last executing test programs: 1m31.985580107s ago: executing program 4 (id=28): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x8, 0xff}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000740)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m31.781012251s ago: executing program 4 (id=31): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0xee, &(0x7f0000000240)=ANY=[], 0x0) 1m31.679303403s ago: executing program 4 (id=32): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000500), 0x141002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000a00)=0x40000) syz_clone3(0x0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000140)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) 1m31.502614467s ago: executing program 4 (id=34): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000540)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@minixdf}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x2) 1m31.237945373s ago: executing program 4 (id=36): r0 = socket$inet(0x2, 0x3, 0x2) write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0x1, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x4ec638b9]}}], 0x1c) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4}}}}}, 0x0) 1m29.705318815s ago: executing program 4 (id=50): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107042, 0xc4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000080)='\x00', 0x1, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000100)={0x17c04, 0xffffffffffffffff, 0x8000006, 0x100000001, 0x0, 0x1b}) 1m29.441581851s ago: executing program 32 (id=50): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107042, 0xc4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000080)='\x00', 0x1, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000100)={0x17c04, 0xffffffffffffffff, 0x8000006, 0x100000001, 0x0, 0x1b}) 30.371107935s ago: executing program 0 (id=321): syz_usb_connect$midi(0x4, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x50, &(0x7f0000000380)=@string={0x50, 0x3, "040a9441da84e2ad3117bb077e6a55ca7ba53a0d337bcb3c218efad3e8e6b9c7440e1e63aba69fd4ec2cf2ae493817ef406ec9066ab2f4cadc18290ff99ac32eba6cb659258133581a6bbb2ddbf3"}}]}) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x2) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000f15000000050f1500"], 0x0, 0x0}, 0x0) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) 28.134977312s ago: executing program 0 (id=330): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r2, 0x50083, 0x2c01}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40850) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1=0xe0000306}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 28.005282285s ago: executing program 0 (id=331): socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r1, 0x4) 27.974027305s ago: executing program 0 (id=332): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000340)={[{@shortname_mixed}, {@fat=@dos1xfloppy}, {@uni_xlate}, {@fat=@quiet}, {@uni_xlateno}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x5}}, {@numtail}, {@shortname_mixed}, {@fat=@showexec}, {@shortname_mixed}, {@fat=@check_strict}, {@shortname_winnt}]}, 0x0, 0x29f, &(0x7f0000000840)="$eJzs3UFrE1sYxvGnSdukKW2yKBfuhct9uW50M7TxEwRpQQwotRF1IUztREPGpGRiJCK2O7d+juLSlYL6Bbpx517cFEFw04UYaZKxaRswra1Tzf8HYU7OOe/MmZyZ8M5AJlvXn94rFwOn6NYVS5pi0rq2pcxOqWuku4y1y+Pqta5zk5/f/Xv1xs1LuXx+ftFsIbd0Pmtm0/+9evDo2f9v6pPXnk+/TGgzc2vrU/b95l+bf299XQrXXpVcW65W6+6y79lKKSg7Zld8zw08K1UCr1a3nvaiX11dbZpbWZlKrda8IDC30rSy17R61eq1prl33FLFHMexqZSGTfzQEYWNxUU3dyKDQRQm+lXWajk33rexsPErBgUAAE6XqPL/u6XASoFVqnvy+4P5f0yHyP+loc7/D4/8fxjs5P+p7vm7F/k/AAAAAAAAAAAAAAAAAAAAAAC/g+1WK91qtdLhMnwlJCUlhe+jHidOBvM/3Hp+uJeU/CeNQqPQWXbac0WV5MvT7Jj0pX08dHXKCxfz87PWltFrf60bv9YoxJUI40OZ/vFznXjrjV/TmFK9288qrZn+8dk+8Y3CuM6eaSW6W/bkKK23t1WVr5X2cb0b/3jO7MLl/L74iXY/AAAAAAD+BI59d+D6vd3uWPjYkH3tncrd+wNK/+D+wL7r61H9MxrdfgMAAAAAMEyC5sOy6/tebQgK4f8fHMsKo//okoN2HpXUrXlxWuZikEJM0lHD4z83yx8l7amZiXy6j6Pw4X7nDBikc5TfSgAAAABOQpj0j0Q9EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhtigDw8L+x/l2WM9m4tHs5cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA6fAtAAD//2kbF4o=") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) 27.608004263s ago: executing program 0 (id=333): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x635e, 0x9, 0xffffffff, 0x10000}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x4008810) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 27.179728242s ago: executing program 0 (id=338): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x100) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x7, 0x20000000080, 0x0, 0x4, 0x4, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x400, 0xffffffffffffffff, 0x6, 0x4, 0xf, 0x4000000007d5}, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x100a, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) 26.82305893s ago: executing program 33 (id=338): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x100) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x7, 0x20000000080, 0x0, 0x4, 0x4, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x400, 0xffffffffffffffff, 0x6, 0x4, 0xf, 0x4000000007d5}, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x100a, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) 14.628433599s ago: executing program 3 (id=392): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x800}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf535}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r2, r4, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000001cc0)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x5, 0xd73, 0x68, 0x0, 0xf0, 0x2f, 0x0, @loopback, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "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"}, {0x8, 0x88be, 0x0, {{0xb, 0x1, 0xff, 0x1, 0x1, 0x2, 0x7, 0x80}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x1, {{0x0, 0x2, 0x20, 0x0, 0x1, 0x3, 0x2, 0x6}, 0x2, {0xfffffff9, 0x97, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x2, "474e5d944c27b72bd428de"}}}}}}, 0x0) 14.408039604s ago: executing program 2 (id=394): socket(0x2, 0xa, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000440)={@val={0x0, 0x880a}, @val={0x2, 0x1, 0x0, 0x8, 0xfffa, 0x7}, @eth={@random="d06d6558b77d", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @val={@val={0x88a8, 0x7, 0x1, 0x2}}, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x1, 0x20, 0x34, 0x61, 0x0, 0x5, 0x6, 0x0, @rand_addr=0x64010101, @multicast2}, @payload_direct={{{{0x20, 0x0, 0x1, 0x0, 0x1, 0x8, 0x3, 0x2, 0x3, 0x0, 0x1, 0x9, 0x3, 0x3, 0xf, 0x8, 0x1, 0x4e21, 0x4e20}, 0x8, 0x4}}}}}}}}, 0x58) 14.163674959s ago: executing program 3 (id=395): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000380), 0x12) write$cgroup_int(r1, &(0x7f0000000040), 0x1) 13.881470855s ago: executing program 3 (id=397): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo\x00') timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getdents(r0, &(0x7f0000000f40)=""/243, 0xf3) 13.742495898s ago: executing program 3 (id=398): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380)={[{@block_validity}, {}, {@user_xattr}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@orlov}, {@usrquota}, {@grpquota}, {@norecovery}]}, 0x3, 0x569, &(0x7f0000000940)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x300000d, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000000)={@id={0x2, 0x0, @a}}) chdir(&(0x7f0000000140)='./file0\x00') mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x2000b1, 0x0) 13.377822676s ago: executing program 3 (id=399): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x40080000, 0x0, 0x100, 0x7, 0xa15, 0x0, 0x0, 0x4}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x64) syz_fuse_handle_req(r0, &(0x7f000000a200)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x90, 0x0, 0x5, {0x3, 0x0, 0x1000003, 0x105, 0x3fe, 0x80, {0x6, 0xfffffffffffffffe, 0x40000, 0xfe2b25d, 0x10001c2, 0x0, 0x3, 0x5, 0x2, 0xc000, 0x3, 0x0, 0x0, 0x18, 0xdffffffe}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 13.273126478s ago: executing program 2 (id=400): syz_mount_image$exfat(&(0x7f0000000240), &(0x7f0000000000)='./file2\x00', 0x3000cd0, &(0x7f0000000440)=ANY=[], 0x1, 0x151a, &(0x7f0000003f40)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x81, 0x203, 0x0, 0x0, 0x20, 0x11, "79820fde98abdd00b771eecbbba14da08fe8cfcf2d39005755e339df6e3474ee07e13a269fce2bb3dc5ed34394903821e81be586d9ee749d76a7285644943ebe", "ba646f857993f0c578794474fce3d40f81afe42d722436df22213419a5999377aead1dd9f9928abd899cc24fbe73d652739fc43c0e45ac5209ccdc91ae82cb81", "e461519b104962775f9527ad4d3ff4ad351f4bd845ffcfba9be710877453dd32", [0xce92, 0x20000001]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) 12.737304199s ago: executing program 3 (id=402): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd2f, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x3}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x10, 0x2, [@TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xa}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) 12.034457204s ago: executing program 34 (id=402): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd2f, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x3}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x10, 0x2, [@TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xa}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) 12.020171324s ago: executing program 2 (id=404): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000080c0)="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", 0x2000, &(0x7f0000000a80)={&(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x28, 0xffffffff, 0x22247}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f000000c0c0)="970b180393e57da0084004606e0f7eb55b4379b678ec58dd5832867fc4741e325499108ee901f5ade42a10a2a5ca59b706328aca067422dcda816a63687f6b445fdf7c8c4c158921aab593be18f8f3e3a72a3c634c089c468f2afa55a47fcb36c8ec931a3b8e995ca8f9da378136eee8d00878a33e262e3718e8829586fb5a3bdd2143ea5a880a6322892369f494dd40593794a88b4f0e69dfc3d573117dc27d511cb0b7e7d1c13dac381d4472cb9eba0637c9611565d496c7a6936582144f524085bf34af3a90ac0a0db2f79a423fa8b797909b65b72ee23068ebf92a9ae53fdeca4a47ec6838e363039c63988cf6f4f393f907cff08e13520751cfa3bfeb452f120d8a5f462b040f8537f7add203eb2b2f5784376b4e0d85c027c4e0d5817ce1db986581a147a5c7e820212907992afff07f13a43b2a2c23e6f61d7bdafdea1d396e0fa1e79afd07195dfdab53cbe75d4b96971caef941b69525b87d59fcb99bfb348a12236968f9dacbfbdc4d9b0b01df755ba3b6c320a29e5bc23bd6b20f3b27dc3d63d2d2ef11865347c5ca1504ded5d549e17e1194d717c79bc330ebfc3929d079152f51f3ab9701a3241c7df4130027ca1a6d0e6b5f2f2c3b659cbea4cef19728b45f1325e04151af66111cabddafa17b90f193c52d1c4fb646f99fd42d77a3f16c05a491a775962a2a4ee9f9f6c1a5eaa68305a88add9d6f35815f37cadae92293a0db1613662f145991ba5fd632c4a170588f8265e11b3e1a4ff2b17f3664b98d9c6f54a356f19a9b72175e7eb46ff4330812993886cd7b42ffdc3767a4ac16dd21d76417b70cfe97ad6ad0ddea7284d0e3ecf0c6c6b57833f65963f3764e297c994e0181bbf693c8fc0e57fc15b2ad776a00c19a805a906ffa80efa4116d5f5c9863a74bb340008d958db841c5f1e3b286afac717ceabcc7310e75e45b61215f6ba0bb496bd5e094b6139326758c1d81b176e11da5eda522f05346e1a71a6358b4c9b7653a66ae7153858fac4695d64fe2962b0d62d6d8aac14cf9cd2199fb039b54b64f5085434b2339f90bc11f2e407a6e84557de9a7a7edcc3b15a7798cbc68c1b1e1a822103bd43b656e933bfe886736a2bda6ccb228a8e4fae5956673db0105999017d8b68159f7a9480fd2ca70bb7e9fbc8f4f1c3581b1f528c8fb5b5d6beb769dd5e9650739f3cfcb61ab7b066c342a6c6886b0bd83f399e3eb74d2cafce7fc76febe624a37e185924afa8695caa7d3c1a97fd6684979ef33957a334fbf10c7a9bba18397082580df2425129a87c4868d41d1bcda8a7faaf1afd492cb4c83b7c5ce7a950f92186cc07bf27dcf58ac56506f2453399070ae8e5b009e40eb1970bbe8a1c9f3befb54255602bd191bd46c56c0fda2842462c0b68884f9a922d2a8b161aa9ca2c0c52bcfa26b7b7a152f2ccd16ec4974361f7322dc3b345e926e1a1b56200dc425e2e03c3d7194f9cbd321e10de387adf9790a5706bcf05d9b8c16e40e5633c44553c2aa8611f7656fc732b5dfce1eaf212d2521eb013fcf154d251553ba7a6a1f7ba8b7ceb3a1df621376543a451fe76671beaab4833f1be28247919c7cdf4177e2c9cca78ce52b5a7e4dde913dd8b13ce861bbf7048822041f4b29b3441b4880a8f7a4a289ad3c6258494e7736e48373408d248c3b033372ebdb3d9a406869445b5d956434a576b83d4a7e7b47ae8c69f50be20ea56f171e592e114602ed4f47e86dc34008770940adb4f0167811c474ada06693b55f567cc3201f97c08a3711dca486a86c367f59ce44259c1d71cdb135aa8630c4cae61ad07998a2f781ff87c946e8aef9bde6d4738bc009fc43fd176bc38756a0ca48c382395b48bc55da32892551ecdd0bd3f4c69a79bbe600f4103f21e443821492b92516833b231942e91a39e7401a42ba3e99a3a2fefa6167365b9050305b6f09a013f41e764a80f422cce051e5b30ba6528540ee5d4ea5872572c85f321b68e730f40f64b648be31a9e530718ec17443a1a4dcdb79cf799cfa75d0bfa0fde71828d8f51e38dc3d1d77430ceed007426f689d5843c34afdec5dde3e480a36ffa25db4b3483cde91e56eee8756dd953a3abff11bd7901d6b37c8371b023d7457361908576f92990f19e9f48dc58ca550e61a035161f1539b14b7bcce535b3a3783021094129f312c03e51df62579ae9423927021e8bcf530116f3658a1e94d39a800452f7461d2f001f86b911a8a14b9e61c2fd8f959ea40793df240aed5e5862ea59d78fb235788c1ba3c0ec44fbefc29c2e6f22d70849750625c3c15227579d42858b5fac30bbe86491697cec1c4543addc1f50202fdf77a6d2d23e70ed611a63368694e459012ebdbe71c4f702980d7ae63aaee33d5f8df5fce071c73cd918991c6ba2f95f33a9917a22c9e7342dd492c9e2c2f6457c3a48f35edc1720f2224f2af2ef4c0a38b75ce27aae5d5ef615920ab9245851590cdcdcfaa7e5a66b73f5a0a1bcf1bab66ecdfc0dcbd8cebb1b98f6256cea6761c835a761819018fd9c3d2f541eba25abde06f1551328800b1efc04d8e10594dbe95f9f10005cae8c5b27cc18268ebaa4578f9dcfa99aa61567a55b43545ec729764af99d224cfea6a36a93d4f70bae3225256e179e81a0c64dffce9c2141994253af664c33f881aa417fa3b7e9424f1841f1aa845ea0fe05c4e47b318bef60709d6f20c9eee6e8c0c18bd161d3dbe57d82903937e10c41aa9066dcee124354584232afdcb60d185bc39fcc5e7e5124d17e2f998b64836b587cf233469b92af65a70f4a8f35df9e24c7d5d21bda27ae44ce6706f86d3747db675aa329e8b43652bb1e89687dd003dd7924d300f498d444639b3fd413840cfa958e436e5959e95486161af807cbb7304d99284818eabe39493c66664e92143ff41602a3805369f461abeae5e5b6987a20fa47495cbeeeb322c848147dd9a052384a49898138557e10eb015df370d01977083ad24c7defc8c80583d5f5eca20d0853afb9f41c356f8da0e2435d423528f67f091fc614645980a57ed893ded1c3d37881b243b8a5503f45672492f3849895c9377277a91e7090241832629032872294896107628ffd1151c444153f54b484fa3e5ca057cbe073e6039c11b1eceaf7e20eef2576aa99e7a3f36aed9beb089af28d82e2dc5e97da4878b76b5224e1d293f5223c09f715fba13945695a98624eade1381e31c5651069805e6f707811586f5f81e431e8624a608ba1ab405d2593b1f9f667b89d82e60048e4ef3be98bd3078beb4e5e66e8823c8b427d6f84468f1f18f1ff8a8c11515426993334bcbe0c3ba37b91be07eb800fb2e00a24351457d8fc067b4bfec43c0ce8cd26b23bfbb27d3da7bca3efb7fe6f7715760eda4e3a27a7be7419b803667ef6057bdd5d44250b47fa156af04db91fc57f25425b3cfbaf90a840fe5cfcefcd1500cf4908ec4df10c8bc14ec284bb99b13a8f6136e5e1c669806cb5a4a5227f7952c5b605a2b443866fae399a1f8fea323784935c3e5a9ba9e831749efc9b8228421bdb91afed16341962535cebf6fb02679e5412f67db405c90e218789b634d92a41aaf528c92b8bf38b629a1797c036465b77dc3bb124bdddd309136681d3fbe0251698da27c6f89589171e4492209f7eb48d50a161a5135602fca3355f8934f879c54afb91224901b635ed372fdacc9469471225d2ef3c980466027b86cfe3d664071edaa29b47455064a074da56f4e098ddf27984dac546826aed38e464d5c5a79a3ece544cdb3801de0e29bf5164dbcc14578e3e6c44a4a9041e2315f1243358c5949377352911e0a67c6de7e11b0881af528fe478c34909a1178a8a4f7fb727317e4f3981706d9c9215224604c2d6a4faeefc21bd635c8412931ac4feb2c60666672fb6dc5deda0d6c4ce31f2b6cb45907427691488abb280c3fd001f3d7507c0db358af7151d3b8e2e98eb8a78ee69966f7a1307882c5b57530e0dab5c57f84852c42db013e3448da2fb0a754ed97c001f33cca549eb71d7aef88d1ae7fac0d96f334556d75f600a029ed698ce9e4302279999726a57337b9afda0b0292c14d1687a85326120d9fcd84cdc02718f26c12ca28cac81af0dede79685233be41c7269c57100c603a4f9536f757fa753353bd0cded7d4edab29dff6f7dd5faa81078c263c9d1d7e662a0ffae22d8d12e679de9ec6c634ba46ddf6aa86ac0be41cabd9b14fd12107ffce96915fa0154f5b6017fa866d14ff47754a58ba14c1a3eb3f23f040779a788b774604c3a8a7dd818619352cf47849eebfdd3b49b56f376044e7cb218759059fa85057f96c159ccd63ea6cd0bf47781c2d023411854dd3ea46f4913cda9672655e566d2e83fe2e0eb5476bd6fd7a84557e37a4e8d32c75ab51dbffc59f0cebc3edeb395f38f82765ed3cfdce75b2fd570e783c8c3afb31049383af0b51575e5c9dd9332bde6f684a3e11d199f43004439ed535a20c7f2a695cf9b547985421ac62c2289c71491f0617d23cb7a9466c8f0482eb2e8aa782118702761e0267ef500afc52f4a3a7a53ef22aea542f679dc5c751c766e06af453576689c87b3b89c091e5444ff6fb1472fbd271fffb268a2eada125d7acfc70c8ff4cfd3f5421941c2857e54ed0617d6430b806d605c2e508cd5a7764d6ecdc69dbd050a97f8696535585bbb95b66f751566ce612aebce9a0b021f9fbf067870fe447dd05e8c521413e7f27955db3b8239836b6ad120f5fb48e9003bd19b05f94752743d89bdc5492c2ca1bc3133fe0ceb29451900e2ac713cf2cbc3a531048a473a195ad40c685b539f806f434c9e2cb6a8a25df84d41c13d1ceb90de1a3efecd06a53ac9a32654d1ece86dcf6fa17ea6a4f367f9b360b3e26514bf94af1f52d9c0b0691241e3c6c302e7054bb738cb234019c0e45a7db270ab9d75df73568f25579d33e7b42743c924b1f888df85c6166228f5391962b689f0a4d9683b43ddc98982a820b5c60d9c4e3997cd2212fc3850b2bd41342ccbefc1e4ec2ad7ae285f156f4a4f383281018c73ca4f2e9d255487a9717dd39cd744a000c68c53f82a22a08bcb734b5bbb8364180991140c2e727dfce4b19e70c968c97393b56019ef84688772d488b9bd6fa9354ab64f731e6adab543851e5ca1470fd13d0334ba025b57db5d9ea13c970642726284fefddab8fdf7155f5b8e3b3b86d098c4207b428bffcc7ff76f6397b6a3efc3c0b0fb2a4343b4051271f87e384c2b659086ba668c66a15d68b87faf82a60b184f27256e36a9ada7c4422754be56dbbab50ed781f36e40ded65a30378003de5b5cd5f80a6042613c76e80851312c7ed2c07b762b85a1b6928a7b2428d2bc7a6bfdfa2ba55aed54fd3c878ec655caf1223245433b7c6fc2a2d3b0393d7ba4e12f26a53b9d5afdbab230b9148f061df2e1c0fe73c2abcd142125367fa5e598e500263d9b27e759c08b7debee4695a5b192d968108c134241f236cae0434ed71e5099cd466cfb04d5f7cef2e94683172f82a9841610cb6fe55d4bfe73920992bb76f362b9cf7919c906495d4b37a915d23168fd7ffc2f36de55a1b17fa2232df03663ffa2a4c5e76aad90fd5abc80b6dfc16ec6aa328cc7714dc2d7bb14aae9f86c999e93a59fd18fb2300539bca25e69b04943a16c985ff481a42c9d8af43eb61ef7432b8e3aa5bc391c181b7d546b94ac659bc4b501157d3adf9d4cda4e298a4e4271fa2cd08919b055eb3f168df76c1f0b0d5cf5760b56774f105e51c93cc03ce97b00768b9620a6fd5162b9d9191ac0928d2460e4e821a276680cedb3b8167bc156b48a34d4c24d4a87fd09968a725d4b6a1b54b169f1e14143e97a84cf3d8eb4ec5458dcd5ff93365396c00533c3493847f595725a4f15300183eac306d16ea136b97a9864d16330d8c5b8321a6947caeb9cdc7ff4e53c419518ce9bc11f7355651be27a2c2b9ff4127ad86b96c1b5967def371d5d6a3f365abaca55c5f19600d1d5051d320b065c2f78f2147c170b9153a0eefd7b3f1e637cac3fff14b0eeaf472e6a6a9f7553ed3267c911d4d77a4f7285b77df725b3a88fbfd221343f656d60b61808b52a8facc81b8516698f2ac50cd8769371e67278c59ab1cc890fab36206b939f23b31ab976651ca8a4e7754bb10d03d4cc6506f13d98f2bda76477a69a8794a34614a88a7ec94e1a229ad6f747724a3bfb674cc87ea0dfb610f66057671f664206672e78c00a3f4585f17fc40827d0c8af88d3437f811274f662e9ee73d550833d0c8fde449089f8b5e8a25d25096537ac960699a07ebb51271a8f8556037436307063282febae745d53f8db65f