4ZpqPyQ83tlaKzQNHc3Z8hkMr+7nT7K389s+loFp1AwUxbbb3WWtF5AACK5ef/wM/zq379HgTSrp/24/k/WdXP+QTaLjqBKfsyYn9q/ndVVsfY63vF7erWe+5ih1ryQa3Di0lyWVY8snoWmGZUVelyCf57etKo3z5+3qgFeq8jb6nbbMs91+KhmzhvGVfT2u13g4fe8bXpmPVlUiGP1zrNFVbBku3DQTr/VJPNyz3jaOar+WYemkifVPu9/gs7xl4md6WivisV57+Xf0TXy2W5Vjm9XHcnue7P4A3tZUk5FYmSEbXedwGjnDzDnqiNvqi4d/v5vXNRm5lRByOitvqjuqM5P3LazEfzwOzopz6rmlr/B/bd3tU4d6Zt41r6kTG0P6FrGbn5xM8dze3MlsGkPcIEPuiJ7mjt5Zu3zx43GvUXC7th78QZSGOmNpJBMCv5LOyGfZMLOXsy70x+nPxfHXwsvzi6F/0PAxkEi8Kuu0xc/6XqlT23WLNPUe86vZyO7Yw6eOqI+zm1wYZ7/r+/gsupDYz76GEl46+Lg2ccWnPduCXdHOeMscjnOXuOJgkyVX3XIz7/BwAAAAAAAAAAAAAAAAAAmDeX9y8HFeXtKrqPAAAAAAAAAAAAAAAAAAAAAADMu4zv/y0X+v2/9xW/4vt/gan7FQAA//+pI3MQ") r0 = open(&(0x7f0000000040)='./file1\x00', 0xc0242, 0x1df2a23c5997fa5f) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40010) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x1, 0x5, 0x4, 0x3, 0x1, {0x0, 0x9, 0x2100, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x2, 0x0, 0x0, 0x3ff, 0x3}}, {0x0, 0x13}}}, 0xa0) 1m24.845604558s ago: executing program 38 (id=1035): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f00000000c0)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x297, &(0x7f0000000480)="$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") r0 = open(&(0x7f0000000040)='./file1\x00', 0xc0242, 0x1df2a23c5997fa5f) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40010) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x1, 0x5, 0x4, 0x3, 0x1, {0x0, 0x9, 0x2100, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x2, 0x0, 0x0, 0x3ff, 0x3}}, {0x0, 0x13}}}, 0xa0) 15.404196602s ago: executing program 9 (id=1337): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10) r2 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000001040)={0x0, r2}, 0x0, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502"], 0x40}}, 0x0) 14.856590787s ago: executing program 9 (id=1342): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) 13.895244942s ago: executing program 9 (id=1347): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000840)={0x28, 0x6, r1, 0x0, &(0x7f0000007000/0x3000)=nil, 0x3000, 0x7fffffffffffffff}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r1, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000, 0x100000}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r1, r1, 0x3, 0xfffffffffefffffa, 0x3fff}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) 13.286458501s ago: executing program 9 (id=1351): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000380)=""/141, 0x8d) 12.828381547s ago: executing program 9 (id=1355): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000100), 0x1, 0x599, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r1, 0x20, 0x0, 0x8000) write$cgroup_devices(r1, &(0x7f0000000180)={'b', ' *:* ', 'rm\x00'}, 0x9) pwrite64(r0, &(0x7f0000000200)='2', 0x1, 0x7) 12.127811761s ago: executing program 9 (id=1359): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000080)={0x1, 0xfffffdfe, 0x0, 0x8, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x1, 0xfffffffe, 0x1}) 10.125293773s ago: executing program 39 (id=1359): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000080)={0x1, 0xfffffdfe, 0x0, 0x8, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x1, 0xfffffffe, 0x1}) 8.486745741s ago: executing program 7 (id=1368): pipe2(&(0x7f00000003c0), 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$igmp6(0xa, 0x3, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 7.20396866s ago: executing program 7 (id=1373): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 5.164077571s ago: executing program 1 (id=1382): write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = eventfd2(0x0, 0x0) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000000)=""/92, 0x5c}], 0x1) 4.095625937s ago: executing program 5 (id=1386): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4893a, 0xa}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 4.000852272s ago: executing program 1 (id=1387): open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 3.479217313s ago: executing program 7 (id=1389): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x2208004, 0x0) 3.382360097s ago: executing program 1 (id=1390): r0 = socket$inet(0x2b, 0x801, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0x8) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0x3087, 0x10, 0x100004, 0x219}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 3.029678354s ago: executing program 5 (id=1392): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001140)=""/134, 0x86}], 0x1) 2.836286784s ago: executing program 2 (id=1393): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x7c, 0x2c, 0xd2b, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xf}, {}, {0x1, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xe, 0x1, 0x3, 0x41, 0x4, 0x2, 0x6, 0xfffffffa, [{0x200, 0x500, 0xba2d, 0x6}, {0x6783, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xac, 0x10}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x6, 0xc}}]}}]}, 0x7c}}, 0x24040084) 2.783422326s ago: executing program 1 (id=1394): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001000)={0xf, {"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", 0x1000}}, 0x1006) 2.331160786s ago: executing program 5 (id=1395): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000480)={0x0, 0x1, 0x0, &(0x7f00000010c0)=""/109, 0x0, 0xf000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000009c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 2.330817104s ago: executing program 2 (id=1396): r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%\xde({F\xfaA:', 0x0) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) 2.222988078s ago: executing program 7 (id=1397): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=[@ip_tos_int={{0x7ff4d4260000}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x0, 0x0, 0x7, {[@lsrr, @generic={0x0, 0x0, "96"}, @generic={0x0, 0x0, "206a77bdd1a004129054e7704a"}]}}}], 0xf}, 0x0) 1.729543685s ago: executing program 2 (id=1398): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004280)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004300), 0x2000, &(0x7f0000006300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000063c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.501431421s ago: executing program 5 (id=1399): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x80, &(0x7f0000000400)={[{@nr_inodes={'nr_inodes', 0x3d, [0x47]}}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f00000002c0)='./file1\x00', 0x4, 0x0) linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x400) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) 1.093475024s ago: executing program 2 (id=1400): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f00000005c0)="ff", 0x1, 0x7fff800000000002}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r1, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000380)={0x28, 0x2, r1, r1, 0x1000, 0x5, 0x9}) 1.09296695s ago: executing program 7 (id=1401): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00') pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00') 761.678368ms ago: executing program 5 (id=1402): r0 = syz_io_uring_setup(0x31c7, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0xfffffffc}, &(0x7f00000001c0), &(0x7f00000005c0)) io_uring_register$IORING_REGISTER_PBUF_STATUS(r0, 0x1a, &(0x7f0000003d00)={0x9}, 0x1) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000003c40)=[{0x3, 0x1, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/147, 0x93}, {&(0x7f00000000c0)=""/25, 0x19}, {&(0x7f0000000340)=""/187, 0xbb}], &(0x7f0000000200)=[0x6]}, {0x1, 0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000400)=""/71, 0x47}], &(0x7f00000004c0)=[0x5, 0x8]}, {0x2, 0x624a43d69a829b3b, 0x0, &(0x7f0000000700)=[{&(0x7f0000000600)=""/231, 0xe7}, {0x0}], &(0x7f0000000740)=[0x800]}, {0x0, 0x1, 0x0, &(0x7f0000003b40), &(0x7f0000003c00)}], 0x4) syz_io_uring_setup(0x263f, &(0x7f0000000840)={0x0, 0xb8da, 0x186a, 0x0, 0x0, 0x0, r0}, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003cc0)) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x0, 0x27, 0x2, 0x0, 0x0, r0}, 0x0, &(0x7f0000000300)) 647.263872ms ago: executing program 1 (id=1403): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c) 623.375922ms ago: executing program 2 (id=1404): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000400)=0x4000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)={0x1, 0x0, [{0xa6d47960d1d42ccf, 0x41, &(0x7f0000000640)=""/65}]}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f0000000200)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000280)=0x1) 297.514641ms ago: executing program 7 (id=1405): openat$mice(0xffffffffffffff9c, &(0x7f0000000880), 0x41) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x804, 0x6}, 0x3d, [0x6, 0xc95a, 0x9, 0x8, 0x81, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x0, 0xffff2d37, 0x5dd2, 0x6, 0x7, 0x100, 0x7, 0x7, 0x7, 0x3, 0x3c57, 0x1, 0x24, 0x2adc, 0x800, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8000, 0x642, 0x3, 0xa, 0x0, 0x71, 0xd, 0xa, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x9, 0x0, 0x80, 0x0, 0x4, 0x6, 0x8c0, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1ff, 0x0, 0x3, 0x0, 0x7, 0x1, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0xd, 0x4, 0x400, 0x1, 0x2, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x1000, 0x101, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0xfffffff7, 0x9, 0x7, 0x5, 0x0, 0x10003, 0x7, 0x5e0176be, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x5, 0x1, 0x5, 0x64e, 0xfffffdfa, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x4001ef, 0x9, 0x8, 0x88, 0x3, 0x10000009, 0x3e6, 0xb, 0x5, 0x2, 0x60002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x2, 0x200, 0x80, 0x3, 0x4, 0x2, 0xffffffff, 0xa2, 0x7, 0x53cf697b, 0x8, 0x4, 0x54fe12da, 0x5, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x2, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0x6, 0x4051bf, 0x5, 0xce7, 0x1ff, 0x6, 0x87, 0x5, 0x3, 0x104, 0x80000000, 0x1, 0x7fff, 0x8ffff, 0xa61c, 0x2, 0x0, 0x1, 0xfffffff8, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x405, 0x8, 0xff, 0x103, 0x3, 0xffff, 0x7, 0x8, 0x100, 0x9602, 0xb, 0x2, 0x4, 0x6, 0x101, 0x10000, 0x2, 0x8, 0x2b91, 0x6, 0x8, 0x9, 0x1, 0x6c0b, 0x83a0, 0x1, 0x5, 0xb1c, 0x1, 0x8, 0xfff, 0xffffffff]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) r1 = syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) 151.773952ms ago: executing program 1 (id=1406): munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r0 = userfaultfd(0x801) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000feffffff0000000000000000850000002a00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r1}, 0x18) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000779000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2000}) 109.403059ms ago: executing program 5 (id=1407): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0, 0x3}, {&(0x7f0000000480)=""/136}], 0x2}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)}, 0xfffffff7}], 0x3, 0x40000002, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x20000000) 0s ago: executing program 2 (id=1408): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000d00)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60000000009c1100fe8000000000000000000000000000bbff02000000000000000000000000000100000e22"], 0x0) kernel console output (not intermixed with test programs): 00ffffffff R11: 0000000000000246 R12: 00007ffd4a1e0910 [ 439.488439][ T5815] R13: 00007f99a7211c05 R14: 000000000006b44d R15: 00007ffd4a1e0950 [ 439.488555][ T5815] [ 439.515598][ T8676] XFS (loop9): Ending clean mount [ 439.519627][ T5815] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 439.861584][ T5815] CPU: 0 UID: 0 PID: 5815 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(none) [ 439.861750][ T5815] Tainted: [W]=WARN [ 439.861797][ T5815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 439.861874][ T5815] Call Trace: [ 439.861924][ T5815] [ 439.861972][ T5815] __dump_stack+0x26/0x30 [ 439.862137][ T5815] dump_stack_lvl+0x1df/0x270 [ 439.862302][ T5815] dump_stack+0x1e/0x25 [ 439.862454][ T5815] f2fs_handle_critical_error+0xa6f/0xc20 [ 439.862669][ T5815] f2fs_stop_checkpoint+0x65/0x80 [ 439.862846][ T5815] f2fs_write_end_io+0x101c/0x1bc0 [ 439.863006][ T5815] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 439.863193][ T5815] bio_endio+0xde2/0xf30 [ 439.863337][ T5815] submit_bio_noacct+0x213/0x2750 [ 439.863529][ T5815] submit_bio+0x57c/0x630 [ 439.863667][ T5815] f2fs_submit_write_bio+0x92/0x250 [ 439.863840][ T5815] __submit_merged_bio+0x16f/0x6a0 [ 439.864006][ T5815] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 439.864188][ T5815] __submit_merged_write_cond+0x458/0x9a0 [ 439.864381][ T5815] f2fs_write_data_pages+0x4bb2/0x5480 [ 439.864686][ T5815] ? trace_pid_list_set+0x3f0/0x730 [ 439.864865][ T5815] ? __update_load_avg_cfs_rq+0xe9/0x1010 [ 439.865049][ T5815] ? __update_load_avg_se+0xd02/0x11c0 [ 439.865250][ T5815] ? kmsan_get_metadata+0xfb/0x160 [ 439.865410][ T5815] ? kmsan_get_metadata+0xfb/0x160 [ 439.865565][ T5815] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 439.865720][ T5815] ? kmsan_get_metadata+0xfb/0x160 [ 439.865869][ T5815] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 439.866020][ T5815] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 439.866201][ T5815] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 439.866380][ T5815] do_writepages+0x3ef/0x860 [ 439.866526][ T5815] ? _raw_spin_unlock+0x30/0x50 [ 439.866664][ T5815] ? wbc_attach_and_unlock_inode+0x131/0x680 [ 439.866870][ T5815] filemap_fdatawrite+0x207/0x260 [ 439.867097][ T5815] f2fs_sync_dirty_inodes+0x2ab/0x9e0 [ 439.867267][ T5815] f2fs_write_checkpoint+0xfe2/0x2b00 [ 439.867536][ T5815] kill_f2fs_super+0x2ff/0x970 [ 439.867693][ T5815] ? __pfx_kill_f2fs_super+0x10/0x10 [ 439.867832][ T5815] deactivate_locked_super+0xcb/0x3c0 [ 439.867993][ T5815] deactivate_super+0x12f/0x140 [ 439.868136][ T5815] cleanup_mnt+0x6fb/0x780 [ 439.868304][ T5815] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 439.868460][ T5815] ? __pfx___cleanup_mnt+0x10/0x10 [ 439.868635][ T5815] __cleanup_mnt+0x22/0x30 [ 439.868799][ T5815] task_work_run+0x206/0x2b0 [ 439.868955][ T5815] exit_to_user_mode_loop+0x2a6/0x330 [ 439.869113][ T5815] do_syscall_64+0x1e3/0x210 [ 439.869277][ T5815] ? irqentry_exit+0x16/0x60 [ 439.869426][ T5815] ? clear_bhb_loop+0x40/0x90 [ 439.869566][ T5815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.869705][ T5815] RIP: 0033:0x7f99a718ff17 [ 439.869805][ T5815] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 439.869921][ T5815] RSP: 002b:00007ffd4a1df7c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 439.870044][ T5815] RAX: 0000000000000000 RBX: 00007f99a7211c05 RCX: 00007f99a718ff17 [ 439.870134][ T5815] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd4a1df880 [ 439.870216][ T5815] RBP: 00007ffd4a1df880 R08: 0000000000000000 R09: 0000000000000000 [ 439.870301][ T5815] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd4a1e0910 [ 439.870388][ T5815] R13: 00007f99a7211c05 R14: 000000000006b44d R15: 00007ffd4a1e0950 [ 439.870517][ T5815] [ 439.892725][ T4013] XFS (loop9): Metadata CRC error detected at xfs_agf_read_verify+0x1b9/0x300, xfs_agf block 0x1 [ 439.896405][ T5815] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 439.899049][ T4013] XFS (loop9): Unmount and run xfs_repair [ 440.273819][ T4013] XFS (loop9): First 128 bytes of corrupted metadata buffer: [ 440.281375][ T4013] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 440.290577][ T4013] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 440.300254][ T4013] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 440.309374][ T4013] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 440.322587][ T4013] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 440.331599][ T4013] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 440.341912][ T4013] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 440.351170][ T4013] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 440.360298][ T4013] XFS (loop9): metadata I/O error in "xfs_read_agf+0x23d/0x550" at daddr 0x1 len 1 error 74 [ 440.371037][ T4013] XFS (loop9): page discard on page ffffea0000af6c70, inode 0x26, pos 36864. [ 440.381262][ T24] loop9: writeback error on inode 38, offset 0, sector 22 [ 440.666626][ T8255] XFS (loop9): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 