last executing test programs: 12m46.951071624s ago: executing program 2 (id=151): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) fsopen(&(0x7f0000000380)='btrfs\x00', 0x1) sched_setaffinity(r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffaecd, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010000080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x0) 12m44.088730757s ago: executing program 2 (id=154): bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$evdev(&(0x7f00000001c0), 0x1bbc, 0x801) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@local, @multicast2}, &(0x7f0000000340)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x802, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=@setlink={0x28, 0x13, 0xbaa23f3d13f2d1f5, 0x0, 0x800000, {0x0, 0x0, 0x0, r6}, [@IFLA_MTU={0x8, 0x4, 0x7f}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x40) 12m40.648006382s ago: executing program 2 (id=158): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000340)=ANY=[], 0x0, 0xc, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd825}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x14, 0x35, 0x301, 0x70bd26, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x0) close(r3) io_uring_setup(0x2efe, &(0x7f0000000700)={0x0, 0xe8e5, 0x1000, 0x20001, 0x2d6}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000808000400", @ANYRES32=r5, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r5], 0x38}}, 0x10) 12m34.334351766s ago: executing program 2 (id=167): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x6e28c2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0xda55, 0x700) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) sendfile(r1, r1, 0x0, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1451c2, 0x0) ftruncate(r2, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000000140)=[{{0x0, 0xffd2, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r3, r2, 0x0, 0x578410eb) 12m31.670528618s ago: executing program 2 (id=171): socket$nl_route(0x10, 0x3, 0x0) r0 = getpgrp(0x0) keyctl$clear(0x7, 0xfffffffffffffffb) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x3, 0x6, 0x3}, 'syz1\x00', 0x4b}) ioctl$UI_SET_KEYBIT(r4, 0x40045565, 0xee) ioctl$UI_DEV_CREATE(r4, 0x5501) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}}) 12m26.188514345s ago: executing program 2 (id=178): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000b0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000480)=0x1) r4 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, 0x0, 0x0) sendto$inet(r4, &(0x7f00000002c0)='!', 0x2a000, 0x2000c8d4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) 12m10.281453481s ago: executing program 32 (id=178): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000b0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000480)=0x1) r4 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, 0x0, 0x0) sendto$inet(r4, &(0x7f00000002c0)='!', 0x2a000, 0x2000c8d4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) 9m39.931810602s ago: executing program 3 (id=378): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000180)) mount$cgroup(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x800800, &(0x7f0000000440)={[{@xattr}, {@subsystem='memory'}, {@release_agent={'release_agent', 0x3d, './file0'}}, {@subsystem='cpu'}, {@release_agent={'release_agent', 0x3d, './file0'}}, {@noprefix}, {@nofavordynmods}, {}], [{@fowner_gt}, {@measure}, {@subj_role}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000340), 0x2) r4 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000440)=0x2) 9m37.949523904s ago: executing program 3 (id=379): socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x24020400) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000002700), r5) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000027c0)={0x14, r6, 0x301, 0x70bd25, 0x25dfdbfe, {0x2, 0x0, 0xa6ff}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008040) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r7, &(0x7f0000000180)='4\x00', 0x2) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0x622f, &(0x7f00000010c0)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {}, [], {}, [{0x8, 0x3}, {0x8, 0x4}, {0x8, 0x1}, {0x8, 0x2}, {0x8, 0x1}, {0x8, 0x4}, {0x8, 0x4}, {0x8, 0x2}], {}, {0x20, 0x4}}, 0x64, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x103) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) 9m34.566632974s ago: executing program 3 (id=383): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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") r0 = syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) futimesat(r0, &(0x7f00000044c0)='./file0\x00', 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000100)={@private0, 0x8000, 0x0, 0x2, 0x4, 0x3, 0x3}, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='devpts\x00', 0x2200892, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r5, &(0x7f00000022c0)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}]}) chdir(0x0) 9m30.71267806s ago: executing program 3 (id=388): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() syz_open_dev$MSR(&(0x7f0000000080), 0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, 0x0) syz_emit_vhci(0x0, 0x3d) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setgroups(0x0, &(0x7f0000000000)) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x40) setregid(0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000001ec0)={0x3f, &(0x7f0000001e80)=[{0x0, 0x1000}]}) mount$cgroup(0x0, &(0x7f0000000880)='./file0\x00', 0x0, 0x1b8002e, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x1}, 0x48000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 9m25.105091861s ago: executing program 3 (id=396): mkdir(&(0x7f0000000140)='./control\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000380)='./control\x00', &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0x24, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x80010, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000000)={0x4000000a}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r7, 0x0, 0x0) write$sysctl(r7, &(0x7f00000000c0)='2\x00', 0x2) write$UHID_INPUT(r6, 0x0, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) 9m23.090407366s ago: executing program 3 (id=397): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) get_robust_list(r0, &(0x7f00000004c0)=&(0x7f00000002c0)={&(0x7f0000000140)={&(0x7f0000000080)}, 0x0, &(0x7f0000000280)}, &(0x7f0000000500)=0x18) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000600), 0x0) syz_open_dev$sndpcmp(0x0, 0xb, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000001c40)={'wlan0\x00', &(0x7f0000000180)=@ethtool_stats={0x4a}}) futex(0x0, 0x0, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) ioctl$sock_SIOCSPGRP(r4, 0x8902, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000780)={{0x5, 0x0, 0xfffffffd, 0xfffffffd, 'syz1\x00'}, 0x0, [0xff, 0x0, 0x0, 0x8aaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x40, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0xd451, 0x0, 0x0, 0x0, 0x8, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x2, 0x100000, 0x10000, 0x4, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x274, 0x0, 0x800, 0x80000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x800000000010000, 0x3, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7fffffffffffffff, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff80000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80000001, 0x0, 0x2, 0x0, 0x80000000]}) 9m7.764214278s ago: executing program 33 (id=397): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) get_robust_list(r0, &(0x7f00000004c0)=&(0x7f00000002c0)={&(0x7f0000000140)={&(0x7f0000000080)}, 0x0, &(0x7f0000000280)}, &(0x7f0000000500)=0x18) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000600), 0x0) syz_open_dev$sndpcmp(0x0, 0xb, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000001c40)={'wlan0\x00', &(0x7f0000000180)=@ethtool_stats={0x4a}}) futex(0x0, 0x0, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) ioctl$sock_SIOCSPGRP(r4, 0x8902, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000780)={{0x5, 0x0, 0xfffffffd, 0xfffffffd, 'syz1\x00'}, 0x0, [0xff, 0x0, 0x0, 0x8aaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x40, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0xd451, 0x0, 0x0, 0x0, 0x8, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x2, 0x100000, 0x10000, 0x4, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x274, 0x0, 0x800, 0x80000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x800000000010000, 0x3, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7fffffffffffffff, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff80000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80000001, 0x0, 0x2, 0x0, 0x80000000]}) 8m11.089235582s ago: executing program 0 (id=481): syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000200)='./file0\x00', 0x10, &(0x7f0000000480)=ANY=[], 0x5, 0xa5a, &(0x7f0000001b40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x17b}, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x2, &(0x7f0000000180)=[0x2000000], 0xfe) r4 = syz_open_procfs(0x0, 0x0) preadv(r4, 0x0, 0x0, 0xf2, 0x40000b) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000001300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x404c080}, 0x400) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, 0x0, 0x20000000) r6 = socket(0x18, 0xa, 0x2) getsockname$packet(r6, 0x0, &(0x7f0000000200)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0xc2800, 0x18) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0) r9 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80482, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) write$vga_arbiter(r9, &(0x7f0000000080)=@other={'decodes', ' ', 'io+mem'}, 0xf) ioctl$MEDIA_IOC_ENUM_ENTITIES(r8, 0xc1007c01, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r7, 0x40186e8d, &(0x7f0000000800)={@desc={0x1, 0x0, @auto="42a6000900006906"}}) 8m8.05784655s ago: executing program 0 (id=486): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000480)=[@nested_amd_vmload={0x182, 0x18, 0x3}, @uexit={0x0, 0x18, 0x8001}, @nested_amd_invlpga={0x17d, 0x20, {0x0, 0xdaae}}, @out_dx={0x6a, 0x28, {0x1581, 0x0, 0x1}}, @code={0xa, 0x56, {"f20f108100680000470f0966b808018ed80f2043410f01d166ba400066ed66baa100b000eec744240051000000c74424020d000000ff1c242ef30fc7b680ffffff410f01f8"}}, @nested_create_vm={0x12d, 0x18, 0x8}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x457, 0x10, 0xffff, 0x2}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x56, 0x2, 0x4, 0x2}}], 0x156}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000a0003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x22781) r5 = fcntl$dupfd(r4, 0x0, r4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005) ioctl$USBDEVFS_REAPURB(r5, 0x4008550c, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4004ae52, &(0x7f0000000000)=0xffffffffffffffff) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 8m3.530237911s ago: executing program 0 (id=492): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), 0x16, 0x0, 0xc}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200000000000000000000040000000000000421db2396bbada02f2a60283f2f934c94f83c90eaae26b66fb0efc75aa734b3666700190a78ffe6ed3b84c04a20910fb30d07acfa589fcb65978608d9b2718b0bb32bd2a1fe46e10b7c8e6b"], 0x0, 0x26}, 0x20) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff50ad45ffffffff"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r7 