13f24cc2e525ae465c9bf79f76b82dceada3bf34529321f913dd18548ab2a26f2a065028f46f4dfb18294dff30a7e5b131a08c671787baea45545d15629ec2f435d9138e517055cd48af7120b3b79f2275baed8a4b6a0f33c30890105ae2c07a332df79f2fd6767ecc66f1ed628c968a2685813342677a2823d10263958eee79d03e393a557475701694b5ec3dec8773f37b980f5812f1cbaed6e5253da037b5f88ba2070f445d74907679460dd48e16442d345abbd37f7853ec7123ff16db46c8571987db63ed711d36c05c2dafac47ea366f9467624b6296a2b9fb7056702d4ba38b4df72e7db3244421f31aa0911af3e3a09f9e08e96aa1545c37465f990bab4ee2821b1a701aa707db1dc18d52fcede15245f54a5f1a47b0d82c33fa378625d247b08753ac5fa5444b2e3f9d1d3918b154665b02fba87e39d0e27bdf60b27930eee02c31d847d40166544ab9ef801bd79bcc8d93980354021b8c7a1b9592934a90917db115bcd92068a970680011cb074da705f1cd06a0142862a777c6a47afd38721979323e27151c114e8901d41f79358e78289af10134e22d903415e2ebd2edf34ae10eefeec219db7b13ac983583dd4b02dcc615c6f70e6cf35ea216807c4b9c81482c2b941c7d6cd6621d9480ba924a3372ca3e3ca78438b0e9bf7c8436fcc0047b3bdb8d70190076d9feea778005d5d69f1b1194c76dce628e17b6beb299146b25f3f6660263c23dbcd08f70ccb45569a81a140eff66f2190110cf0977d9df7a2c437042961606ca1a378c8f59a310ad6c9cb4ff30a2d55411eeb38d927bb4d0f60ae75d90ab78dad14097f6dd38f512af2f932e1ad6a5e201180373689981f23bd9f59e4ca29244a8ea4236527fe2249eaa299af174f25b13d72b181c2f421652ece630ee1358098c29f84506654ffad3647792852a7faf107e36ae330886ffcef6e3a1725495e430568a9cd85d385e5a15d2f77ed274be3c8edfc52c230d21785b927bb8e470f989e8c89b01af8d04fc7050fc978013fbc5dcedd2baf5e8bfa8e2e1d3f193c224375db2f71d4655d2f647e9b1739657a0ad8ef6751a88151a3413ab870e0d7ba3f0a55ce3f30d55e8eb9e47e3d82563d9180399e7895490b8561a374acf5c94a1c648fa06780c4141c58ed913fb92865d3b4883301ba69b3f2b20c1f82024bd75e62ce2972d3219bdb961ab3bbac8f1d873ddece6d85f540f82c9d79b0937973335fe05e5c6ad8fcc525620a57678d58c7c2f0f157e030736d0fe4f6de520b390794cefdc6c828b4512fb6b2000d08e38693fa22834e69180d31b3978f9da75389f919a0d49ff961997d14ae6bdffcfb179c2ead52c69dae97416eef2602843dcbe4e5ae613d429feef7ffba6a31a8be8bf2e62c6d374c807363a986519a8cf9dfc99fc6607486e10599ae415b51e23f639194885e5119036e0e535accb4f126b4c45c47a53658af1e049daa2967b01d9450625d92f8f8e9d151633646044fcc5f6ad835479d48702839456decf070c7e6143cd31033810bd7da01c4a2cfb08605b25c00336f17d3b5a3db48866ef864b8d9cea9530429d3fb1afc7ae9e7d06aea9034db89b2ec8fc2a96d8d701fc51994305077dbea527bc0fc398b6bb7d42f0c408be69b98eb173d285fd8010ba75c57f2dd982582153814ff959fccc78aa5f7901357f6129f840af6649534f9ebc7750a20502a7cbf2d2f28c6f97884f43779bbbf93c550f8e79949db0e066538456b4e966761656eb7bebd5afe9b9fc241711b874682b226e9c6baecc1e909858e01b32472f6f8d483c073d3b576a4b03534dc4b620e21e6feb4bb2ddb37e3f0d4ff92c0af19e6087034c72c5928707748bc10ea22788bd938a0e6512cae4733fc1a2e47f3d4961932fe564684872922b44db143bea77580b0704675290e0839cb5ee529ada8b4c0bb14f05c5c396e29376f1ea80dea2852a88ddf8929fd402571fb242ead60d2be61f1662e1a833969e18e23e0b808900e7ed4be9d6944942da7d384739da1055cddc94937e1ea4cd305bf161c407b471df0ce3fb3413c5bd511d3c65e70edeb5397b0a8701538be7d2f1765688cbb0379744281231e60f5edcbfa6abd177405c455f77e30b95011ae4fda2a3c6d3f9a29bfe7656f6afba48358d57b4e1a84ebca241b7a427c6f806d1f771b540912f05a6df0d5223f85639fd7c163799e28abd08e4013aa43ddbc11ccc9d53131ec5c75f7682481968ad13ef34ba23d4759b51c4cac5a7ca2c73b3103c5b9e4b8686b872edcaca791d669589655e239920fc088eeced3a131ddff2eee9fab3cced40163eebfb29a85b3e97bbd97d17c3b06d3123409f115cf3e3d1c74dcc359664ab942e6ab36c41b1af4015ff5baf700eb99abd658e6833039051a235a2f84b70cb8d90271a481ce40e2a18bef8dcf7f54952b090bbaaaad391cb6cfa218a1e823ca7b16311e35e0350dd8016f67ed34771d7f3a607c1c9ed63524ea0c865148b05f1d017e475641b5076df632b7c261ef54c23eaf7cf52c22864a8ae8f8c3442d147fd52a801f87665b47e229a77b8e85c21d7996c7de9ac4899b098380f74eff119369c81b21b0b916017d0b604ca2a74b1424a4c3132d265d12a01ec2e8cff9809ed2f7891c55bc5cb932c6ea3cdba14cef47a2a0521e36869e9d62914447c3e6cf3da9ecaed915dec41e81605a46a4ec71a8b5ec0bc2f62b3237de7203e4b6d01bc32a5b2dc416623936a324b73e0c63ec414ce1bb4b344db85f014979ae866c4a2c2cce0f814862c0691883dd2d7bcd63fdf2ddf0cb2c6a1a10aa878ba997b74db8e894e4a7ed5e8ea1e3c0b602bae23c6c8c5f38b919aeef5625501fe5d4759c43e90de56122f3ecf87e8023f25e0d3ce64ab629409e881d2d1c5f083da90d45907e62ce3177f7982e514779a13f70bc207d9aa55835e37a5f4782242681ff46600ac9e63f90a245957440987b54b3678ae808c481d25755dba747cd7c3cc0fafb9a142e1ec1a9a5f81b5cdd6dbbc3a4ba5d49f58be6196c305e2af35fdbfbbae02cc4efe771d65e6000ec3f6cf394650f5144308c95279b9df3b29236a32ad3e9cd377296a4252e7dda1bb95d99c32cb81d970de4ff47760ee087dd2fa98392c8ede48391b49cd40e314adb896f0f5b08ffcdffdd70775160144552b13edfac23a09d53a4a4a827a1f216b2827cb9fb47a9fe6412d509d35b754d3700cc0dc8d7a3406a53bd1b0ee5112c50fb8f805be52a6c4e1e664d174727f33720bb371fbe9adc747a234013fcaadbce5cd2d416414b1900074e3ec73a36f32f9d7baa96ed4ea37aea560df4d9c724c69b440139a6dc1758bc74b59c521bc59958da71c4e5c23e4a8999305d989369a9bcd10f0faa789f4040950c349ef0ee910a822ba8df4a6cc16bd72dfb85d7c9a97911e96541a7fb6fb4711cdfe1e1083b2e8e870e2d2a7304f99296a496fe30553971b75f78ace054a8e3c6d54d40b2dbb2ee38a6244139fcba31b88a3ce91d637e7c88db35794002ca28533a46af85929f603e4cf4f5aea715ac4495d2c07e8bf79da078521fac5059dfe6dff61405fb6962987d15a2c7b27a851e3076803c7b4374a85f05b96e9bae91656a003e9acad767c9ac88b339fd868136b63fcb0520a2ee2f25128c8b97a0d43d60be7436756614108cfee63fb0fd65cce0bb0afcf5ea7fa817134c876c949945642a29d71aab10d05522b4b1788bb051ae1ad23fc7e75607580f9bfb7ed901a66d69e79ba742ba169f7e0d36d0c8482d3a85d66a9fc08b3e4c1669ffb4f74f418d4317fbf03b785859601b9e3af056b6a2543289738fe1e601e635ff04d750f8724bdebbbc920a7ca2f99cdaff265299bef09a2e20878682f2f37e46b5d2d3ade8d857ec6d3f7a2779080a5927749086b33b22def28633d53dae49362b4c4d47d2899562a52f22618a45998233048f0e54ba01dd53953c9f508abcb0acb1c1fb1d110e5d6c14d707713cea4cf0403b7573ab5b0a1439e6b2d29c46a3077e0dd296ca751db66f829a42c5afe0304c48fbef52c526c8f2100f6826fd4a5295f7492855f841fdb1f8487fba63b6db19af983a75468ad29a2b6cc58f9ef2dfeec8d798d60e1950731e65c5e2ec1065a22915a30845a5f87a26c067ea870d4e1ef71f67617906080b7b122b8ac9e4da1b05442b5477ee97343cb20f2587744abfa5f318ce29cbd24df1a6dbd42470789e17ae8115a588788d910a171b88dd1b94228728bfef3b28b2b32f523d603fa28d00cf23b0a201658f28ef7920f36a0da8917068a4435e0d710d320258114e2fcde2e1dec0c9faac26d671ea3735ee2b26cb644ba56ced9031cdd2b391c4b96aee7a4c38063e61dbd8ada24cea7ced0728a365bc2320eda9746823b7d83afdc8b3b293b56739011554000aec6272004a002328f20368c0902b8a8d251afebfb4d7b427cfa8927385626a474e3918ff557c8f19a8691011523a63c7e578b98c8951157f0763db3ebc4ea24388527e83b149ef89d4173ebb1c0c9aa3cf4e1a47faa3ebe7ca625e7ef077b38235781236797360696e552b9289a80491d4c3e70ff00b01540deb0de1b3385549b667cfa3598a34751868a14ccb22a420781452699563b16d0d0f1a7f0ba3f0ff45cc2d2536f1de9e024bbc923cede7725f84bf3e6a645f43c4ab3db6ddff671f283857262570b6652dbd8c869ca6a3896b870235047db08a54e5c39d7516c4b0d621d87a9c3e8c53249ff2ab9145f026ba4743a46197af56a0df022363ed59a5c2011e664a05fb952d5ad9ee2037c59a4075e4b504d91e87d303e0bc55cccaeb17e1cbab6176d2d148ce05fe986c79eb843886194f80e202c4f373244b38fd46643c1bc0fa8723ac498c71919e4ed8e5092832aec00a35ceeca94df7bd2c0c02dabc886cedf1fd044db2b45c30f8c0334c992eed40290baaeeb4d00e2cb504ca1173b6b6eec8d2aa3a1bf46e64c1ae1b3ca2882545729fe78d5e1e99c6f1f31c0b0f2190889c7318ce7605128a86c62c8a1fa107304c4609e28a2a43c6799ff6a7d70909ee10676801ee670004cf9632e34cb8cfb43d2f477ad335f5142da0baa4f4542dc93704e93a3420ec50284626fe36618b079d0db013d691583aba257947bdb1514d0318180ae43d0f94712f5c0de35f3e342ce7da65f755761506b9bfd186641fdbd03d5a2d4fe170fe23af8", 0x2000, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f000000e0c0)="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", 0x2000, &(0x7f0000000d00)={&(0x7f0000000480)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") syz_fuse_handle_req(r0, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x90, 0x0, 0x9, {0x1, 0x3, 0x2, 0x339, 0xbcc, 0x4, {0x1, 0x2, 0x100af0, 0xffffffff80000001, 0x9, 0x8000000000000000, 0x10001, 0x800008, 0xfd, 0x2000, 0x6, 0x0, 0x0, 0x2000008, 0xd}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.516904705s ago: executing program 2 (id=405): openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) lseek(r1, 0x107, 0x0) getdents64(r1, 0x0, 0x0) 11.133343173s ago: executing program 2 (id=409): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380)={[{@block_validity}, {}, {@user_xattr}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@orlov}, {@usrquota}, {@grpquota}, {@norecovery}]}, 0x3, 0x569, &(0x7f0000000940)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x300000d, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000000)={@id={0x2, 0x0, @a}}) chdir(&(0x7f0000000140)='./file0\x00') mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x2000b1, 0x0) 10.479631147s ago: executing program 2 (id=414): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000b0, 0x0, 0x7fff}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.240154137s ago: executing program 6 (id=428): r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x100) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x7, 0x20000000080, 0x0, 0x4, 0x4, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x400, 0xffffffffffffffff, 0x6, 0x4, 0xf, 0x4000000007d5}, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x100a, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) 4.906114806s ago: executing program 5 (id=434): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xb, 0x825, 0xfffffffffffffff9, 0xa000000, 0x8, 0x43, 0x52e6ac5d, 0x2000fff7ffff, 0x9655, 0xfffffffffffffffe, 0x9, 0x6, 0x5, 0x80000007, 0x80000000000003, 0x919, 0xfffffffffffffffe, 0x81, 0x17, 0x3, 0x100000000, 0x5, 0x200000006, 0xfffffffffffffffc, 0x3, 0xa}) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x20, 0x10, 0x437, 0xfffffffa, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x704c3, 0xc4a48b7f26bf141b}}, 0x20}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x1000c014) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 4.821225247s ago: executing program 6 (id=435): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000680)={0x1, 0x1, 0xffff4f11, 0xfffd, 0xffffdfffffffffff, 0x9, 0x1, 0x200, 0x4a, 0x28, 0x80000005, 0x2}) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000000)) 4.726616099s ago: executing program 1 (id=436): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x10002}, {0xa, 0xce23, 0x3, @remote, 0x3}, r3, 0x7}}, 0x48) 4.624589621s ago: executing program 5 (id=437): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xe}, {0xfff1, 0xfff1}, {0x2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x24041080) 4.590862122s ago: executing program 6 (id=438): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f0000002940)={&(0x7f00000000c0), &(0x7f0000001940)=""/4096, 0x1000}) r3 = fcntl$dupfd(r1, 0x406, r1) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 4.513646004s ago: executing program 1 (id=439): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="2ef26f0f3566b842000f00d8b805000000b9a00000000f01c166baf80cb8b7351187ef66bafc0cb000ee0fde460b0f0130670f01c28fe868cfe20a", 0x3b}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.338307028s ago: executing program 6 (id=440): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000180)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@orlov}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@user_xattr}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0x400fff}}]}, 0xfa, 0x47a, &(0x7f0000000340)="$eJzs3M9vFFUcAPDvTLflt62IP0CQKhqJP1pafsjBi0YTDpqY6AHjqbaFVAo1tCZCiFYPeDQk3o3/hfGkF6NeNPGqd0NCDBdQL2tmZ6aUZbfd0m2Xsp9PMu17M6/z3ndm3u6bed0NoGsNZj+SiO0R8UdE9OfZ2wsM5r9uXr80/s/1S+NJVKtv/53Uyt24fmm8LFr+3bY8Uy3zmxrUe/m9iLHp6cnzRX547uyHw7MXLr44dXbs9OTpyXOjx48fObyv79jo0bbEmcV1Y88nM3t3n3j3ypvjJ6+8/3OSRh531MXRLoP50W3omXZX1mE7FqWTyuIt+3+9lW50JdBJPRGRna7eWv/vj57YsrCtP17/vKONA9ZUtVqtLvGqPF8F7mNJdLoFQGeUb/TZ/W+5rNPQ455w7ZX8BiiL+2ax5FsqkeaJ/b1197fb21j/YEScnP/362yJNXoOAQCw2PfZ+OeFRuO/NB7JE33ZjweKOZSBiHgwInZGxEMRsSsiHo6olX00Ih5bYf31MyR3jn/Sq3cdXAuy8d/LxdzW7eO/tCwy0FPkdtTi701OTU1PHiqOycHo3XRqKpkcWaKOH177/cuGGyq3j/+yJau/HAsW7bhaqXtANzE2N7bKsBdc+yxiT6VR/EmU0zhJROyOiD13WcfUc5Wm25aPfwnNd9uy6jcRz+bnfz7q4i8lTecnR146Nnp0eHNMTx4aLq+KO/3y2+W3mtW/qvjbIDv/Wxte/wvxDySbI2YvXDxTm6+dXdHus64Tl//8ouk9TRF/1r1auf5P7Ciu/77kndqKvmLDx2Nzc+dHIvqSN+5cP3prb2W+LJ/Ff/BA4/6/M24diccjYm9E7IuIJ7KbwqLtT0bEUxFxYImD8NOrT3+wTPwNzv/6zJVm8U8sd/5j8flfeaLnzI/fLR//5ohodv6P1FIHizWtvP612sDVHDsAAADYKPL/gU/SoYV0mg4N5f/Dvyu2ptMzs3PPn5r56NxEPu89EL1p+aSrf9Hz0JHi2XCZH63LHy6eG3/Vs6WWHxqfmZ7odPDQ5bY16f+Zv3o63TpgzbVhHg3YoPR/6F76P3SnRP+Hrqb/Q/dq1P8/bVp66Ns1bQywrrz/Q/dqof/P57+ajwqAjcn7P3Qv/R+6UtPPxqer+sh/y4ktbdrPf8X3Ga5HmyWyRKT3RDPu/0Sl5S+zWEGi2p/3/2zNpoZlOv3KBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0B7/BwAA///wDOHx") syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0)=0x8, 0x9) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 4.106692443s ago: executing program 1 (id=441): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r2, &(0x7f0000000280)={0x1f, 0xfffe, @any, 0x0, 0x1}, 0xe) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x80800) 4.000556965s ago: executing program 6 (id=442): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x100) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x7, 0x20000000080, 0x0, 0x4, 0x4, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x400, 0xffffffffffffffff, 0x6, 0x4, 0xf, 0x4000000007d5}, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x100a, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) 3.037401075s ago: executing program 1 (id=443): r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x100) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x7, 0x20000000080, 0x0, 0x4, 0x4, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x400, 0xffffffffffffffff, 0x6, 0x4, 0xf, 0x4000000007d5}, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x100a, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) 2.040924367s ago: executing program 5 (id=444): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048084}, 0x0) 1.756666862s ago: executing program 6 (id=445): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xb, 0x825, 0xfffffffffffffff9, 0xa000000, 0x8, 0x43, 0x52e6ac5d, 0x2000fff7ffff, 0x9655, 0xfffffffffffffffe, 0x9, 0x6, 0x5, 0x80000007, 0x80000000000003, 0x919, 0xfffffffffffffffe, 0x81, 0x17, 0x3, 0x100000000, 0x5, 0x200000006, 0xfffffffffffffffc, 0x3, 0xa}) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x20, 0x10, 0x437, 0xfffffffa, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x704c3, 0xc4a48b7f26bf141b}}, 0x20}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x1000c014) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 1.493905588s ago: executing program 35 (id=445): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xb, 0x825, 0xfffffffffffffff9, 0xa000000, 0x8, 0x43, 0x52e6ac5d, 0x2000fff7ffff, 0x9655, 0xfffffffffffffffe, 0x9, 0x6, 0x5, 0x80000007, 0x80000000000003, 0x919, 0xfffffffffffffffe, 0x81, 0x17, 0x3, 0x100000000, 0x5, 0x200000006, 0xfffffffffffffffc, 0x3, 0xa}) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x20, 0x10, 0x437, 0xfffffffa, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x704c3, 0xc4a48b7f26bf141b}}, 0x20}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x1000c014) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 1.447615809s ago: executing program 1 (id=447): syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000200)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r2, &(0x7f0000002140)=""/17, 0x11, 0x0) 1.447448349s ago: executing program 5 (id=448): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000009000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="0f20c00f22c0f30fc7fb0f01c366420f3a0bfc2266ba6100b8cf5d00006cefef0f32362e0fc4d8c3660f382a2e0f8fcf612753", 0x33}], 0x1, 0xc1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.130540866s ago: executing program 1 (id=449): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 440.40657ms ago: executing program 5 (id=450): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000180)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@orlov}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@user_xattr}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0x400fff}}]}, 0xfa, 0x47a, &(0x7f0000000340)="$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") syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0)=0x8, 0x9) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 0s ago: executing program 5 (id=451): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) kernel console output (not intermixed with test programs): 5][ T4449] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 71.773846][ T4449] REISERFS (device loop0): using ordered data mode [ 71.780833][ T4449] reiserfs: using flush barriers [ 71.788564][ T4449] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 71.806311][ T4454] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 71.812611][ T4449] REISERFS (device loop0): checking transaction log (loop0) [ 71.857161][ T4314] mcp2221 0003:04D8:00DD.0003: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 71.888861][ T4454] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #12: block 7: comm syz.4.34: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 71.917411][ T4454] EXT4-fs (loop4): Remounting filesystem read-only [ 71.984737][ T4278] EXT4-fs error (device loop4): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /9/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 72.000702][ T4449] REISERFS (device loop0): Using tea hash to sort names [ 72.015181][ T4278] EXT4-fs (loop4): Remounting filesystem read-only [ 72.033780][ T4278] EXT4-fs error (device loop4): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /9/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 72.035027][ T4449] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 72.072132][ T4278] EXT4-fs (loop4): Remounting filesystem read-only [ 72.080773][ T4278] EXT4-fs error (device loop4): empty_inline_dir:1895: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 72.092353][ T4314] usb 2-1: USB disconnect, device number 3 [ 72.117122][ T4278] EXT4-fs (loop4): Remounting filesystem read-only [ 72.123675][ T4278] EXT4-fs warning (device loop4): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 72.143044][ T4278] EXT4-fs error (device loop4): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /9/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 72.173022][ T4278] EXT4-fs (loop4): Remounting filesystem read-only [ 72.180322][ T4278] EXT4-fs error (device loop4): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /9/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 72.209969][ T4449] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 72.210841][ T4278] EXT4-fs (loop4): Remounting filesystem read-only [ 72.231244][ T4449] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 72.241884][ T4278] EXT4-fs error (device loop4): empty_inline_dir:1895: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 72.248227][ T4449] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 72.273274][ T4278] EXT4-fs (loop4): Remounting filesystem read-only [ 72.283798][ T4449] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 72.293475][ T4278] EXT4-fs warning (device loop4): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 72.304807][ T4449] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 72.347969][ T4278] EXT4-fs error (device loop4): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /9/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 72.374922][ T4449] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 72.395514][ T4278] EXT4-fs (loop4): Remounting filesystem read-only [ 72.402330][ T4278] EXT4-fs error (device loop4): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /9/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 72.427530][ T4449] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 72.441082][ T4278] EXT4-fs (loop4): Remounting filesystem read-only [ 72.451128][ T4449] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 72.458800][ T4278] EXT4-fs error (device loop4): empty_inline_dir:1895: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 72.475398][ T4449] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 72.506098][ T4278] EXT4-fs warning (device loop4): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 72.524409][ T4449] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 72.525115][ T4278] EXT4-fs warning (device loop4): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 72.559279][ T4278] EXT4-fs warning (device loop4): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 72.584210][ T22] misc userio: Buffer overflowed, userio client isn't keeping up [ 72.592793][ T4278] EXT4-fs warning (device loop4): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 72.631912][ T4278] EXT4-fs warning (device loop4): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 72.668712][ T4278] EXT4-fs warning (device loop4): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 72.698788][ T4278] EXT4-fs warning (device loop4): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 72.731245][ T4278] EXT4-fs warning (device loop4): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 72.793432][ T4473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.42'. [ 72.821005][ T4473] device team0 entered promiscuous mode [ 72.831925][ T4473] device team_slave_0 entered promiscuous mode [ 72.852845][ T4473] device team_slave_1 entered promiscuous mode [ 72.881733][ T4473] device team0 left promiscuous mode [ 72.890650][ T4473] device team_slave_0 left promiscuous mode [ 72.898458][ T4473] device team_slave_1 left promiscuous mode [ 73.067274][ T4482] Zero length message leads to an empty skb [ 73.507261][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.611307][ T4489] set_capacity_and_notify: 1 callbacks suppressed [ 73.611321][ T4489] loop0: detected capacity change from 0 to 40427 [ 73.616467][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.631157][ T4489] F2FS-fs (loop0): invalid crc value [ 73.661666][ T22] input: PS/2 Generic Mouse as /devices/serio2/input/input5 [ 73.690840][ T4489] F2FS-fs (loop0): Found nat_bits in checkpoint [ 73.744769][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.784316][ T4489] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 73.836858][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.894513][ T22] psmouse serio2: Failed to enable mouse on [ 73.906988][ T4489] F2FS-fs (loop0): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 74.503703][ T4274] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.514599][ T4274] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.533591][ T4274] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.594520][ T4274] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.613143][ T4274] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 74.620589][ T4274] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.729471][ T4507] loop2: detected capacity change from 0 to 8192 [ 74.739622][ T4507] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 74.758825][ T4499] loop3: detected capacity change from 0 to 32768 [ 74.794176][ T4507] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 74.817705][ T4507] REISERFS (device loop2): using ordered data mode [ 74.834421][ T4507] reiserfs: using flush barriers [ 74.846703][ T4499] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.52 (4499) [ 74.873624][ T4507] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 74.964985][ T4499] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 74.985172][ T4507] REISERFS (device loop2): checking transaction log (loop2) [ 75.006812][ T4499] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 75.047204][ T4507] REISERFS (device loop2): Using r5 hash to sort names [ 75.054500][ T4499] BTRFS info (device loop3): enabling disk space caching [ 75.061950][ T4507] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 75.102936][ T4499] BTRFS info (device loop3): force clearing of disk cache [ 75.144263][ T4499] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 75.200996][ T4499] BTRFS info (device loop3): use zstd compression, level 3 [ 75.213167][ T4499] BTRFS info (device loop3): disk space caching is enabled [ 75.233793][ T4517] fido_id[4517]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 75.551919][ T4538] loop0: detected capacity change from 0 to 4096 [ 75.611619][ T4499] BTRFS info (device loop3): enabling ssd optimizations [ 75.627359][ T4538] EXT4-fs: inline encryption not supported [ 75.674781][ T4499] BTRFS info (device loop3): rebuilding free space tree [ 75.932031][ T4499] BTRFS info (device loop3): disabling free space tree [ 75.956330][ T4505] chnl_net:caif_netlink_parms(): no params data found [ 75.977605][ T4499] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 76.022412][ T4499] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 76.214742][ T4538] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.239749][ T4538] EXT4-fs (loop0): Test dummy encryption mode enabled [ 76.282860][ T4538] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 76.331759][ T4538] System zones: 0-5 [ 76.354788][ T4538] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 76.497711][ T4538] fs-verity: sha512 using implementation "sha512-avx2" [ 76.674167][ T4286] Bluetooth: hci3: command 0x0409 tx timeout [ 76.770425][ T4505] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.832222][ T4505] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.871334][ T4553] loop1: detected capacity change from 0 to 32768 [ 76.877884][ T4279] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 76.903537][ T4505] device bridge_slave_0 entered promiscuous mode [ 76.931507][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 76.951827][ T4505] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.964506][ T4317] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 77.066587][ T4505] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.139268][ T4505] device bridge_slave_1 entered promiscuous mode [ 77.227852][ T4317] usb 3-1: Using ep0 maxpacket: 16 [ 77.248011][ T4317] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.272676][ T4317] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.293336][ T4317] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 77.314299][ T4317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.392005][ T4553] XFS (loop1): Mounting V5 Filesystem [ 77.524880][ T4553] XFS (loop1): Ending clean mount [ 77.815735][ T4317] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 77.829927][ T4505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.930614][ T11] device hsr_slave_0 left promiscuous mode [ 78.003288][ T11] device hsr_slave_1 left promiscuous mode [ 78.011121][ T4269] XFS (loop1): Unmounting Filesystem [ 78.022119][ T4317] usb 3-1: USB disconnect, device number 2 [ 78.055116][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.080908][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.135326][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.150941][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.190010][ T11] device bridge_slave_1 left promiscuous mode [ 78.225870][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.278806][ T11] device bridge_slave_0 left promiscuous mode [ 78.286993][ T22] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 78.304175][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.400795][ T11] device veth1_macvtap left promiscuous mode [ 78.428236][ T11] device veth0_macvtap left promiscuous mode [ 78.448978][ T11] device veth1_vlan left promiscuous mode [ 78.462575][ T4608] loop3: detected capacity change from 0 to 32768 [ 78.481134][ T11] device veth0_vlan left promiscuous mode [ 78.494178][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 78.503487][ T22] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 78.517374][ T22] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 78.531894][ T22] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 78.546219][ T22] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 78.558861][ T22] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 78.620207][ T22] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 78.651741][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.709135][ T4608] XFS (loop3): Mounting V5 Filesystem [ 78.756438][ T4286] Bluetooth: hci3: command 0x041b tx timeout [ 78.766402][ T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 78.778990][ T4608] XFS (loop3): Ending clean mount [ 78.845475][ T4279] XFS (loop3): Unmounting Filesystem [ 78.928849][ T4317] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 78.981378][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.011823][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.038920][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 79.074959][ T7] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 79.089903][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.120899][ T7] usb 2-1: config 0 descriptor?? [ 79.131725][ T4317] usb 3-1: Using ep0 maxpacket: 8 [ 79.164164][ T4317] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 79.184834][ T4317] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 79.201971][ T4317] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 79.220691][ T4317] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 79.231933][ T4317] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 79.254244][ T4317] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 79.275483][ T4317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.484022][ T128] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 79.502053][ T4317] usb 3-1: usb_control_msg returned -32 [ 79.509326][ T4317] usbtmc 3-1:16.0: can't read capabilities [ 79.557917][ T7] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 79.568711][ T4628] usbtmc 1-1:16.0: simple control status returned aa [ 79.602012][ T7] plantronics 0003:047F:FFFF.0005: hiddev2,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 79.686423][ T128] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.711251][ T128] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.723601][ T128] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 79.737683][ T128] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 79.749870][ T128] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.777799][ T128] usb 4-1: config 0 descriptor?? [ 79.777799][ T7] usb 1-1: USB disconnect, device number 3 [ 79.923461][ T11] team0 (unregistering): Port device team_slave_1 removed [ 79.970206][ T11] team0 (unregistering): Port device team_slave_0 removed [ 80.017228][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.063334][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.202613][ T128] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 80.236269][ T128] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 80.543502][ T128] usb 4-1: USB disconnect, device number 3 [ 80.642003][ T11] bond0 (unregistering): Released all slaves [ 80.773140][ T4505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.820880][ T4505] team0: Port device team_slave_0 added [ 80.833741][ T4505] team0: Port device team_slave_1 added [ 80.844827][ T4286] Bluetooth: hci3: command 0x040f tx timeout [ 80.949118][ T4505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.974075][ T4505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.024119][ T4505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.042721][ T4505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.058527][ T4638] loop0: detected capacity change from 0 to 40427 [ 81.065450][ T4505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.093376][ T4505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.121660][ T4638] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 81.130412][ T4638] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 81.182677][ T4638] F2FS-fs (loop0): Found nat_bits in checkpoint [ 81.196688][ T4505] device hsr_slave_0 entered promiscuous mode [ 81.207444][ T4505] device hsr_slave_1 entered promiscuous mode [ 81.218534][ T4505] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.230582][ T4505] Cannot create hsr debugfs directory [ 81.325524][ T27] cfg80211: failed to load regulatory.db [ 81.369143][ T4638] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 81.382510][ T4638] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 81.551905][ T4314] usb 2-1: USB disconnect, device number 4 [ 81.649954][ T4505] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 81.661161][ T26] audit: type=1800 audit(1782851296.586:2): pid=4638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.73" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 81.728292][ T4505] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 81.779915][ T128] usb 3-1: USB disconnect, device number 3 [ 81.793605][ T4505] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 81.804364][ T26] audit: type=1800 audit(1782851296.736:3): pid=4638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.73" name="file1" dev="loop0" ino=11 res=0 errno=0 [ 81.851849][ T4505] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 81.938522][ T4270] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 81.938568][ T4270] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 81.954470][ T4270] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 81.962258][ T4270] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 81.984287][ T4270] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 81.991994][ T4270] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 82.020681][ T4270] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 82.108295][ T4505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.153227][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.177022][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.204135][ T4314] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 82.234423][ T4505] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.243240][ T75] Trying to write to read-only block-device loop0 [ 82.265831][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.284740][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.308039][ T128] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 82.315987][ T4371] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.323621][ T4371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.338071][ T4646] loop3: detected capacity change from 0 to 32768 [ 82.385452][ T4314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.398024][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.405802][ T4314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.417091][ T4314] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 82.428285][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.437243][ T4314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.451134][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.486114][ T4314] usb 2-1: config 0 descriptor?? [ 82.496653][ T4646] XFS (loop3): Mounting V5 Filesystem [ 82.545692][ T128] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 82.570755][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.578081][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.610210][ T128] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 82.627050][ T128] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 82.669704][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.688600][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.708115][ T128] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.760055][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.794049][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.803596][ T4646] XFS (loop3): Ending clean mount [ 82.824466][ T4646] XFS (loop3): Quotacheck needed: Please wait. [ 82.831798][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.892778][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.906598][ T4314] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 82.914273][ T4286] Bluetooth: hci3: command 0x0419 tx timeout [ 82.921122][ T4646] XFS (loop3): Quotacheck: Done. [ 82.921615][ T4314] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 82.946495][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.962203][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.972271][ T128] usb 3-1: usb_control_msg returned -32 [ 82.984552][ T128] usbtmc 3-1:16.0: can't read capabilities [ 83.006710][ T4505] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.026600][ T4314] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0007/input/input7 [ 83.060362][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.082500][ T4314] cm6533_jd 0003:0D8C:0022.0007: input,hiddev1,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 83.096781][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.105992][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.121773][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.133544][ T4314] usb 2-1: USB disconnect, device number 5 [ 83.391867][ T4677] fido_id[4677]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 83.670866][ T4678] syz.3.74 (4678) used greatest stack depth: 19936 bytes left [ 83.756734][ T4279] XFS (loop3): Unmounting Filesystem [ 83.884571][ T4675] loop0: detected capacity change from 0 to 40427 [ 83.932830][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.975369][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.003573][ T4505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.565787][ T4710] kvm [4709]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x10000000001780 [ 84.568862][ T4693] loop1: detected capacity change from 0 to 40427 [ 84.620481][ T4693] F2FS-fs (loop1): Wrong segment_count / block_count (64 > 16384) [ 84.620646][ T22] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 84.657068][ T4693] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 84.773453][ T4693] F2FS-fs (loop1): Found nat_bits in checkpoint [ 84.834591][ T22] usb 4-1: Using ep0 maxpacket: 32 [ 84.844178][ T22] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 84.891756][ T22] usb 4-1: config 0 interface 0 has no altsetting 0 [ 84.920512][ T22] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 84.939790][ T7] usb 3-1: USB disconnect, device number 4 [ 84.947879][ T4693] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 84.960944][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.990003][ T4693] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 85.019716][ T22] usb 4-1: config 0 descriptor?? [ 85.150801][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.184485][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.256785][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.287834][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.336714][ T4505] device veth0_vlan entered promiscuous mode [ 85.351680][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.366434][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.422777][ T4505] device veth1_vlan entered promiscuous mode [ 85.494571][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.505929][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.518592][ T4737] loop2: detected capacity change from 0 to 512 [ 85.535174][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.557975][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.600901][ T4737] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 85.636216][ T4269] syz-executor: attempt to access beyond end of device [ 85.636216][ T4269] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 85.637420][ T4505] device veth0_macvtap entered promiscuous mode [ 85.737393][ T4505] device veth1_macvtap entered promiscuous mode [ 85.762782][ T4505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.773494][ T4505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.783924][ T4505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.795255][ T4505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.814861][ T22] corsair-cpro 0003:1B1C:0C10.0008: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 85.837432][ T4505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.869856][ T4505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.893975][ T4505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.924014][ T4505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.946260][ T4505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.963996][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 85.989029][ T4732] loop0: detected capacity change from 0 to 32768 [ 85.996874][ T4505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.008104][ T4505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.021874][ T4505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.033958][ T22] corsair-cpro: probe of 0003:1B1C:0C10.0008 failed with error -5 [ 86.043756][ T4732] /dev/loop0: Can't open blockdev [ 86.099270][ T4505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.132954][ T4505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.160459][ T4505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.172312][ T4748] loop2: detected capacity change from 0 to 1024 [ 86.181298][ T4505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.198184][ T4748] EXT4-fs: Ignoring removed bh option [ 86.205380][ T4505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.252776][ T4748] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 86.293536][ T4505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.310539][ T4753] loop1: detected capacity change from 0 to 256 [ 86.314336][ T4748] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.330820][ T22] usb 4-1: USB disconnect, device number 4 [ 86.343685][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.352552][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.361204][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.371303][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.380638][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.389843][ T4556] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 86.390817][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.410509][ T4753] exfat: Deprecated parameter 'utf8' [ 86.432619][ T4505] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.442199][ T4746] fido_id[4746]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 86.493354][ T4753] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xeb34f926, utbl_chksum : 0xe619d30d) [ 86.538634][ T4505] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.571129][ T4748] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: comm syz.2.88: lblock 0 mapped to illegal pblock 0 (length 1) [ 86.595387][ T4505] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.616506][ T4505] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.617385][ T4748] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 86.714706][ T4748] EXT4-fs (loop2): This should not happen!! Data will be lost [ 86.714706][ T4748] [ 86.807585][ T4755] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: comm syz.2.88: lblock 0 mapped to illegal pblock 0 (length 1) [ 86.823007][ T4371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.850446][ T4371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.882341][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.978366][ T4331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.987002][ T4331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.015830][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.111607][ T4762] loop3: detected capacity change from 0 to 256 [ 87.111881][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 87.224601][ T4762] exFAT-fs (loop3): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 87.322158][ T26] audit: type=1800 audit(1782851302.246:4): pid=4762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.91" name="file1" dev="loop3" ino=1048600 res=0 errno=0 [ 87.374127][ T4762] exFAT-fs (loop3): error, found bogus dentry(11) beyond unused empty group(10) (start_clu : 5, cur_clu : 5) [ 87.437721][ T4762] exFAT-fs (loop3): Filesystem has been set read-only [ 87.449168][ T4772] exFAT-fs (loop3): hint_cluster is invalid (521) [ 87.527311][ T4772] exFAT-fs (loop3): error, invalid access to FAT (entry 0x00000208) [ 87.584157][ T4772] exFAT-fs (loop3): error, failed to bmap (inode : ffff888072399b60 iblock : 9, err : -5) [ 87.637435][ T4772] exFAT-fs (loop3): error, invalid access to FAT (entry 0x00000208) [ 87.667713][ T4772] exFAT-fs (loop3): error, invalid access to FAT (entry 0x00000208) [ 87.839982][ T4757] loop1: detected capacity change from 0 to 32768 [ 88.031910][ T4757] XFS (loop1): Mounting V5 Filesystem [ 88.104992][ T4795] loop5: detected capacity change from 0 to 8192 [ 88.130897][ T4795] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 88.147027][ T4795] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 88.157333][ T4795] REISERFS (device loop5): using ordered data mode [ 88.164847][ T4795] reiserfs: using flush barriers [ 88.172932][ T4795] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 88.190870][ T4795] REISERFS (device loop5): checking transaction log (loop5) [ 88.201449][ T4795] REISERFS (device loop5): Using r5 hash to sort names [ 88.209526][ T4795] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 88.211247][ T4757] XFS (loop1): Ending clean mount [ 88.274297][ T7] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 88.310353][ T4757] XFS (loop1): Quotacheck needed: Please wait. [ 88.427379][ T4757] XFS (loop1): Quotacheck: Done. [ 88.464132][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 88.471351][ T7] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.533669][ T7] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.569696][ T7] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 88.619646][ T4775] loop2: detected capacity change from 0 to 32768 [ 88.650865][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.798718][ T4775] (syz.2.94,4775,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 88.868268][ T4775] (syz.2.94,4775,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 88.923285][ T4269] XFS (loop1): Unmounting Filesystem [ 89.016448][ T4775] JBD2: Ignoring recovery information on journal [ 89.092835][ T7] mcp2221 0003:04D8:00DD.0009: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 89.209761][ T4775] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 89.557549][ T4821] loop5: detected capacity change from 0 to 4096 [ 89.620390][ T4821] EXT4-fs: Ignoring removed orlov option [ 89.658944][ T4821] EXT4-fs (loop5): Test dummy encryption mode enabled [ 89.730097][ T4821] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 89.992515][ T4271] ocfs2: Unmounting device (7,2) on (node local) [ 89.999867][ T4817] loop0: detected capacity change from 0 to 131072 [ 90.009808][ T4817] XFS: ikeep mount option is deprecated. [ 90.016671][ T4817] /dev/loop0: Can't open blockdev [ 90.022661][ T7] usb 4-1: USB disconnect, device number 5 [ 90.199217][ T4828] loop3: detected capacity change from 0 to 164 [ 90.624354][ T4821] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 90.661561][ T4840] loop3: detected capacity change from 0 to 512 [ 90.764306][ T4840] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 90.843225][ T4840] EXT4-fs (loop3): 1 truncate cleaned up [ 90.864694][ T4840] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 90.883844][ T4505] EXT4-fs (loop5): unmounting filesystem. [ 91.093534][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 92.066085][ T4852] binder: BINDER_SET_CONTEXT_MGR already set [ 92.073828][ T4852] binder: 4851:4852 ioctl 4018620d 200000004a80 returned -16 [ 92.131400][ T4843] loop0: detected capacity change from 0 to 32768 [ 92.144511][ T4848] loop1: detected capacity change from 0 to 32768 [ 92.155857][ T4843] /dev/loop0: Can't open blockdev [ 92.203735][ T4848] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 92.267161][ T4848] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 92.381863][ T4848] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 92.436639][ T7] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 92.457062][ T7] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 92.576962][ T4872] loop3: detected capacity change from 0 to 128 [ 92.595263][ T7] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 138ms [ 92.645056][ T4872] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 92.655841][ T7] gfs2: fsid=syz:syz.0: jid=0: Done [ 92.690980][ T4848] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 93.106575][ T4848] gfs2: fsid=syz:syz.0: found 1 quota changes [ 93.400109][ T4269] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 93.400109][ T4269] inode = 11 2339 [ 93.400109][ T4269] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 413 [ 93.440530][ T4269] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 93.460759][ T4269] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:4269 [syz-executor] gfs2_quota_sync+0x355/0x780 [ 93.500399][ T4269] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 93.527814][ T4269] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 93.568514][ T4269] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 93.597837][ T4269] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 93.634312][ T4269] gfs2: fsid=syz:syz.0: File system withdrawn [ 93.642672][ T4881] loop2: detected capacity change from 0 to 32768 [ 93.654981][ T4269] CPU: 0 PID: 4269 Comm: syz-executor Not tainted syzkaller #0 [ 93.662872][ T4269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 93.674456][ T4269] Call Trace: [ 93.678403][ T4269] [ 93.681954][ T4269] dump_stack_lvl+0x188/0x24e [ 93.687128][ T4269] ? show_regs_print_info+0x12/0x12 [ 93.692441][ T4269] ? load_image+0x410/0x410 [ 93.697061][ T4269] ? kobject_uevent_env+0x364/0x890 [ 93.702573][ T4269] gfs2_withdraw+0xc69/0x1450 [ 93.707380][ T4269] ? gfs2_lm+0x240/0x240 [ 93.711727][ T4269] ? gfs2_consist_inode_i+0xf1/0x110 [ 93.717036][ T4269] gfs2_inode_refresh+0xb2d/0x1190 [ 93.722679][ T4269] ? gfs2_inode_metasync+0xf0/0xf0 [ 93.728017][ T4269] ? gfs2_glock_nq+0xcee/0x14d0 [ 93.732877][ T4269] gfs2_instantiate+0x15e/0x210 [ 93.737991][ T4269] gfs2_glock_wait+0x1d0/0x2a0 [ 93.742958][ T4269] do_sync+0x4af/0xbb0 [ 93.747466][ T4269] ? gfs2_quota_sync+0x355/0x780 [ 93.752494][ T4269] ? slot_put+0x1e0/0x1e0 [ 93.757174][ T4269] ? __lock_acquire+0x7bd0/0x7bd0 [ 93.762492][ T4269] ? do_raw_spin_lock+0x128/0x2f0 [ 93.767763][ T4269] ? gfs2_quota_sync+0x355/0x780 [ 93.773221][ T4269] ? do_raw_spin_unlock+0x11d/0x230 [ 93.779232][ T4269] gfs2_quota_sync+0x355/0x780 [ 93.784550][ T4269] gfs2_sync_fs+0x48/0xb0 [ 93.788976][ T4269] sync_filesystem+0xe6/0x220 [ 93.793857][ T4269] generic_shutdown_super+0x6b/0x340 [ 93.799151][ T4269] kill_block_super+0x7c/0xe0 [ 93.804715][ T4269] deactivate_locked_super+0x93/0xf0 [ 93.810194][ T4269] cleanup_mnt+0x471/0x4f0 [ 93.814898][ T4269] task_work_run+0x1d0/0x260 [ 93.819677][ T4269] ? task_work_cancel+0x220/0x220 [ 93.825072][ T4269] ? exit_to_user_mode_loop+0x3b/0x110 [ 93.830778][ T4269] exit_to_user_mode_loop+0xe6/0x110 [ 93.836268][ T4269] exit_to_user_mode_prepare+0xee/0x180 [ 93.842473][ T4269] syscall_exit_to_user_mode+0x16/0x40 [ 93.848185][ T4269] do_syscall_64+0x58/0xa0 [ 93.852757][ T4269] ? clear_bhb_loop+0x60/0xb0 [ 93.858163][ T4269] ? clear_bhb_loop+0x60/0xb0 [ 93.863333][ T4269] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.869390][ T4269] RIP: 0033:0x7f666159e097 [ 93.874258][ T4269] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 93.894704][ T4269] RSP: 002b:00007fff8a293528 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 93.903851][ T4269] RAX: 0000000000000000 RBX: 00007f66616322ca RCX: 00007f666159e097 [ 93.913144][ T4269] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff8a2935e0 [ 93.922019][ T4269] RBP: 00007fff8a2935e0 R08: 00007fff8a2945e0 R09: 00000000ffffffff [ 93.930884][ T4269] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff8a294670 [ 93.939842][ T4269] R13: 00007f66616322ca R14: 0000000000016c46 R15: 00007fff8a2946b0 [ 93.948172][ T4269] [ 93.951556][ T27] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 93.982560][ T4269] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 94.016668][ T4269] CPU: 1 PID: 4269 Comm: syz-executor Not tainted syzkaller #0 [ 94.024540][ T4269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 94.034798][ T4269] Call Trace: [ 94.038186][ T4269] [ 94.041193][ T4269] dump_stack_lvl+0x188/0x24e [ 94.045899][ T4269] ? gfs2_assert_warn_i+0xbb/0x2c0 [ 94.051128][ T4269] ? show_regs_print_info+0x12/0x12 [ 94.056966][ T4269] ? load_image+0x410/0x410 [ 94.061674][ T4269] ? do_raw_spin_unlock+0x11d/0x230 [ 94.066930][ T4269] gfs2_assert_warn_i+0x187/0x2c0 [ 94.072358][ T4269] gfs2_quota_cleanup+0x48c/0x670 [ 94.077604][ T4269] gfs2_put_super+0x22f/0x920 [ 94.082329][ T4269] ? gfs2_evict_inode+0x1290/0x1290 [ 94.087933][ T4269] generic_shutdown_super+0x130/0x340 [ 94.093863][ T4269] kill_block_super+0x7c/0xe0 [ 94.099612][ T4269] deactivate_locked_super+0x93/0xf0 [ 94.102650][ T4881] XFS (loop2): Mounting V5 Filesystem [ 94.105888][ T4269] cleanup_mnt+0x471/0x4f0 [ 94.105970][ T4269] task_work_run+0x1d0/0x260 [ 94.105992][ T4269] ? task_work_cancel+0x220/0x220 [ 94.106010][ T4269] ? exit_to_user_mode_loop+0x3b/0x110 [ 94.106031][ T4269] exit_to_user_mode_loop+0xe6/0x110 [ 94.106048][ T4269] exit_to_user_mode_prepare+0xee/0x180 [ 94.106065][ T4269] syscall_exit_to_user_mode+0x16/0x40 [ 94.106091][ T4269] do_syscall_64+0x58/0xa0 [ 94.106104][ T4269] ? clear_bhb_loop+0x60/0xb0 [ 94.157449][ T4269] ? clear_bhb_loop+0x60/0xb0 [ 94.162155][ T4269] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 94.168166][ T4269] RIP: 0033:0x7f666159e097 [ 94.172865][ T4269] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 94.193879][ T4269] RSP: 002b:00007fff8a293528 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 94.202749][ T4269] RAX: 0000000000000000 RBX: 00007f66616322ca RCX: 00007f666159e097 [ 94.210760][ T4269] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff8a2935e0 [ 94.219401][ T4269] RBP: 00007fff8a2935e0 R08: 00007fff8a2945e0 R09: 00000000ffffffff [ 94.228355][ T4269] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff8a294670 [ 94.236435][ T4269] R13: 00007f66616322ca R14: 0000000000016c46 R15: 00007fff8a2946b0 [ 94.245166][ T4269] [ 94.365067][ T4881] XFS (loop2): Ending clean mount [ 94.366438][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.402256][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.402809][ T4881] XFS (loop2): Quotacheck needed: Please wait. [ 94.453123][ T27] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 94.480198][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.517825][ T4881] XFS (loop2): Quotacheck: Done. [ 94.523136][ T27] usb 1-1: config 0 descriptor?? [ 94.739449][ T4271] XFS (loop2): Unmounting Filesystem [ 94.830500][ T4901] loop3: detected capacity change from 0 to 40427 [ 94.888213][ T4901] F2FS-fs (loop3): Zoned block device path is missing [ 94.897580][ T4901] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 94.957099][ T4901] F2FS-fs (loop3): invalid crc value [ 95.034773][ T4901] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 95.163635][ T27] usb 1-1: language id specifier not provided by device, defaulting to English [ 95.263456][ T4901] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 95.284003][ T4901] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 95.686128][ T4279] syz-executor: attempt to access beyond end of device [ 95.686128][ T4279] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 96.158022][ T4929] loop1: detected capacity change from 0 to 131072 [ 96.166757][ T4929] XFS: ikeep mount option is deprecated. [ 96.179833][ T27] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.000A/input/input8 [ 96.247339][ T4929] XFS (loop1): Mounting V5 Filesystem [ 96.268560][ T27] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.000A/input/input9 [ 96.283328][ T27] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.000A/input/input10 [ 96.344143][ T128] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 96.355265][ T27] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.000A/input/input11 [ 96.398924][ T4931] loop2: detected capacity change from 0 to 40427 [ 96.409374][ T4929] XFS (loop1): Starting recovery (logdev: internal) [ 96.445752][ T4931] F2FS-fs (loop2): Wrong segment_count / block_count (64 > 16384) [ 96.468189][ T4931] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 96.485659][ T4929] XFS (loop1): Ending recovery (logdev: internal) [ 96.511934][ T27] uclogic 0003:256C:006D.000A: input,hiddev0,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 96.546815][ T4931] F2FS-fs (loop2): Found nat_bits in checkpoint [ 96.554050][ T128] usb 6-1: Using ep0 maxpacket: 32 [ 96.575461][ T128] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 96.583852][ T128] usb 6-1: config 0 has no interface number 0 [ 96.689102][ T128] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 96.706990][ T4953] loop3: detected capacity change from 0 to 128 [ 96.712092][ T128] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.776472][ T27] usb 1-1: USB disconnect, device number 4 [ 96.814113][ T128] usb 6-1: Product: syz [ 96.818348][ T4931] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 96.844317][ T128] usb 6-1: Manufacturer: syz [ 96.848964][ T128] usb 6-1: SerialNumber: syz [ 96.857111][ T4931] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 96.867827][ T4953] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 96.895691][ T128] usb 6-1: config 0 descriptor?? [ 96.912735][ T128] smsc95xx v2.0.0 [ 96.917735][ T4269] XFS (loop1): Unmounting Filesystem [ 96.985966][ T4953] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 97.102354][ T4951] fido_id[4951]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 97.156046][ T4953] syz.3.121 (pid 4953) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 97.382527][ T4271] syz-executor: attempt to access beyond end of device [ 97.382527][ T4271] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 97.517660][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 98.130781][ T128] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 98.168073][ T128] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 98.195089][ T128] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 98.231828][ T128] smsc95xx: probe of 6-1:0.67 failed with error -71 [ 98.281733][ T128] usb 6-1: USB disconnect, device number 2 [ 98.700942][ T4987] binder: BINDER_SET_CONTEXT_MGR already set [ 98.707181][ T4987] binder: 4980:4987 ioctl 4018620d 200000004a80 returned -16 [ 99.100088][ T4991] loop1: detected capacity change from 0 to 256 [ 99.101016][ T4994] loop5: detected capacity change from 0 to 1024 [ 99.115456][ T4994] EXT4-fs: Ignoring removed oldalloc option [ 99.121474][ T4994] EXT4-fs: Ignoring removed orlov option [ 99.172080][ T4996] device syzkaller0 entered promiscuous mode [ 99.202761][ T4994] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 99.433613][ T5009] netlink: 44 bytes leftover after parsing attributes in process `syz.0.126'. [ 99.488508][ T4505] EXT4-fs (loop5): unmounting filesystem. [ 99.804355][ T5025] netlink: 'syz.0.133': attribute type 25 has an invalid length. [ 99.827370][ T5025] netlink: 'syz.0.133': attribute type 7 has an invalid length. [ 99.857132][ T5025] netlink: 'syz.0.133': attribute type 2 has an invalid length. [ 99.887133][ T5025] netlink: 'syz.0.133': attribute type 1 has an invalid length. [ 99.902610][ T5022] loop3: detected capacity change from 0 to 8192 [ 99.919974][ T5025] netlink: 124 bytes leftover after parsing attributes in process `syz.0.133'. [ 99.945650][ T5022] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 99.983963][ T5022] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 99.993466][ T5022] REISERFS (device loop3): using ordered data mode [ 100.017622][ T5022] reiserfs: using flush barriers [ 100.088688][ T5022] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 100.113080][ T5022] REISERFS (device loop3): checking transaction log (loop3) [ 100.310101][ T5022] REISERFS (device loop3): Using tea hash to sort names [ 100.336150][ T5022] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 100.491213][ T5022] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 100.558079][ T5022] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 100.571565][ T5023] loop2: detected capacity change from 0 to 32768 [ 100.641382][ T5022] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 100.703787][ T5023] XFS (loop2): Mounting V5 Filesystem [ 100.718946][ T5022] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 100.781500][ T5022] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 100.854221][ T5022] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 100.871884][ T5023] XFS (loop2): Ending clean mount [ 100.902948][ T5023] XFS (loop2): Quotacheck needed: Please wait. [ 101.138835][ T5047] binder: BINDER_SET_CONTEXT_MGR already set [ 101.151201][ T5047] binder: 5040:5047 ioctl 4018620d 200000004a80 returned -16 [ 101.153768][ T5023] XFS (loop2): Quotacheck: Done. [ 101.637821][ T4271] XFS (loop2): Unmounting Filesystem [ 101.714707][ T5034] loop0: detected capacity change from 0 to 40427 [ 101.788043][ T4389] I/O error, dev loop0, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 102.098081][ T5066] loop1: detected capacity change from 0 to 128 [ 102.151365][ T5066] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 102.216315][ T5066] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 102.222029][ T5070] device syzkaller0 entered promiscuous mode [ 102.298924][ T5070] netlink: 44 bytes leftover after parsing attributes in process `syz.3.144'. [ 102.567477][ T5079] loop1: detected capacity change from 0 to 128 [ 102.899471][ T5079] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 102.926223][ T5079] hpfs: filesystem error: improperly stopped [ 102.939044][ T5079] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 102.981225][ T5079] hpfs: You really don't want any checks? You are crazy... [ 102.996119][ T5079] hpfs: hpfs_map_sector(): read error [ 103.014511][ T5079] hpfs: code page support is disabled [ 103.034185][ T5079] hpfs: hpfs_map_4sectors(): unaligned read [ 103.045966][ T5079] hpfs: hpfs_map_4sectors(): unaligned read [ 103.054048][ T5079] hpfs: filesystem error: unable to find root dir [ 103.095820][ T5079] hpfs: hpfs_map_4sectors(): unaligned read [ 103.102597][ T5079] hpfs: hpfs_map_sector(): read error [ 103.141738][ T5079] hpfs: hpfs_map_4sectors(): unaligned read [ 103.160644][ T5079] hpfs: hpfs_map_sector(): read error [ 103.225984][ T4314] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 103.434189][ T4314] usb 4-1: Using ep0 maxpacket: 8 [ 103.442364][ T4314] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 103.482770][ T4314] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 103.510371][ T4314] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 103.531038][ T4314] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 103.552048][ T4314] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 103.565594][ T27] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 103.593821][ T4314] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 103.613588][ T4314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.706861][ T5098] loop0: detected capacity change from 0 to 32768 [ 103.744937][ T5098] /dev/loop0: Can't open blockdev [ 103.764072][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 103.771131][ T27] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 103.791161][ T27] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 103.811910][ T27] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 103.824711][ T27] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 103.837952][ T27] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 103.908543][ T27] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 103.924095][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.979529][ T5106] binder: BINDER_SET_CONTEXT_MGR already set [ 103.985602][ T5106] binder: 5105:5106 ioctl 4018620d 200000004a80 returned -16 [ 104.161390][ T27] usb 2-1: usb_control_msg returned -32 [ 104.167979][ T27] usbtmc 2-1:16.0: can't read capabilities [ 104.182311][ T5111] loop2: detected capacity change from 0 to 32768 [ 104.227781][ T5111] XFS (loop2): Mounting V5 Filesystem [ 104.283954][ T5111] XFS (loop2): Ending clean mount [ 104.291305][ T5111] XFS (loop2): Quotacheck needed: Please wait. [ 104.321818][ T5111] XFS (loop2): Quotacheck: Done. [ 104.339841][ T26] audit: type=1800 audit(1782851319.266:5): pid=5111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.156" name="file1" dev="loop2" ino=9286 res=0 errno=0 [ 104.425067][ T5124] usbtmc 4-1:16.0: simple control status returned aa [ 104.546839][ T4271] XFS (loop2): Unmounting Filesystem [ 104.628873][ T4317] usb 4-1: USB disconnect, device number 6 [ 105.249421][ T5138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.161'. [ 105.272799][ T5138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.161'. [ 105.297711][ T5138] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.307054][ T5138] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.315839][ T5138] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.324653][ T5138] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.361967][ T5138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.161'. [ 105.372957][ T5138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.161'. [ 106.194151][ T4317] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 106.314509][ T4314] usb 2-1: USB disconnect, device number 6 [ 106.425064][ T4317] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 106.439281][ T5172] binder: BINDER_SET_CONTEXT_MGR already set [ 106.447265][ T5172] binder: 5161:5172 ioctl 4018620d 200000004a80 returned -16 [ 106.602528][ T4317] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.828481][ T4317] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.858791][ T4317] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 106.912681][ T4317] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 106.940941][ T4317] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.965424][ T4317] usb 6-1: config 0 descriptor?? [ 107.051819][ T5165] loop0: detected capacity change from 0 to 32768 [ 107.244116][ T7] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 107.288901][ T4316] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 107.343255][ T4316] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 107.396060][ T4317] plantronics 0003:047F:FFFF.000C: unknown main item tag 0xd [ 107.437958][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.459257][ T4317] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 107.485235][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.527383][ T4317] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 107.551112][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 107.602524][ T7] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 107.632351][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.658450][ T7] usb 2-1: config 0 descriptor?? [ 107.711347][ T27] usb 6-1: USB disconnect, device number 3 [ 107.942119][ T5190] fido_id[5190]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 108.097859][ T7] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 108.122041][ T7] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 108.635589][ T7] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 108.973887][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 109.166900][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.183385][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.195375][ T7] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 109.205481][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.215721][ T7] usb 3-1: config 0 descriptor?? [ 109.343887][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 109.455591][ C0] plantronics 0003:047F:FFFF.000D: usb_submit_urb(ctrl) failed: -1 [ 109.793950][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 109.817485][ T7] cm6533_jd 0003:0D8C:0022.000E: unknown main item tag 0x0 [ 109.843730][ T7] cm6533_jd 0003:0D8C:0022.000E: unknown main item tag 0x0 [ 109.857316][ T7] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.000E/input/input13 [ 109.905524][ T7] cm6533_jd 0003:0D8C:0022.000E: input,hiddev1,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 110.021575][ T5246] loop3: detected capacity change from 0 to 40427 [ 110.030085][ T7] usb 3-1: USB disconnect, device number 5 [ 110.077447][ T5246] F2FS-fs (loop3): invalid crc value [ 110.091217][ T5254] fido_id[5254]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 110.196043][ T5246] F2FS-fs (loop3): Found nat_bits in checkpoint [ 110.603900][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 110.629368][ T4317] usb 2-1: USB disconnect, device number 7 [ 110.687237][ T5246] F2FS-fs (loop3): Start checkpoint disabled! [ 110.744152][ T5246] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 110.773406][ T5263] loop0: detected capacity change from 0 to 1024 [ 110.798685][ T5263] EXT4-fs: Ignoring removed i_version option [ 110.827816][ T5263] EXT4-fs: Ignoring removed bh option [ 110.844131][ T5263] /dev/loop0: Can't open blockdev [ 111.447706][ T4371] kworker/u4:7: attempt to access beyond end of device [ 111.447706][ T4371] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 112.023782][ T5298] binder: BINDER_SET_CONTEXT_MGR already set [ 112.032077][ T5298] binder: 5290:5298 ioctl 4018620d 200000004a80 returned -16 [ 113.028987][ T5320] loop1: detected capacity change from 0 to 4096 [ 113.049044][ T5322] device syzkaller0 entered promiscuous mode [ 113.053376][ T5320] journal_path: Lookup failure for './file2' [ 113.145404][ T5320] EXT4-fs: error: could not find journal device path [ 113.365150][ T5322] netlink: 44 bytes leftover after parsing attributes in process `syz.2.205'. [ 113.418711][ T5327] loop0: detected capacity change from 0 to 32768 [ 113.427087][ T5327] /dev/loop0: Can't open blockdev [ 114.124658][ T5316] loop3: detected capacity change from 0 to 32768 [ 114.173930][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 114.193916][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 114.203934][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 114.214015][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 114.223951][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 114.233907][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 114.335430][ T5340] tipc: Started in network mode [ 114.341026][ T5340] tipc: Node identity 52f19bea1c9c, cluster identity 4711 [ 114.350042][ T5340] tipc: Enabled bearer , priority 0 [ 114.370160][ T5340] device syzkaller0 entered promiscuous mode [ 114.428528][ T5340] netlink: 44 bytes leftover after parsing attributes in process `syz.1.210'. [ 114.488454][ T5316] XFS (loop3): Mounting V5 Filesystem [ 114.558396][ T5340] tipc: Resetting bearer [ 114.572074][ T5339] tipc: Resetting bearer [ 114.622744][ T5339] tipc: Disabling bearer [ 114.658590][ T5316] XFS (loop3): Ending clean mount [ 115.052863][ T4279] XFS (loop3): Unmounting Filesystem [ 115.551178][ T5371] binder: BINDER_SET_CONTEXT_MGR already set [ 115.566239][ T5371] binder: 5364:5371 ioctl 4018620d 200000004a80 returned -16 [ 116.579172][ T5381] loop3: detected capacity change from 0 to 32768 [ 116.639992][ T5381] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop3 scanned by syz.3.215 (5381) [ 116.821795][ T5381] BTRFS info (device loop3): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 116.941159][ T5381] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 116.994159][ T5381] BTRFS info (device loop3): using free space tree [ 117.259496][ T5381] BTRFS info (device loop3): enabling ssd optimizations [ 117.985967][ T4279] BTRFS info (device loop3): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 118.991810][ T5472] binder: BINDER_SET_CONTEXT_MGR already set [ 119.003181][ T5472] binder: 5463:5472 ioctl 4018620d 200000004a80 returned -16 [ 119.691427][ T5487] input: syz0 as /devices/virtual/input/input14 [ 120.220208][ T5510] netlink: 'syz.1.244': attribute type 4 has an invalid length. [ 120.263765][ T5510] netlink: 'syz.1.244': attribute type 4 has an invalid length. [ 121.723363][ T5537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.249'. [ 121.759922][ T5537] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 121.799803][ T5540] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 122.062132][ T5524] loop2: detected capacity change from 0 to 40427 [ 122.126821][ T5524] F2FS-fs (loop2): invalid crc value [ 122.154247][ T5524] F2FS-fs (loop2): Found nat_bits in checkpoint [ 122.301106][ T5524] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 122.779629][ T5547] f2fs_ckpt-7:2: attempt to access beyond end of device [ 122.779629][ T5547] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 123.753970][ T27] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 124.032043][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.043601][ T27] usb 4-1: config 0 interface 0 has no altsetting 0 [ 124.168034][ T27] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 124.250911][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.302241][ T27] usb 4-1: Product: syz [ 124.311547][ T27] usb 4-1: Manufacturer: syz [ 124.319868][ T27] usb 4-1: SerialNumber: syz [ 124.338866][ T5606] loop5: detected capacity change from 0 to 128 [ 124.375983][ T27] usb 4-1: config 0 descriptor?? [ 124.422513][ T27] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 124.455630][ T5606] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 124.474929][ T5606] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.583348][ T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 124.668486][ T27] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 124.725270][ T27] usb 4-1: media controller created [ 124.726357][ T4505] EXT4-fs (loop5): unmounting filesystem. [ 124.794616][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 125.099424][ T27] DVB: Unable to find symbol tda10046_attach() [ 125.108549][ T27] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 125.147752][ T27] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 126.337446][ T27] dvb_usb_m920x: probe of 4-1:0.0 failed with error -71 [ 126.393664][ T27] usb 4-1: USB disconnect, device number 7 [ 126.707334][ T5651] capability: warning: `syz.1.274' uses deprecated v2 capabilities in a way that may be insecure [ 126.976666][ T5660] tipc: Started in network mode [ 126.986078][ T5660] tipc: Node identity 727b04f26979, cluster identity 4711 [ 127.004219][ T5660] tipc: Enabled bearer , priority 0 [ 127.056060][ T5666] device syzkaller0 entered promiscuous mode [ 127.089216][ T5660] netlink: 44 bytes