440.896305][ T8255] XFS (loop9): Uncorrected metadata errors detected; please run xfs_repair. [ 441.442587][ T8703] loop8: detected capacity change from 0 to 40427 [ 441.459172][ T8703] F2FS-fs (loop8): Insane cp_payload (553648128 >= 504) [ 441.466611][ T8703] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 441.501572][ T8703] F2FS-fs (loop8): invalid crc value [ 441.791818][ T8703] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 441.809395][ T8703] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 441.816827][ T8703] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 442.408207][ T8719] netlink: 752 bytes leftover after parsing attributes in process `syz.5.759'. [ 442.449068][ T8083] syz-executor: attempt to access beyond end of device [ 442.449068][ T8083] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 442.465636][ T8083] CPU: 0 UID: 0 PID: 8083 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(none) [ 442.465802][ T8083] Tainted: [W]=WARN [ 442.465851][ T8083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 442.465928][ T8083] Call Trace: [ 442.465980][ T8083] [ 442.466029][ T8083] __dump_stack+0x26/0x30 [ 442.466190][ T8083] dump_stack_lvl+0x1df/0x270 [ 442.466357][ T8083] dump_stack+0x1e/0x25 [ 442.466496][ T8083] f2fs_handle_critical_error+0xa6f/0xc20 [ 442.466702][ T8083] f2fs_stop_checkpoint+0x65/0x80 [ 442.466877][ T8083] f2fs_write_end_io+0x101c/0x1bc0 [ 442.467044][ T8083] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 442.467226][ T8083] bio_endio+0xde2/0xf30 [ 442.467366][ T8083] submit_bio_noacct+0x213/0x2750 [ 442.467553][ T8083] submit_bio+0x57c/0x630 [ 442.467696][ T8083] f2fs_submit_write_bio+0x92/0x250 [ 442.467868][ T8083] __submit_merged_bio+0x16f/0x6a0 [ 442.468040][ T8083] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 442.468207][ T8083] __submit_merged_write_cond+0x458/0x9a0 [ 442.468395][ T8083] f2fs_write_data_pages+0x4bb2/0x5480 [ 442.468707][ T8083] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 442.468866][ T8083] ? folios_put_refs+0x1/0xb10 [ 442.469031][ T8083] ? filter_irq_stacks+0x49/0x190 [ 442.469214][ T8083] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 442.469371][ T8083] ? stack_depot_save_flags+0x35/0x7b0 [ 442.469544][ T8083] ? kmsan_get_metadata+0xfb/0x160 [ 442.469702][ T8083] ? kmsan_get_metadata+0xfb/0x160 [ 442.469850][ T8083] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 442.470007][ T8083] ? kmsan_get_metadata+0xfb/0x160 [ 442.470154][ T8083] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 442.470306][ T8083] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 442.470486][ T8083] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 442.470663][ T8083] do_writepages+0x3ef/0x860 [ 442.470801][ T8083] ? _raw_spin_unlock+0x30/0x50 [ 442.470933][ T8083] ? wbc_attach_and_unlock_inode+0x131/0x680 [ 442.471146][ T8083] filemap_fdatawrite+0x207/0x260 [ 442.471375][ T8083] f2fs_sync_dirty_inodes+0x2ab/0x9e0 [ 442.471539][ T8083] f2fs_write_checkpoint+0xfe2/0x2b00 [ 442.471802][ T8083] kill_f2fs_super+0x2ff/0x970 [ 442.471959][ T8083] ? __pfx_kill_f2fs_super+0x10/0x10 [ 442.472088][ T8083] deactivate_locked_super+0xcb/0x3c0 [ 442.472246][ T8083] deactivate_super+0x12f/0x140 [ 442.472380][ T8083] cleanup_mnt+0x6fb/0x780 [ 442.472534][ T8083] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 442.472689][ T8083] ? __pfx___cleanup_mnt+0x10/0x10 [ 442.472861][ T8083] __cleanup_mnt+0x22/0x30 [ 442.473030][ T8083] task_work_run+0x206/0x2b0 [ 442.473193][ T8083] exit_to_user_mode_loop+0x2a6/0x330 [ 442.473350][ T8083] do_syscall_64+0x1e3/0x210 [ 442.473514][ T8083] ? irqentry_exit+0x16/0x60 [ 442.473654][ T8083] ? clear_bhb_loop+0x40/0x90 [ 442.473783][ T8083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.473913][ T8083] RIP: 0033:0x7fea3018ff17 [ 442.474015][ T8083] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 442.474133][ T8083] RSP: 002b:00007ffc8479cd08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 442.474258][ T8083] RAX: 0000000000000000 RBX: 00007fea30211c05 RCX: 00007fea3018ff17 [ 442.474344][ T8083] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc8479cdc0 [ 442.474424][ T8083] RBP: 00007ffc8479cdc0 R08: 0000000000000000 R09: 0000000000000000 [ 442.474507][ T8083] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc8479de50 [ 442.474596][ T8083] R13: 00007fea30211c05 R14: 000000000006bf78 R15: 00007ffc8479de90 [ 442.474718][ T8083] [ 442.829812][ T8083] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 445.027669][ T8756] loop7: detected capacity change from 0 to 256 [ 445.046175][ T8756] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 445.057201][ T8756] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 445.157871][ T8756] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 445.182869][ T24] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 445.358416][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.369892][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.380075][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 445.393486][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 445.403136][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.421019][ T24] usb 4-1: config 0 descriptor?? [ 445.915064][ T24] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 446.161511][ T24] usb 4-1: USB disconnect, device number 10 [ 447.561284][ T8790] netlink: 'syz.3.791': attribute type 10 has an invalid length. [ 447.576445][ T8790] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 448.765690][ T8813] loop7: detected capacity change from 0 to 512 [ 448.831757][ T8813] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 450.649778][ T7586] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.005613][ T8831] loop3: detected capacity change from 0 to 65536 [ 451.309603][ T8831] XFS (loop3): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 451.845191][ T8835] loop8: detected capacity change from 0 to 40427 [ 451.846236][ T5858] kernel write not supported for file [eventfd] (pid: 5858 comm: kworker/0:4) [ 451.854829][ T8835] F2FS-fs: heap/no_heap options were deprecated [ 451.870686][ T8835] F2FS-fs (loop8): Mismatch start address, segment0(0) cp_blkaddr(512) [ 451.878627][ T8831] XFS (loop3): Ending clean mount [ 451.879310][ T8835] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 451.906897][ T8835] F2FS-fs (loop8): invalid crc value [ 451.907953][ T8831] XFS (loop3): Quotacheck needed: Please wait. [ 452.007244][ T8831] XFS (loop3): Quotacheck: Done. [ 452.227369][ T8835] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 452.239196][ T8835] F2FS-fs (loop8): Start checkpoint disabled! [ 452.246951][ T5815] XFS (loop3): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 452.273372][ T8835] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 452.280704][ T8835] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 452.346823][ T8854] Invalid ELF header magic: != ELF [ 452.385346][ T30] audit: type=1800 audit(1756056365.131:17): pid=8835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.812" name="file1" dev="loop8" ino=10 res=0 errno=0 [ 452.543543][ T4013] kworker/u8:14: attempt to access beyond end of device [ 452.543543][ T4013] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 452.558172][ T4013] CPU: 0 UID: 0 PID: 4013 Comm: kworker/u8:14 Tainted: G W syzkaller #0 PREEMPT(none) [ 452.558346][ T4013] Tainted: [W]=WARN [ 452.558392][ T4013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 452.558519][ T4013] Workqueue: writeback wb_workfn (flush-7:8) [ 452.558730][ T4013] Call Trace: [ 452.558780][ T4013] [ 452.558830][ T4013] __dump_stack+0x26/0x30 [ 452.558991][ T4013] dump_stack_lvl+0x1df/0x270 [ 452.559159][ T4013] dump_stack+0x1e/0x25 [ 452.559308][ T4013] f2fs_handle_critical_error+0xa6f/0xc20 [ 452.559529][ T4013] f2fs_stop_checkpoint+0x65/0x80 [ 452.559709][ T4013] f2fs_write_end_io+0x101c/0x1bc0 [ 452.559871][ T4013] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 452.560059][ T4013] bio_endio+0xde2/0xf30 [ 452.560200][ T4013] submit_bio_noacct+0x213/0x2750 [ 452.560389][ T4013] submit_bio+0x57c/0x630 [ 452.560536][ T4013] f2fs_submit_write_bio+0x92/0x250 [ 452.560709][ T4013] __submit_merged_bio+0x16f/0x6a0 [ 452.560864][ T4013] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 452.561031][ T4013] __submit_merged_write_cond+0x458/0x9a0 [ 452.561222][ T4013] f2fs_write_data_pages+0x4bb2/0x5480 [ 452.561526][ T4013] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 452.561680][ T4013] ? trace_pid_list_set+0x3f0/0x730 [ 452.561852][ T4013] ? kmsan_get_metadata+0xfb/0x160 [ 452.562000][ T4013] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 452.562144][ T4013] ? kmsan_get_metadata+0xfb/0x160 [ 452.562287][ T4013] ? kmsan_get_metadata+0xfb/0x160 [ 452.562444][ T4013] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 452.562600][ T4013] ? kmsan_get_metadata+0xfb/0x160 [ 452.562749][ T4013] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 452.562902][ T4013] ? kmsan_get_metadata+0xfb/0x160 [ 452.563067][ T4013] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 452.563221][ T4013] ? kmsan_get_metadata+0xfb/0x160 [ 452.563373][ T4013] ? kmsan_get_metadata+0xfb/0x160 [ 452.563522][ T4013] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 452.563677][ T4013] ? kmsan_get_metadata+0xfb/0x160 [ 452.563823][ T4013] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 452.563976][ T4013] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 452.564156][ T4013] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 452.564341][ T4013] do_writepages+0x3ef/0x860 [ 452.564476][ T4013] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 452.564634][ T4013] ? kmsan_get_metadata+0xfb/0x160 [ 452.564780][ T4013] ? kmsan_get_metadata+0xfb/0x160 [ 452.564949][ T4013] __writeback_single_inode+0x101/0x1190 [ 452.565103][ T4013] ? kmsan_get_metadata+0xfb/0x160 [ 452.565263][ T4013] writeback_sb_inodes+0xac1/0x1cb0 [ 452.565490][ T4013] ? kmsan_get_metadata+0xfb/0x160 [ 452.565689][ T4013] wb_writeback+0x4ce/0xc00 [ 452.565834][ T4013] ? queue_io+0x491/0x790 [ 452.565970][ T4013] wb_workfn+0x397/0x1910 [ 452.566146][ T4013] ? kmsan_get_metadata+0xfb/0x160 [ 452.566321][ T4013] ? __pfx_wb_workfn+0x10/0x10 [ 452.566490][ T4013] process_scheduled_works+0xb8e/0x1d80 [ 452.566732][ T4013] worker_thread+0xedf/0x1590 [ 452.566944][ T4013] kthread+0xd59/0xf00 [ 452.567070][ T4013] ? __pfx_worker_thread+0x10/0x10 [ 452.567264][ T4013] ? __pfx_kthread+0x10/0x10 [ 452.567406][ T4013] ret_from_fork+0x1e3/0x310 [ 452.567538][ T4013] ? __pfx_kthread+0x10/0x10 [ 452.567671][ T4013] ret_from_fork_asm+0x1a/0x30 [ 452.567862][ T4013] [ 452.891916][ T4013] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 453.378170][ T8862] loop7: detected capacity change from 0 to 1024 [ 454.275198][ T8871] netlink: 'syz.7.825': attribute type 5 has an invalid length. [ 454.299228][ T8869] loop9: detected capacity change from 0 to 2048 [ 454.454436][ T8869] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 454.467487][ T8869] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 454.630667][ T30] audit: type=1800 audit(1756056367.381:18): pid=8869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.824" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 454.654400][ T30] audit: type=1804 audit(1756056367.381:19): pid=8869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.824" name="/newroot/25/file0/file1" dev="loop9" ino=15 res=1 errno=0 [ 454.956128][ T8255] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.325392][ T8884] syzkaller1: entered promiscuous mode [ 455.331051][ T8884] syzkaller1: entered allmulticast mode [ 456.912466][ T8920] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 456.919959][ T8920] IPv6: NLM_F_CREATE should be set when creating new route [ 456.927532][ T8920] IPv6: NLM_F_CREATE should be set when creating new route [ 456.933062][ T24] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 457.021922][ T8920] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 457.140088][ T24] usb 4-1: config 0 has no interfaces? [ 457.146315][ T24] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 457.155969][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.197736][ T24] usb 4-1: config 0 descriptor?? [ 457.440820][ T5858] usb 4-1: USB disconnect, device number 11 [ 459.043796][ T8935] loop8: detected capacity change from 0 to 40427 [ 459.063315][ T8935] F2FS-fs (loop8): invalid crc value [ 459.316108][ T8935] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 459.337624][ T8935] F2FS-fs (loop8): Start checkpoint disabled! [ 459.369933][ T8935] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 459.529893][ T3470] kworker/u8:10: attempt to access beyond end of device [ 459.529893][ T3470] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 459.544508][ T3470] CPU: 0 UID: 0 PID: 3470 Comm: kworker/u8:10 Tainted: G W syzkaller #0 PREEMPT(none) [ 459.544671][ T3470] Tainted: [W]=WARN [ 459.544718][ T3470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 459.544842][ T3470] Workqueue: writeback wb_workfn (flush-7:8) [ 459.545054][ T3470] Call Trace: [ 459.545100][ T3470] [ 459.545150][ T3470] __dump_stack+0x26/0x30 [ 459.545305][ T3470] dump_stack_lvl+0x1df/0x270 [ 459.545473][ T3470] dump_stack+0x1e/0x25 [ 459.545617][ T3470] f2fs_handle_critical_error+0xa6f/0xc20 [ 459.545839][ T3470] f2fs_stop_checkpoint+0x65/0x80 [ 459.546017][ T3470] f2fs_write_end_io+0x101c/0x1bc0 [ 459.546179][ T3470] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 459.546365][ T3470] bio_endio+0xde2/0xf30 [ 459.546502][ T3470] submit_bio_noacct+0x213/0x2750 [ 459.546693][ T3470] submit_bio+0x57c/0x630 [ 459.546844][ T3470] f2fs_submit_write_bio+0x92/0x250 [ 459.547016][ T3470] __submit_merged_bio+0x16f/0x6a0 [ 459.547178][ T3470] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 459.547344][ T3470] __submit_merged_write_cond+0x458/0x9a0 [ 459.547536][ T3470] f2fs_write_data_pages+0x4bb2/0x5480 [ 459.547845][ T3470] ? trace_pid_list_set+0x3f0/0x730 [ 459.548010][ T3470] ? kmsan_get_metadata+0xfb/0x160 [ 459.548158][ T3470] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 459.548322][ T3470] ? __update_load_avg_cfs_rq+0xd7f/0x1010 [ 459.548507][ T3470] ? kmsan_get_metadata+0xfb/0x160 [ 459.548653][ T3470] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 459.548834][ T3470] ? __rb_insert_augmented+0x80/0x11b0 [ 459.548997][ T3470] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 459.549134][ T3470] ? kmsan_get_metadata+0xfb/0x160 [ 459.549278][ T3470] ? kmsan_get_metadata+0xfb/0x160 [ 459.549427][ T3470] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 459.549581][ T3470] ? kmsan_get_metadata+0xfb/0x160 [ 459.549726][ T3470] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 459.549881][ T3470] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 459.550061][ T3470] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 459.550244][ T3470] do_writepages+0x3ef/0x860 [ 459.550376][ T3470] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 459.550536][ T3470] ? __pfx_writeback_sb_inodes+0x1/0x10 [ 459.550674][ T3470] ? kmsan_get_metadata+0xfb/0x160 [ 459.550844][ T3470] __writeback_single_inode+0x101/0x1190 [ 459.550995][ T3470] ? kmsan_get_metadata+0xfb/0x160 [ 459.551158][ T3470] writeback_sb_inodes+0xac1/0x1cb0 [ 459.551379][ T3470] ? kmsan_get_metadata+0xfb/0x160 [ 459.551573][ T3470] wb_writeback+0x4ce/0xc00 [ 459.551722][ T3470] ? queue_io+0x491/0x790 [ 459.551869][ T3470] wb_workfn+0x397/0x1910 [ 459.552042][ T3470] ? kmsan_get_metadata+0xfb/0x160 [ 459.552208][ T3470] ? __pfx_wb_workfn+0x10/0x10 [ 459.552367][ T3470] process_scheduled_works+0xb8e/0x1d80 [ 459.552599][ T3470] worker_thread+0xedf/0x1590 [ 459.552830][ T3470] kthread+0xd59/0xf00 [ 459.552951][ T3470] ? __pfx_worker_thread+0x10/0x10 [ 459.553136][ T3470] ? __pfx_kthread+0x10/0x10 [ 459.553257][ T3470] ret_from_fork+0x1e3/0x310 [ 459.553379][ T3470] ? __pfx_kthread+0x10/0x10 [ 459.553500][ T3470] ret_from_fork_asm+0x1a/0x30 [ 459.553683][ T3470] [ 459.861170][ T3470] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 460.651404][ T8965] netlink: 8 bytes leftover after parsing attributes in process `syz.7.862'. [ 462.001130][ T8991] loop9: detected capacity change from 0 to 128 [ 463.312822][ T24] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 463.503343][ T24] usb 10-1: Using ep0 maxpacket: 16 [ 463.537069][ T24] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 463.605955][ T24] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 463.616056][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.625108][ T24] usb 10-1: Product: syz [ 463.629531][ T24] usb 10-1: Manufacturer: syz [ 463.634501][ T24] usb 10-1: SerialNumber: syz [ 463.746100][ T24] usb 10-1: config 0 descriptor?? [ 463.761275][ T24] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 463.775745][ T24] usb 10-1: Detected FT232R [ 464.004928][ T24] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 464.088563][ T9018] netlink: 'syz.7.884': attribute type 2 has an invalid length. [ 464.097132][ T9018] netlink: 'syz.7.884': attribute type 1 has an invalid length. [ 464.105604][ T9018] netlink: 'syz.7.884': attribute type 8 has an invalid length. [ 464.113658][ T9018] netlink: 44 bytes leftover after parsing attributes in process `syz.7.884'. [ 464.236005][ T24] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 464.241584][ T9020] netlink: 'syz.5.885': attribute type 1 has an invalid length. [ 464.345819][ T9020] 8021q: adding VLAN 0 to HW filter on device bond1 [ 464.440870][ T9024] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 464.457812][ T9024] bond1: (slave batadv1): making interface the new active one [ 464.471023][ T9024] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 464.516093][ T5858] usb 10-1: USB disconnect, device number 2 [ 464.607907][ T5858] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 464.619084][ T5858] ftdi_sio 10-1:0.0: device disconnected [ 465.433532][ T9031] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 465.441020][ T9031] IPv6: NLM_F_CREATE should be set when creating new route [ 465.491207][ T9032] Invalid ELF header magic: != ELF [ 466.000025][ T9040] loop9: detected capacity change from 0 to 512 [ 466.034526][ T9040] EXT4-fs: inline encryption not supported [ 466.041111][ T9040] EXT4-fs: Ignoring removed nobh option [ 466.099726][ T9040] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 466.112718][ T9040] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it [ 466.125043][ T9040] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.893: Corrupt directory, running e2fsck is recommended [ 466.179138][ T9040] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 466.247596][ T9040] EXT4-fs error (device loop9): ext4_iget_extra_inode:5104: inode #15: comm syz.9.893: corrupted in-inode xattr: invalid ea_ino [ 466.286471][ T11] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 466.298706][ T9040] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.893: couldn't read orphan inode 15 (err -117) [ 466.371931][ T9040] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.457242][ T9040] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 466.459379][ T11] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.469781][ T9040] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it [ 466.480815][ T11] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 466.491026][ T9040] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.893: Corrupt directory, running e2fsck is recommended [ 466.500423][ T11] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.583846][ T11] usb 8-1: config 0 descriptor?? [ 466.600837][ T9058] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 466.613040][ T9058] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it [ 466.623498][ T9058] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.893: Corrupt directory, running e2fsck is recommended [ 466.658190][ T9060] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 466.670399][ T9060] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it [ 466.680883][ T9060] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.893: Corrupt directory, running e2fsck is recommended [ 466.869065][ T9040] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 467.085525][ T11] keytouch 0003:0926:3333.000D: fixing up Keytouch IEC report descriptor [ 467.176022][ T11] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0926:3333.000D/input/input16 [ 467.276381][ T8255] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.406620][ T11] keytouch 0003:0926:3333.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0 [ 467.755235][ T11] usb 8-1: USB disconnect, device number 2 [ 468.631375][ T9088] Bluetooth: hci0: too big key_count value 34945 [ 468.911764][ T9095] netlink: 24 bytes leftover after parsing attributes in process `syz.9.915'. [ 469.189680][ T9099] netlink: 'syz.9.917': attribute type 39 has an invalid length. [ 469.220371][ T9099] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.393667][ T9099] bridge_slave_0 (unregistering): left allmulticast mode [ 469.406377][ T9099] bridge_slave_0 (unregistering): left promiscuous mode [ 469.413927][ T9099] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.287599][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 470.294548][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 470.336091][ T9108] loop8: detected capacity change from 0 to 32768 [ 470.345327][ T9108] BTRFS warning: excessive commit interval 2147483647, use with care [ 470.356493][ T9108] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.920 (9108) [ 470.375507][ T9108] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 470.386045][ T9108] BTRFS info (device loop8): using crc32c (crc32c-lib) checksum algorithm [ 470.396732][ T9108] BTRFS warning (device loop8): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 470.528209][ T9108] BTRFS info (device loop8): rebuilding free space tree [ 470.554826][ T9108] BTRFS info (device loop8): disabling free space tree [ 470.561981][ T9108] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 470.572520][ T9108] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 470.595607][ T9108] BTRFS info (device loop8): setting nodatasum [ 470.601977][ T9108] BTRFS info (device loop8): enabling ssd optimizations [ 470.609302][ T9108] BTRFS info (device loop8): turning off barriers [ 470.616394][ T9108] BTRFS info (device loop8): turning on flush-on-commit [ 470.625812][ T9108] BTRFS info (device loop8): enabling disk space caching [ 470.633096][ T9108] BTRFS info (device loop8): force clearing of disk cache [ 470.640389][ T9108] BTRFS info (device loop8): doing ref verification [ 470.647371][ T9108] BTRFS info (device loop8): max_inline set to 0 [ 470.673921][ T24] IPVS: starting estimator thread 0... [ 470.781992][ T9134] IPVS: using max 240 ests per chain, 12000 per kthread [ 470.859975][ T9136] loop7: detected capacity change from 0 to 512 [ 471.018682][ T9136] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 471.031790][ T9136] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 471.121340][ T8083] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 471.525627][ T7586] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 471.620449][ T9151] team_slave_0: entered promiscuous mode [ 471.626512][ T9151] team_slave_1: entered promiscuous mode [ 471.638480][ T9151] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 471.689899][ T9149] loop9: detected capacity change from 0 to 2048 [ 471.822821][ T9149] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 471.941798][ T9154] netlink: 8 bytes leftover after parsing attributes in process `syz.7.932'. [ 471.951436][ T9154] netlink: 12 bytes leftover after parsing attributes in process `syz.7.932'. [ 471.962593][ T9154] netlink: 'syz.7.932': attribute type 7 has an invalid length. [ 472.146190][ T9154] netlink: 8 bytes leftover after parsing attributes in process `syz.7.932'. [ 472.161075][ T9154] netlink: 12 bytes leftover after parsing attributes in process `syz.7.932'. [ 472.170886][ T9154] netlink: 'syz.7.932': attribute type 7 has an invalid length. [ 472.427393][ T5806] Bluetooth: hci0: command 0x0406 tx timeout [ 473.084940][ T24] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 473.298826][ T24] usb 10-1: Using ep0 maxpacket: 16 [ 473.352539][ T24] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 473.361552][ T24] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 473.372172][ T24] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 473.470122][ T24] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 473.481174][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.490474][ T24] usb 10-1: Product: syz [ 473.498063][ T24] usb 10-1: Manufacturer: syz [ 473.504223][ T24] usb 10-1: SerialNumber: syz [ 474.017902][ T24] usb 10-1: 0:2 : does not exist [ 474.772122][ T9189] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 474.785150][ T9189] bond0: (slave lo): Error: Device can not be enslaved while up [ 474.848773][ T5479] usb 10-1: USB disconnect, device number 3 [ 474.876751][ T2057] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 474.989465][ T9192] loop7: detected capacity change from 0 to 1024 [ 475.084808][ T2057] usb 9-1: Using ep0 maxpacket: 32 [ 475.110961][ T2057] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.123190][ T2057] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.135476][ T2057] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 475.145436][ T2057] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.188616][ T2057] usb 9-1: config 0 descriptor?? [ 475.200010][ T2057] hub 9-1:0.0: USB hub found [ 475.245759][ T3470] hfsplus: b-tree write err: -5, ino 8 [ 475.445776][ T2057] hub 9-1:0.0: 1 port detected [ 476.118735][ T2057] hub 9-1:0.0: activate --> -90 [ 476.378378][ T5479] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 476.693963][ T5479] usb 8-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 476.704544][ T5479] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.763567][ T5861] usb 9-1: USB disconnect, device number 3 [ 476.787309][ T2057] usb 9-1-port1: config error [ 476.841065][ T5479] usb 8-1: config 0 descriptor?? [ 477.173218][ T5479] kaweth 8-1:0.0: Firmware present in device. [ 477.387331][ T5479] kaweth 8-1:0.0: Statistics collection: 0 [ 477.393488][ T5479] kaweth 8-1:0.0: Multicast filter limit: 0 [ 477.399674][ T5479] kaweth 8-1:0.0: MTU: 0 [ 477.404406][ T5479] kaweth 8-1:0.0: Read MAC address 00:00:00:00:00:00 [ 478.009524][ T5479] kaweth 8-1:0.0: kaweth interface created at eth21 [ 478.207911][ T5479] usb 8-1: USB disconnect, device number 3 [ 478.970108][ T9237] netlink: 4 bytes leftover after parsing attributes in process `syz.8.967'. [ 479.418151][ T9243] loop9: detected capacity change from 0 to 1024 [ 479.524601][ T9243] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 479.539104][ T9243] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 479.623931][ T9249] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 479.660866][ T3490] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.817375][ T3490] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.952805][ T3490] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.957126][ T8255] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.044125][ T3490] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.269193][ T3490] bridge_slave_1: left allmulticast mode [ 480.275229][ T3490] bridge_slave_1: left promiscuous mode [ 480.281819][ T3490] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.729892][ T3490] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.747570][ T3490] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.771651][ T3490] bond0 (unregistering): Released all slaves [ 480.802578][ T3490] bond1 (unregistering): (slave vxcan1): Releasing backup interface [ 480.810785][ T3490] vxcan1: left promiscuous mode [ 480.838418][ T3490] bond1 (unregistering): Released all slaves [ 481.332637][ T3490] hsr_slave_0: left promiscuous mode [ 481.362668][ T3490] hsr_slave_1: left promiscuous mode [ 481.370343][ T3490] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 481.380186][ T3490] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 481.434280][ T3490] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 481.441851][ T3490] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 481.523333][ T3490] veth1_macvtap: left promiscuous mode [ 481.529056][ T3490] veth0_macvtap: left promiscuous mode [ 481.536715][ T3490] veth1_vlan: left promiscuous mode [ 481.542549][ T3490] veth0_vlan: left promiscuous mode [ 481.933622][ T5100] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 481.958515][ T5100] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 481.967698][ T5100] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 481.986231][ T5100] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 482.001139][ T5100] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 482.425376][ T3490] team0 (unregistering): Port device team_slave_1 removed [ 482.474861][ T3490] team0 (unregistering): Port device team_slave_0 removed [ 483.294683][ T9282] netlink: 16 bytes leftover after parsing attributes in process `syz.5.985'. [ 483.392939][ T9276] loop9: detected capacity change from 0 to 32768 [ 483.583563][ T9276] bcachefs (loop9): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 483.583689][ T9276] allowing incompatible features above 0.0: (unknown version) [ 483.583775][ T9276] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 483.623203][ T9276] bcachefs (loop9): Using encoding defined by superblock: utf8-12.1.0 [ 483.633357][ T9276] bcachefs (loop9): initializing new filesystem [ 483.650664][ T9276] bcachefs (loop9): going read-write [ 483.701355][ T9276] bcachefs (loop9): marking superblocks [ 483.750185][ T9276] bcachefs (loop9): initializing freespace [ 483.775566][ T9276] bcachefs (loop9): done initializing freespace [ 483.794392][ T9276] bcachefs (loop9): reading snapshots table [ 483.800641][ T9276] bcachefs (loop9): reading snapshots done [ 483.999099][ T9276] bcachefs (loop9): done starting filesystem [ 484.103193][ T5100] Bluetooth: hci3: command tx timeout [ 484.221560][ T9267] chnl_net:caif_netlink_parms(): no params data found [ 484.249012][ T8255] bcachefs (loop9): shutting down [ 484.254524][ T8255] bcachefs (loop9): going read-only [ 484.259909][ T8255] bcachefs (loop9): finished waiting for writes to stop [ 484.323266][ T8255] bcachefs (loop9): flushing journal and stopping allocators, journal seq 3 [ 484.340056][ T9302] netlink: 28 bytes leftover after parsing attributes in process `syz.7.989'. [ 484.354772][ T9302] netlink: 'syz.7.989': attribute type 7 has an invalid length. [ 484.364673][ T9302] netlink: 'syz.7.989': attribute type 8 has an invalid length. [ 484.373103][ T9302] netlink: 4 bytes leftover after parsing attributes in process `syz.7.989'. [ 484.397463][ T9302] erspan0: entered promiscuous mode [ 484.407709][ T9302] gretap0: entered promiscuous mode [ 484.453936][ T9302] erspan0: left promiscuous mode [ 484.467282][ T9302] gretap0: left promiscuous mode [ 484.503812][ T9305] netlink: 'syz.8.991': attribute type 13 has an invalid length. [ 484.524268][ T30] audit: type=1326 audit(1756056397.281:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9304 comm="syz.5.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86278ebe9 code=0x7ffc0000 [ 484.548681][ T30] audit: type=1326 audit(1756056397.281:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9304 comm="syz.5.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86278ebe9 code=0x7ffc0000 [ 484.610335][ T30] audit: type=1326 audit(1756056397.331:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9304 comm="syz.5.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb86278ebe9 code=0x7ffc0000 [ 484.660858][ T30] audit: type=1326 audit(1756056397.391:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9304 comm="syz.5.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb86272ade9 code=0x7ffc0000 [ 484.684187][ T30] audit: type=1326 audit(1756056397.391:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9304 comm="syz.5.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb86272ade9 code=0x7ffc0000 [ 484.707083][ T30] audit: type=1326 audit(1756056397.391:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9304 comm="syz.5.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86278ebe9 code=0x7ffc0000 [ 484.729586][ T30] audit: type=1326 audit(1756056397.391:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9304 comm="syz.5.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb86272ade9 code=0x7ffc0000 [ 484.752957][ T30] audit: type=1326 audit(1756056397.391:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9304 comm="syz.5.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb86272ade9 code=0x7ffc0000 [ 484.773516][ T8255] bcachefs (loop9): flushing journal and stopping allocators complete, journal seq 3 [ 484.776872][ T30] audit: type=1326 audit(1756056397.401:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9304 comm="syz.5.