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f238fae344b198915446b576be455f251e79f7ec703f9", 0x82, 0xfffffffffffffffe) r8 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r7, r8, r7}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r4, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 8m2.154698284s ago: executing program 0 (id=494): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x58, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x10000042}, 0x4090) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @random="c5f9772bb146", @void, {@ipv6={0x86dd, @generic={0x7, 0x6, "669e7e", 0x0, 0x32, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @local}}}}, 0x0) r10 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r10, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x7, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000000, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed9b, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) 8m0.601769876s ago: executing program 0 (id=496): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000009000000000000000500000085100000050000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010000000850000000600000018250000", @ANYRES32=0x1, @ANYBLOB="000000000100000018290000", @ANYRES32=0x1, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x10, 0x3}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="3f000000010040", 0x7) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0xa56877f4490a282f, 0x7, 0xfffffff9, 0x40, {{0x7, 0x4, 0x2, 0x7, 0x1c, 0x66, 0x0, 0x2, 0x4, 0x0, @private=0xa010101, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0x4, 0x4c, 0x3, 0x7}, @generic={0x7, 0x4, '0x0}) sendto$packet(r7, &(0x7f0000000080)="18", 0x1, 0x8800, &(0x7f00000000c0)={0x11, 0xc, r8, 0x1, 0x0, 0x6, @random="7cbc00de57bd"}, 0x14) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="100c0608266be7d0ec5020895ae9", 0xe, 0xfffffffffffffffc) sendmsg$NL80211_CMD_PROBE_CLIENT(r6, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x88, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 7m59.149246015s ago: executing program 0 (id=498): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, &(0x7f0000000040)={0x0, 0xe472, 0x2, 0x0, 0x25a}, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x840000000002, 0x3, 0xfa) getsockname$inet(r2, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0x6, 0x2, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES64=r0], 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000001000010028bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="b488840003251b0008000d1d0000000008101b0000000000986ee37d8a98afa7aae3ddaa9c489f878e3ecc9625d15215b8f55d2b8e9e6fbd472f1cc9"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40003}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f00000004c0)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x5, 0x2de07c, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x1, 0xd6fe2, 0x1eed1a}) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000240)={0x18, r4}) openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) r7 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) 7m42.774356454s ago: executing program 34 (id=498): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, &(0x7f0000000040)={0x0, 0xe472, 0x2, 0x0, 0x25a}, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x840000000002, 0x3, 0xfa) getsockname$inet(r2, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0x6, 0x2, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES64=r0], 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000001000010028bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="b488840003251b0008000d1d0000000008101b0000000000986ee37d8a98afa7aae3ddaa9c489f878e3ecc9625d15215b8f55d2b8e9e6fbd472f1cc9"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40003}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f00000004c0)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x5, 0x2de07c, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x1, 0xd6fe2, 0x1eed1a}) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000240)={0x18, r4}) openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) r7 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) 1m2.307487567s ago: executing program 6 (id=1497): r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="ad16ab", 0x3}], 0x1}, 0x800) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, 0x0}, 0x0) 1m2.016026964s ago: executing program 6 (id=1498): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000000001010902"], 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000040)) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0e00000001"], 0xc) 1m0.47067059s ago: executing program 1 (id=1503): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x0, 0xfff, 0x4b, 0x8009}, 'syz0\x00', 0x3e}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) dup3(r1, r0, 0x80000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1m0.32989278s ago: executing program 5 (id=1504): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000380)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobh}]}, 0x1, 0x511, &(0x7f0000000ac0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x7, 0x6, 0x800077, 0x20800000000412, 0x6, 0x7, 0x1000, 0xf67, 0xfffffffc}) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbff, 0xfa83eb850bd66ef}, 0xc) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000019c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181242, 0xd5c7b21faa1a110b) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x143042, 0x0) 1m0.329732314s ago: executing program 7 (id=1505): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 58.904633s ago: executing program 6 (id=1506): mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) socket(0x10, 0x803, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000c0000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000010}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) quotactl$Q_QUOTAON(0xffffffff80000203, &(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000280)='./file0\x00') ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x894b, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001740)=ANY=[@ANYRES32, @ANYRES32], 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x4000) 58.549135039s ago: executing program 1 (id=1507): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) 58.364614022s ago: executing program 7 (id=1508): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x29, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff2, 0xffff}, {0x7}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004841}, 0x0) 56.309881516s ago: executing program 6 (id=1509): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x138) r0 = syz_io_uring_setup(0xa49, &(0x7f0000000480)={0x0, 0x28ad, 0x80, 0x9, 0x200}, &(0x7f0000000680)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 56.130120261s ago: executing program 5 (id=1511): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x150}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @ptr}}) 55.762065938s ago: executing program 4 (id=1513): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f00000020c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000005300)="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", 0x2000, &(0x7f0000004440)={&(0x7f0000004300)={0x50, 0x0, 0x8, {0x7, 0x29, 0x2e4, 0x11000258, 0x3, 0x48e, 0x7, 0x7fff, 0x0, 0x0, 0x7e, 0x105}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f0000004b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000022c0)={0x20, 0x0, 0x7, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000002300)="c25fe92f8abc969bed99d08f79b0419fc38464bde58fcd9ff2c66ee27597c3302dd9e543b48869a354ccac79c0a5f4c87c5051767e7b9494776086c67bdc10c1fc971bebab8cc66ad73bb04cfbda45ea7a49bcaf3178fa928268b9695b66e8368e4cc9c370a8cef624d1cf11171d4dc8f3ecf4189c03e9b21b40188b0110deca65acdc619e3c4a2c8b27755043cc59f366954e4b4dbc4b0c2f9753ad4ede00020b236bbd1890422f79da954873348832de23b031c13ecb9a793569982fdb7e7fe342f24564ad61a14215255ace0f509d958e05877fe4ed09519d85992b0cd58af95dfc3b4454869373ea7d8b53f1105d942e4b718f90d42354e7808098cb01e7189bbe69a0429bfb14ef0621b933ec890c020cdf916271d8d2cc5c8ba1c038fb4c272acfeb7c28d8bfdd9c2505bd2e9fd4b65769d28be67d983f08a094a42b3556e02bbfdc8474d4217fafa45d511601dff25446492cc6dce7f2e51de49de941b0e6572c50142c63bc132927a3f3a617172e8cca42435ddce7a39bed678dedaf79c33db5d28b6a27a83f55bcb7d3219e2dfbb632b5bf23adc6619f18fa6d3738dcb3bed93f9a4f28001781e2c101bd193b6394520a6525c3c1af17c5490e3498e14dbc2b3250be1af54d57047ded6efb0f934496612544922e0be0d7da4f9622756b6fff60a6de549a379ed4e2804ca8dd78e053e66ca2b04f0a780d655cd152133c6e6e002b0717541b96bc6a817cf847423038733367710ea72f195d59a18a5dd74c01a7fa7a88444a18c00bceeeac0482f2476eb38f6114c971d0eef126d2b19a1aa5ec61d61610c590ae30fcb13c8967c55a41cfd5138d98282be1b32dd961c821de02e0c8b475b8825ecd263cacc514a33cbc1db31f2a2af59fbe6624d4f1fc714053abe7b2a8941d5b925c556a00ca39bb306720e2872e06d098c8951e3649e762be7c2afae976ad9bf33f58b1819862f052392dd190ba80dd49a9384c65042604fbd85c4a9591c12fe296d62785d565592e1b02da5a0dd858145bb7d3a8ebf4e3d3ac51d0baa35b24a43343fcb7c3b7bdbcacb20eeceee5ecb2e28258cb4936f9e4289b1c8ae453ec42ed8faf75c46d2fadcbc5804cbeb4c598e9005f3b398794e6d5d4aa873301fd29aef63619635fcbe59503cc26cae343cce058e70a00bd379cf547024b9155c5c2fe4eba01fd0ba936c1852afe9046297a32e3c9d747d1659cddcaea0394b9e15ece3c3adb6da8b24174b99a80d243231e062188d4efe48fb8e4f673fcc650fb5cec06f88b486643cc392980f1b134b1ffbe91ab4b2b891540a53c416136d26421afca75108a8f318e845812edce949138dc800897d9c5b3047f9de9e4bae123d0f0c14f7af2cf684859b443ed307e28bcd0454febc38b38e49943ab19b0ca902c36f9e4ce5e1eaaa3f65a173159bc5592db6c1faf769df6570bd4b3256dd1a6ee6ffcbdbb5f9b405f09ec5dcba2a99cfa768670fd31ef9f806be5bacea3c231b206e410f27fd0e9b92b6802b5680bdc4dbfd06ca18863c071c3ea9e03c49ec5c318883660eb54a3a33fa5960dc49fba22935062f76f6b0cd43dd8d945944db0aaf62b2a0c07804598044fd89133ad173bff589a12276e50acbcfdfde498924ff20cb3260bc637524248450a3d6e973eec83bfb792a5ee52a4a2503a45825f65aeb0fa1a131085cbe516b8c9da8a62b4174f892b3e316992115639ceca6f2d62b77489451c3b1581d0b89ec713da59a08af5c4b34ceb3222142f0b5dd70b8c1185123a4619247fbca0057bcbda20806359c254302db6c1dd26cdf1438edff4af95ea8dedb81266f03084dd646ea54a1b4f26bb62c2e1649719bb5481ef8dd28c32d09e0c46638b1ebb834540c8a7fcd78c69d98cfce662a3950bfc22a6118caf0f90bb88305945206c24d1d68de9b151a84670547f96e538cc3f5b307a60b0e1a8b143c627659f19d79abe2597fa5ae59aab556664939c671a6daed60c9330d7c6323671fe71f354e6b08823c7c8dc5e2f4af4be26c8fdd4478a4a919c9233593d3b3ec0b49e4f25132acc4eca8bacda98927ad262e57622a8af00bb5e936bc08254896499e7e4aa06caf1b9a00e924c69d8fd5e3500cace65c72c9a8e64d5b68c91ed50fcb22ffe5b3eaffc0e0cbc8bcf16be8571a33abf61dc47dd02ac84a213243764babde850627fdfde1222702c8c15f324c77ec56b6fcd6dc11f50c91b0b11763554914aacf0cdfe41b26eb68f5d781f89cfd19c6fb7fe2e5ff19238290e864ea8eb1a900599ef222e7c62671f8a7bb06bfece509d2c40d8f7445e8fa0c0a4042cb41bd74442b99d27d224fcaa582f2240f816051f84bd548dc95a2b0ceb7ebc48e6357c56938270633e176f7e96969ed8fa61316518d04e8ce8668ea077b88155a97b6ca114ed2058553c4c56ec8d9e353020aa2462ec0312e3183c56d1c3bd86d9e32a0f27f78892ee0baba6c0dbef9c8c0837916604c8d652335d84581cfe08246d530d16abd2690825a2c2394c4880f5ea05d4a1ac78f47f6e716a3cca31d296f76e1fd519a6216764619cf29c4f76962450f9a79b4eaa4d3f8528a1155b1060dcff96240d95819c78f05310d0c4c22187b35fdcfb2bd64d3e7f3ba197be39ae4e8d3c7533ca087f71f691eb63b67c5facf7b7d38b33b00d7011fc0a1769687d65be802209a5469c8f7adec77c07c60e18b2f0ff963a8cb4a4b02f7bf63b69a48334c0a3cafe1d34c532b876c50ab82f48d812618fa51675cbc77f0e521fcf3140819d89e9a6dc759