leftover after parsing attributes in process `syz.2.275'. [ 127.136793][ T5660] tipc: Resetting bearer [ 127.177356][ T5659] tipc: Resetting bearer [ 127.248335][ T5659] tipc: Disabling bearer [ 128.824176][ T22] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 129.139019][ T22] usb 4-1: Using ep0 maxpacket: 8 [ 129.183624][ T22] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 129.194007][ T22] usb 4-1: config 0 has no interface number 0 [ 129.200908][ T22] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 129.216802][ T22] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 129.228695][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.291815][ T22] usb 4-1: config 0 descriptor?? [ 129.311742][ T22] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 130.540520][ T5737] tipc: Enabled bearer , priority 0 [ 130.551167][ T5737] netlink: 44 bytes leftover after parsing attributes in process `syz.1.303'. [ 130.594382][ T5737] tipc: Resetting bearer [ 130.602986][ T5456] usb 4-1: USB disconnect, device number 8 [ 130.656194][ T5735] tipc: Disabling bearer [ 130.794221][ T7] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 131.060478][ T7] usb 3-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 131.094643][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.412906][ T7] usb 3-1: Product: syz [ 131.490963][ T7] usb 3-1: Manufacturer: syz [ 131.586321][ T7] usb 3-1: SerialNumber: syz [ 131.739550][ T7] usb 3-1: config 0 descriptor?? [ 131.863597][ T7] hub 3-1:0.0: bad descriptor, ignoring hub [ 131.879730][ T7] hub: probe of 3-1:0.0 failed with error -5 [ 131.898016][ T7] f81232 3-1:0.0: f81534a converter detected [ 132.230201][ T7] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 132.250430][ T7] f81534a: probe of ttyUSB0 failed with error -5 [ 132.290462][ T7] usb 3-1: USB disconnect, device number 6 [ 132.301884][ T7] f81232 3-1:0.0: device disconnected [ 132.517043][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.524352][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.627082][ T5778] tipc: Started in network mode [ 132.635222][ T5778] tipc: Node identity ee8f7a394e6b, cluster identity 4711 [ 132.643611][ T5778] tipc: Enabled bearer , priority 0 [ 132.656305][ T5782] loop1: detected capacity change from 0 to 512 [ 132.691859][ T5778] netlink: 44 bytes leftover after parsing attributes in process `syz.5.317'. [ 132.753790][ T5785] tipc: Resetting bearer [ 132.771562][ T5782] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.318: iget: bad i_size value: 38620345925642 [ 132.844771][ T5782] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.318: couldn't read orphan inode 15 (err -117) [ 132.865057][ T5782] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 132.900954][ T5777] tipc: Disabling bearer [ 132.961743][ T5787] device gretap0 entered promiscuous mode [ 132.962422][ T5790] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.318: bg 0: block 5: invalid block bitmap [ 132.995092][ T5787] device vlan2 entered promiscuous mode [ 133.022962][ T5790] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 584 with error 28 [ 133.056836][ T5790] EXT4-fs (loop1): This should not happen!! Data will be lost [ 133.056836][ T5790] [ 133.073295][ T5790] EXT4-fs (loop1): Total free blocks count 0 [ 133.084842][ T5790] EXT4-fs (loop1): Free/Dirty block details [ 133.091213][ T5790] EXT4-fs (loop1): free_blocks=0 [ 133.106797][ T5790] EXT4-fs (loop1): dirty_blocks=588 [ 133.112156][ T5790] EXT4-fs (loop1): Block reservation details [ 133.149528][ T5790] EXT4-fs (loop1): i_reserved_data_blocks=588 [ 133.194319][ T7] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 133.231399][ T5782] EXT4-fs (loop1): shut down requested (0) [ 133.385466][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 133.401912][ T7] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 133.420826][ T7] usb 1-1: config 179 has no interface number 0 [ 133.430992][ T7] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 133.462963][ T7] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 133.479983][ T7] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 133.498320][ T7] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 133.511098][ T7] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 133.525246][ T7] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 133.534959][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.556157][ T5789] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 133.714368][ T5456] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 133.734071][ T22] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 133.938032][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.943304][ T5454] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input15 [ 133.964343][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.976563][ T22] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 133.992258][ T22] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 134.005845][ T5456] usb 6-1: Using ep0 maxpacket: 32 [ 134.006175][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.035924][ T22] usb 3-1: config 0 descriptor?? [ 134.203791][ T5456] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 134.337993][ T5456] usb 6-1: config 0 has no interface number 0 [ 134.353100][ T5456] usb 6-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 134.381504][ T5456] usb 6-1: config 0 interface 89 has no altsetting 0 [ 134.415852][ T7] usb 1-1: USB disconnect, device number 5 [ 134.422372][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 134.430893][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 134.440313][ T7] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 134.463788][ T5456] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 134.484427][ T5456] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.487095][ T22] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 134.493508][ T5456] usb 6-1: Product: syz [ 134.517852][ T22] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 134.533576][ T5456] usb 6-1: Manufacturer: syz [ 134.561274][ T5456] usb 6-1: SerialNumber: syz [ 134.587507][ T5456] usb 6-1: config 0 descriptor?? [ 134.621212][ T5456] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 135.049481][ T5456] em28xx 6-1:0.89: Video interface 89 found: [ 135.167850][ T7] usb 3-1: USB disconnect, device number 7 [ 135.248755][ T5822] loop0: detected capacity change from 0 to 128 [ 135.325437][ T4389] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 135.538129][ T5456] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 136.116240][ T4972] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.184239][ T5456] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 136.237255][ T5456] em28xx 6-1:0.89: board has no eeprom [ 136.240146][ T4972] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.333968][ T5456] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 136.342229][ T5456] em28xx 6-1:0.89: analog set to bulk mode. [ 136.384639][ T4972] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.423620][ T5456] usb 6-1: USB disconnect, device number 4 [ 136.452682][ T5456] em28xx 6-1:0.89: Disconnecting em28xx [ 136.470970][ T7] em28xx 6-1:0.89: Registering V4L2 extension [ 136.550279][ T4972] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.669501][ T7] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 136.679383][ T7] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 136.688030][ T7] em28xx 6-1:0.89: No AC97 audio processor [ 136.765555][ T7] usb 6-1: Decoder not found [ 136.770241][ T7] em28xx 6-1:0.89: failed to create media graph [ 136.824234][ T7] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 136.869949][ T7] em28xx 6-1:0.89: Registering snapshot button... [ 136.914613][ T7] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input16 [ 136.984502][ T7] em28xx 6-1:0.89: Remote control support is not available for this card. [ 137.005809][ T5456] em28xx 6-1:0.89: Closing input extension [ 137.025177][ T4286] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 137.035652][ T4286] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 137.046929][ T4286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 137.056248][ T5456] em28xx 6-1:0.89: Deregistering snapshot button [ 137.063139][ T4286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 137.074385][ T4286] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 137.082696][ T4286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 137.163325][ T5456] em28xx 6-1:0.89: Freeing device [ 137.314347][ T5862] tipc: Enabled bearer , priority 0 [ 137.342127][ T5862] device syzkaller0 entered promiscuous mode [ 137.541746][ T5845] loop3: detected capacity change from 0 to 40427 [ 137.568495][ T5845] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 137.584253][ T5845] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 137.629595][ T5868] netlink: 44 bytes leftover after parsing attributes in process `syz.5.348'. [ 137.631148][ T5845] F2FS-fs (loop3): invalid crc value [ 137.720553][ T5861] tipc: Resetting bearer [ 137.726456][ T5845] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 137.816243][ T5861] tipc: Disabling bearer [ 138.070984][ T5845] F2FS-fs (loop3): Start checkpoint disabled! [ 138.185542][ T5845] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 138.193016][ T5845] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 138.576620][ T5845] syz.3.343: attempt to access beyond end of device [ 138.576620][ T5845] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 138.752953][ T5301] kworker/u4:16: attempt to access beyond end of device [ 138.752953][ T5301] loop3: rw=1, sector=45112, nr_sectors = 8 limit=40427 [ 138.794009][ T5455] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 138.823252][ T5301] kworker/u4:16: attempt to access beyond end of device [ 138.823252][ T5301] loop3: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 138.829284][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 138.994014][ T5455] usb 3-1: Using ep0 maxpacket: 16 [ 139.001352][ T5455] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.044045][ T5455] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 139.082060][ T5455] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 139.091836][ T5455] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.100560][ T5455] usb 3-1: Product: syz [ 139.105486][ T5455] usb 3-1: Manufacturer: syz [ 139.110144][ T5455] usb 3-1: SerialNumber: syz [ 139.153979][ T4286] Bluetooth: hci1: command 0x0409 tx timeout [ 139.433449][ T5455] usb 3-1: USB disconnect, device number 8 [ 139.510645][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.522374][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.531800][ T5856] device bridge_slave_0 entered promiscuous mode [ 139.643682][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.654768][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.663491][ T5856] device bridge_slave_1 entered promiscuous mode [ 139.739882][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.975971][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.082560][ T4972] device hsr_slave_0 left promiscuous mode [ 140.096929][ T4972] device hsr_slave_1 left promiscuous mode [ 140.109151][ T4972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.120063][ T4972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.153362][ T4972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.165187][ T4972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.173351][ T4972] device bridge_slave_1 left promiscuous mode [ 140.183020][ T4972] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.215608][ T4972] device bridge_slave_0 left promiscuous mode [ 140.233123][ T4972] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.348496][ T4972] device veth1_macvtap left promiscuous mode [ 140.359665][ T4972] device veth0_macvtap left promiscuous mode [ 140.368151][ T4972] device veth1_vlan left promiscuous mode [ 140.386268][ T4972] device veth0_vlan left promiscuous mode [ 140.919217][ T4286] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 140.933998][ T4286] Bluetooth: hci3: Injecting HCI hardware error event [ 140.951958][ T4282] Bluetooth: hci3: hardware error 0x00 [ 141.324206][ T4286] Bluetooth: hci1: command 0x041b tx timeout [ 141.899521][ T4972] team0 (unregistering): Port device team_slave_1 removed [ 141.949708][ T4972] team0 (unregistering): Port device team_slave_0 removed [ 142.029721][ T4972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.085934][ T4972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.509747][ T4972] bond0 (unregistering): Released all slaves [ 142.647822][ T5856] team0: Port device team_slave_0 added [ 142.662348][ T5931] netlink: 12 bytes leftover after parsing attributes in process `syz.5.358'. [ 142.673605][ T5931] netlink: 'syz.5.358': attribute type 12 has an invalid length. [ 142.685883][ T5931] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.695491][ T5931] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.705528][ T5931] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.714840][ T5931] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.747871][ T5950] tipc: Enabled bearer , priority 0 [ 142.779921][ T5951] device syzkaller0 entered promiscuous mode [ 142.796796][ T5958] netlink: 44 bytes leftover after parsing attributes in process `syz.2.362'. [ 142.879919][ T5856] team0: Port device team_slave_1 added [ 142.908044][ T5931] netlink: 12 bytes leftover after parsing attributes in process `syz.5.358'. [ 142.924112][ T5931] netlink: 'syz.5.358': attribute type 12 has an invalid length. [ 142.994214][ T4282] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 143.002783][ T5948] tipc: Resetting bearer [ 143.273696][ T5948] tipc: Disabling bearer [ 143.505277][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.537413][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.556596][ T4282] Bluetooth: hci1: command 0x040f tx timeout [ 143.612734][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.625843][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.633095][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.662056][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.694685][ T5980] loop5: detected capacity change from 0 to 128 [ 143.725868][ T5856] device hsr_slave_0 entered promiscuous mode [ 143.761340][ T5856] device hsr_slave_1 entered promiscuous mode [ 143.783462][ T5856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.800272][ T5856] Cannot create hsr debugfs directory [ 143.850358][ T5980] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 143.872870][ T5980] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 144.098362][ T4505] EXT4-fs (loop5): unmounting filesystem. [ 144.374004][ T4317] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 144.491016][ T6003] netlink: 16 bytes leftover after parsing attributes in process `syz.1.373'. [ 144.529952][ T5856] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 144.550457][ T5856] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 144.578287][ T5856] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 144.604026][ T4317] usb 4-1: Using ep0 maxpacket: 16 [ 144.611644][ T4317] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.646245][ T4317] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 144.657832][ T5856] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 144.682658][ T4317] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 144.728207][ T4317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.761848][ T4317] usb 4-1: Product: syz [ 144.776166][ T4317] usb 4-1: Manufacturer: syz [ 144.788697][ T6010] ceph: No mds server is up or the cluster is laggy [ 144.791374][ T4317] usb 4-1: SerialNumber: syz [ 144.824275][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.829574][ T7] libceph: connect (1)[c::]:6789 error -101 [ 144.840874][ T5455] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 144.870320][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 144.917466][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 144.934279][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 144.951577][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.982201][ T5372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.019160][ T5372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.033287][ T5372] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.034021][ T5455] usb 3-1: Using ep0 maxpacket: 16 [ 145.041569][ T5372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.069932][ T5372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 145.082966][ T5997] loop5: detected capacity change from 0 to 40427 [ 145.091612][ T5372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 145.092787][ T5455] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 145.132363][ T27] usb 4-1: USB disconnect, device number 9 [ 145.146773][ T5455] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.166487][ T5997] F2FS-fs (loop5): invalid crc value [ 145.175004][ T5372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.182858][ T5455] usb 3-1: Product: syz [ 145.200305][ T5372] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.207744][ T5372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.218349][ T5455] usb 3-1: Manufacturer: syz [ 145.224065][ T5997] F2FS-fs (loop5): Found nat_bits in checkpoint [ 145.252041][ T5455] usb 3-1: SerialNumber: syz [ 145.260085][ T5455] usb 3-1: config 0 descriptor?? [ 145.289793][ T5372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 145.291104][ T5455] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 145.366724][ T5372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 145.401471][ T5372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 145.428493][ T5997] F2FS-fs (loop5): Start checkpoint disabled! [ 145.460395][ T5372] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.493007][ T5372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 145.513066][ T5997] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 145.529340][ T5372] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 145.579497][ T5372] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 145.596095][ T5372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 145.616126][ T26] audit: type=1800 audit(1782851360.546:6): pid=5997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.371" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 145.626406][ T5372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 145.652135][ T4282] Bluetooth: hci1: command 0x0419 tx timeout [ 145.707589][ T5372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 145.755792][ T5372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 145.786453][ T5856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 145.840166][ T5082] kworker/u4:14: attempt to access beyond end of device [ 145.840166][ T5082] loop5: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 145.937085][ T5082] kworker/u4:14: attempt to access beyond end of device [ 145.937085][ T5082] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 146.502058][ T5455] usb 3-1: Quatech SSU-100 USB to Serial Driver converter now attached to ttyUSB0 [ 146.759580][ T6056] tipc: Enabled bearer , priority 0 [ 146.810357][ T6056] device syzkaller0 entered promiscuous mode [ 146.905132][ T5455] usb 3-1: USB disconnect, device number 9 [ 146.927935][ T5455] ssu100 ttyUSB0: Quatech SSU-100 USB to Serial Driver converter now disconnected from ttyUSB0 [ 146.947371][ T5455] ssu100 3-1:0.0: device disconnected [ 146.971686][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 146.992401][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 147.019923][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.037902][ T6059] netlink: 44 bytes leftover after parsing attributes in process `syz.5.378'. [ 147.093726][ T6055] tipc: Resetting bearer [ 147.192068][ T6055] tipc: Disabling bearer [ 147.399373][ T6075] netlink: 16 bytes leftover after parsing attributes in process `syz.5.384'. [ 148.654037][ T4317] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 148.667586][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 148.689506][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 148.738100][ T5856] device veth0_vlan entered promiscuous mode [ 148.761918][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 148.796512][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 148.839371][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 148.855977][ T4317] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.877903][ T4317] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.892824][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 148.916421][ T4317] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 148.938413][ T5856] device veth1_vlan entered promiscuous mode [ 148.961713][ T4317] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 148.982028][ T4317] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.014886][ T4317] usb 6-1: config 0 descriptor?? [ 149.034270][ T5372] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 149.063001][ T5372] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 149.092899][ T5372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 149.139958][ T5372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 149.173197][ T5856] device veth0_macvtap entered promiscuous mode [ 149.200501][ T5856] device veth1_macvtap entered promiscuous mode [ 149.233185][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.251647][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.262982][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.290049][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.318874][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.334403][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.344762][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.357365][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.376142][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.388715][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 149.425213][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 149.436522][ T4317] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 149.450995][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 149.460653][ T22] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 149.474725][ T4317] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 149.525501][ T6136] loop3: detected capacity change from 0 to 1024 [ 149.536012][ T6136] EXT4-fs: Ignoring removed orlov option [ 149.555475][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.572253][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.588640][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.608401][ T6136] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 149.619570][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.666157][ T22] usb 2-1: Using ep0 maxpacket: 16 [ 149.684803][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.698366][ T6136] EXT4-fs (loop3): shut down requested (2) [ 149.704933][ T22] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 149.722987][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.740253][ T6136] overlayfs: failed to get metacopy (-5) [ 149.748872][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.760118][ T22] usb 2-1: Product: syz [ 149.772096][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.773922][ T22] usb 2-1: Manufacturer: syz [ 149.783356][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.793309][ T22] usb 2-1: SerialNumber: syz [ 149.802063][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.807341][ T4318] usb 6-1: USB disconnect, device number 5 [ 149.827951][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 149.846215][ T22] usb 2-1: config 0 descriptor?? [ 149.855961][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 149.881971][ T22] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 149.898757][ T5856] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.927766][ T5856] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.967339][ T6143] loop2: detected capacity change from 0 to 256 [ 149.990033][ T5856] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.998903][ T6143] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x5955b8de, utbl_chksum : 0xe619d30d) [ 149.999556][ T5856] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.193933][ T6143] loop2: detected capacity change from 256 to 1 [ 150.234348][ T6143] syz.2.400: attempt to access beyond end of device [ 150.234348][ T6143] loop2: rw=2049, sector=160, nr_sectors = 1 limit=1 [ 150.277021][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 150.283678][ T4322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.293745][ T4322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.303193][ T6143] Buffer I/O error on dev loop2, logical block 160, lost sync page write [ 150.319348][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 150.322581][ T6143] syz.2.400: attempt to access beyond end of device [ 150.322581][ T6143] loop2: rw=2049, sector=161, nr_sectors = 1 limit=1 [ 150.374538][ T5372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.382407][ T5372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.383765][ T6143] Buffer I/O error on dev loop2, logical block 161, lost sync page write [ 150.400801][ T6143] syz.2.400: attempt to access beyond end of device [ 150.400801][ T6143] loop2: rw=0, sector=160, nr_sectors = 1 limit=1 [ 150.436491][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 151.104548][ T22] usb 2-1: Quatech SSU-100 USB to Serial Driver converter now attached to ttyUSB0 [ 151.230277][ T6156] tipc: Started in network mode [ 151.244458][ T6156] tipc: Node identity da82cfada7a1, cluster identity 4711 [ 151.260905][ T6156] tipc: Enabled bearer , priority 0 [ 151.291741][ T6159] device syzkaller0 entered promiscuous mode [ 151.310304][ T6157] loop2: detected capacity change from 0 to 2048 [ 151.372408][ T6156] netlink: 44 bytes leftover after parsing attributes in process `syz.6.340'. [ 151.377136][ T5455] usb 2-1: USB disconnect, device number 8 [ 151.407325][ T6157] Alternate GPT is invalid, using primary GPT. [ 151.411043][ T5455] ssu100 ttyUSB0: Quatech SSU-100 USB to Serial Driver converter now disconnected from ttyUSB0 [ 151.433005][ T6157] loop2: p2 p3 p7 [ 151.461760][ T5455] ssu100 2-1:0.0: device disconnected [ 151.468252][ T6159] tipc: Resetting bearer [ 151.490389][ T6153] tipc: Resetting bearer [ 151.522173][ T6157] fuse: root generation should be zero [ 151.618772][ T6153] tipc: Disabling bearer [ 151.860831][ T4261] udevd[4261]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 151.869188][ T4556] udevd[4556]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 151.888571][ T4389] udevd[4389]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 151.931782][ T4556] udevd[4556]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 151.931937][ T4261] udevd[4261]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 151.988754][ T4389] udevd[4389]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 152.009544][ T5455] libceph: connect (1)[c::]:6789 error -101 [ 152.045743][ T5455] libceph: mon0 (1)[c::]:6789 connect error [ 152.052940][ T4282] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 152.064648][ T4282] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 152.068675][ T6171] ceph: No mds server is up or the cluster is laggy [ 152.079375][ T4282] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 152.079772][ T5455] libceph: connect (1)[c::]:6789 error -101 [ 152.093112][ T4282] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 152.102234][ T4282] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 152.110033][ T4282] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 152.163473][ T6183] loop2: detected capacity change from 0 to 1024 [ 152.176236][ T5455] libceph: mon0 (1)[c::]:6789 connect error [ 152.204644][ T6183] EXT4-fs: Ignoring removed orlov option [ 152.330268][ T6183] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 152.516278][ T6183] EXT4-fs (loop2): shut down requested (2) [ 152.542957][ T6178] chnl_net:caif_netlink_parms(): no params data found [ 152.614844][ T6183] overlayfs: failed to get metacopy (-5) [ 153.063113][ T6178] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.078206][ T6178] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.197442][ T6178] device bridge_slave_0 entered promiscuous mode [ 153.209696][ T6178] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.222799][ T6178] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.236438][ T6178] device bridge_slave_1 entered promiscuous mode [ 153.270069][ T6178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.283109][ T6178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.329733][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 153.499217][ T5372] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.675322][ T6220] tipc: Enabled bearer , priority 0 [ 153.770228][ T6178] team0: Port device team_slave_0 added [ 154.065134][ T6178] team0: Port device team_slave_1 added [ 154.081226][ T6223] device syzkaller0 entered promiscuous mode [ 154.164988][ T6218] netlink: 44 bytes leftover after parsing attributes in process `syz.5.417'. [ 154.187459][ T6220] tipc: Resetting bearer [ 154.194146][ T4282] Bluetooth: hci4: command 0x0409 tx timeout [ 154.272351][ T5372] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.315555][ T6213] tipc: Resetting bearer [ 154.357292][ T6213] tipc: Disabling bearer [ 154.375670][ T6178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.382682][ T6178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.440260][ T6178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.491901][ T5372] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.524138][ T22] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 154.535244][ T6178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.542225][ T6178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.607614][ T6242] loop5: detected capacity change from 0 to 128 [ 154.622198][ T6178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.680442][ T6242] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 154.707186][ T5372] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.724182][ T22] usb 7-1: Using ep0 maxpacket: 16 [ 154.733655][ T22] usb 7-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 154.746689][ T6242] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.754619][ T22] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.774035][ T22] usb 7-1: Product: syz [ 154.778332][ T22] usb 7-1: Manufacturer: syz [ 154.782948][ T22] usb 7-1: SerialNumber: syz [ 154.801638][ T22] usb 7-1: config 0 descriptor?? [ 154.829173][ T22] ssu100 7-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 154.867914][ T4286] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 154.885417][ T6178] device hsr_slave_0 entered promiscuous mode [ 154.891713][ T4286] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 154.903230][ T4286] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 154.911473][ T4286] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 154.920639][ T4286] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 154.928321][ T4286] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 154.954304][ T6178] device hsr_slave_1 entered promiscuous mode [ 154.990893][ T6178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.010479][ T4505] EXT4-fs (loop5): unmounting filesystem. [ 155.020203][ T6178] Cannot create hsr debugfs directory [ 155.238228][ T5372] tipc: Left network mode [ 155.918139][ T6246] chnl_net:caif_netlink_parms(): no params data found [ 155.930957][ T6178] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 156.126074][ T22] usb 7-1: Quatech SSU-100 USB to Serial Driver converter now attached to ttyUSB0 [ 156.151680][ T6178] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 156.274181][ T4286] Bluetooth: hci4: command 0x041b tx timeout [ 156.285950][ T6178] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 156.332882][ T6278] loop1: detected capacity change from 0 to 512 [ 156.364521][ T22] usb 7-1: USB disconnect, device number 2 [ 156.387994][ T6178] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 156.410535][ T22] ssu100 ttyUSB0: Quatech SSU-100 USB to Serial Driver converter now disconnected from ttyUSB0 [ 156.456385][ T6278] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 156.484325][ T22] ssu100 7-1:0.0: device disconnected [ 156.492984][ T6278] ext4 filesystem being mounted at /82/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 156.634472][ T6246] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.659189][ T6246] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.671169][ T6246] device bridge_slave_0 entered promiscuous mode [ 156.743433][ T6246] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.776831][ T6246] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.801112][ T6246] device bridge_slave_1 entered promiscuous mode [ 156.933531][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 157.004072][ T4286] Bluetooth: hci2: command 0x0409 tx timeout [ 157.201296][ T6246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.351338][ T6246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.598650][ T6299] loop1: detected capacity change from 0 to 256 [ 157.663784][ T6299] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x5955b8de, utbl_chksum : 0xe619d30d) [ 157.872675][ T6302] loop1: detected capacity change from 256 to 1 [ 157.901979][ T6299] syz.1.429: attempt to access beyond end of device [ 157.901979][ T6299] loop1: rw=2049, sector=160, nr_sectors = 1 limit=1 [ 157.917432][ T6299] Buffer I/O error on dev loop1, logical block 160, lost sync page write [ 157.929827][ T6299] syz.1.429: attempt to access beyond end of device [ 157.929827][ T6299] loop1: rw=2049, sector=161, nr_sectors = 1 limit=1 [ 157.952877][ T6299] Buffer I/O error on dev loop1, logical block 161, lost sync page write [ 157.963115][ T6299] syz.1.429: attempt to access beyond end of device [ 157.963115][ T6299] loop1: rw=0, sector=160, nr_sectors = 1 limit=1 [ 158.044691][ T5372] device hsr_slave_0 left promiscuous mode [ 158.059933][ T5372] device hsr_slave_1 left promiscuous mode [ 158.081195][ T5372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.099231][ T5372] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.124913][ T5372] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.133559][ T4389] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 158.150972][ T5372] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.183400][ T5372] device bridge_slave_1 left promiscuous mode [ 158.204906][ T5372] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.259327][ T5372] device bridge_slave_0 left promiscuous mode [ 158.276311][ T5372] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.354167][ T4286] Bluetooth: hci4: command 0x040f tx timeout [ 158.420384][ T5372] device veth1_macvtap left promiscuous mode [ 158.434352][ T5372] device veth0_macvtap left promiscuous mode [ 158.447940][ T5372] device veth1_vlan left promiscuous mode [ 158.465965][ T5372] device veth0_vlan left promiscuous mode [ 158.960446][ T6346] loop6: detected capacity change from 0 to 512 [ 158.994566][ T6346] EXT4-fs: Ignoring removed orlov option [ 159.007245][ T6346] EXT4-fs: Ignoring removed mblk_io_submit option [ 159.083222][ T6346] EXT4-fs error (device loop6): ext4_iget_extra_inode:4763: inode #15: comm syz.6.440: corrupted in-inode xattr [ 159.095189][ T4286] Bluetooth: hci2: command 0x041b tx timeout [ 159.102296][ T6346] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.440: couldn't read orphan inode 15 (err -117) [ 159.121620][ T6346] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 159.196825][ T5856] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 159.227979][ T5856] EXT4-fs error (device loop6): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 159.271812][ T5856] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 159.299911][ T5856] EXT4-fs error (device loop6): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 159.335637][ T5856] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 159.392416][ T5856] EXT4-fs error (device loop6): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 159.423545][ T5856] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 159.454183][ T5856] EXT4-fs error (device loop6): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 159.485379][ T5856] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 159.517457][ T5856] EXT4-fs error (device loop6): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 159.941590][ T5372] team0 (unregistering): Port device team_slave_1 removed [ 159.990845][ T5372] team0 (unregistering): Port device team_slave_0 removed [ 160.042141][ T5372] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.090111][ T5372] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.437764][ T4282] Bluetooth: hci4: command 0x0419 tx timeout [ 160.921223][ T5372] bond0 (unregistering): Released all slaves [ 161.025253][ T6246] team0: Port device team_slave_0 added [ 161.090758][ T6246] team0: Port device team_slave_1 added [ 161.110662][ T6178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.154241][ T4282] Bluetooth: hci2: command 