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb86272ade9 code=0x7ffc0000 [ 484.808026][ T30] audit: type=1326 audit(1756056397.401:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9304 comm="syz.5.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb86272ade9 code=0x7ffc0000 [ 484.850786][ T9305] gretap0: refused to change device tx_queue_len [ 484.870784][ T9305] net_ratelimit: 33 callbacks suppressed [ 484.870864][ T9305] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 484.996604][ T8255] bcachefs (loop9): clean shutdown complete, journal seq 4 [ 485.034717][ T8255] bcachefs (loop9): marking filesystem clean [ 485.129523][ T8255] bcachefs (loop9): shutdown complete [ 485.474524][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 485.486377][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 486.160715][ T9267] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.168466][ T9267] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.176362][ T9267] bridge_slave_0: entered allmulticast mode [ 486.185812][ T9267] bridge_slave_0: entered promiscuous mode [ 486.201254][ T5100] Bluetooth: hci3: command tx timeout [ 486.248684][ T9267] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.256566][ T9267] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.258758][ T9322] overlayfs: failed to resolve './file0': -2 [ 486.266516][ T9267] bridge_slave_1: entered allmulticast mode [ 486.279449][ T9267] bridge_slave_1: entered promiscuous mode [ 486.379975][ T9267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.408792][ T9267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.529538][ T9327] loop8: detected capacity change from 0 to 512 [ 486.591080][ T9267] team0: Port device team_slave_0 added [ 486.633668][ T9267] team0: Port device team_slave_1 added [ 486.635353][ T9327] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.999: bg 0: block 16: invalid block bitmap [ 486.720964][ T9267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.728467][ T9267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.755015][ T9327] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 486.756483][ T9327] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.999: attempt to clear invalid blocks 1669132790 len 1 [ 486.765205][ T9267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.786503][ T9267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.798724][ T9267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.829973][ T9267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.852802][ T9327] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.999: invalid indirect mapped block 4294967295 (level 1) [ 486.892913][ T9327] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.999: invalid indirect mapped block 4294967295 (level 2) [ 486.994431][ T9327] EXT4-fs (loop8): 1 truncate cleaned up [ 487.002484][ T9327] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 487.586376][ T9267] hsr_slave_0: entered promiscuous mode [ 487.597386][ T9267] hsr_slave_1: entered promiscuous mode [ 487.606325][ T9267] debugfs: 'hsr0' already exists in 'hsr' [ 487.612345][ T9267] Cannot create hsr debugfs directory [ 487.753542][ T8083] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.330254][ T5100] Bluetooth: hci3: command tx timeout [ 488.668141][ T9343] loop7: detected capacity change from 0 to 256 [ 489.296392][ T9355] netlink: 4 bytes leftover after parsing attributes in process `syz.9.990'. [ 489.547827][ T9267] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 489.658378][ T9267] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 489.703939][ T9267] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 489.783551][ T9267] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 489.831814][ T9363] syz_tun: entered allmulticast mode [ 489.907372][ T9359] syz_tun: left allmulticast mode [ 489.925416][ T9366] overlayfs: failed to clone upperpath [ 490.337365][ T9370] netlink: 'syz.8.1015': attribute type 1 has an invalid length. [ 490.347641][ T5100] Bluetooth: hci3: command tx timeout [ 490.414704][ T9370] 8021q: adding VLAN 0 to HW filter on device bond1 [ 490.526295][ T9377] bond1: (slave geneve2): making interface the new active one [ 490.540354][ T9377] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 490.760032][ T9267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.925658][ T9267] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.023352][ T5090] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.030814][ T5090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.143910][ T5090] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.151382][ T5090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.513244][ T5479] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 492.703476][ T5479] usb 10-1: Using ep0 maxpacket: 32 [ 492.785170][ T5479] usb 10-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 492.795157][ T5479] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.803743][ T5479] usb 10-1: Product: syz [ 492.808169][ T5479] usb 10-1: Manufacturer: syz [ 492.813204][ T5479] usb 10-1: SerialNumber: syz [ 492.914130][ T5479] usb 10-1: config 0 descriptor?? [ 492.937680][ T9409] loop8: detected capacity change from 0 to 256 [ 492.940759][ T5479] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 492.975140][ T9409] exfat: Deprecated parameter 'utf8' [ 493.076856][ T9267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 493.090202][ T9409] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 493.123291][ T30] kauditd_printk_skb: 90 callbacks suppressed [ 493.123418][ T30] audit: type=1326 audit(1756056405.871:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9410 comm="syz.7.1031" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7b3998ebe9 code=0x0 [ 493.486794][ T9267] veth0_vlan: entered promiscuous mode [ 493.544579][ T9267] veth1_vlan: entered promiscuous mode [ 493.811262][ T9267] veth0_macvtap: entered promiscuous mode [ 493.845362][ T5479] gspca_ov534_9: reg_w failed -71 [ 493.856045][ T4185] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.899785][ T9267] veth1_macvtap: entered promiscuous mode [ 493.961073][ T4185] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.056664][ T4185] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.136329][ T5479] gspca_ov534_9: Unknown sensor 0000 [ 494.136671][ T5479] ov534_9 10-1:0.0: probe with driver ov534_9 failed with error -22 [ 494.189167][ T5479] usb 10-1: USB disconnect, device number 4 [ 494.209013][ T4185] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.310860][ T9267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.388343][ T9267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.477105][ T3979] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.593911][ T3979] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.623461][ T3979] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.644660][ T3979] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.733567][ T4185] bridge_slave_1: left allmulticast mode [ 494.739408][ T4185] bridge_slave_1: left promiscuous mode [ 494.746269][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.794545][ T4185] bridge_slave_0: left allmulticast mode [ 494.800394][ T4185] bridge_slave_0: left promiscuous mode [ 494.807254][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.230357][ T4185] bond1 (unregistering): (slave geneve2): Releasing active interface [ 495.359928][ T4185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 495.377627][ T4185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 495.410483][ T4185] bond0 (unregistering): Released all slaves [ 495.433855][ T4185] bond1 (unregistering): Released all slaves [ 495.951554][ T9427] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1040'. [ 495.961814][ T9427] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1040'. [ 496.011769][ T4185] hsr_slave_0: left promiscuous mode [ 496.046036][ T4185] hsr_slave_1: left promiscuous mode [ 496.055685][ T4185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.063503][ T4185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.089378][ T4185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.097561][ T4185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.132995][ T4185] veth1_macvtap: left promiscuous mode [ 496.138711][ T4185] veth0_macvtap: left promiscuous mode [ 496.144840][ T4185] veth1_vlan: left promiscuous mode [ 496.150342][ T4185] veth0_vlan: left promiscuous mode [ 496.860798][ T4185] team0 (unregistering): Port device team_slave_1 removed [ 496.861678][ T5806] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 496.887273][ T4185] team0 (unregistering): Port device team_slave_0 removed [ 496.997643][ T5806] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 497.035362][ T5806] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 497.051771][ T5806] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 497.064833][ T5806] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 498.245233][ T9435] chnl_net:caif_netlink_parms(): no params data found [ 499.148745][ T5806] Bluetooth: hci2: command tx timeout [ 499.371810][ T9470] loop9: detected capacity change from 0 to 2048 [ 499.428913][ T9435] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.439409][ T9435] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.447262][ T9435] bridge_slave_0: entered allmulticast mode [ 499.456827][ T9435] bridge_slave_0: entered promiscuous mode [ 499.511145][ T9479] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 499.531260][ T9435] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.540055][ T9435] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.547857][ T9435] bridge_slave_1: entered allmulticast mode [ 499.557552][ T9435] bridge_slave_1: entered promiscuous mode [ 499.614382][ T9474] loop7: detected capacity change from 0 to 4096 [ 499.646564][ T30] audit: type=1800 audit(1756056412.391:121): pid=9470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1051" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 499.751766][ T9435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.780309][ T9435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.824312][ T9481] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 499.944527][ T9435] team0: Port device team_slave_0 added [ 499.974237][ T9435] team0: Port device team_slave_1 added [ 500.248833][ T9435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.256726][ T9435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.283770][ T9435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.366535][ T9435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.375881][ T9435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.402541][ T9435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.619480][ T9491] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1057'. [ 500.744835][ T9435] hsr_slave_0: entered promiscuous mode [ 500.754779][ T9435] hsr_slave_1: entered promiscuous mode [ 501.237212][ T5806] Bluetooth: hci2: command tx timeout [ 501.597320][ T3979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.606087][ T3979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.109159][ T3979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.117581][ T3979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.306559][ T9435] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 502.360864][ T9435] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 502.397215][ T9435] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 502.483575][ T9435] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 502.957055][ T9522] loop9: detected capacity change from 0 to 256 [ 503.303388][ T5806] Bluetooth: hci2: command tx timeout [ 503.345410][ T9435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.408855][ T9528] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1071'. [ 503.419115][ T9528] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1071'. [ 503.453295][ T3490] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.481435][ T9435] 8021q: adding VLAN 0 to HW filter on device team0 [ 503.509887][ T3490] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.537826][ T9528] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1071'. [ 503.542792][ T3470] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.550703][ T9528] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1071'. [ 503.554292][ T3470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 503.587077][ T78] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.626023][ T78] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.648078][ T3470] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.655616][ T3470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.383097][ T5806] Bluetooth: hci2: command tx timeout [ 505.383453][ T9435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 505.483003][ T9563] netlink: 'syz.5.1084': attribute type 21 has an invalid length. [ 505.494929][ T9563] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1084'. [ 505.508864][ T9563] netlink: 'syz.5.1084': attribute type 21 has an invalid length. [ 505.517177][ T9563] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1084'. [ 505.812280][ T9435] veth0_vlan: entered promiscuous mode [ 505.896963][ T9435] veth1_vlan: entered promiscuous mode [ 506.164342][ T9435] veth0_macvtap: entered promiscuous mode [ 506.200872][ T9435] veth1_macvtap: entered promiscuous mode [ 506.292147][ T9435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 506.351026][ T9435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 506.418725][ T78] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.459835][ T9576] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1090'. [ 506.462428][ T78] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.530504][ T78] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.561920][ T78] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.238933][ C1] vcan0: j1939_tp_rxtimer: 0xffff888026068600: rx timeout, send abort [ 507.252979][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888026068600: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 507.478969][ T9579] loop9: detected capacity change from 0 to 32768 [ 507.515061][ T9579] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 507.806053][ T9579] XFS (loop9): Ending clean mount [ 507.828843][ T9579] XFS (loop9): Quotacheck needed: Please wait. [ 507.904919][ T9579] XFS (loop9): Quotacheck: Done. [ 508.063349][ T8255] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 508.796672][ T9611] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1099'. [ 508.811052][ T9611] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1099'. [ 509.004193][ T9613] loop7: detected capacity change from 0 to 1024 [ 509.935531][ T9619] loop1: detected capacity change from 0 to 8192 [ 510.971963][ C1] vcan0: j1939_tp_rxtimer: 0xffff888050316400: rx timeout, send abort [ 511.480542][ C1] vcan0: j1939_tp_rxtimer: 0xffff888050316400: abort rx timeout. Force session deactivation [ 512.913587][ T4185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.923872][ T4185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.251076][ T9660] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1115'. [ 513.285679][ T9656] loop9: detected capacity change from 0 to 512 [ 513.293256][ T9660] veth1_macvtap: left promiscuous mode [ 513.315065][ T9656] EXT4-fs: Ignoring removed bh option [ 513.338306][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.346534][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.351973][ T9656] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 513.419862][ T9656] EXT4-fs (loop9): 1 truncate cleaned up [ 513.430857][ T9656] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.431118][ T9664] loop1: detected capacity change from 0 to 4096 [ 513.495552][ T9664] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 513.506411][ T9656] EXT4-fs error (device loop9): __ext4_iget:5464: inode #12: block 2: comm syz.9.1114: invalid block [ 513.533167][ T9656] EXT4-fs (loop9): Remounting filesystem read-only [ 513.582584][ T24] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 513.689035][ T9664] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 513.730052][ T9664] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 513.746695][ T8255] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.789117][ T24] usb 8-1: config 0 has no interfaces? [ 513.819833][ T24] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 513.830165][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.841020][ T24] usb 8-1: Product: syz [ 513.846226][ T24] usb 8-1: Manufacturer: syz [ 513.850997][ T24] usb 8-1: SerialNumber: syz [ 513.879846][ T9670] bridge_slave_0: left allmulticast mode [ 513.885892][ T9670] bridge_slave_0: left promiscuous mode [ 513.892588][ T9670] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.957759][ T9670] bridge_slave_1: left allmulticast mode [ 513.963878][ T9670] bridge_slave_1: left promiscuous mode [ 513.970414][ T9670] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.994768][ T24] usb 8-1: config 0 descriptor?? [ 514.104882][ T9670] bond0: (slave bond_slave_0): Releasing backup interface [ 514.168282][ T9670] bond0: (slave bond_slave_1): Releasing backup interface [ 514.260985][ T9670] team_slave_0: left promiscuous mode [ 514.278610][ T9670] team0: Port device team_slave_0 removed [ 514.302439][ T9670] team_slave_1: left promiscuous mode [ 514.319252][ T9670] team0: Port device team_slave_1 removed [ 514.332689][ T9670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 514.341503][ T9670] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.396984][ T9670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 514.405613][ T9670] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 514.495189][ T9670] batman_adv: batadv0: Interface deactivated: macsec1 [ 514.502152][ T9670] batman_adv: batadv0: Removing interface: macsec1 [ 514.613560][ T9670] bond1: (slave batadv1): Releasing active interface [ 514.728280][ T9658] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 514.739864][ T9658] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.893048][ T5479] usb 8-1: USB disconnect, device number 4 [ 515.140314][ T9680] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1121'. [ 515.236614][ T5479] IPVS: starting estimator thread 0... [ 515.266691][ T9684] tipc: Started in network mode [ 515.274640][ T9684] tipc: Node identity ac1414aa, cluster identity 4711 [ 515.285031][ T9684] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 515.292479][ T9684] tipc: Enabled bearer , priority 10 [ 515.345217][ T9687] IPVS: using max 240 ests per chain, 12000 per kthread [ 515.422653][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 515.563237][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 515.704040][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 515.842476][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 515.941540][ T9695] loop2: detected capacity change from 0 to 1024 [ 515.980765][ T9695] EXT4-fs: Ignoring removed nobh option [ 515.992447][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 516.115617][ T9695] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.132419][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 516.272436][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 516.413056][ T5479] tipc: Node number set to 2886997162 [ 516.423453][ T9695] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.1128: Allocating blocks 497-513 which overlap fs metadata [ 516.552508][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 516.802002][ T9435] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.822590][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 516.871275][ T5479] IPVS: starting estimator thread 0... [ 516.997969][ T9715] IPVS: using max 240 ests per chain, 12000 per kthread [ 517.321868][ T5479] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 517.533916][ T5479] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 517.545381][ T5479] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.555693][ T5479] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 517.565253][ T5479] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.666316][ T5479] usb 3-1: config 0 descriptor?? [ 517.944754][ T5479] usbhid 3-1:0.0: can't add hid device: -71 [ 517.951283][ T5479] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 518.010871][ T5479] usb 3-1: USB disconnect, device number 3 [ 518.576116][ T9742] loop9: detected capacity change from 0 to 512 [ 518.729472][ T9742] EXT4-fs error (device loop9): ext4_orphan_get:1392: inode #15: comm syz.9.1148: iget: bad extended attribute block 1 [ 518.783340][ T9739] loop7: detected capacity change from 0 to 32768 [ 518.792410][ T9739] btrfs: Deprecated parameter 'usebackuproot' [ 518.798676][ T9739] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 518.810959][ T9742] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.1148: couldn't read orphan inode 15 (err -117) [ 518.823983][ T9739] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1147 (9739) [ 518.840922][ T9742] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 518.873811][ T9739] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 518.884446][ T9739] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm [ 518.893487][ T9739] workqueue: max_active 65524 requested for btrfs-worker is out of range, clamping between 1 and 2048 [ 518.926832][ T9739] workqueue: max_active 65524 requested for btrfs-delalloc is out of range, clamping between 1 and 2048 [ 518.966014][ T9739] workqueue: max_active 65524 requested for btrfs-endio is out of range, clamping between 1 and 2048 [ 518.981516][ T9739] workqueue: max_active 65524 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048 [ 519.004122][ T9739] workqueue: max_active 65524 requested for btrfs-rmw is out of range, clamping between 1 and 2048 [ 519.033113][ T9739] workqueue: max_active 65524 requested for btrfs-endio-write is out of range, clamping between 1 and 2048 [ 519.051160][ T9739] workqueue: max_active 65524 requested for btrfs-compressed-write is out of range, clamping between 1 and 2048 [ 519.196096][ T8255] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.223081][ T9739] BTRFS info (device loop7): rebuilding free space tree [ 519.258657][ T9739] BTRFS info (device loop7): enabling ssd optimizations [ 519.269042][ T9739] BTRFS info (device loop7): using spread ssd allocation scheme [ 519.277668][ T9739] BTRFS info (device loop7): enabling free space tree [ 519.284755][ T9739] BTRFS info (device loop7): force clearing of disk cache [ 519.292050][ T9739] BTRFS info (device loop7): enabling auto defrag [ 519.298759][ T9739] BTRFS info (device loop7): doing ref verification [ 519.305694][ T9739] BTRFS info (device loop7): trying to use backup root at mount time [ 519.314124][ T9739] BTRFS info (device loop7): force lzo compression, level 0 [ 519.321629][ T9739] BTRFS info (device loop7): max_inline set to 4096 [ 520.259497][ T9768] loop1: detected capacity change from 0 to 40427 [ 520.502481][ C0] net_ratelimit: 4 callbacks suppressed [ 520.502555][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 520.958923][ T7586] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 521.542407][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 522.288290][ T30] audit: type=1326 audit(1756056435.037:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9779 comm="syz.1.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60dfb8ebe9 code=0x7fc00000 [ 522.582448][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 522.839448][ T30] audit: type=1326 audit(1756056435.567:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9779 comm="syz.1.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60dfb8ebe9 code=0x7fc00000 [ 523.620989][ T9800] input: syz1 as /devices/virtual/input/input17 [ 523.632373][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 524.155275][ T9794] loop7: detected capacity change from 0 to 40427 [ 524.171790][ T9794] F2FS-fs (loop7): invalid crc value [ 524.439880][ T9794] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 524.450464][ T9794] F2FS-fs (loop7): Start checkpoint disabled! [ 524.468501][ T9794] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 524.564312][ T30] audit: type=1804 audit(1756056437.317:124): pid=9794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1155" name="/newroot/145/file0/file0" dev="loop7" ino=10 res=1 errno=0 [ 524.655446][ T3470] kworker/u8:10: attempt to access beyond end of device [ 524.655446][ T3470] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 524.670422][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 524.682980][ T3470] CPU: 0 UID: 0 PID: 3470 Comm: kworker/u8:10 Tainted: G W syzkaller #0 PREEMPT(none) [ 524.683148][ T3470] Tainted: [W]=WARN [ 524.683194][ T3470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 524.683295][ T3470] Workqueue: writeback wb_workfn (flush-7:7) [ 524.683494][ T3470] Call Trace: [ 524.683538][ T3470] [ 524.683584][ T3470] __dump_stack+0x26/0x30 [ 524.683736][ T3470] dump_stack_lvl+0x1df/0x270 [ 524.683892][ T3470] dump_stack+0x1e/0x25 [ 524.684028][ T3470] f2fs_handle_critical_error+0xa6f/0xc20 [ 524.684230][ T3470] f2fs_stop_checkpoint+0x65/0x80 [ 524.684400][ T3470] f2fs_write_end_io+0x101c/0x1bc0 [ 524.684554][ T3470] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 524.684734][ T3470] bio_endio+0xde2/0xf30 [ 524.684864][ T3470] submit_bio_noacct+0x213/0x2750 [ 524.685043][ T3470] submit_bio+0x57c/0x630 [ 524.685181][ T3470] f2fs_submit_write_bio+0x92/0x250 [ 524.685338][ T3470] __submit_merged_bio+0x16f/0x6a0 [ 524.685493][ T3470] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 524.685650][ T3470] __submit_merged_write_cond+0x458/0x9a0 [ 524.685834][ T3470] f2fs_write_data_pages+0x4bb2/0x5480 [ 524.686116][ T3470] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 524.686298][ T3470] ? kmsan_get_metadata+0xfb/0x160 [ 524.686436][ T3470] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 524.686589][ T3470] ? __update_load_avg_cfs_rq+0xd7f/0x1010 [ 524.686767][ T3470] ? kmsan_get_metadata+0xfb/0x160 [ 524.686907][ T3470] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 524.687057][ T3470] ? kmsan_get_metadata+0xfb/0x160 [ 524.687195][ T3470] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 524.687339][ T3470] ? kmsan_get_metadata+0xfb/0x160 [ 524.687476][ T3470] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 524.687620][ T3470] ? kmsan_get_metadata+0xfb/0x160 [ 524.687763][ T3470] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 524.687906][ T3470] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 524.688072][ T3470] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 524.688236][ T3470] do_writepages+0x3ef/0x860 [ 524.688357][ T3470] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 524.688503][ T3470] ? __pfx_writeback_sb_inodes+0x1/0x10 [ 524.688626][ T3470] ? kmsan_get_metadata+0xfb/0x160 [ 524.688785][ T3470] __writeback_single_inode+0x101/0x1190 [ 524.688925][ T3470] ? kmsan_get_metadata+0xfb/0x160 [ 524.689081][ T3470] writeback_sb_inodes+0xac1/0x1cb0 [ 524.689287][ T3470] ? kmsan_get_metadata+0xfb/0x160 [ 524.689479][ T3470] wb_writeback+0x4ce/0xc00 [ 524.689627][ T3470] ? queue_io+0x491/0x790 [ 524.689770][ T3470] wb_workfn+0x397/0x1910 [ 524.689940][ T3470] ? kmsan_get_metadata+0xfb/0x160 [ 524.690111][ T3470] ? __pfx_wb_workfn+0x10/0x10 [ 524.690270][ T3470] process_scheduled_works+0xb8e/0x1d80 [ 524.690490][ T3470] worker_thread+0xedf/0x1590 [ 524.690705][ T3470] kthread+0xd59/0xf00 [ 524.690829][ T3470] ? __pfx_worker_thread+0x10/0x10 [ 524.691023][ T3470] ? __pfx_kthread+0x10/0x10 [ 524.691154][ T3470] ret_from_fork+0x1e3/0x310 [ 524.691287][ T3470] ? __pfx_kthread+0x10/0x10 [ 524.691418][ T3470] ret_from_fork_asm+0x1a/0x30 [ 524.691606][ T3470] [ 524.992606][ T3470] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 525.702442][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 526.742388][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 526.915066][ T9836] netlink: 'syz.2.1181': attribute type 3 has an invalid length. [ 527.211253][ T5479] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 527.402575][ T5479] usb 10-1: Using ep0 maxpacket: 32 [ 527.433410][ T5479] usb 10-1: config 0 has an invalid interface number: 132 but max is 0 [ 527.442030][ T5479] usb 10-1: config 0 has no interface number 0 [ 527.449617][ T5479] usb 10-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 527.499177][ T5479] usb 10-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 527.509378][ T5479] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.518041][ T5479] usb 10-1: Product: syz [ 527.522734][ T5479] usb 10-1: Manufacturer: syz [ 527.527568][ T5479] usb 10-1: SerialNumber: syz [ 527.600104][ T5479] usb 10-1: config 0 descriptor?? [ 527.622978][ T5479] em28xx 10-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 527.633268][ T5479] em28xx 10-1:0.132: Video interface 132 found: [ 527.673409][ T9848] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1173'. [ 527.762435][ T9848] vxlan2: entered promiscuous mode [ 527.792516][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 528.066498][ T5479] em28xx 10-1:0.132: unknown em28xx chip ID (0) [ 528.696065][ T5479] em28xx 10-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 528.705406][ T5479] em28xx 10-1:0.132: failed to read eeprom (err=-5) [ 528.712693][ T5479] em28xx 10-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 528.815338][ T5479] em28xx 10-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 528.823785][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 528.831195][ T5479] em28xx 10-1:0.132: analog set to bulk mode. [ 528.840494][ T2057] em28xx 10-1:0.132: Registering V4L2 extension [ 528.917674][ T5479] usb 10-1: USB disconnect, device number 5 [ 528.925420][ T5479] em28xx 10-1:0.132: Disconnecting em28xx [ 528.973170][ T5861] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 528.995709][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 529.153767][ T5861] usb 2-1: Using ep0 maxpacket: 32 [ 529.178279][ T5861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.190690][ T5861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.203543][ T5861] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 529.210499][ T24] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 529.213760][ T5861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.223292][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 529.273168][ T24] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 529.282869][ T24] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 529.292069][ T24] usb 3-1: Product: syz [ 529.296892][ T24] usb 3-1: Manufacturer: syz [ 529.303925][ T24] usb 3-1: SerialNumber: syz [ 529.320158][ T24] usb 3-1: config 0 descriptor?? [ 529.340627][ T24] usb 3-1: selecting invalid altsetting 0 [ 529.407016][ T5861] usb 2-1: config 0 descriptor?? [ 529.456162][ T5861] hub 2-1:0.0: USB hub found [ 529.613586][ T2057] em28xx 10-1:0.132: Config register raw data: 0xffffffed [ 529.621145][ T2057] em28xx 10-1:0.132: AC97 chip type couldn't be determined [ 529.632362][ T2057] em28xx 10-1:0.132: No AC97 audio processor [ 529.668353][ T5861] hub 2-1:0.0: 1 port detected [ 529.670287][ T24] usb 3-1: USB disconnect, device number 4 [ 529.685848][ T2057] usb 10-1: Decoder not found [ 529.690822][ T2057] em28xx 10-1:0.132: failed to create media graph [ 529.697900][ T2057] em28xx 10-1:0.132: V4L2 device video103 deregistered [ 529.777761][ T2057] em28xx 10-1:0.132: Remote control support is not available for this card. [ 529.817836][ T5479] em28xx 10-1:0.132: Closing input extension [ 529.870995][ T5479] em28xx 10-1:0.132: Freeing device [ 529.876619][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 530.339190][ T5861] hub 2-1:0.0: activate --> -90 [ 530.373333][ T9882] loop9: detected capacity change from 0 to 128 [ 530.553144][ T5861] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 530.561229][ T5479] usb 2-1: USB disconnect, device number 2 [ 530.574931][ T5861] usb 2-1: Failed to suspend device, error -19 [ 530.687524][ T9885] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1197'. [ 530.697185][ T9885] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1197'. [ 530.769317][ T9885] bond2: entered promiscuous mode [ 530.774782][ T9885] bond2: entered allmulticast mode [ 530.782015][ T9885] 8021q: adding VLAN 0 to HW filter on device bond2 [ 530.820505][ T3490] kworker/u8:11: attempt to access beyond end of device [ 530.820505][ T3490] loop9: rw=1, sector=145, nr_sectors = 16 limit=128 [ 530.838325][ T3490] kworker/u8:11: attempt to access beyond end of device [ 530.838325][ T3490] loop9: rw=1, sector=169, nr_sectors = 8 limit=128 [ 530.853366][ T3490] kworker/u8:11: attempt to