ab736e6e80c00ec8eb439e16f1d9bb8061ef4082f54c59ad03982be21119b0c3dfdd602272a211a764a447cd5ce94251fe371d8f74ded0d805c1d41ef27909f2e918dcf4dda25d122419b97613d6efb3c7edffe770dfd1e440f19fe6dfa43802b490afcb79c93b70c1a17cfd6d404b5d325e4f17c01e95d7acf57c49854efb8e08bee019f7390112bab655d50a723e5722e7de5fe20c07550860f9d8bf83ae209c94f515f1d30dde80eee19bc10ccb5041409b522c8713a47fc5936b36946d37d9d9d11fd3c31e642d02d4d90cbc49665aa86f03db25b5858c5a2befed8edfa6a340da89b800a3a40f3ecbfd129efb06cee403ec46df6d3c04e720284bd2178dcea52fbbebd1d9d81ddaede61e1ea3a043a78dbea14c01cc3d2f6f27e96efbfb5b076232a704cdc9ff0be4013aedaf6384ae954be6f105696cdddc7ec390dac959d790877cf474e3ee574ee907b0ff62dce094550a283a13ec45588b8b992ab48926b6d9cad3d1ec96972060280de5bbc821acdba3d7677e11b410f5768c3106079e6c0e0188ef1940b365b8d6fa6221665e40a00a898fe6538c2102fb9af48883468c92e7e16ab7b2527bb158077a9547406198231b4284c07e308c0dd783016a006a605985e968a41a4f4855db68559a53fb36c0e9d0de6d9f43be212673d87b9bb57b400d4e20cb8a19de9d4252b7aa6d5a566d52e59c87d681f8adaa961a6fed9a3f541cda3ca7721fd3534ca928ad8f46965273a825c0100b784a87d79b5e301f5e2b122d9ceb3d28d2d0a4b9470e52b6d5f9414d0116093893e30e2a028f0c1ae5f769e592fa92e6d6d03aed87314abcb27460087d0dc6e5e946cf1a9ae63b5f151518f125578a5c5a6537298c93c9a9ac262470d584b2793179d8c1c59938441f7db57ecc1269816ddec8de2f3d252dd0dcd250e4eb24d25821e0ed5b3a33432e5257abb4000d0234e9eb5ebc76833e0d62b9d5bba942395b65800a3f25e71bdb616e9c14264d6b9ddc4924b55fb9182a7eff5d865e1053c497416971147a6de27fd1fc8b94b3644e205f7d96c049fb977757525681c552c9524b72ff5c9f835c397b21767b7972430568fad75b0b4fc6b677b14a024aed4667b08483028e9f2a6960e7d53894f9083483fe3243bd33fa83e0a7b9e7171d0651a05b6c97e8dc7ee6acf55c3fd2064b22ee04f8f692e861c56495ea7a1abb22b8f7c8ac3c50f6a8945e481657fbad03f7fa7f5e4273fa005126d52e54b6a235c961328494060c50b0e3ee7fe168b3a41f294c46742e843b10732eeba9fed8550eb99227f6ddacaac551c64f3c3a0dda192153ba4bce885d569c6b87f968988dde04afd7e32d6d08d144a66c42d9a251595b3bc260c2c2bfa2c8dcadc83732e21a0d5f3c43bbb719a35e18ae49b3c93acf0962cfcf652a786c0fc84007b5c66fe924e800ed4cecd378e20f04a90d76aac0dcd0ba4fbe37a6777bfff1e4bc05701a886a64e7b56ba95cafd0555441933321d0161ee6fdc560043a4f45647c531a2ea86c69ddf92883f7c211633400e5ba58b457f5c9e23f49c1dc397d32b1daa3f5b8f874d690c24c7e9f914d6c99fe1e7f5220663b82f7492c3c7408365363e79bdf95cd9e61c215128eb3c06b7d8972da72b830d75aec05920df4f48919fc96b2493bcb528f147b94f606297e80d5b88ffc40d372b380211acdded406222354a923cc39f59ae3ad7647b1b30245b30dc5079133a18cd9832d422a2b1ecc0b2c3a2b10d50aa4e230752194ff1759a511baf82c8c51718c83fbf442f3d31c1beb1bac54acf312837cc007b3c85d09faa04b47e16e841b4a5f9d4eadb856d258ec3adb1c06a16b8999150380163f5049d1c94f3dca1dffefda98ba363e65b8162a848b413a9954e0354200c5d408d8ca7379ac4f2cb3c990afdb4a18a32896da47f5cba3a4954d4e78b4e342a4f6a4f4d01ce0905370265788b42fe9939859e055df03e522f4dabd60aa0411bcad2f6ba87b8a11e97ad25c4605ba48aad77883eb1325df4019a3c9c2a2875a24d69f652f84c732226e3af0e9e03ae0804439b38ea058988d34696c247f52e426cfb3262b5f18820eadef9b34d44b660679b48b7c6ef78c3549bded8a771bc20b93c2602a55767184f38eeff2b3a41d3efdffaeb3cb4d20236a0e2c51e5c2337f3de0f6351c6f66906b8b7fea093b9fbd20f597d8b4fb2fc48be1241b9433aae081f933a23766ad7cd9642b3c61f1b1585d624263df187b8185d5198338a1587fe23ee2d533e74b10afb3cd5c450a50cd99df38b3a861ad2c79a0ad1981da5ec1a0af41ab14d685f362ccf3b5f4a4e52750fc151f6877557818dbcfa42884753de52b9d0235f512cc20ba3ab1aaf9598628f0498a40e7f3ffe2a3564418171d8cbbbd32dc9f7b2ba92258ed8baedc048cd6a1435ae88d3c18b330876f8971885d1a324832e0c0ced4003bb28860f35b2a8a33aac1faf4e610707004bdc3980bc183f33765ff1738638025b37f986c005b15906922738141c414180a74f8c9dd9bcfc3a83ea01c2092d6fa2f371fb496499151359f58d8a95c3b4f38e621bafea202d3f35cd0562ed1516574416dbe5ec9ac9d256dcd584ba821bba4a06df6e0c8a20283fd6bfba4cd03126915877ba52b9c0e2a0e8188844e2333309d6408c2add7947f840b99c03147c3f03a682f82a5a3f99b7c7630dd275eec6608c974cb1487aacdde5ea6417367f8b6585e5eb2eae5fb56119d772fac2110ff8cc260cd525ef373b3368004b7b97343219e30ca4613860538a8332fb0f660c1a27ee1810b21db81504b78d0bc3f1ab93b9f631510a70a982736c5e3b3aebd9c6c8c72a00849e5dc164c1cde60f2ccc60a681c32d34a07de5a9bde57420759f85606e280d6ea7abfede9a5b3a00f0501eabfe95a11c5735248874899550c431eae8a03eb65fcc77c94b7eae7574bc6841d3197c168568e5052546c8b788f3effeb5d3fb9e28c1cc78ae44eed4f2701be68447b25eeb850b64f4a8c1f0ecb2f644ed7cafad30c8233366df828ffd9931d39c903b5e3a37f6d347f2b6e5c126bef846e131014aed7abc2e313ada69b7a28c80a7add2876ca1e9cf6da27c748817bff09b6dea519c8d089f8d897df6fee6d3497133e673187b71c14e3bc8e58668cd4fbfcf26af555212a1f2e36828dea26b6575418e1f746fae9c790e0e9980ecee1c01490fa3c340cce1c5992146de97f4755e5f8d8f893702cfe400cb1044910de1185a8ee908ce47dc5b77789aaf4d597320b7f67882dd5a86b25ce76d086748b5c383674441db63309461c9980becb7f91e52e659997897789ae0b57c7407457a54d69456b9de44f798cc00b9e42be88476d8acf82f53f3b0c260301572186a7322206f5b2508f665b6b1ef5f8fa5674037e048c3442219c1f1754544f02893ef4b7a5b8c796cc4d8aadfcbfb186ad4d42ccdccca1d435792b2ecbcf62402a86ceeb438f3b0ac77a989ba72ad9a197036aaee26ab333d752127d26bb02907bc14d59b115fba11bb2b5e514f4424890e5048e92966480d1a75aec55857ee3f2e03b2268909cc5255990191458d24e572d4082ff86e59245aa454c05b3256d6641a8234857dc7c46a6ad02f7c634576abf1eebdbbc7495c58cb0f5687dfa7ca75478b316a133097e11114be1fd8199c203fe6148ed7eec44ed08fcf9bb572d1b57e241fd785b75bdd594680efe249d4aec73e820b35d49e8702dc0ded75596a8b57ad834654a32e328e0cfd60206590c36808c33dc7904a906aee4b01b390798e087eed3f153a0e6e976f66e902ad31fbad6c6200c4717f920ba06168bfea1720a8d0caf68d9695f19b8086de2d110a86f01f4d9fbdff14a11f6b79a725a3df07ece5571fefcf67a355a3b7cf05e1fda44c4f34d648558e59aee1441375021dcfef82493317e0053b4baf892f10fa7bbfd6b184aef6aab621c23b7d06cea5e4d50e42f38195fb61c4e72dd1b65a182a1fd54d68a79ef83886b8a5981402cb13c66ac1146c11195bfd4bae777e6581122fea891a50df83df345b2022579fc407b82189f5b85118bba51469b116794d664713deb1ae60bcb92bc2591291337357b6c721cc6b13031b7ae27954a79dc3b2ddac0ea3fbc932fdb5e5eaf36a6988ae4687ec6f087ea2f37b25ccb8e40da04772ad5a6547d98ed286097725e35d0af2ac508300b8b9a2b6762ad7a11b4dead39c96807dc225e18945b4fbb09c51457b7ea8108ea8c5c5f57a57d15bd936cb0b1f3ecc2e1a6412e82895cae9fbbf2e75edf0c7abc050b51a66038dac3f2ce0d7f1fbbd4e13515a3897ed386c7f5312a2e8ae8ae9775ea32160aa7dae2aa0e7151a7ffc689eb5d27182ebb99981e062d53ef5715fc762afb364e509f5dd398bda630f53eb7bb41f34d0ab1107cf6da5b016e11113231d31d87835ed66b07c8537dcc05181641176725ffad4c5e36c50b180c948632e75252724fbf1d675d7aa1e48a484dd94b56f5ce6893900344e6738fa69dd79b72c60130fc9a30acb8405a8ed2d9c7a47f642f1c30af4676e56df55c697cc32eafe346c2ccd8a66072c31b9baead28e358d572ab85337c51775b7762a491ac6d16653141752b15cd101e209e4866c4d55380f566069a3d30f69af59139d2b0c445572817f98fbb3eba8f12a225952c76f32cf47250765f66c2a43007fc2c6b3dcaae64cd318731699905e999307fb2aa776734441cb2424d4ce80ef0100d71c586d1d76c626a3899f63dd06228e2947a71df0086145291d6adf565bcae55887025bba5a8080344018c9e96487c766c009cdd3529ab4b3f33455605b451eb3d3175f733a5a8dcb8a20fc976f87ce32ef0126aeacdfc99406d841ea708809b9f0efae116ca79501b866b561972384842e583b0b956f2fecfaaa908bbeca772254cb5fb1e8052dbc0be1bbbc2669a4497b92a7b7602e85df1b9a7a83e780dbb73ea139a8d20c32a8df62db28952239ed1590036409f902451cc65ab02890d0f674ccf82c8a7b2c2288e0afb122076e0372e6d328f98af7bddf10f69b9d7aa5590b8112e94671fda9814356fedf96ff3f89d9be332c00cfc90f68de0cdc42a396a4ef6c6cee9c1226fd5a9fd99f2dce2ff1806b55450b900f9e48cdd8caf6ea3aea975c37570ceff169494ab6485687336cd85d935148b8ecb4942b6cd11311b1de1eadef33fd1763de931c6b7bdb42875288e9d1f52614274d6a82d2d565f82dfa52b1da1391e9bf723f631b4d7fdcf434a50ee2e218b89cd1250b6678783497a74b8a1384cb5c959c7730c7687f1bf8876642d211e2d9f3a078316d3df0b10877f1b8cedb5c205b54f24499cc8c04b84bf411958f5c4633dc2eca1422fe00b3a541f11774d29d0c10a0cb029e552d4a3d6b0fe9f095709490debf0577bad4a0ed711b3f54c6145ec50c42af56874c338f98d93ca19aa9c2c1f6fbcc2829b0c610f02dd24b7eb22b9a114ae7f063aff1ecddffc3cc583fe635670af8ed3d58da7447f3edd5de0744fb473af8fa2349b2aa1d67a35d5f72e65d948d4b360a1d3b1016bea9676abbcf8544f2c4ffd90f3c585592f130ff213c37ac140b6d7cb25ee0bfa65f971bc99dc7b04789f5648f40d51742b93b58bb07295196bfe633d863f6905f6862624df9b49b0e70ed40dff4a1751fdcae387e4fcaf2d78b0d8633ef0fe7d97c2c9fae64139c0fa1f40c22a1099ea064aea5f1273495ddb522d545f5a7f9057e3d245efe9a92906137a6832e0ce04d8686a3be98b7a12c89cd157881169d1df8ef1e517b754c9be66e1c034f3295287b6edaa530f83f8f2a2f313e8bd5c941ab49d44289259c1e90ef6117c656145436cc4dc3cef1f4c27378c15923bee50a8a3ef87ac8c7e5192d005b40cbc0476fec78cd9be654f1e3d8729f7d5433bc06ae145a09f32ab4926de13549a714ce4aebaa3633cb376450cf07a36fb32cc5c1818d43261f97d686b3383baca4de4b15eb6b282b68e69488127fdf9e79d7314f9ac62b4a24507408df166e67453c5424b1b01a4f018ddf08e084fff1bd134e6453dac69b5ce3e65d53664f0e8577f9b8cfa240c6fbce956fe506ed3a1cf3ba79b3f59864636698b12b35feca799ab5dbe797f6c12f24a5f808da6c3e2a7a96f3d152e3395b0fe7699409e90effe8586f2fdac811f1f4a7bad8d620247b41ea6304d78f36fa233dd95cb634e9897fe75ed1088f071fb7f0b0418fef15bd08472cc8086a5ad46ebdf760c9a50b978fcdcffa20af8c0ba686ea90e7d4fb2e3cdc87c4b38d2b60f297a13960bfd30ded0cf9a848be1dcaea2581bb9692fc5a9741a095695c62cedd824b4132b6945c912c888ed9cd295b87a1cf74f0911620ebd139ebc9726c26b0208d8235c99148973fd4acf93811a7b9ddbf3eea33a9775bfbfd8b1b6ce9d44680a408b9933b4a12a63f9552fb02d209f7f1cacf19adee451d5950ea6cde8dac161e6449952d0f343674b50bb09f8eb5fd57975e0d62c109fa1e3d4ae4ef75cb3316e648b961dfa09973a209d033034de772761b3cd81ee6c1d59cce892d248e0349aee5f8c12e1ae24f12aac8b66a9000f2fb31fb29908384669bf6668ea1b14851e8e8121e219e55ceb36cc70211759a47c47641272234adc5be19722a0258426d59adea242ec36557f69e59bd24a082c1d06b9e4aa9d62eb8437d8b47426708b6711dae59526fec776de32c2a54c3a0f5c4028bda53419bb6c7875495f141a0cfcfcf315dd7685bbeb1b86558c11894f8ff22b31ec5059eede907032c3b5c4b4aa07433dabe45a6e6a7c14f382038964fabab2947680fd427cdd9781b99a890ab2a067bbd8c3a5b09c47816d4c42234289e44e70f044084d03be055d5f002bddc6d05c5539e152dabce5799e67d55d3139be53a77742d05ec4d68a52d16eaab3ad9c529c250179f9078dd9585fbbafee84f9b1f15b5e9939644aa0f2c1d02412b28f9fc75c3465e6cfd92b796b247aa502c55263d98b791272096a62212f8de2e50ae84410f7ba4dca0872a631faa121b437ad1656619276a2e85d553e1627ade77045428c9913500c0d285abff32184a4560326b619a9bb580d73d019811bb01bf690e226a201095d67614603c772b31b7a4cb5f9ab3ef1f713ee4c64b58b9ce58bef6c00bd2ff4735a724cd1661de06e133708e72ffe63c4f04241d16a384d781624085d8949862019a03d4a23b78049cbb1c9ca95e7346d337e53c84e4afb75e67d530a7441531ca73f2fd8ecdc1fcc6a1ae3cae9913b9c73b406e2cfef9dbcc2e2185891b6c9a3f496a77370edb760af27317076e71ef7be4bb233112d86232e5c92f49eb5d48a1f54a9de11a5ad88a365bbd7fbe649bb7e2812d61e65e9099e5b605de312b3431f1c9aa70f96b55498d86a228d15140ab2ab44ff222f3c1003c3bff8048683914f73c3fe3e1557510732ee5ab4ef7d1f62761265c47840032587e5309b7694e2247da4f76335980770191305717e6ceaf48a116b87ee585dea2c8fa22ff0ae6becafb0967cd198939f709a0973a8a42c4c1ee67341f174f238f8dc3fd5e77531f7c2e78e1b69949da0d3d93c6734a60e95530f415420b47d4cd18f304041c24ff3990a75419ddafda12869b364531fe38cda02d5ada186271fa7c6d81557fbb7a167361a7c34ea587f67689955e423974b8640420c7b9057c86b0ff526377366892b97f46663b77a71af5ce70cdbb9929f7cb3a9f9ff6c8de4f89f9d2ad6933f351c9ff8235f9f976d45d2b32e31e789cd61ee0941b34441b734fd6bac762c91d41afb009f00b435c2052f0e913deade323235942250d7d6e0ce9f22c0abbf463aebd146e0798b0555896160b9bdf89e5c86aec475561aa2efb42a0acfbf48756daacc0c0ca9929ffb0072e14496a396b931edd6be1ab918e8e20d331cd3a4b15496ced994d695daf55fbef5e9913f72b5d7dc78a9cb758b2e830a7b4d60921d7fdb66c6c4173c2eca02cb2a6f4238d63e4ffdb000ee7366ed1d2916d358d67a65c9bb68f38e1fa95e188ee6c6891cfbf9f348a042b9bd007c87b4e1e2dc043d4778d063f98cc55c19922595dc5a94b6d4dce3e64f61e99df7d4a9c1285fe860d1bf55a07609bbd698d8b3893e666316e34bff6fd7b11c6289759e6469f7e5ec1064e56ee70923f378e8b56442bb6deadd865e1c2e2533d28254f9cdc465b80a32dc104739dfd97b3cac968b090a673d7e5db1ffacd9832960c5e744836cf107aae73dae6b3abab37b49e6b72fd3ca0b10a299fe3b38c9a663bb087777d837e31a7d201bfc156bc05bc74cc22289e31727670c9351e4d9bb62ea904a6c7e7363f05acf4fae31c2f59441887bf9ba5b86a78146eeb51c65264b49b4fb2b1dae1585fed67a91a97202e77716acbf877512894c3d0d5a687048923a5864de4bcb14cee1715419d7475dd445b42c2698eaa99046ba3484ae0a122da8c275d7aeaa984fef5235742a6f9ac651881e243843753ad48503420c30db7e5fa0d8d13a1e047e29566b94b2198bc9e21ee4489d9f216250a6e1da8760fc5e78eddbabc611e706758ac48fd5afa571ef3bf6a97e085786f6760a36a65dbe73cc49c151ac399c4a0e45d54f4c60e06f337915766ae6be7998f08f61bf7c61f868a5832d4c65ae261ba3390eff7e8bbb82b999b552a67a254001526cc3ec5c8eeafa0d6dd1d02df308bdfd0cdcfa3f44c45b4a08651ccfea9f2f44a5c8d4a2a9ce4c583b322fb921639d539857ac6026ce3af991c", 