0x040f tx timeout [ 161.189826][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.214924][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.245401][ T6178] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.254211][ T6246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.262496][ T6246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.289369][ C0] vkms_vblank_simulate: vblank timer overrun [ 161.297642][ T6246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.315338][ T4859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 161.336114][ T4859] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 161.361944][ T4859] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.369208][ T4859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.386846][ T6349] EXT4-fs (loop6): unmounting filesystem. [ 161.416715][ T4859] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.461034][ T6246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.480021][ T6246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.507249][ C0] vkms_vblank_simulate: vblank timer overrun [ 161.558742][ T6246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.615779][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 161.630143][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 161.676840][ T4972] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.684178][ T4972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.746110][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 161.778866][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 161.793031][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 161.846842][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 161.847610][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 161.848360][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 161.852399][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 161.875033][ T6246] device hsr_slave_0 entered promiscuous mode [ 161.875777][ T6246] device hsr_slave_1 entered promiscuous mode [ 161.912099][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 161.915421][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 162.031882][ T6178] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 162.059249][ T6178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 162.074216][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 162.099306][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 162.415162][ T4286] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 162.426747][ T4286] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 162.435829][ T4314] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 162.441342][ T5372] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.444245][ T4286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 162.471831][ T4286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 162.487449][ T4286] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 162.495353][ T4286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 162.639474][ T5372] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.664252][ T4314] usb 2-1: Using ep0 maxpacket: 32 [ 162.671966][ T4314] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 162.686615][ T4314] usb 2-1: config 0 has no interface number 0 [ 162.695123][ T4314] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 162.734901][ T4314] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 162.782594][ T4314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.792801][ T5372] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.801507][ T4314] usb 2-1: Product: syz [ 162.811649][ T4314] usb 2-1: Manufacturer: syz [ 162.837313][ T4314] usb 2-1: SerialNumber: syz [ 162.851389][ T6394] loop5: detected capacity change from 0 to 512 [ 162.870698][ T4314] usb 2-1: config 0 descriptor?? [ 162.892471][ T4314] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 162.894644][ T6394] EXT4-fs: Ignoring removed orlov option [ 162.902358][ T4314] em28xx 2-1:0.132: Video interface 132 found: [ 162.922185][ T6394] EXT4-fs: Ignoring removed mblk_io_submit option [ 162.979377][ T6394] EXT4-fs error (device loop5): ext4_iget_extra_inode:4763: inode #15: comm syz.5.450: corrupted in-inode xattr [ 163.002328][ T5372] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.010588][ T6394] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.450: couldn't read orphan inode 15 (err -117) [ 163.032087][ T6394] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 163.158173][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 163.172172][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 163.183992][ T6178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.201447][ T4505] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 163.235367][ T4286] Bluetooth: hci2: command 0x0419 tx timeout [ 163.286507][ T4505] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 163.306626][ T4314] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 163.315985][ T4505] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 163.367412][ T4505] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 163.398936][ T4505] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 163.438292][ T4505] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 163.477450][ T4505] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 163.499910][ T4505] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 163.535457][ T4505] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 163.558396][ T4505] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 163.656432][ T6246] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 163.704979][ T5372] tipc: Left network mode [ 163.711020][ T6246] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 163.720569][ T4314] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 163.753006][ T4314] em28xx 2-1:0.132: board has no eeprom [ 163.770686][ T6387] chnl_net:caif_netlink_parms(): no params data found [ 163.863626][ T6246] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 163.883927][ T4314] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 163.886984][ T6246] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 163.892074][ T4314] em28xx 2-1:0.132: analog set to bulk mode. [ 163.892535][ T27] em28xx 2-1:0.132: Registering V4L2 extension [ 163.985264][ T4600] usb 2-1: USB disconnect, device number 9 [ 163.991638][ T4600] em28xx 2-1:0.132: Disconnecting em28xx [ 164.161600][ T5535] EXT4-fs (loop5): unmounting filesystem. [ 164.347176][ T27] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 164.369402][ T27] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 164.378857][ T27] em28xx 2-1:0.132: No AC97 audio processor [ 164.402982][ T27] usb 2-1: Decoder not found [ 164.416207][ T27] em28xx 2-1:0.132: failed to create media graph [ 164.422693][ T27] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 164.503149][ T27] em28xx 2-1:0.132: Remote control support is not available for this card. [ 164.503179][ T6422] ================================================================== [ 164.520010][ T6422] BUG: KASAN: use-after-free in v4l2_open+0x32d/0x340 [ 164.526792][ T6422] Read of size 4 at addr ffff888075e5c7e8 by task v4l_id/6422 [ 164.534265][ T6422] [ 164.536631][ T6422] CPU: 0 PID: 6422 Comm: v4l_id Not tainted syzkaller #0 [ 164.543672][ T6422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 164.553746][ T6422] Call Trace: [ 164.557040][ T6422] [ 164.559985][ T6422] dump_stack_lvl+0x188/0x24e [ 164.564699][ T6422] ? __lock_acquire+0x7bd0/0x7bd0 [ 164.570106][ T6422] ? show_regs_print_info+0x12/0x12 [ 164.575329][ T6422] ? load_image+0x410/0x410 [ 164.579864][ T6422] ? __virt_addr_valid+0x467/0x540 [ 164.585012][ T6422] ? v4l2_open+0x32d/0x340 [ 164.589545][ T6422] print_report+0xa8/0x210 [ 164.593983][ T6422] kasan_report+0x10b/0x140 [ 164.598535][ T6422] ? v4l2_open+0x32d/0x340 [ 164.602965][ T6422] v4l2_open+0x32d/0x340 [ 164.607236][ T6422] chrdev_open+0x585/0x5f0 [ 164.611757][ T6422] ? cd_forget+0x160/0x160 [ 164.616401][ T6422] ? fsnotify_perm+0x39b/0x550 [ 164.621355][ T6422] ? cd_forget+0x160/0x160 [ 164.625782][ T6422] do_dentry_open+0x7dd/0x10b0 [ 164.630673][ T6422] path_openat+0x2674/0x2f10 [ 164.635268][ T6422] ? verify_lock_unused+0x140/0x140 [ 164.640585][ T6422] ? do_sys_openat2+0xdd/0x4f0 [ 164.645550][ T6422] ? do_filp_open+0x420/0x420 [ 164.650620][ T6422] do_filp_open+0x1ee/0x420 [ 164.655618][ T6422] ? vfs_tmpfile+0x470/0x470 [ 164.660211][ T6422] ? _raw_spin_unlock+0x24/0x40 [ 164.665198][ T6422] ? alloc_fd+0x590/0x640 [ 164.669661][ T6422] do_sys_openat2+0x14b/0x4f0 [ 164.674471][ T6422] ? do_sys_open+0xe0/0xe0 [ 164.679150][ T6422] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 164.685318][ T6422] ? lock_chain_count+0x20/0x20 [ 164.690303][ T6422] __x64_sys_openat+0x135/0x160 [ 164.695183][ T6422] do_syscall_64+0x4c/0xa0 [ 164.699986][ T6422] ? clear_bhb_loop+0x60/0xb0 [ 164.704660][ T6422] ? clear_bhb_loop+0x60/0xb0 [ 164.709331][ T6422] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 164.715217][ T6422] RIP: 0033:0x7f98fe0a7407 [ 164.719877][ T6422] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 164.739488][ T6422] RSP: 002b:00007fffc564e6d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 164.748356][ T6422] RAX: ffffffffffffffda RBX: 00007f98fe89f880 RCX: 00007f98fe0a7407 [ 164.757205][ T6422] RDX: 0000000000000000 RSI: 00007fffc564ff1b RDI: ffffffffffffff9c [ 164.766066][ T6422] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 164.775184][ T6422] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 164.785518][ T6422] R13: 00007fffc564e920 R14: 00007f98fe9fe000 R15: 00005601d86bf4d8 [ 164.796267][ T6422] [ 164.799642][ T6422] [ 164.802231][ T6422] Allocated by task 27: [ 164.806389][ T6422] kasan_set_track+0x4b/0x70 [ 164.812325][ T6422] __kasan_kmalloc+0x8e/0xa0 [ 164.817616][ T6422] em28xx_v4l2_init+0xf5/0x2d90 [ 164.823999][ T6422] em28xx_init_extension+0x118/0x1c0 [ 164.829660][ T6422] process_one_work+0x8ab/0x1160 [ 164.834818][ T6422] worker_thread+0xaf5/0x12a0 [ 164.839763][ T6422] kthread+0x29d/0x330 [ 164.843817][ T6422] ret_from_fork+0x1f/0x30 [ 164.848404][ T6422] [ 164.850815][ T6422] Freed by task 27: [ 164.854612][ T6422] kasan_set_track+0x4b/0x70 [ 164.859637][ T6422] kasan_save_free_info+0x27/0x40 [ 164.865081][ T6422] ____kasan_slab_free+0x126/0x1f0 [ 164.870181][ T6422] slab_free_freelist_hook+0x133/0x1b0 [ 164.875647][ T6422] __kmem_cache_free+0xb6/0x200 [ 164.880506][ T6422] em28xx_v4l2_init+0x15f7/0x2d90 [ 164.885571][ T6422] em28xx_init_extension+0x118/0x1c0 [ 164.890907][ T6422] process_one_work+0x8ab/0x1160 [ 164.896285][ T6422] worker_thread+0xaf5/0x12a0 [ 164.901046][ T6422] kthread+0x29d/0x330 [ 164.905396][ T6422] ret_from_fork+0x1f/0x30 [ 164.909842][ T6422] [ 164.912195][ T6422] Last potentially related work creation: [ 164.918514][ T6422] kasan_save_stack+0x3a/0x60 [ 164.923209][ T6422] __kasan_record_aux_stack+0xb2/0xc0 [ 164.928916][ T6422] insert_work+0x54/0x3c0 [ 164.935007][ T6422] __queue_work+0xae2/0xee0 [ 164.939867][ T6422] queue_work_on+0x124/0x1f0 [ 164.944797][ T6422] rds_conn_path_drop+0x134/0x3a0 [ 164.949842][ T6422] rds_conn_destroy+0x204/0x680 [ 164.954907][ T6422] rds_tcp_exit_net+0x51a/0x5f0 [ 164.959965][ T6422] cleanup_net+0x703/0xba0 [ 164.965546][ T6422] process_one_work+0x8ab/0x1160 [ 164.970593][ T6422] worker_thread+0xaf5/0x12a0 [ 164.976087][ T6422] kthread+0x29d/0x330 [ 164.980350][ T6422] ret_from_fork+0x1f/0x30 [ 164.986009][ T6422] [ 164.988770][ T6422] Second to last potentially related work creation: [ 164.996219][ T6422] kasan_save_stack+0x3a/0x60 [ 165.001437][ T6422] __kasan_record_aux_stack+0xb2/0xc0 [ 165.006935][ T6422] insert_work+0x54/0x3c0 [ 165.011370][ T6422] __queue_work+0xae2/0xee0 [ 165.015997][ T6422] queue_work_on+0x124/0x1f0 [ 165.020659][ T6422] rds_conn_path_drop+0x134/0x3a0 [ 165.025782][ T6422] rds_conn_destroy+0x204/0x680 [ 165.030916][ T6422] rds_tcp_exit_net+0x51a/0x5f0 [ 165.035888][ T6422] cleanup_net+0x703/0xba0 [ 165.040832][ T6422] process_one_work+0x8ab/0x1160 [ 165.045892][ T6422] worker_thread+0xaf5/0x12a0 [ 165.050596][ T6422] kthread+0x29d/0x330 [ 165.054753][ T6422] ret_from_fork+0x1f/0x30 [ 165.059275][ T6422] [ 165.061700][ T6422] The buggy address belongs to the object at ffff888075e5c000 [ 165.061700][ T6422] which belongs to the cache kmalloc-8k of size 8192 [ 165.075870][ T6422] The buggy address is located 2024 bytes inside of [ 165.075870][ T6422] 8192-byte region [ffff888075e5c000, ffff888075e5e000) [ 165.089676][ T6422] [ 165.092166][ T6422] The buggy address belongs to the physical page: [ 165.098693][ T6422] page:ffffea0001d79600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x75e58 [ 165.109555][ T6422] head:ffffea0001d79600 order:3 compound_mapcount:0 compound_pincount:0 [ 165.118052][ T6422] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 165.126531][ T6422] raw: 00fff00000010200 ffffea0001cc7200 dead000000000002 ffff888017442280 [ 165.135641][ T6422] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 165.144330][ T6422] page dumped because: kasan: bad access detected [ 165.150789][ T6422] page_owner tracks the page as allocated [ 165.156524][ T6422] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4270, tgid 4270 (syz-executor), ts 67327458358, free_ts 63895212060 [ 165.179815][ T6422] post_alloc_hook+0x173/0x1a0 [ 165.184588][ T6422] get_page_from_freelist+0x206b/0x2180 [ 165.190142][ T6422] __alloc_pages+0x1ec/0x4f0 [ 165.194725][ T6422] alloc_slab_page+0x5d/0x180 [ 165.199394][ T6422] new_slab+0x87/0x2d0 [ 165.203447][ T6422] ___slab_alloc+0xbc5/0x1240 [ 165.208110][ T6422] __kmem_cache_alloc_node+0x126/0x270 [ 165.213553][ T6422] __kmalloc_node+0xa2/0x240 [ 165.218129][ T6422] kvmalloc_node+0x6c/0x180 [ 165.222844][ T6422] pfifo_fast_init+0x35f/0x6a0 [ 165.227708][ T6422] qdisc_create_dflt+0x11a/0x490 [ 165.232660][ T6422] mq_init+0x2c3/0x650 [ 165.236816][ T6422] qdisc_create_dflt+0x11a/0x490 [ 165.241760][ T6422] dev_activate+0x1dc/0x1150 [ 165.246379][ T6422] __dev_open+0x343/0x430 [ 165.250733][ T6422] __dev_change_flags+0x1e4/0x6a0 [ 165.255786][ T6422] page last free stack trace: [ 165.260537][ T6422] free_unref_page_prepare+0x8e5/0x9e0 [ 165.266023][ T6422] free_unref_page+0x2e/0x3f0 [ 165.270696][ T6422] qlist_free_all+0x76/0xe0 [ 165.275275][ T6422] kasan_quarantine_reduce+0x144/0x160 [ 165.280815][ T6422] __kasan_slab_alloc+0x1e/0x80 [ 165.285666][ T6422] slab_post_alloc_hook+0x4b/0x490 [ 165.290937][ T6422] kmem_cache_alloc+0x18b/0x2f0 [ 165.295939][ T6422] mas_alloc_nodes+0x2ec/0x880 [ 165.300716][ T6422] mas_preallocate+0x162/0x3b0 [ 165.306643][ T6422] __vma_adjust+0x2ff/0x1d00 [ 165.311282][ T6422] setup_arg_pages+0x81f/0xbe0 [ 165.316065][ T6422] load_elf_binary+0xbf8/0x2820 [ 165.320916][ T6422] bprm_execve+0xaf7/0x17e0 [ 165.325433][ T6422] kernel_execve+0x87a/0x980 [ 165.330059][ T6422] call_usermodehelper_exec_async+0x207/0x350 [ 165.336190][ T6422] ret_from_fork+0x1f/0x30 [ 165.340625][ T6422] [ 165.342940][ T6422] Memory state around the buggy address: [ 165.348549][ T6422] ffff888075e5c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 165.356693][ T6422] ffff888075e5c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 165.364770][ T6422] >ffff888075e5c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 165.372835][ T6422] ^ [ 165.380361][ T6422] ffff888075e5c800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 165.388494][ T6422] ffff888075e5c880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 165.397084][ T6422] ================================================================== [ 165.405661][ T4286] Bluetooth: hci1: command 0x0409 tx timeout [ 165.406522][ T4600] em28xx 2-1:0.132: Closing input extension [ 165.427954][ T6422] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 165.427968][ T6422] CPU: 1 PID: 6422 Comm: v4l_id Not tainted syzkaller #0 [ 165.427983][ T6422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 165.427990][ T6422] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 165.427994][ T6422] [ 165.428001][ T6422] dump_stack_lvl+0x188/0x24e [ 165.428024][ T6422] ? memcpy+0x3c/0x60 [ 165.428038][ T6422] ? show_regs_print_info+0x12/0x12 [ 165.428052][ T6422] ? load_image+0x410/0x410 [ 165.428072][ T6422] panic+0x2d3/0x710 [ 165.428102][ T6422] ? bpf_jit_dump+0xd0/0xd0 [ 165.428116][ T6422] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 165.428135][ T6422] ? _raw_spin_unlock+0x40/0x40 [ 165.428148][ T6422] ? print_memory_metadata+0x314/0x400 [ 165.428166][ T6422] check_panic_on_warn+0x80/0xa0 [ 165.428182][ T6422] ? v4l2_open+0x32d/0x340 [ 165.428200][ T6422] end_report+0x66/0x110 [ 165.428217][ T6422] kasan_report+0x118/0x140 [ 165.521097][ T6422] ? v4l2_open+0x32d/0x340 [ 165.525531][ T6422] v4l2_open+0x32d/0x340 [ 165.529814][ T6422] chrdev_open+0x585/0x5f0 [ 165.534265][ T6422] ? cd_forget+0x160/0x160 [ 165.538718][ T6422] ? fsnotify_perm+0x39b/0x550 [ 165.543509][ T6422] ? cd_forget+0x160/0x160 [ 165.547949][ T6422] do_dentry_open+0x7dd/0x10b0 [ 165.552753][ T6422] path_openat+0x2674/0x2f10 [ 165.557464][ T6422] ? verify_lock_unused+0x140/0x140 [ 165.562681][ T6422] ? do_sys_openat2+0xdd/0x4f0 [ 165.564674][ T4600] em28xx 2-1:0.132: Freeing device [ 165.572825][ T6422] ? do_filp_open+0x420/0x420 [ 165.577710][ T6422] do_filp_open+0x1ee/0x420 [ 165.582231][ T6422] ? vfs_tmpfile+0x470/0x470 [ 165.586861][ T6422] ? _raw_spin_unlock+0x24/0x40 [ 165.591842][ T6422] ? alloc_fd+0x590/0x640 [ 165.596197][ T6422] do_sys_openat2+0x14b/0x4f0 [ 165.601010][ T6422] ? do_sys_open+0xe0/0xe0 [ 165.605452][ T6422] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 165.611464][ T6422] ? lock_chain_count+0x20/0x20 [ 165.616611][ T6422] __x64_sys_openat+0x135/0x160 [ 165.621623][ T6422] do_syscall_64+0x4c/0xa0 [ 165.626159][ T6422] ? clear_bhb_loop+0x60/0xb0 [ 165.630862][ T6422] ? clear_bhb_loop+0x60/0xb0 [ 165.635651][ T6422] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 165.641843][ T6422] RIP: 0033:0x7f98fe0a7407 [ 165.646366][ T6422] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 165.666167][ T6422] RSP: 002b:00007fffc564e6d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 165.674686][ T6422] RAX: ffffffffffffffda RBX: 00007f98fe89f880 RCX: 00007f98fe0a7407 [ 165.683202][ T6422] RDX: 0000000000000000 RSI: 00007fffc564ff1b RDI: ffffffffffffff9c [ 165.691277][ T6422] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 165.699909][ T6422] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 165.708060][ T6422] R13: 00007fffc564e920 R14: 00007f98fe9fe000 R15: 00005601d86bf4d8 [ 165.716247][ T6422] [ 165.719664][ T6422] Kernel Offset: disabled [ 165.723970][ T6422] Rebooting in 86400 seconds..