access beyond end of device [ 530.853366][ T3490] loop9: rw=1, sector=185, nr_sectors = 8 limit=128 [ 530.867412][ T3490] kworker/u8:11: attempt to access beyond end of device [ 530.867412][ T3490] loop9: rw=1, sector=201, nr_sectors = 8 limit=128 [ 530.881320][ T3490] kworker/u8:11: attempt to access beyond end of device [ 530.881320][ T3490] loop9: rw=1, sector=217, nr_sectors = 8 limit=128 [ 530.895302][ T3490] kworker/u8:11: attempt to access beyond end of device [ 530.895302][ T3490] loop9: rw=1, sector=233, nr_sectors = 8 limit=128 [ 530.909060][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 530.916705][ T3490] kworker/u8:11: attempt to access beyond end of device [ 530.916705][ T3490] loop9: rw=1, sector=249, nr_sectors = 8 limit=128 [ 530.931643][ T3490] kworker/u8:11: attempt to access beyond end of device [ 530.931643][ T3490] loop9: rw=1, sector=265, nr_sectors = 8 limit=128 [ 530.948266][ T3490] kworker/u8:11: attempt to access beyond end of device [ 530.948266][ T3490] loop9: rw=1, sector=281, nr_sectors = 8 limit=128 [ 531.079432][ T3490] kworker/u8:11: attempt to access beyond end of device [ 531.079432][ T3490] loop9: rw=1, sector=297, nr_sectors = 8 limit=128 [ 531.097772][ T9890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1200'. [ 531.109630][ T9890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1200'. [ 531.729702][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 531.736865][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 531.942377][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 532.523124][ T9904] loop9: detected capacity change from 0 to 32768 [ 532.623148][ T9904] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 532.859006][ T9904] XFS (loop9): Ending clean mount [ 532.876133][ T9904] XFS (loop9): Quotacheck needed: Please wait. [ 532.966528][ T9904] XFS (loop9): Quotacheck: Done. [ 532.974554][ T9907] loop1: detected capacity change from 0 to 40427 [ 532.985556][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 533.003644][ T9907] F2FS-fs (loop1): invalid crc value [ 533.364562][ T9907] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 533.379494][ T8255] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 533.389593][ T9907] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 533.507170][ T9267] CPU: 0 UID: 0 PID: 9267 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(none) [ 533.507340][ T9267] Tainted: [W]=WARN [ 533.507389][ T9267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 533.507463][ T9267] Call Trace: [ 533.507509][ T9267] [ 533.507556][ T9267] __dump_stack+0x26/0x30 [ 533.507719][ T9267] dump_stack_lvl+0x1df/0x270 [ 533.507881][ T9267] dump_stack+0x1e/0x25 [ 533.508027][ T9267] f2fs_handle_critical_error+0xa6f/0xc20 [ 533.508246][ T9267] f2fs_stop_checkpoint+0x65/0x80 [ 533.508422][ T9267] f2fs_write_end_io+0x101c/0x1bc0 [ 533.508584][ T9267] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 533.508770][ T9267] bio_endio+0xde2/0xf30 [ 533.508910][ T9267] submit_bio_noacct+0x213/0x2750 [ 533.509099][ T9267] submit_bio+0x57c/0x630 [ 533.509249][ T9267] f2fs_submit_write_bio+0x92/0x250 [ 533.509420][ T9267] __submit_merged_bio+0x16f/0x6a0 [ 533.509585][ T9267] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 533.509751][ T9267] __submit_merged_write_cond+0x458/0x9a0 [ 533.509940][ T9267] f2fs_write_data_pages+0x4bb2/0x5480 [ 533.510251][ T9267] ? trace_pid_list_set+0x3f0/0x730 [ 533.510428][ T9267] ? __update_load_avg_cfs_rq+0xe9/0x1010 [ 533.510613][ T9267] ? __update_load_avg_se+0xa96/0x11c0 [ 533.510796][ T9267] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 533.510955][ T9267] ? kmsan_get_metadata+0xfb/0x160 [ 533.511097][ T9267] ? kmsan_get_metadata+0xfb/0x160 [ 533.511264][ T9267] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 533.511409][ T9267] ? kmsan_get_metadata+0xfb/0x160 [ 533.511556][ T9267] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 533.511707][ T9267] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 533.511883][ T9267] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 533.512049][ T9267] do_writepages+0x3ef/0x860 [ 533.512198][ T9267] ? _raw_spin_unlock+0x30/0x50 [ 533.512320][ T9267] ? wbc_attach_and_unlock_inode+0x131/0x680 [ 533.512516][ T9267] filemap_fdatawrite+0x207/0x260 [ 533.512738][ T9267] f2fs_sync_dirty_inodes+0x2ab/0x9e0 [ 533.512893][ T9267] f2fs_write_checkpoint+0xfe2/0x2b00 [ 533.513145][ T9267] kill_f2fs_super+0x2ff/0x970 [ 533.513294][ T9267] ? __pfx_kill_f2fs_super+0x10/0x10 [ 533.513428][ T9267] deactivate_locked_super+0xcb/0x3c0 [ 533.513585][ T9267] deactivate_super+0x12f/0x140 [ 533.513726][ T9267] cleanup_mnt+0x6fb/0x780 [ 533.513892][ T9267] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 533.514042][ T9267] ? __pfx___cleanup_mnt+0x10/0x10 [ 533.514221][ T9267] __cleanup_mnt+0x22/0x30 [ 533.514384][ T9267] task_work_run+0x206/0x2b0 [ 533.514548][ T9267] exit_to_user_mode_loop+0x2a6/0x330 [ 533.514702][ T9267] do_syscall_64+0x1e3/0x210 [ 533.514865][ T9267] ? irqentry_exit+0x16/0x60 [ 533.515004][ T9267] ? clear_bhb_loop+0x40/0x90 [ 533.515159][ T9267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.515297][ T9267] RIP: 0033:0x7f60dfb8ff17 [ 533.515394][ T9267] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 533.515517][ T9267] RSP: 002b:00007fff9d9dc3e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 533.515640][ T9267] RAX: 0000000000000000 RBX: 00007f60dfc11c05 RCX: 00007f60dfb8ff17 [ 533.515728][ T9267] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff9d9dc4a0 [ 533.515813][ T9267] RBP: 00007fff9d9dc4a0 R08: 0000000000000000 R09: 0000000000000000 [ 533.515910][ T9267] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff9d9dd530 [ 533.515996][ T9267] R13: 00007f60dfc11c05 R14: 000000000008239f R15: 00007fff9d9dd570 [ 533.516117][ T9267] [ 533.876585][ T9267] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 534.022373][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 534.469873][ T9927] loop7: detected capacity change from 0 to 40427 [ 534.565475][ T5100] Bluetooth: hci1: command 0x0406 tx timeout [ 534.618688][ T9927] F2FS-fs (loop7): invalid crc value [ 534.928981][ T9927] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 534.947852][ T9927] F2FS-fs (loop7): Start checkpoint disabled! [ 534.970634][ T9927] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 535.062399][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 535.165563][ T5090] CPU: 1 UID: 0 PID: 5090 Comm: kworker/u8:19 Tainted: G W syzkaller #0 PREEMPT(none) [ 535.165733][ T5090] Tainted: [W]=WARN [ 535.165783][ T5090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 535.165886][ T5090] Workqueue: writeback wb_workfn (flush-7:7) [ 535.166105][ T5090] Call Trace: [ 535.166152][ T5090] [ 535.166202][ T5090] __dump_stack+0x26/0x30 [ 535.166359][ T5090] dump_stack_lvl+0x1df/0x270 [ 535.166527][ T5090] dump_stack+0x1e/0x25 [ 535.166672][ T5090] f2fs_handle_critical_error+0xa6f/0xc20 [ 535.166887][ T5090] f2fs_stop_checkpoint+0x65/0x80 [ 535.167072][ T5090] f2fs_write_end_io+0x101c/0x1bc0 [ 535.167237][ T5090] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 535.167424][ T5090] bio_endio+0xde2/0xf30 [ 535.167561][ T5090] submit_bio_noacct+0x213/0x2750 [ 535.167751][ T5090] submit_bio+0x57c/0x630 [ 535.167896][ T5090] f2fs_submit_write_bio+0x92/0x250 [ 535.168072][ T5090] __submit_merged_bio+0x16f/0x6a0 [ 535.168236][ T5090] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 535.168401][ T5090] __submit_merged_write_cond+0x458/0x9a0 [ 535.168592][ T5090] f2fs_write_data_pages+0x4bb2/0x5480 [ 535.168851][ T5090] ? kmsan_get_metadata+0xfb/0x160 [ 535.169031][ T5090] ? kmsan_get_metadata+0xfb/0x160 [ 535.169184][ T5090] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 535.169335][ T5090] ? kmsan_get_metadata+0xfb/0x160 [ 535.169479][ T5090] ? kmsan_get_metadata+0xfb/0x160 [ 535.169626][ T5090] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 535.169784][ T5090] ? kmsan_get_metadata+0xfb/0x160 [ 535.169932][ T5090] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 535.170087][ T5090] ? kmsan_get_metadata+0xfb/0x160 [ 535.170239][ T5090] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 535.170388][ T5090] ? kmsan_get_metadata+0xfb/0x160 [ 535.170533][ T5090] ? kmsan_get_metadata+0xfb/0x160 [ 535.170676][ T5090] ? kmsan_get_metadata+0xfb/0x160 [ 535.170821][ T5090] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 535.170975][ T5090] ? kmsan_get_metadata+0xfb/0x160 [ 535.171127][ T5090] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 535.171278][ T5090] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 535.171459][ T5090] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 535.171638][ T5090] do_writepages+0x3ef/0x860 [ 535.171773][ T5090] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 535.171934][ T5090] ? __pfx_writeback_sb_inodes+0x1/0x10 [ 535.172076][ T5090] ? kmsan_get_metadata+0xfb/0x160 [ 535.172236][ T5090] __writeback_single_inode+0x101/0x1190 [ 535.172381][ T5090] ? kmsan_get_metadata+0xfb/0x160 [ 535.172543][ T5090] writeback_sb_inodes+0xac1/0x1cb0 [ 535.172767][ T5090] ? kmsan_get_metadata+0xfb/0x160 [ 535.172958][ T5090] wb_writeback+0x4ce/0xc00 [ 535.173115][ T5090] ? queue_io+0x491/0x790 [ 535.173257][ T5090] wb_workfn+0x397/0x1910 [ 535.173438][ T5090] ? kmsan_get_metadata+0xfb/0x160 [ 535.173611][ T5090] ? __pfx_wb_workfn+0x10/0x10 [ 535.173780][ T5090] process_scheduled_works+0xb8e/0x1d80 [ 535.174013][ T5090] worker_thread+0xedf/0x1590 [ 535.174230][ T5090] kthread+0xd59/0xf00 [ 535.174356][ T5090] ? __pfx_worker_thread+0x10/0x10 [ 535.174550][ T5090] ? __pfx_kthread+0x10/0x10 [ 535.174684][ T5090] ret_from_fork+0x1e3/0x310 [ 535.174815][ T5090] ? __pfx_kthread+0x10/0x10 [ 535.174947][ T5090] ret_from_fork_asm+0x1a/0x30 [ 535.175151][ T5090] [ 535.499167][ T5090] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 535.507547][ T5090] CPU: 1 UID: 0 PID: 5090 Comm: kworker/u8:19 Tainted: G W syzkaller #0 PREEMPT(none) [ 535.507717][ T5090] Tainted: [W]=WARN [ 535.507764][ T5090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 535.507868][ T5090] Workqueue: writeback wb_workfn (flush-7:7) [ 535.508085][ T5090] Call Trace: [ 535.508133][ T5090] [ 535.508185][ T5090] __dump_stack+0x26/0x30 [ 535.508340][ T5090] dump_stack_lvl+0x1df/0x270 [ 535.508509][ T5090] dump_stack+0x1e/0x25 [ 535.508654][ T5090] f2fs_handle_critical_error+0xa6f/0xc20 [ 535.508870][ T5090] f2fs_stop_checkpoint+0x65/0x80 [ 535.509056][ T5090] f2fs_write_end_io+0x101c/0x1bc0 [ 535.509217][ T5090] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 535.509403][ T5090] bio_endio+0xde2/0xf30 [ 535.509541][ T5090] submit_bio_noacct+0x213/0x2750 [ 535.509732][ T5090] submit_bio+0x57c/0x630 [ 535.509875][ T5090] f2fs_submit_write_bio+0x92/0x250 [ 535.510053][ T5090] __submit_merged_bio+0x16f/0x6a0 [ 535.510222][ T5090] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 535.510386][ T5090] __submit_merged_write_cond+0x458/0x9a0 [ 535.510577][ T5090] f2fs_write_data_pages+0x4bb2/0x5480 [ 535.510836][ T5090] ? kmsan_get_metadata+0xfb/0x160 [ 535.511021][ T5090] ? kmsan_get_metadata+0xfb/0x160 [ 535.511168][ T5090] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 535.511321][ T5090] ? kmsan_get_metadata+0xfb/0x160 [ 535.511464][ T5090] ? kmsan_get_metadata+0xfb/0x160 [ 535.511613][ T5090] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 535.511769][ T5090] ? kmsan_get_metadata+0xfb/0x160 [ 535.511917][ T5090] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 535.512074][ T5090] ? kmsan_get_metadata+0xfb/0x160 [ 535.512219][ T5090] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 535.512367][ T5090] ? kmsan_get_metadata+0xfb/0x160 [ 535.512503][ T5090] ? kmsan_get_metadata+0xfb/0x160 [ 535.512643][ T5090] ? kmsan_get_metadata+0xfb/0x160 [ 535.512805][ T5090] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 535.512971][ T5090] ? kmsan_get_metadata+0xfb/0x160 [ 535.513125][ T5090] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 535.513272][ T5090] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 535.513455][ T5090] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 535.513631][ T5090] do_writepages+0x3ef/0x860 [ 535.513761][ T5090] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 535.513920][ T5090] ? __pfx_writeback_sb_inodes+0x1/0x10 [ 535.514069][ T5090] ? kmsan_get_metadata+0xfb/0x160 [ 535.514237][ T5090] __writeback_single_inode+0x101/0x1190 [ 535.514384][ T5090] ? kmsan_get_metadata+0xfb/0x160 [ 535.514548][ T5090] writeback_sb_inodes+0xac1/0x1cb0 [ 535.514769][ T5090] ? kmsan_get_metadata+0xfb/0x160 [ 535.514959][ T5090] wb_writeback+0x4ce/0xc00 [ 535.515114][ T5090] ? queue_io+0x491/0x790 [ 535.515254][ T5090] wb_workfn+0x397/0x1910 [ 535.515426][ T5090] ? kmsan_get_metadata+0xfb/0x160 [ 535.515598][ T5090] ? __pfx_wb_workfn+0x10/0x10 [ 535.515780][ T5090] process_scheduled_works+0xb8e/0x1d80 [ 535.516024][ T5090] worker_thread+0xedf/0x1590 [ 535.516233][ T5090] kthread+0xd59/0xf00 [ 535.516358][ T5090] ? __pfx_worker_thread+0x10/0x10 [ 535.516555][ T5090] ? __pfx_kthread+0x10/0x10 [ 535.516687][ T5090] ret_from_fork+0x1e3/0x310 [ 535.516818][ T5090] ? __pfx_kthread+0x10/0x10 [ 535.516949][ T5090] ret_from_fork_asm+0x1a/0x30 [ 535.517149][ T5090] [ 535.841680][ T5090] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 536.102399][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 536.531966][ T9938] loop9: detected capacity change from 0 to 2048 [ 536.641584][ T9938] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 537.152419][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 538.182388][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 538.449084][ T9951] loop7: detected capacity change from 0 to 32768 [ 538.801213][ T9958] batadv_slave_0: entered promiscuous mode [ 538.832733][ T9957] batadv_slave_0: left promiscuous mode [ 539.225804][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 539.291232][ T9968] netlink: 'syz.1.1228': attribute type 10 has an invalid length. [ 539.317874][ T9968] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.337283][ T9968] bond0: (slave team0): Enslaving as an active interface with an up link [ 539.489866][ T9968] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 539.527087][ T9968] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 540.262401][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 541.302486][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 542.342394][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 542.717783][ T9993] loop7: detected capacity change from 0 to 32768 [ 542.726785][ T9993] btrfs: Deprecated parameter 'usebackuproot' [ 542.733238][ T9993] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 542.754807][ T9993] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1235 (9993) [ 542.777728][ T9993] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 542.788299][ T9993] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm [ 542.797390][ T9993] workqueue: max_active 40574 requested for btrfs-worker is out of range, clamping between 1 and 2048 [ 542.830128][ T9993] workqueue: max_active 40574 requested for btrfs-delalloc is out of range, clamping between 1 and 2048 [ 543.168327][ T5479] usb 10-1: new low-speed USB device number 6 using dummy_hcd [ 543.368639][ T5479] usb 10-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 543.378648][ T5479] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.387200][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 543.411427][ T5479] usb 10-1: config 0 descriptor?? [ 543.684666][T10008] loop1: detected capacity change from 0 to 32768 [ 543.754485][ T9993] workqueue: max_active 40574 requested for btrfs-endio is out of range, clamping between 1 and 2048 [ 543.810419][ T9993] workqueue: max_active 40574 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048 [ 543.849826][ T9993] workqueue: max_active 40574 requested for btrfs-rmw is out of range, clamping between 1 and 2048 [ 543.880152][ T9993] workqueue: max_active 40574 requested for btrfs-endio-write is out of range, clamping between 1 and 2048 [ 543.929123][T10008] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 543.929249][T10008] allowing incompatible features above 0.0: (unknown version) [ 543.929334][T10008] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 543.972560][T10008] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 543.980939][T10008] bcachefs (loop1): initializing new filesystem [ 