0x2000, &(0x7f0000005240)={&(0x7f0000002240)={0x50, 0xffffffffffffffda, 0xe, {0x7, 0x29, 0x4, 0x4f96568cbe55efdc, 0x9, 0xc, 0x5, 0x2, 0x0, 0x0, 0x50, 0xfffffffc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fdatasync(r1) fdatasync(r1) 55.571456552s ago: executing program 1 (id=1514): setrlimit(0xf, &(0x7f0000000a00)={0x3, 0x6}) timer_create(0x3, 0x0, &(0x7f00000001c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x2000000000000000, 0xfffffffffffffffb}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 55.385606074s ago: executing program 4 (id=1515): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x1, 0xb, 0x3, 0x0, 0x0, 0xfc, 0x0, 0x4f, 0xff, 0x5, 0x0, 0x8, 0x81}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) r2 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, &(0x7f0000000040)='btrfs\x00', 0x6) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="2e000000010002", 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./file0\x00', 0x2000898, &(0x7f00000003c0), 0x1, 0x55ae, &(0x7f000000abc0)="$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") read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000023c0)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r6, 0xc01864ba, &(0x7f0000000500)={0x923, r7, r7}) creat(&(0x7f0000000580)='./file1\x00', 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x40000003, 0x7, 0x2, 0x0, 0x2}) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000480)={0x1, 0x70, 0x18}, 0x18) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4, 0x2}, 0x6) 55.198127589s ago: executing program 7 (id=1516): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000240)={0x0, 'syzkaller1\x00', {0x3}, 0xfdfd}) write$tun(r0, &(0x7f00000004c0)={@val={0x0, 0x8}, @void, @eth={@random="050000000200", @broadcast, @val={@val={0x88a8, 0x0, 0x0, 0x2}, {0x8100, 0x0, 0x0, 0x5}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x3, 0x5, 0x28, 0x68, 0x0, 0xff, 0x6, 0x0, @private=0xa010100, @private=0xa010100}, {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x4, 0x5, 0x0, 0x5}}}}}}}, 0x42) 54.192475991s ago: executing program 4 (id=1517): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000100)={[{@nodiscard}, {@nocheckpoint_merge}, {@discard_unit_block}, {@six_active_logs}, {@flush_merge}, {@fault_injection={'fault_injection', 0x3d, 0x1f}}, {@discard}, {@noacl}, {@fsync_mode_posix}, {@alloc_mode_def}, {@discard_unit_block}, {@two_active_logs}, {@fault_type={'fault_type', 0x3d, 0xfdffff}}]}, 0x1, 0x5517, &(0x7f0000005880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r0, r2, r3) mknod$loop(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x1) 54.190892159s ago: executing program 1 (id=1518): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x1, 0xb, 0x3, 0x0, 0x0, 0xfc, 0x0, 0x4f, 0xff, 0x5, 0x0, 0x8, 0x81}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) r2 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) syz_io_uring_setup(0x88f, 0x0, 0x0, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, &(0x7f0000000040)='btrfs\x00', 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="2e000000010002", 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./file0\x00', 0x2000898, &(0x7f00000003c0), 0x1, 0x55ae, &(0x7f000000abc0)="$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") read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000023c0)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r6, 0xc01864ba, &(0x7f0000000500)={0x923, r7, r7}) creat(&(0x7f0000000580)='./file1\x00', 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x40000003, 0x7, 0x2, 0x0, 0x2}) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000480)={0x1, 0x70, 0x18}, 0x18) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4, 0x2}, 0x6) 52.882637566s ago: executing program 5 (id=1519): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x48, 0x0, @fd, 0x3, {}, 0xa6, 0x3}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) 51.925664834s ago: executing program 7 (id=1520): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x80042, 0x4) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x0, 0x0, 0x7}) 50.933293351s ago: executing program 1 (id=1521): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x44088101, 0xc40b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(r0, &(0x7f000000b040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) open_by_handle_at(r1, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c000000810000000000000006"], 0xfeffffff) 50.773226346s ago: executing program 5 (id=1522): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = eventfd(0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000007940)='/sys/power/pm_async', 0x8081, 0x30) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x14, 0x2, r3}) 50.562094269s ago: executing program 7 (id=1523): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x20000000}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 50.345935931s ago: executing program 4 (id=1524): ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000140)={0x2, 0x1, 0x1a, 0x10, 0x1de, &(0x7f00000008c0)="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"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000006c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x12) 48.404021364s ago: executing program 7 (id=1525): r0 = io_uring_setup(0x28cd, &(0x7f0000000400)={0x0, 0xeff1, 0x80, 0x0, 0x31b}) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600), 0x40602, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = fcntl$dupfd(r2, 0x0, r3) read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) 48.334706374s ago: executing program 6 (id=1526): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r2 = dup(r1) mmap(&(0x7f0000097000/0x1000)=nil, 0x1000, 0x4, 0x28011, r2, 0x0) r3 = dup(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) fallocate(r3, 0x10, 0x0, 0x72000) 48.004044094s ago: executing program 1 (id=1527): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) 47.915019744s ago: executing program 6 (id=1528): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x64086) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xa, 0xf}, {}, {0xc, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x2c, 0x2, [@TCA_CGROUP_EMATCHES={0x28, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xe85, 0x6e4, 0xc}, {0x4, 0x80000000, 0x3, 0x1, 0xf, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6e4}}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 47.785676923s ago: executing program 4 (id=1529): sched_setscheduler(0x0, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xffe0, 0xf}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x8}, @TCA_BPF_FD={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x810}, 0x20040054) 47.634107434s ago: executing program 5 (id=1530): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xa4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000009c0)="ed14", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000300)="cc5a4dbac0ae0010000000000000d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f000600c9adf83738838bf00e6ff4f19aa78c555a7459de1f4c809aaa420500bc0c561521fa8c58875d916a4dccd28a4b4834e761a1e984f9afd1b700"/175, 0xaf}, {&(0x7f0000000a80)="ddad5578b806b57a1fb3db45b94f400f90cfe65af411a009366a96e6afb01c69a0f5eb21d27b0fc3767336311d4a890c48b4999ded7966d6cae5d010df2f961ed7bb0ecb5d355dc645ca55b9c8e91b4d84fbef2e22f3d42e3750c660798859338d2914db8a729fd710f97aea17edd0674bd72d8485c2f98feb726871d1bda7b2e1c6bed7f4a8d6acba440c41bf4953c12639b62c6acfdc58ce57254cbfa234c3e0f4219c97e1781dd21066a6c19bc79911831c41d6fcc0aa66ce3d6a58485052254608dd4f0323358fee252f88ec3b08dcf96de48012df9b5d8d98977b44", 0xde}, {&(0x7f0000000140)="654f25cb7f6059bc6d1fe973dcbf256511f27ea9d285bdba36f54af70215ed7643aa83528a8d20ae94b3936ab028bb287436649e45c8acd9994548258bb8786b8224f55b8fb0", 0x46}, {&(0x7f00000004c0)="d1fb36180cdc531e24bb92c1e7eb236511eef6078c9f99fb79df8d104a064295a38728866bbd53ff4e8f3c2d58e72c496a298e928d7e657a91da8b1ab56a7eed769f8f6ecf8bca8aeecda12b365f1279891112ceb06d7e870638151f6d4483bbb66853f1651b93fe7a90e1", 0x6b}, {&(0x7f0000000640)="44ad9575ab50841bc63827ce482dd286d74a1991e8e36c12404e9586197941a12f6928acb5494c9cc5f9d238d60dc861df", 0x31}, {&(0x7f0000000700)="31e0f14284589e79d7caf85bb3ea9a9cef63752ab692f53f0bc85e5657845abec194019a36c52e653e7c463e051790baaf92c47fe81765dd3ce3ed718e1bd3ffbe3fcb998cf75e002bb89300f5eb7a596fa181495a6e62865a4152443b18c0eab596cee12e63f7e747746bd655e19b801c84ff5697f9fc566eae209c39c7d0742729a85ca2213df359868db2053f9cc3981f24b35217ff8847d0860513015ef51c5a8244233ac8809e0649a9ec0796ad327842dc883862430993b47a42a679d94f9623ecb3b1", 0xc6}, {&(0x7f0000000800)="8a0c913f0d97e8fe44e28a2e1d14e522344adad3e763c55140a49245b874b3b87a9ba11c0ca33337d5ed723e4ce29aa36aa295bd70cdd3c48c488e032b5bc2c204f4a51756e0c9204b52711040803ea2130871876b86464295374358d286bfaa4d998c152b54d897299c56892391233c4b4c7079b0a34d2954d3446f8d0a8995b38dce89d2db229be629b2235154f5390a959cf96875a3d98c14edced1aab5a99b", 0xa1}], 0x7}}], 0x2, 0x2090) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 39.995423817s ago: executing program 5 (id=1531): sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x12c}, 0x1, 0x0, 0x0, 0x20040000}, 0x10000000) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r2, 0x1, {0x0, 0x0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_j1939(r0, &(0x7f0000000340)={&(0x7f0000000440)={0x1d, r2, 0x0, {0x0, 0xf0}, 0xff}, 0x18, &(0x7f0000000180)={0x0}, 0x4, 0x0, 0x0, 0x4008011}, 0x1) 35.918708865s ago: executing program 4 (id=1532): socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd2a, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) 0s ago: executing program 35 (id=1525): r0 = io_uring_setup(0x28cd, &(0x7f0000000400)={0x0, 0xeff1, 0x80, 0x0, 0x31b}) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600), 0x40602, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = fcntl$dupfd(r2, 0x0, r3) read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): 8-1: Using ep0 maxpacket: 16 [ 774.446766][T11213] loop5: detected capacity change from 0 to 32768 [ 774.451836][ T8555] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 774.461725][ T5830] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 774.487692][ T119] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 774.499263][ T119] usb 8-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 774.508403][ T119] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.519742][ T119] usb 8-1: config 0 descriptor?? [ 774.553032][T11213] read_mapping_page failed! [ 774.575164][T11213] ERROR: (device loop5): txCommit: [ 774.575164][T11213] [ 775.031848][ T119] hkems 0003:2006:0118.0005: hidraw0: USB HID v10.00 Device [HID 2006:0118] on usb-dummy_hcd.7-1/input0 [ 775.116518][ T119] hkems 0003:2006:0118.0005: no inputs found [ 775.143027][ T119] hkems 0003:2006:0118.0005: force feedback init failed [ 775.192388][ T119] usb 8-1: USB disconnect, device number 7 [ 775.416097][T11251] loop6: detected capacity change from 0 to 32768 [ 775.423668][ T5824] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 775.429984][T11249] fido_id[11249]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 775.446351][T11251] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.979 (11251) [ 775.465304][T11251] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 775.475839][T11251] BTRFS info (device loop6): using sha256 checksum algorithm [ 775.590837][T11251] BTRFS info (device loop6): enabling ssd optimizations [ 775.597871][T11251] BTRFS info (device loop6): turning on async discard [ 775.604745][T11251] BTRFS info (device loop6): enabling free space tree [ 775.685474][ T5824] usb 6-1: Using ep0 maxpacket: 16 [ 775.774489][ T5824] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.918729][ T5824] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 776.114550][ T5824] usb 6-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 776.214587][ T5824] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.236986][ T5824] usb 6-1: config 0 descriptor?? [ 776.475666][ T9503] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 776.720577][ T5824] gt683r_led 0003:1770:FF00.0006: unknown main item tag 0x0 [ 777.493667][ T5824] gt683r_led 0003:1770:FF00.0006: unknown main item tag 0x0 [ 777.514035][ T5824] gt683r_led 0003:1770:FF00.0006: unknown main item tag 0x0 [ 777.601127][ T5824] gt683r_led 0003:1770:FF00.0006: unknown main item tag 0x0 [ 777.662183][ T5824] gt683r_led 0003:1770:FF00.0006: unknown main item tag 0x0 [ 777.766830][ T5824] gt683r_led 0003:1770:FF00.0006: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.5-1/input0 [ 777.922472][ T5824] usb 6-1: USB disconnect, device number 4 [ 777.997252][ T119] gt683r_led 0003:1770:FF00.0006: failed to send set report request: -19 [ 778.117458][T11285] fido_id[11285]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 778.374573][T10215] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 778.544031][T11298] loop6: detected capacity change from 0 to 64 [ 778.567048][T10215] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 778.592685][T10215] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 778.644607][T10215] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 778.700194][T10215] usb 8-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 778.719832][T10215] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.747273][T11300] loop5: detected capacity change from 0 to 128 [ 778.767611][T10215] usb 8-1: config 0 descriptor?? [ 778.775590][T11292] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 778.838652][T11300] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 778.863210][T11300] ext4 filesystem being mounted at /50/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 778.916810][ T29] audit: type=1800 audit(1770233560.934:87): pid=11300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.990" name="file2" dev="loop5" ino=12 res=0 errno=0 [ 779.012837][T10058] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 779.223418][T11304] loop6: detected capacity change from 0 to 32768 [ 779.240464][T11304] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.992 (11304) [ 779.280034][T11286] loop1: detected capacity change from 0 to 32768 [ 779.288756][T11304] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 779.300214][T11304] BTRFS info (device loop6): using sha256 checksum algorithm [ 779.451691][T11304] BTRFS info (device loop6): enabling ssd optimizations [ 779.458859][T11304] BTRFS info (device loop6): turning on async discard [ 779.465883][T11304] BTRFS info (device loop6): enabling free space tree [ 779.482332][T10215] holtek_mouse 0003:04D9:A070.0007: unbalanced collection at end of report description [ 779.497950][T11286] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 779.520276][T10215] holtek_mouse 0003:04D9:A070.0007: hid parse failed: -22 [ 779.612265][T10215] holtek_mouse 0003:04D9:A070.0007: probe with driver holtek_mouse failed with error -22 [ 779.647667][ T9503] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 779.714838][T11286] XFS (loop1): Ending clean mount [ 779.728109][T10215] usb 8-1: USB disconnect, device number 8 [ 779.765629][T11286] XFS (loop1): Quotacheck needed: Please wait. [ 779.859399][T11336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 779.979476][T11336] batadv_slave_0: entered promiscuous mode [ 779.985845][T11286] XFS (loop1): Quotacheck: Done. [ 780.176968][ T5830] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 781.763927][T11361] loop1: detected capacity change from 0 to 32768 [ 781.820210][T11361] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1005 (11361) [ 781.853538][T11361] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 781.864608][T11361] BTRFS info (device loop1): using sha256 checksum algorithm [ 782.228577][T11361] BTRFS info (device loop1): enabling ssd optimizations [ 782.235646][T11361] BTRFS info (device loop1): turning on async discard [ 782.243346][T11361] BTRFS info (device loop1): enabling free space tree [ 782.476958][ T5830] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 782.570061][T11350] loop6: detected capacity change from 0 to 32768 [ 782.748128][T11350] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 782.765810][T11393] loop5: detected capacity change from 0 to 16 [ 782.829838][T11393] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 782.894702][T11350] XFS (loop6): Ending clean mount [ 782.938120][T11356] loop7: detected capacity change from 0 to 32768 [ 783.007692][T11356] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1003 (11356) [ 783.048734][T11356] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 783.108271][T11356] BTRFS info (device loop7): using sha256 checksum algorithm [ 783.262201][ T9503] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 783.343535][T11416] loop5: detected capacity change from 0 to 128 [ 783.358674][T11356] BTRFS info (device loop7): rebuilding free space tree [ 783.425351][T11416] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 783.457668][T11416] hpfs: filesystem error: improperly stopped [ 783.466510][T11416] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 783.476286][T11356] BTRFS info (device loop7): turning on async discard [ 783.483145][T11356] BTRFS info (device loop7): enabling free space tree [ 783.490346][T11416] hpfs: You really don't want any checks? You are crazy... [ 783.534907][T11416] hpfs: hpfs_map_sector(): read error [ 783.541590][T11356] BTRFS info (device loop7): force clearing of disk cache [ 783.568295][T11416] hpfs: code page support is disabled [ 783.591562][T11416] hpfs: hpfs_map_4sectors(): unaligned read [ 783.654581][T11416] hpfs: hpfs_map_4sectors(): unaligned read [ 783.660652][T11416] hpfs: filesystem error: unable to find root dir [ 783.761360][T11416] hpfs: hpfs_map_4sectors(): unaligned read [ 783.802056][T11416] hpfs: hpfs_map_sector(): read error [ 783.830505][ T9664] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 784.350295][T11427] loop5: detected capacity change from 0 to 32768 [ 784.376829][T11427] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1020 (11427) [ 784.396670][T11427] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 784.407031][T11427] BTRFS info (device loop5): using sha256 checksum algorithm [ 784.485888][T11433] loop7: detected capacity change from 0 to 1024 [ 784.609686][T11433] hfsplus: bad catalog entry type [ 784.665781][T11427] BTRFS info (device loop5): enabling ssd optimizations [ 784.672789][T11427] BTRFS info (device loop5): turning on async discard [ 784.679610][T11427] BTRFS info (device loop5): enabling free space tree [ 784.688430][T11425] loop6: detected capacity change from 0 to 32768 [ 784.812729][ T1159] hfsplus: b-tree write err: -5, ino 4 [ 784.988604][T10058] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 785.202762][T11451] loop6: detected capacity change from 0 to 512 [ 785.446468][T11451] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 785.537222][T11451] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 785.664554][ T29] audit: type=1800 audit(1770233567.674:88): pid=11451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1023" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 786.159855][T11447] loop7: detected capacity change from 0 to 32768 [ 786.203377][ T9503] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.363338][T11447] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 786.615347][T11447] XFS (loop7): Ending clean mount [ 786.896487][ T9664] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 786.989330][T11481] loop5: detected capacity change from 0 to 512 [ 787.150332][T11481] EXT4-fs (loop5): 1 truncate cleaned up [ 787.177932][T11481] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 787.297811][T11481] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1028: bg 0: block 465: padding at end of block bitmap is not set [ 787.399866][T11481] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 787.425151][T11481] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1028: invalid indirect mapped block 234881024 (level 0) [ 787.484565][ T5912] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 787.511488][T10058] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 787.667398][ T5912] usb 7-1: Using ep0 maxpacket: 8 [ 787.744673][ T5912] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 787.753710][ T5912] usb 7-1: config 179 has no interface number 0 [ 787.785318][ T5912] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 787.824380][ T5912] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 787.860123][ T5912] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 787.913888][ T5912] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 787.955207][ T5912] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 788.001979][ T5912] usb 7-1: config 179 interface 65 has no altsetting 0 [ 788.061081][ T5912] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 788.064576][T11502] loop1: detected capacity change from 0 to 4096 [ 788.106964][ T5912] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.283742][ T5912] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input13 [ 788.425111][ T5175] input input13: unable to receive magic message: -110 [ 788.501388][ T5175] input input13: unable to receive magic message: -32 [ 788.521561][ T29] audit: type=1800 audit(1770233570.534:89): pid=11514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1036" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 788.523240][T11498] ntfs3(loop1): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" attr_set_size [ 788.648974][ T5175] input input13: unable to receive magic message: -32 [ 788.702190][ T5175] input input13: unable to receive magic message: -32 [ 788.720426][ T5912] usb 7-1: USB disconnect, device number 8 [ 788.726422][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 788.726749][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 790.409293][T11536] loop1: detected capacity change from 0 to 256 [ 790.452735][T11536] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 790.532524][T11520] loop7: detected capacity change from 0 to 32768 [ 790.604052][T11520] XFS (loop7): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 790.825445][T11520] XFS (loop7): Ending clean mount [ 791.012409][ T9664] XFS (loop7): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 791.343717][T11549] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1051'. [ 792.855337][T11562] loop7: detected capacity change from 0 to 32768 [ 792.927779][T11562] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1056 (11562) [ 793.191453][T11562] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 793.282147][T11562] BTRFS info (device loop7): using sha256 checksum algorithm [ 793.492025][T11558] loop1: detected capacity change from 0 to 32768 [ 793.518084][T11558] BTRFS info: device /dev/loop1 (7:1) using temp-fsid bf77ef32-0f56-4e55-a42c-18687987da65 [ 793.610804][T11558] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1054 (11558) [ 793.762173][T11558] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 793.813692][T11558] BTRFS info (device loop1): using sha256 checksum algorithm [ 793.844891][T11562] BTRFS info (device loop7): rebuilding free space tree [ 794.046945][T11587] loop5: detected capacity change from 0 to 32768 [ 794.103909][T11587] BTRFS info: device /dev/loop5 (7:5) using temp-fsid 88a90745-dc58-48f2-afaf-57c6a25a8bf4 [ 794.114042][T11587] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1060 (11587) [ 794.146140][T11587] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 794.156405][T11587] BTRFS info (device loop5): using sha256 checksum algorithm [ 794.175086][T11562] BTRFS info (device loop7): turning off barriers [ 794.216675][T11562] BTRFS info (device loop7): turning on sync discard [ 794.224050][T11562] BTRFS info (device loop7): enabling free space tree [ 794.245045][T11562] BTRFS info (device loop7): force clearing of disk cache [ 794.252478][T11562] BTRFS info (device loop7): max_inline set to 0 [ 794.287183][T11587] BTRFS info (device loop5): enabling ssd optimizations [ 794.294157][T11587] BTRFS info (device loop5): turning on async discard [ 794.300975][T11587] BTRFS info (device loop5): enabling free space tree [ 794.347973][T11558] BTRFS info (device loop1): rebuilding free space tree [ 794.422568][ T9664] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 794.533701][T11558] BTRFS info (device loop1): disabling free space tree [ 794.576338][T11558] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 794.657907][T11558] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 794.712742][T10058] BTRFS info (device loop5): last unmount of filesystem 88a90745-dc58-48f2-afaf-57c6a25a8bf4 [ 794.758666][T11558] BTRFS info (device loop1): setting nodatasum [ 794.770825][T11558] BTRFS info (device loop1): setting nodatacow [ 794.787862][T11558] BTRFS info (device loop1): turning off barriers [ 794.829720][T11558] BTRFS info (device loop1): force clearing of disk cache [ 794.839768][T11577] loop6: detected capacity change from 0 to 40427 [ 794.911659][T11577] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 794.949068][T11577] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 795.007987][T11577] F2FS-fs (loop6): invalid crc value [ 795.018119][ T5830] BTRFS info (device loop1): last unmount of filesystem bf77ef32-0f56-4e55-a42c-18687987da65 [ 795.518166][T11577] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 795.575050][T11577] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 795.604555][T11577] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 796.350876][T11641] loop1: detected capacity change from 0 to 1024 [ 797.744852][T10215] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 797.919204][T10215] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 798.012230][T10215] usb 8-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 798.076598][T10215] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.117304][T10215] usb 8-1: config 0 descriptor?? [ 798.663121][T10215] lg-g15 0003:046D:C222.0008: unbalanced delimiter at end of report description [ 798.713900][T10215] lg-g15 0003:046D:C222.0008: probe with driver lg-g15 failed with error -22 [ 798.809454][T10215] usb 8-1: USB disconnect, device number 9 [ 799.224622][ T8656] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 799.394820][ T8656] usb 6-1: Using ep0 maxpacket: 32 [ 799.433332][ T8656] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 799.464513][ T8656] usb 6-1: config 0 has no interface number 0 [ 799.500606][ T8656] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 799.553935][ T8656] usb 6-1: config 0 interface 85 has no altsetting 0 [ 799.576867][ T8656] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 799.607266][ T8656] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.649439][ T8656] usb 6-1: Product: syz [ 799.668061][ T8656] usb 6-1: Manufacturer: syz [ 799.681373][ T8656] usb 6-1: SerialNumber: syz [ 799.705808][ T8656] usb 6-1: config 0 descriptor?? [ 799.763454][T11674] loop1: detected capacity change from 0 to 32768 [ 799.837498][T11674] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1080 (11674) [ 799.911546][T11674] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 799.964803][T10215] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 799.972991][T11674] BTRFS info (device loop1): using sha256 checksum algorithm [ 800.149690][T10215] usb 8-1: Using ep0 maxpacket: 16 [ 800.199136][T10215] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 800.248748][T11674] BTRFS info (device loop1): enabling ssd optimizations [ 800.257518][T10215] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 800.294791][T10215] usb 8-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 800.294894][T11674] BTRFS info (device loop1): turning on async discard [ 800.303980][T10215] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.311553][T10215] usb 8-1: config 0 descriptor?? [ 800.334643][ T8656] appletouch 6-1:0.85: Geyser mode initialized. [ 800.355810][ T8656] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input14 [ 800.404736][T11674] BTRFS info (device loop1): enabling free space tree [ 800.695000][ T5893] usb 6-1: USB disconnect, device number 5 [ 800.715494][ T5830] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 800.903493][ T5893] appletouch 6-1:0.85: input: appletouch disconnected [ 800.947929][T10215] gt683r_led 0003:1770:FF00.0009: unbalanced delimiter at end of report description [ 800.985870][T10215] gt683r_led 0003:1770:FF00.0009: hid parsing failed [ 800.992714][T10215] gt683r_led 0003:1770:FF00.0009: probe with driver gt683r_led failed with error -22 [ 801.232031][ T8656] usb 8-1: USB disconnect, device number 10 [ 801.286688][ T119] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 801.577362][ T119] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 801.894811][ T119] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 801.910769][ T119] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 801.921092][ T119] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.965138][ T119] usb 2-1: config 0 descriptor?? [ 802.395746][ T119] cp2112 0003:10C4:EA90.000A: item fetching failed at offset 5/7 [ 802.453821][ T119] cp2112 0003:10C4:EA90.000A: parse failed [ 802.475264][ T119] cp2112 0003:10C4:EA90.000A: probe with driver cp2112 failed with error -22 [ 803.090426][T11710] loop7: detected capacity change from 0 to 40427 [ 803.268503][T11710] F2FS-fs (loop7): build fault injection rate: 771 [ 803.280917][T11710] F2FS-fs (loop7): invalid crc value [ 803.395561][T11710] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 803.448029][T11710] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 803.696836][ T9664] syz-executor: attempt to access beyond end of device [ 803.696836][ T9664] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 803.717785][ T9664] CPU: 1 UID: 0 PID: 9664 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 803.717819][ T9664] Tainted: [L]=SOFTLOCKUP [ 803.717827][ T9664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 803.717838][ T9664] Call Trace: [ 803.717846][ T9664] [ 803.717854][ T9664] dump_stack_lvl+0xe8/0x150 [ 803.717890][ T9664] f2fs_handle_critical_error+0x37c/0x540 [ 803.717926][ T9664] f2fs_write_end_io+0xcdb/0xff0 [ 803.717977][ T9664] __submit_merged_bio+0x256/0x700 [ 803.718012][ T9664] __submit_merged_write_cond+0x3c3/0x4e0 [ 803.718050][ T9664] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 803.718107][ T9664] f2fs_write_data_pages+0x2975/0x35e0 [ 803.718181][ T9664] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 803.718255][ T9664] ? css_rstat_updated+0x23a/0x530 [ 803.718317][ T9664] ? rcu_is_watching+0x15/0xb0 [ 803.718347][ T9664] ? mod_memcg_lruvec_state+0x1a7/0x360 [ 803.718379][ T9664] ? __lock_acquire+0x6b5/0x2cf0 [ 803.718425][ T9664] ? __lock_acquire+0x6b5/0x2cf0 [ 803.718457][ T9664] ? do_raw_spin_lock+0x12b/0x2f0 [ 803.718491][ T9664] ? do_raw_spin_unlock+0xf5/0x210 [ 803.718513][ T9664] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 803.718542][ T9664] do_writepages+0x32e/0x550 [ 803.718582][ T9664] ? do_raw_spin_unlock+0xf5/0x210 [ 803.718609][ T9664] filemap_fdatawrite+0x1e9/0x2f0 [ 803.718641][ T9664] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 803.718729][ T9664] ? do_raw_spin_unlock+0xf5/0x210 [ 803.718755][ T9664] f2fs_sync_dirty_inodes+0x30e/0x860 [ 803.718804][ T9664] f2fs_write_checkpoint+0x9cf/0x2680 [ 803.718876][ T9664] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 803.718957][ T9664] ? kfree+0x1c1/0x630 [ 803.718983][ T9664] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 803.719015][ T9664] kill_f2fs_super+0x314/0x720 [ 803.719052][ T9664] ? __pfx_kill_f2fs_super+0x10/0x10 [ 803.719099][ T9664] ? lockdep_hardirqs_on+0x7a/0x110 [ 803.719140][ T9664] deactivate_locked_super+0xbc/0x130 [ 803.719173][ T9664] cleanup_mnt+0x437/0x4d0 [ 803.719192][ T9664] ? _raw_spin_unlock_irq+0x23/0x50 [ 803.719227][ T9664] task_work_run+0x1d9/0x270 [ 803.719253][ T9664] ? __pfx_task_work_run+0x10/0x10 [ 803.719297][ T9664] exit_to_user_mode_loop+0xed/0x480 [ 803.719318][ T9664] ? rcu_is_watching+0x15/0xb0 [ 803.719350][ T9664] do_syscall_64+0x32d/0xf80 [ 803.719371][ T9664] ? trace_irq_disable+0x3b/0x150 [ 803.719397][ T9664] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.719416][ T9664] ? clear_bhb_loop+0x40/0x90 [ 803.719438][ T9664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.719454][ T9664] RIP: 0033:0x7fd0e619c117 [ 803.719473][ T9664] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 803.719488][ T9664] RSP: 002b:00007ffc395dfd08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 803.719511][ T9664] RAX: 0000000000000000 RBX: 00007fd0e620471f RCX: 00007fd0e619c117 [ 803.719524][ T9664] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc395dfdc0 [ 803.719536][ T9664] RBP: 00007ffc395dfdc0 R08: 00007ffc395e0dc0 R09: 00000000ffffffff [ 803.719549][ T9664] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc395e0e50 [ 803.719560][ T9664] R13: 00007fd0e620471f R14: 00000000000c42f8 R15: 00007ffc395e0e90 [ 803.719593][ T9664] [ 804.051360][ T9664] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 804.125443][ T119] usb 2-1: USB disconnect, device number 12 [ 805.882949][T11771] netlink: 'syz.6.1110': attribute type 1 has an invalid length. [ 806.016966][T10215] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 806.050437][T11773] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 806.062262][T11773] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 806.176761][T10215] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 806.193943][T10215] usb 6-1: config 0 has no interface number 0 [ 806.416128][T10215] usb 6-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 