543.998746][T10008] bcachefs (loop1): going read-write [ 544.008583][ T9993] workqueue: max_active 40574 requested for btrfs-compressed-write is out of range, clamping between 1 and 2048 [ 544.031419][T10008] bcachefs (loop1): marking superblocks [ 544.083633][T10008] bcachefs (loop1): initializing freespace [ 544.110240][T10008] bcachefs (loop1): done initializing freespace [ 544.129937][T10008] bcachefs (loop1): reading snapshots table [ 544.136454][T10008] bcachefs (loop1): reading snapshots done [ 544.277864][T10008] bcachefs (loop1): done starting filesystem [ 544.281418][ T9993] BTRFS info (device loop7): rebuilding free space tree [ 544.349236][ T9993] BTRFS info (device loop7): enabling ssd optimizations [ 544.359975][ T9993] BTRFS info (device loop7): enabling free space tree [ 544.367791][ T9993] BTRFS info (device loop7): force clearing of disk cache [ 544.375403][ T9993] BTRFS info (device loop7): doing ref verification [ 544.382446][ T9993] BTRFS info (device loop7): trying to use backup root at mount time [ 544.390818][ T9993] BTRFS info (device loop7): max_inline set to 77 [ 544.422366][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 544.468035][T10008] bcachefs (loop1): going read-only [ 544.474686][T10008] bcachefs (loop1): finished waiting for writes to stop [ 544.508057][T10008] bcachefs (loop1): flushing journal and stopping allocators, journal seq 2 [ 544.769547][T10008] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 2 [ 544.809277][T10008] bcachefs (loop1): clean shutdown complete, journal seq 3 [ 544.820615][T10008] bcachefs (loop1): marking filesystem clean [ 544.851377][ T5479] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 544.867231][ T5479] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 544.879828][ T5479] asix 10-1:0.0: probe with driver asix failed with error -71 [ 545.121758][ T7586] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 545.149671][ T5479] usb 10-1: USB disconnect, device number 6 [ 545.336293][ T9267] bcachefs (loop1): shutting down [ 545.462391][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 545.516765][ T9267] bcachefs (loop1): shutdown complete [ 546.512381][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 546.778093][T10044] loop9: detected capacity change from 0 to 32768 [ 547.500886][T10044] bcachefs (loop9): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow [ 547.501051][T10044] allowing incompatible features above 0.0: (unknown version) [ 547.501140][T10044] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 547.551660][T10044] bcachefs (loop9): Using encoding defined by superblock: utf8-12.1.0 [ 547.552399][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 547.560142][T10044] bcachefs (loop9): initializing new filesystem [ 547.586428][T10044] bcachefs (loop9): going read-write [ 547.624798][T10044] bcachefs (loop9): marking superblocks [ 547.676026][T10044] bcachefs (loop9): initializing freespace [ 547.701296][T10044] bcachefs (loop9): done initializing freespace [ 547.720012][T10044] bcachefs (loop9): reading snapshots table [ 547.727459][T10044] bcachefs (loop9): reading snapshots done [ 547.842674][T10044] bcachefs (loop9): done starting filesystem [ 548.057919][ T8255] bcachefs (loop9): shutting down [ 548.063295][ T8255] bcachefs (loop9): going read-only [ 548.104138][ T8255] bcachefs (loop9): finished waiting for writes to stop [ 548.172903][ T8255] bcachefs (loop9): flushing journal and stopping allocators, journal seq 8 [ 548.528614][ T8255] bcachefs (loop9): flushing journal and stopping allocators complete, journal seq 12 [ 548.582385][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 548.583081][ T8255] bcachefs (loop9): clean shutdown complete, journal seq 13 [ 548.640596][ T8255] bcachefs (loop9): marking filesystem clean [ 548.783364][ T8255] bcachefs (loop9): shutdown complete [ 549.158977][T10072] input: syz1 as /devices/virtual/input/input18 [ 549.623155][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 550.385303][T10088] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1265'. [ 550.662388][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 551.702430][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 552.526114][T10097] loop1: detected capacity change from 0 to 40427 [ 552.559050][T10097] F2FS-fs (loop1): invalid crc value [ 552.742357][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 552.819375][T10097] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 552.830631][T10097] F2FS-fs (loop1): Start checkpoint disabled! [ 552.853230][T10097] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 552.971733][ T4185] bio_check_eod: 2 callbacks suppressed [ 552.971812][ T4185] kworker/u8:18: attempt to access beyond end of device [ 552.971812][ T4185] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 552.996119][ T4185] CPU: 1 UID: 0 PID: 4185 Comm: kworker/u8:18 Tainted: G W syzkaller #0 PREEMPT(none) [ 552.996288][ T4185] Tainted: [W]=WARN [ 552.996336][ T4185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 552.996434][ T4185] Workqueue: writeback wb_workfn (flush-7:1) [ 552.996645][ T4185] Call Trace: [ 552.996693][ T4185] [ 552.996742][ T4185] __dump_stack+0x26/0x30 [ 552.996902][ T4185] dump_stack_lvl+0x1df/0x270 [ 552.997070][ T4185] dump_stack+0x1e/0x25 [ 552.997214][ T4185] f2fs_handle_critical_error+0xa6f/0xc20 [ 552.997433][ T4185] f2fs_stop_checkpoint+0x65/0x80 [ 552.997616][ T4185] f2fs_write_end_io+0x101c/0x1bc0 [ 552.997779][ T4185] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 552.997961][ T4185] bio_endio+0xde2/0xf30 [ 552.998100][ T4185] submit_bio_noacct+0x213/0x2750 [ 552.998291][ T4185] submit_bio+0x57c/0x630 [ 552.998439][ T4185] f2fs_submit_write_bio+0x92/0x250 [ 552.998617][ T4185] __submit_merged_bio+0x16f/0x6a0 [ 552.998784][ T4185] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 552.998950][ T4185] __submit_merged_write_cond+0x458/0x9a0 [ 552.999144][ T4185] f2fs_write_data_pages+0x4bb2/0x5480 [ 552.999403][ T4185] ? kmsan_get_metadata+0xfb/0x160 [ 552.999586][ T4185] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 552.999739][ T4185] ? trace_pid_list_set+0x3f0/0x730 [ 552.999908][ T4185] ? kmsan_get_metadata+0xfb/0x160 [ 553.000055][ T4185] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 553.000207][ T4185] ? kmsan_get_metadata+0xfb/0x160 [ 553.000355][ T4185] ? kmsan_get_metadata+0xfb/0x160 [ 553.000509][ T4185] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 553.000665][ T4185] ? kmsan_get_metadata+0xfb/0x160 [ 553.000812][ T4185] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 553.000964][ T4185] ? kmsan_get_metadata+0xfb/0x160 [ 553.001113][ T4185] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 553.001268][ T4185] ? kmsan_get_metadata+0xfb/0x160 [ 553.001414][ T4185] ? kmsan_get_metadata+0xfb/0x160 [ 553.001568][ T4185] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 553.001722][ T4185] ? kmsan_get_metadata+0xfb/0x160 [ 553.001871][ T4185] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 553.002023][ T4185] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 553.002202][ T4185] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 553.002368][ T4185] do_writepages+0x3ef/0x860 [ 553.002504][ T4185] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 553.002658][ T4185] ? __pfx_writeback_sb_inodes+0x1/0x10 [ 553.002788][ T4185] ? kmsan_get_metadata+0xfb/0x160 [ 553.002951][ T4185] __writeback_single_inode+0x101/0x1190 [ 553.003097][ T4185] ? kmsan_get_metadata+0xfb/0x160 [ 553.003258][ T4185] writeback_sb_inodes+0xac1/0x1cb0 [ 553.003491][ T4185] ? kmsan_get_metadata+0xfb/0x160 [ 553.003686][ T4185] wb_writeback+0x4ce/0xc00 [ 553.003834][ T4185] ? queue_io+0x491/0x790 [ 553.003975][ T4185] wb_workfn+0x397/0x1910 [ 553.004146][ T4185] ? kmsan_get_metadata+0xfb/0x160 [ 553.004319][ T4185] ? __pfx_wb_workfn+0x10/0x10 [ 553.004491][ T4185] process_scheduled_works+0xb8e/0x1d80 [ 553.004730][ T4185] worker_thread+0xedf/0x1590 [ 553.004942][ T4185] kthread+0xd59/0xf00 [ 553.005069][ T4185] ? __pfx_worker_thread+0x10/0x10 [ 553.005266][ T4185] ? __pfx_kthread+0x10/0x10 [ 553.005399][ T4185] ret_from_fork+0x1e3/0x310 [ 553.005534][ T4185] ? __pfx_kthread+0x10/0x10 [ 553.005666][ T4185] ret_from_fork_asm+0x1a/0x30 [ 553.005862][ T4185] [ 553.063626][ T5479] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 553.073955][ T4185] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 553.343634][ T5479] usb 8-1: Using ep0 maxpacket: 32 [ 553.738280][ T5479] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 553.747064][ T5479] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 553.756370][ T5479] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 553.766532][ T5479] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 553.779716][ T5479] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 553.789752][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 553.797190][ T5479] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 553.810580][ T5479] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 553.820100][ T5479] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.837087][ T5479] usb 8-1: config 0 descriptor?? [ 554.074892][ T5479] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 554.277141][ T5479] usb 8-1: USB disconnect, device number 5 [ 554.323479][ T5479] usblp0: removed [ 554.822484][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 555.354612][T10121] loop9: detected capacity change from 0 to 32768 [ 555.862400][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 556.721873][T10145] loop1: detected capacity change from 0 to 128 [ 556.732092][T10144] loop7: detected capacity change from 0 to 736 [ 556.902411][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 556.917120][T10145] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 557.036390][T10145] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 557.601464][T10141] overlayfs: failed to clone lowerpath [ 557.635344][ T9267] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 557.943339][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 558.172907][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 558.262527][ T5854] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 558.366914][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 558.421865][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 558.433583][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 558.443922][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 558.454045][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 558.465757][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 558.477002][ T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 558.488833][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.563596][ T5854] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 558.575190][ T5854] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 558.589040][ T5854] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 558.599798][ T5854] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.831279][ T5854] usb 3-1: config 0 descriptor?? [ 558.922759][T10167] loop9: detected capacity change from 0 to 32768 [ 558.934299][T10167] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.1296 (10167) [ 558.954555][T10167] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 558.965142][T10167] BTRFS info (device loop9): using crc32c (crc32c-lib) checksum algorithm [ 558.974132][T10167] BTRFS warning (device loop9): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 558.988482][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 559.016632][ T24] usb 2-1: config 0 descriptor?? [ 559.027274][T10160] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 559.110921][T10174] netlink: 136 bytes leftover after parsing attributes in process `syz.7.1299'. [ 559.120308][T10174] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 559.227353][T10167] BTRFS info (device loop9): rebuilding free space tree [ 559.254636][ T24] usb 2-1: USB disconnect, device number 3 [ 559.272673][ T5100] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 559.281378][ T5854] cm6533_jd 0003:0D8C:0022.000E: unknown main item tag 0x0 [ 559.283966][T10167] BTRFS info (device loop9): disabling free space tree [ 559.289226][ T5854] cm6533_jd 0003:0D8C:0022.000E: unknown main item tag 0x0 [ 559.298087][T10167] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 559.318204][T10167] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 559.341951][T10167] BTRFS info (device loop9): enabling ssd optimizations [ 559.349322][T10167] BTRFS info (device loop9): turning off barriers [ 559.356505][T10167] BTRFS info (device loop9): disabling tree log [ 559.363014][T10167] BTRFS info (device loop9): turning on flush-on-commit [ 559.370141][T10167] BTRFS info (device loop9): enabling disk space caching [ 559.377672][T10167] BTRFS info (device loop9): force clearing of disk cache [ 559.385154][T10167] BTRFS info (device loop9): doing ref verification [ 559.391923][T10167] BTRFS info (device loop9): use lzo compression, level 0 [ 559.480961][ T5854] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.000E/input/input19 [ 559.501041][T10164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.513438][T10164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.548381][T10167] fs-verity (loop9, inode 258): Unknown hash algorithm number: 60 [ 559.574751][ T5854] cm6533_jd 0003:0D8C:0022.000E: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 559.604520][ T5854] usb 3-1: USB disconnect, device number 5 [ 559.687794][ T8255] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 560.022361][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 561.062394][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 561.391820][T10206] loop1: detected capacity change from 0 to 4096 [ 561.545191][T10206] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 561.620847][ T5479] libceph: connect (1)[c::]:6789 error -101 [ 561.627469][ T5479] libceph: mon0 (1)[c::]:6789 connect error [ 561.729575][T10219] loop7: detected capacity change from 0 to 256 [ 561.756472][ T5854] libceph: connect (1)[c::]:6789 error -101 [ 561.766154][ T5854] libceph: mon0 (1)[c::]:6789 connect error [ 561.900279][ T9267] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.917993][T10219] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 561.946820][ T5479] libceph: connect (1)[c::]:6789 error -101 [ 561.953207][ T5479] libceph: mon0 (1)[c::]:6789 connect error [ 562.063258][ T5854] libceph: connect (1)[c::]:6789 error -101 [ 562.076292][ T5854] libceph: mon0 (1)[c::]:6789 connect error [ 562.102431][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 562.125278][T10214] loop9: detected capacity change from 0 to 4096 [ 562.149193][T10210] ceph: No mds server is up or the cluster is laggy [ 562.181744][T10220] ceph: No mds server is up or the cluster is laggy [ 563.015433][T10238] netlink: 'syz.7.1315': attribute type 4 has an invalid length. [ 563.142685][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 563.468802][T10247] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1319'. [ 563.982711][ T5854] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 564.182430][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 564.188623][ T5854] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 564.254532][ T5854] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 564.264280][ T5854] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.272638][ T5854] usb 2-1: Product: syz [ 564.276963][ T5854] usb 2-1: Manufacturer: syz [ 564.281707][ T5854] usb 2-1: SerialNumber: syz [ 564.377605][ T5854] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 564.962860][T10278] syzkaller1: entered promiscuous mode [ 564.968739][T10278] syzkaller1: entered allmulticast mode [ 565.222574][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 565.410467][ T5854] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 565.639535][ T5854] usb 2-1: USB disconnect, device number 4 [ 566.045064][T10298] netlink: 'syz.5.1341': attribute type 11 has an invalid length. [ 566.253439][T10291] loop7: detected capacity change from 0 to 32768 [ 566.265889][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 566.392064][T10291] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 566.419891][T10301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1343'. [ 566.666825][ T7586] ocfs2: Unmounting device (7,7) on (node local) [ 566.962604][T10309] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 