806.429586][T10215] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.454094][T10215] usb 6-1: Product: syz [ 806.473013][T10215] usb 6-1: Manufacturer: syz [ 806.493039][T10215] usb 6-1: SerialNumber: syz [ 806.529851][T10215] usb 6-1: config 0 descriptor?? [ 806.572238][T10215] usb 6-1: selecting invalid altsetting 1 [ 806.618040][T10215] dvb_ttusb_budget: ttusb_init_controller: error [ 806.647241][T10215] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 806.702926][T11771] bond1: (slave gretap1): making interface the new active one [ 806.730828][T11771] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 806.836944][T11770] loop7: detected capacity change from 0 to 32768 [ 806.874639][T10215] DVB: Unable to find symbol stv0299_attach() [ 806.882500][T11773] macvlan2: entered promiscuous mode [ 806.892353][T11770] (syz.7.1099,11770,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 806.925872][T11773] macvlan2: entered allmulticast mode [ 806.954040][T11773] bond1: entered promiscuous mode [ 806.990478][T10215] DVB: Unable to find symbol tda8083_attach() [ 806.991358][T11770] (syz.7.1099,11770,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 807.035768][T11773] gretap1: entered promiscuous mode [ 807.045282][T10215] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 807.056074][T11781] 9p: Bad value for 'wfdno' [ 807.057850][T11773] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 807.075581][T10215] usb 6-1: USB disconnect, device number 6 [ 807.132433][T11770] JBD2: Ignoring recovery information on journal [ 807.238129][T11773] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 807.303529][T11773] bond1: left promiscuous mode [ 807.309973][T11773] gretap1: left promiscuous mode [ 807.327572][T11770] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 807.384542][ T119] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 807.548613][ T119] usb 2-1: Using ep0 maxpacket: 16 [ 807.589508][ T119] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 807.590105][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888035478000 (11)(syz0) rdma_ndev=ffff88803264c000 (35)(veth0_vlan) cookie=ffff8880343f0000 (7)(macvlan2) start [ 807.647732][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888035478000 (11)(syz0) rdma_ndev=ffff88803264c000 (35)(veth0_vlan) cookie=ffff8880343f0000 (3)(macvlan2) end [ 807.689375][ T119] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.711012][ T119] usb 2-1: Product: syz [ 807.720708][ T119] usb 2-1: Manufacturer: syz [ 807.721845][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e2c000 (13)() rdma_ndev=ffff888055c0e000 (35)(veth0_vlan) cookie=ffff8880343f0000 (3)(macvlan2) start [ 807.774366][ T9664] ocfs2: Unmounting device (7,7) on (node local) [ 807.791823][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e2c000 (13)() rdma_ndev=ffff888055c0e000 (35)(veth0_vlan) cookie=ffff8880343f0000 (3)(macvlan2) end [ 807.802028][ T119] usb 2-1: SerialNumber: syz [ 808.108812][ T119] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 808.205965][ T119] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 808.261368][ T119] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 808.327126][ T119] usb 2-1: media controller created [ 808.392202][ T119] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 808.465190][ T119] zl10353_read_register: readreg error (reg=127, ret==-71) [ 808.564639][ T5893] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 808.620074][ T119] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 808.671637][ T119] usb 2-1: USB disconnect, device number 13 [ 808.738584][ T5893] usb 8-1: Using ep0 maxpacket: 32 [ 808.790021][ T5893] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 808.809796][ T5893] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.844807][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.851141][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.894318][ T5893] usb 8-1: config 0 descriptor?? [ 809.078996][T11805] loop1: detected capacity change from 0 to 512 [ 809.199741][ T5893] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 809.232871][ T5893] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 809.297129][ T5893] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 809.353332][ T5893] usb 8-1: media controller created [ 809.425034][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 809.547613][ T5893] az6027: usb out operation failed. (-71) [ 809.587724][ T5893] az6027: usb out operation failed. (-71) [ 809.593470][ T5893] stb0899_attach: Driver disabled by Kconfig [ 809.644553][ T5893] az6027: no front-end attached [ 809.644553][ T5893] [ 809.694916][ T5893] az6027: usb out operation failed. (-71) [ 809.700698][ T5893] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 809.739767][ T5893] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input15 [ 809.793892][ T5893] dvb-usb: schedule remote query interval to 400 msecs. [ 809.812589][ T5893] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 809.830198][ T5893] usb 8-1: USB disconnect, device number 11 [ 809.851785][T11809] 9pnet: Found fid 0 not clunked [ 810.043225][ T5893] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 810.372420][T11823] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1129'. [ 810.374591][ T5912] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 811.363780][ T5912] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 511, setting to 64 [ 811.438632][ T5912] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 811.493024][ T5912] usb 7-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 811.508395][ T5912] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.573614][ T5912] usb 7-1: config 0 descriptor?? [ 811.603614][T11819] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 811.927445][T11807] loop1: detected capacity change from 0 to 40427 [ 812.104123][ T5912] a4tech 0003:09DA:001A.000B: hidraw0: USB HID v0.00 Device [HID 09da:001a] on usb-dummy_hcd.6-1/input0 [ 812.212864][T11807] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 812.252754][T11807] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 812.304589][ T8656] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 812.334082][ T5830] syz-executor: attempt to access beyond end of device [ 812.334082][ T5830] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 812.365843][ T5912] usb 7-1: USB disconnect, device number 9 [ 812.378669][ T5830] CPU: 1 UID: 0 PID: 5830 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 812.378702][ T5830] Tainted: [L]=SOFTLOCKUP [ 812.378708][ T5830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 812.378720][ T5830] Call Trace: [ 812.378729][ T5830] [ 812.378736][ T5830] dump_stack_lvl+0xe8/0x150 [ 812.378770][ T5830] f2fs_handle_critical_error+0x37c/0x540 [ 812.378801][ T5830] f2fs_write_end_io+0xcdb/0xff0 [ 812.378851][ T5830] __submit_merged_bio+0x256/0x700 [ 812.378884][ T5830] __submit_merged_write_cond+0x3c3/0x4e0 [ 812.378918][ T5830] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 812.378968][ T5830] f2fs_write_data_pages+0x2975/0x35e0 [ 812.379036][ T5830] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 812.379076][ T5830] ? css_rstat_updated+0x23a/0x530 [ 812.379123][ T5830] ? rcu_is_watching+0x15/0xb0 [ 812.379150][ T5830] ? mod_memcg_lruvec_state+0x1a7/0x360 [ 812.379181][ T5830] ? __lock_acquire+0x6b5/0x2cf0 [ 812.379222][ T5830] ? __lock_acquire+0x6b5/0x2cf0 [ 812.379253][ T5830] ? do_raw_spin_lock+0x12b/0x2f0 [ 812.379296][ T5830] ? do_raw_spin_unlock+0xf5/0x210 [ 812.379316][ T5830] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 812.379344][ T5830] do_writepages+0x32e/0x550 [ 812.379381][ T5830] ? do_raw_spin_unlock+0xf5/0x210 [ 812.379405][ T5830] filemap_fdatawrite+0x1e9/0x2f0 [ 812.379437][ T5830] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 812.379516][ T5830] ? do_raw_spin_unlock+0xf5/0x210 [ 812.379541][ T5830] f2fs_sync_dirty_inodes+0x30e/0x860 [ 812.379585][ T5830] f2fs_write_checkpoint+0x9cf/0x2680 [ 812.379649][ T5830] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 812.379736][ T5830] kill_f2fs_super+0x314/0x720 [ 812.379768][ T5830] ? __pfx_kill_f2fs_super+0x10/0x10 [ 812.379808][ T5830] ? lockdep_hardirqs_on+0x7a/0x110 [ 812.379847][ T5830] deactivate_locked_super+0xbc/0x130 [ 812.379877][ T5830] cleanup_mnt+0x437/0x4d0 [ 812.379896][ T5830] ? _raw_spin_unlock_irq+0x23/0x50 [ 812.379920][ T5830] task_work_run+0x1d9/0x270 [ 812.379946][ T5830] ? __pfx_task_work_run+0x10/0x10 [ 812.379978][ T5830] exit_to_user_mode_loop+0xed/0x480 [ 812.380000][ T5830] ? rcu_is_watching+0x15/0xb0 [ 812.380031][ T5830] do_syscall_64+0x32d/0xf80 [ 812.380052][ T5830] ? trace_irq_disable+0x3b/0x150 [ 812.380077][ T5830] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.380097][ T5830] ? clear_bhb_loop+0x40/0x90 [ 812.380122][ T5830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.380141][ T5830] RIP: 0033:0x7f053239c117 [ 812.380160][ T5830] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 812.380176][ T5830] RSP: 002b:00007ffc403f1ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 812.380197][ T5830] RAX: 0000000000000000 RBX: 00007f053240471f RCX: 00007f053239c117 [ 812.380209][ T5830] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc403f1fb0 [ 812.380220][ T5830] RBP: 00007ffc403f1fb0 R08: 00007ffc403f2fb0 R09: 00000000ffffffff [ 812.380232][ T5830] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc403f3040 [ 812.380244][ T5830] R13: 00007f053240471f R14: 00000000000c64dd R15: 00007ffc403f3080 [ 812.380279][ T5830] [ 812.380742][ T5830] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 812.506445][ T8656] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 812.843918][ T8656] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 812.919650][ T8656] usb 8-1: config 0 interface 0 has no altsetting 0 [ 812.958425][ T8656] usb 8-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 812.999021][ T8656] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.040188][ T8656] usb 8-1: config 0 descriptor?? [ 813.526190][ T8656] lenovo 0003:17EF:60EE.000C: unknown main item tag 0x0 [ 813.577974][ T8656] lenovo 0003:17EF:60EE.000C: unknown main item tag 0x0 [ 813.622375][ T8656] lenovo 0003:17EF:60EE.000C: unknown main item tag 0x0 [ 813.654452][ T8656] lenovo 0003:17EF:60EE.000C: unknown main item tag 0x0 [ 813.686217][ T8656] lenovo 0003:17EF:60EE.000C: unknown main item tag 0x0 [ 813.744994][ T8656] lenovo 0003:17EF:60EE.000C: hidraw0: USB HID v0.01 Device [HID 17ef:60ee] on usb-dummy_hcd.7-1/input0 [ 813.856378][T11849] loop6: detected capacity change from 0 to 256 [ 813.894624][ T119] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 813.946215][T11849] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 814.020897][ T8656] lenovo 0003:17EF:60EE.000C: Fn-lock setting failed: -71 [ 814.049084][ T8656] lenovo 0003:17EF:60EE.000C: Sensitivity setting failed: -71 [ 814.084735][ T8656] usb 8-1: USB disconnect, device number 12 [ 814.099867][ T119] usb 6-1: Using ep0 maxpacket: 16 [ 814.135780][ T119] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 814.177103][ T119] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 814.214463][ T119] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.247150][ T119] usb 6-1: config 0 descriptor?? [ 814.509456][T11845] loop1: detected capacity change from 0 to 32768 [ 814.535524][T11845] BTRFS: device fsid 8f67342e-760a-4d9f-bdfe-dfdef307742f devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1133 (11845) [ 814.695433][ T119] mcp2221 