567.302457][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 567.637367][T10322] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1353'. [ 567.646998][T10322] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1353'. [ 567.658958][T10322] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 568.188576][T10330] ptrace attach of ""[10332] was attempted by "./syz-executor exec"[10330] [ 568.342659][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 568.441238][ T58] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.581152][ T58] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.652693][T10339] loop7: detected capacity change from 0 to 7 [ 568.686597][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 568.696197][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 568.709178][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 568.718969][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 568.771026][ T58] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.787411][T10340] Invalid logical block size (6) [ 568.804686][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 568.814338][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 568.840909][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 568.850498][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 568.860181][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 568.869808][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 568.879840][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 568.889431][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 568.899370][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 568.909068][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 568.917513][T10339] ldm_validate_partition_table(): Disk read failed. [ 568.935711][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 568.945223][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 568.965172][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 568.974809][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 568.985293][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 568.995002][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 569.005399][T10339] Dev loop7: unable to read RDB block 0 [ 569.017546][ T58] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.025404][T10339] loop7: unable to read partition table [ 569.048355][T10339] loop7: partition table beyond EOD, truncated [ 569.055391][T10339] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 569.359929][ T58] bridge_slave_1: left allmulticast mode [ 569.365986][ T58] bridge_slave_1: left promiscuous mode [ 569.373041][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.382418][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 569.944621][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 569.983901][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 570.008464][ T58] bond0 (unregistering): Released all slaves [ 570.422464][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 570.567662][ T58] hsr_slave_0: left promiscuous mode [ 570.592459][ T58] hsr_slave_1: left promiscuous mode [ 570.600165][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 570.608100][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 570.684977][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 570.692955][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 570.832980][ T58] veth1_macvtap: left promiscuous mode [ 570.838891][ T58] veth0_macvtap: left promiscuous mode [ 570.845359][ T58] veth1_vlan: left promiscuous mode [ 570.850879][ T58] veth0_vlan: left promiscuous mode [ 571.462524][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 571.758308][ T5806] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 571.805635][ T5806] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 571.815330][ T5806] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 571.829644][ T5806] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 571.841377][ T5806] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 572.073599][ T58] team0 (unregistering): Port device team_slave_1 removed [ 572.129336][ T58] team0 (unregistering): Port device team_slave_0 removed [ 572.503444][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 572.973522][ T58] IPVS: stop unused estimator thread 0... [ 573.189298][T10356] chnl_net:caif_netlink_parms(): no params data found [ 573.542451][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 573.694885][T10377] netlink: 'syz.2.1374': attribute type 30 has an invalid length. [ 573.932639][ T24] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 573.943249][ T5806] Bluetooth: hci1: command tx timeout [ 574.184872][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.196429][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.207506][ T24] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 574.220985][ T24] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 574.230399][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.259277][T10356] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.267022][T10356] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.271922][ T24] usb 8-1: config 0 descriptor?? [ 574.274830][T10356] bridge_slave_0: entered allmulticast mode [ 574.277934][T10356] bridge_slave_0: entered promiscuous mode [ 574.423669][T10389] loop1: detected capacity change from 0 to 8 [ 574.449875][T10356] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.462941][T10356] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.470980][T10356] bridge_slave_1: entered allmulticast mode [ 574.482730][T10356] bridge_slave_1: entered promiscuous mode [ 574.571084][T10389] SQUASHFS error: Failed to read block 0x636: -5 [ 574.581202][T10389] SQUASHFS error: Unable to read metadata cache entry [634] [ 574.589870][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 574.597818][T10389] SQUASHFS error: Unable to read metadata cache entry [634] [ 574.605514][T10389] SQUASHFS error: Unable to read directory block [629:0] [ 574.691839][T10391] SQUASHFS error: Unable to read metadata cache entry [634] [ 574.699529][T10391] SQUASHFS error: Unable to read metadata cache entry [634] [ 574.707240][T10391] SQUASHFS error: Unable to read directory block [629:0] [ 574.737104][T10356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.747446][ T5806] Bluetooth: hci2: command tx timeout [ 574.790137][T10356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 574.800622][ T24] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 574.856940][T10389] SQUASHFS error: Unable to read metadata cache entry [634] [ 574.865439][T10389] SQUASHFS error: Unable to read directory block [634:0] [ 574.909940][T10356] team0: Port device team_slave_0 added [ 574.968365][T10356] team0: Port device team_slave_1 added [ 575.102744][T10396] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1381'. [ 575.213383][T10396] veth0_macvtap: left promiscuous mode [ 575.272271][ C0] hrtimer: interrupt took 177128 ns [ 575.296123][T10356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 575.305649][T10356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 575.331749][ C1] vkms_vblank_simulate: vblank timer overrun [ 575.338302][T10356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 575.496485][T10356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 575.503901][T10356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 575.529994][ C1] vkms_vblank_simulate: vblank timer overrun [ 575.536661][T10356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 575.622622][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 575.969531][T10404] netlink: 'syz.2.1384': attribute type 1 has an invalid length. [ 576.054998][T10404] 8021q: adding VLAN 0 to HW filter on device bond1 [ 576.067384][ T5806] Bluetooth: hci1: command tx timeout [ 576.099368][T10356] hsr_slave_0: entered promiscuous mode [ 576.110081][T10356] hsr_slave_1: entered promiscuous mode [ 576.123387][T10356] debugfs: 'hsr0' already exists in 'hsr' [ 576.129347][T10356] Cannot create hsr debugfs directory [ 576.168562][T10406] bond1: (slave geneve2): making interface the new active one [ 576.182117][T10406] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 576.662700][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 576.846977][ T5479] usb 8-1: USB disconnect, device number 6 [ 577.004791][T10412] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 577.702705][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 578.090068][T10356] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 578.103867][ T5806] Bluetooth: hci1: command tx timeout [ 578.153556][T10356] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 578.227066][T10356] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 578.272092][T10356] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 578.742413][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 579.101338][T10356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 579.215206][T10356] 8021q: adding VLAN 0 to HW filter on device team0 [ 579.309285][ T4013] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.309626][ T4013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 579.317637][ T4013] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.317971][ T4013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 579.783233][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 580.184750][ T5806] Bluetooth: hci1: command tx timeout [ 580.727205][ C0] ===================================================== [ 580.734518][ C0] BUG: KMSAN: uninit-value in can_receive+0x12c/0x4a0 [ 580.741538][ C0] can_receive+0x12c/0x4a0 [ 580.746249][ C0] can_rcv+0x1ff/0x3b0 [ 580.750515][ C0] __netif_receive_skb+0x477/0xac0 [ 580.755850][ C0] process_backlog+0x485/0xa00 [ 580.760788][ C0] __napi_poll+0xdd/0x8a0 [ 580.765371][ C0] net_rx_action+0xa59/0x1ac0 [ 580.770198][ C0] handle_softirqs+0x166/0x6e0 [ 580.775218][ C0] __do_softirq+0x14/0x1b [ 580.779777][ C0] do_softirq+0x99/0x100 [ 580.784309][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 580.789473][ C0] netif_rx+0xdb/0x3f0 [ 580.793825][ C0] can_send+0x11a1/0x1390 [ 580.798358][ C0] raw_sendmsg+0x1796/0x1e90 [ 580.803258][ C0] __sock_sendmsg+0x330/0x3d0 [ 580.808125][ C0] ____sys_sendmsg+0x7e0/0xd80 [ 580.813163][ C0] ___sys_sendmsg+0x271/0x3b0 [ 580.818044][ C0] __x64_sys_sendmsg+0x211/0x3e0 [ 580.823266][ C0] x64_sys_call+0x1dfd/0x3e20 [ 580.828126][ C0] do_syscall_64+0xd9/0x210 [ 580.832953][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.838994][ C0] [ 580.841369][ C0] Uninit was created at: [ 580.845894][ C0] __kmalloc_node_track_caller_noprof+0x96d/0x12f0 [ 580.852679][ C0] kmalloc_reserve+0x22f/0x4b0 [ 580.857589][ C0] pskb_expand_head+0x1fc/0x1610 [ 580.862818][ C0] do_xdp_generic+0xa79/0x1690 [ 580.867781][ C0] __netif_receive_skb_core+0x2524/0x6df0 [ 580.873743][ C0] __netif_receive_skb+0xcc/0xac0 [ 580.878912][ C0] process_backlog+0x485/0xa00 [ 580.884000][ C0] __napi_poll+0xdd/0x8a0 [ 580.888495][ C0] net_rx_action+0xa59/0x1ac0 [ 580.893488][ C0] handle_softirqs+0x166/0x6e0 [ 580.898442][ C0] __do_softirq+0x14/0x1b [ 580.902999][ C0] [ 580.905419][ C0] CPU: 0 UID: 0 PID: 10468 Comm: syz.5.1407 Tainted: G W syzkaller #0 PREEMPT(none) [ 580.916634][ C0] Tainted: [W]=WARN [ 580.920522][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 580.930823][ C0] ===================================================== [ 580.937937][ C0] Disabling lock debugging due to kernel taint [ 580.944319][ C0] Kernel panic - not syncing: kmsan.panic set ... [ 580.950844][ C0] CPU: 0 UID: 0 PID: 10468 Comm: syz.5.1407 Tainted: G B W syzkaller #0 PREEMPT(none) [ 580.961968][ C0] Tainted: [B]=BAD_PAGE, [W]=WARN [ 580.967072][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 580.977222][ C0] Call Trace: [ 580.980567][ C0] [ 580.983470][ C0] __dump_stack+0x26/0x30 [ 580.987948][ C0] dump_stack_lvl+0x53/0x270 [ 580.992679][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 580.998646][ C0] dump_stack+0x1e/0x25 [ 581.002942][ C0] vpanic+0x361/0xc50 [ 581.007075][ C0] panic+0x15d/0x160 [ 581.011150][ C0] kmsan_report+0x31c/0x320 [ 581.015808][ C0] ? __msan_warning+0x1b/0x30 [ 581.020604][ C0] ? can_receive+0x12c/0x4a0 [ 581.025348][ C0] ? can_rcv+0x1ff/0x3b0 [ 581.029737][ C0] ? __netif_receive_skb+0x477/0xac0 [ 581.035172][ C0] ? process_backlog+0x485/0xa00 [ 581.040258][ C0] ? __napi_poll+0xdd/0x8a0 [ 581.044897][ C0] ? net_rx_action+0xa59/0x1ac0 [ 581.049895][ C0] ? handle_softirqs+0x166/0x6e0 [ 581.054953][ C0] ? __do_softirq+0x14/0x1b [ 581.059586][ C0] ? do_softirq+0x99/0x100 [ 581.064118][ C0] ? __local_bh_enable_ip+0xa1/0xb0 [ 581.069433][ C0] ? netif_rx+0xdb/0x3f0 [ 581.073799][ C0] ? can_send+0x11a1/0x1390 [ 581.078444][ C0] ? raw_sendmsg+0x1796/0x1e90 [ 581.083360][ C0] ? __sock_sendmsg+0x330/0x3d0 [ 581.088366][ C0] ? ____sys_sendmsg+0x7e0/0xd80 [ 581.093436][ C0] ? ___sys_sendmsg+0x271/0x3b0 [ 581.098415][ C0] ? __x64_sys_sendmsg+0x211/0x3e0 [ 581.103665][ C0] ? x64_sys_call+0x1dfd/0x3e20 [ 581.108690][ C0] ? do_syscall_64+0xd9/0x210 [ 581.113512][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.119731][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 581.124985][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 581.130947][ C0] ? __netif_receive_skb_core+0x6670/0x6df0 [ 581.136999][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 581.142950][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 581.148193][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 581.153438][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 581.159381][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 581.164624][ C0] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 581.171088][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 581.176343][ C0] __msan_warning+0x1b/0x30 [ 581.180999][ C0] can_receive+0x12c/0x4a0 [ 581.185631][ C0] can_rcv+0x1ff/0x3b0 [ 581.189865][ C0] ? __pfx_can_rcv+0x10/0x10 [ 581.194647][ C0] __netif_receive_skb+0x477/0xac0 [ 581.199938][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 581.205220][ C0] process_backlog+0x485/0xa00 [ 581.210175][ C0] ? __pfx_process_backlog+0x10/0x10 [ 581.215621][ C0] __napi_poll+0xdd/0x8a0 [ 581.220123][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 581.225380][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 581.231341][ C0] net_rx_action+0xa59/0x1ac0 [ 581.236168][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 581.241414][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 581.247421][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 581.252699][ C0] handle_softirqs+0x166/0x6e0 [ 581.257611][ C0] __do_softirq+0x14/0x1b [ 581.262076][ C0] do_softirq+0x99/0x100 [ 581.266436][ C0] [ 581.269422][ C0] [ 581.272419][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 581.277564][ C0] netif_rx+0xdb/0x3f0 [ 581.281775][ C0] can_send+0x11a1/0x1390 [ 581.286282][ C0] raw_sendmsg+0x1796/0x1e90 [ 581.291066][ C0] ? __pfx_raw_sendmsg+0x10/0x10 [ 581.296157][ C0] ? __pfx_raw_sendmsg+0x10/0x10 [ 581.301255][ C0] __sock_sendmsg+0x330/0x3d0 [ 581.306098][ C0] ____sys_sendmsg+0x7e0/0xd80 [ 581.311028][ C0] ___sys_sendmsg+0x271/0x3b0 [ 581.315897][ C0] ? __rcu_read_unlock+0x6d/0xd0 [ 581.320964][ C0] ? __fget_files+0x3b4/0x4a0 [ 581.325794][ C0] ? __fget_files+0x3b9/0x4a0 [ 581.330629][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 581.335882][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 581.341841][ C0] __x64_sys_sendmsg+0x211/0x3e0 [ 581.346936][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 581.352199][ C0] x64_sys_call+0x1dfd/0x3e20 [ 581.357041][ C0] do_syscall_64+0xd9/0x210 [ 581.361697][ C0] ? irqentry_exit+0x16/0x60 [ 581.366416][ C0] ? clear_bhb_loop+0x40/0x90 [ 581.371222][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.377243][ C0] RIP: 0033:0x7fb86278ebe9 [ 581.381759][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 581.401512][ C0] RSP: 002b:00007fb8609f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 581.410071][ C0] RAX: ffffffffffffffda RBX: 00007fb8629b6090 RCX: 00007fb86278ebe9 [ 581.418145][ C0] RDX: 0000000020000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 581.426212][ C0] RBP: 00007fb862811e19 R08: 0000000000000000 R09: 0000000000000000 [ 581.434274][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 581.442334][ C0] R13: 00007fb8629b6128 R14: 00007fb8629b6090 R15: 00007ffe96fd1008 [ 581.450437][ C0] [ 581.453809][ C0] Kernel Offset: disabled [ 581.458168][ C0] Rebooting in 86400 seconds..