0003:04D8:00DD.000D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 814.946578][T11845] BTRFS info (device loop1): first mount of filesystem 8f67342e-760a-4d9f-bdfe-dfdef307742f [ 815.051156][T11845] BTRFS info (device loop1): using sha256 checksum algorithm [ 815.202423][ T10] usb 6-1: USB disconnect, device number 7 [ 816.199427][T11845] BTRFS info (device loop1): enabling ssd optimizations [ 816.249015][T11845] BTRFS info (device loop1): turning on async discard [ 816.266303][T11845] BTRFS info (device loop1): enabling free space tree [ 818.719488][ T5830] BTRFS info (device loop1): last unmount of filesystem 8f67342e-760a-4d9f-bdfe-dfdef307742f [ 819.404989][T11889] loop1: detected capacity change from 0 to 512 [ 819.476319][T11887] loop6: detected capacity change from 0 to 32768 [ 819.512056][T11887] [ 819.512056][T11887] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 819.512056][T11887] [ 819.517362][T11889] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 819.588091][T11889] ext4 filesystem being mounted at /305/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 819.591809][T11894] loop7: detected capacity change from 0 to 1024 [ 819.734591][ T29] audit: type=1800 audit(1770233601.734:90): pid=11889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1148" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 819.736844][ T9503] [ 819.736844][ T9503] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 819.736844][ T9503] [ 819.833983][ T29] audit: type=1800 audit(1770233601.784:91): pid=11889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1148" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 819.854891][ T9503] [ 819.854891][ T9503] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 819.854891][ T9503] [ 819.939830][ T5830] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 820.006041][T11900] loop6: detected capacity change from 0 to 1024 [ 820.352326][T11910] program syz.7.1155 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 820.367116][ T8555] Bluetooth: hci1: unexpected event for opcode 0x1004 [ 820.698240][T11898] loop5: detected capacity change from 0 to 32768 [ 820.712279][T11898] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1146 (11898) [ 820.779269][T11898] BTRFS info (device loop5 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 820.800409][T11898] BTRFS info (device loop5 state S): using blake2b checksum algorithm [ 820.945550][T11898] BTRFS info (device loop5 state ECS): enabling ssd optimizations [ 820.981688][T11898] BTRFS info (device loop5 state ECS): using spread ssd allocation scheme [ 821.024029][T11898] BTRFS info (device loop5 state ECS): disabling log replay at mount time [ 821.240412][T11898] BTRFS info (device loop5 state ECS): enabling free space tree [ 821.248191][T11898] BTRFS info (device loop5 state ECS): enabling auto defrag [ 821.256394][T11898] BTRFS info (device loop5 state ECS): ignoring bad roots [ 821.263507][T11898] BTRFS info (device loop5 state ECS): ignoring data csums [ 821.270751][T11898] BTRFS info (device loop5 state ECS): ignoring meta csums [ 821.281076][T11898] BTRFS info (device loop5 state ECS): ignoring unknown super block flags [ 821.331501][T11898] BTRFS info (device loop5 state ECS): force zlib compression, level 3 [ 823.055771][T11959] loop7: detected capacity change from 0 to 4096 [ 823.247371][T11963] loop1: detected capacity change from 0 to 64 [ 823.337525][T10058] BTRFS info (device loop5 state ECS): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 823.621473][T11970] netlink: 'syz.1.1174': attribute type 3 has an invalid length. [ 823.654461][T11970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1174'. [ 823.694601][T11970] netlink: 'syz.1.1174': attribute type 3 has an invalid length. [ 823.733927][T11970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1174'. [ 823.966506][T11974] ªªªªªª: renamed from vlan0 (while UP) [ 824.180494][T11984] loop5: detected capacity change from 0 to 7 [ 824.282683][T11991] loop7: detected capacity change from 0 to 8 [ 824.312619][T11991] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 824.392719][T11150] udevd[11150]: incorrect cramfs checksum on /dev/loop7 [ 824.434671][ T8555] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 824.445405][ T8555] Bluetooth: hci1: Injecting HCI hardware error event [ 824.459298][ T8555] Bluetooth: hci1: hardware error 0x00 [ 824.553861][T11150] udevd[11150]: incorrect cramfs checksum on /dev/loop7 [ 825.080751][ C1] blk_print_req_error: 138 callbacks suppressed [ 825.080766][ C1] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 825.097125][ C1] buffer_io_error: 138 callbacks suppressed [ 825.097140][ C1] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 825.258236][T12003] loop7: detected capacity change from 0 to 164 [ 825.288891][ T10] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 825.336954][T12004] loop1: detected capacity change from 0 to 1024 [ 825.371216][T12003] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 825.464521][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 825.497236][ T10] usb 7-1: config 0 has an invalid interface number: 193 but max is 1 [ 825.525980][ T10] usb 7-1: config 0 has an invalid interface number: 4 but max is 1 [ 825.564771][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 825.600955][ T10] usb 7-1: config 0 has no interface number 0 [ 825.614068][ T10] usb 7-1: config 0 has no interface number 1 [ 825.629948][ T10] usb 7-1: config 0 interface 193 altsetting 147 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 825.663513][ T10] usb 7-1: config 0 interface 4 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 825.711085][ T10] usb 7-1: config 0 interface 193 has no altsetting 0 [ 825.750877][ T10] usb 7-1: config 0 interface 4 has no altsetting 0 [ 825.762561][ T6937] hfsplus: b-tree write err: -5, ino 4 [ 825.807186][ T10] usb 7-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=7d.6a [ 825.848916][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.897111][ T10] usb 7-1: Product: syz [ 825.915971][ T10] usb 7-1: Manufacturer: syz [ 825.938524][ T10] usb 7-1: SerialNumber: syz [ 825.990564][ T10] usb 7-1: config 0 descriptor?? [ 826.300667][ T10] usb 7-1: unknown interface protocol 0x4f, assuming v1 [ 826.332389][ T10] usb 7-1: 193:2 : does not exist [ 826.377777][ T10] usb 7-1: unknown interface protocol 0x5, assuming v1 [ 826.406727][ T10] usb 7-1: 4:2 : does not exist [ 826.457367][T12019] loop5: detected capacity change from 0 to 512 [ 826.505851][T12019] EXT4-fs (loop5): Test dummy encryption mode enabled [ 826.539859][T12019] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 826.595092][ T8555] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 826.603813][T12019] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1192: bad orphan inode 131083 [ 826.665525][ T10] usb 7-1: USB disconnect, device number 10 [ 826.681743][T12019] loop5: lost filesystem error report for type 5 error -117 [ 826.684456][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 826.698399][ C0] EXT4-fs (loop5): initial error at time 1770233608: ext4_orphan_get:1417 [ 826.707024][ C0] EXT4-fs (loop5): last error at time 1770233608: ext4_orphan_get:1417 [ 826.730427][T12019] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 826.827584][T11155] udevd[11155]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.193/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 826.910852][T12019] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 826.967403][T12019] EXT4-fs error (device loop5): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.5.1192: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 827.022823][T12019] EXT4-fs error (device loop5) in ext4_delete_entry:2737: Corrupt filesystem [ 827.033786][T12019] EXT4-fs warning (device loop5): ext4_rename_delete:3729: inode #2: comm syz.5.1192: Deleting old file: nlink 5, error=-117 [ 827.109410][T10058] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 827.244567][ T119] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 827.291327][T12032] loop5: detected capacity change from 0 to 128 [ 827.311064][T12032] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 827.339700][T12032] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 827.406433][ T119] usb 7-1: Using ep0 maxpacket: 16 [ 827.427554][ T119] usb 7-1: unable to get BOS descriptor or descriptor too short [ 827.446602][ T119] usb 7-1: config 1 interface 0 has no altsetting 0 [ 827.462066][ T119] usb 7-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.40 [ 827.493750][ T119] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.544955][ T119] usb 7-1: Product: syz [ 827.559472][ T119] usb 7-1: Manufacturer: syz [ 827.564120][ T119] usb 7-1: SerialNumber: syz [ 827.679005][T12021] loop7: detected capacity change from 0 to 40427 [ 827.734813][T12021] F2FS-fs (loop7): invalid crc value [ 828.473759][T12021] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 828.502896][T12021] F2FS-fs (loop7): Start checkpoint disabled! [ 828.542414][T12021] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0 [ 828.574591][T12021] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 828.633802][ T119] usbhid 7-1:1.0: can't add hid device: -71 [ 828.644920][ T119] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 828.684821][ T119] usb 7-1: USB disconnect, device number 11 [ 828.766211][ T12] kworker/u8:0: attempt to access beyond end of device [ 828.766211][ T12] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 828.795922][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 828.795956][ T12] Tainted: [L]=SOFTLOCKUP [ 828.795964][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 828.795976][ T12] Workqueue: writeback wb_workfn (flush-7:7) [ 828.796009][ T12] Call Trace: [ 828.796017][ T12] [ 828.796025][ T12] dump_stack_lvl+0xe8/0x150 [ 828.796058][ T12] f2fs_handle_critical_error+0x37c/0x540 [ 828.796093][ T12] f2fs_write_end_io+0xcdb/0xff0 [ 828.796146][ T12] __submit_merged_bio+0x256/0x700 [ 828.796190][ T12] __submit_merged_write_cond+0x3c3/0x4e0 [ 828.796227][ T12] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 828.796283][ T12] f2fs_write_data_pages+0x2975/0x35e0 [ 828.796360][ T12] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 828.796407][ T12] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 828.796480][ T12] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 828.796565][ T12] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 828.796595][ T12] do_writepages+0x32e/0x550 [ 828.796633][ T12] ? reacquire_held_locks+0x104/0x190 [ 828.796660][ T12] ? writeback_sb_inodes+0x43d/0x19a0 [ 828.796694][ T12] __writeback_single_inode+0x133/0x11a0 [ 828.796722][ T12] ? do_raw_spin_unlock+0xf5/0x210 [ 828.796749][ T12] writeback_sb_inodes+0x944/0x19a0 [ 828.796781][ T12] ? ret_from_fork_asm+0x1a/0x30 [ 828.796822][ T12] ? __lock_acquire+0x6b5/0x2cf0 [ 828.796857][ T12] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 828.796879][ T12] ? do_raw_spin_lock+0x12b/0x2f0 [ 828.796953][ T12] ? rcu_is_watching+0x15/0xb0 [ 828.796993][ T12] wb_writeback+0x456/0xb70 [ 828.797022][ T12] ? queue_io+0x241/0x4a0 [ 828.797058][ T12] ? __pfx_wb_writeback+0x10/0x10 [ 828.797079][ T12] ? do_raw_spin_lock+0x12b/0x2f0 [ 828.797121][ T12] wb_workfn+0x414/0xf50 [ 828.797146][ T12] ? look_up_lock_class+0x57/0x110 [ 828.797195][ T12] ? __pfx_wb_workfn+0x10/0x10 [ 828.797222][ T12] ? do_raw_spin_lock+0x12b/0x2f0 [ 828.797247][ T12] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 828.797298][ T12] ? process_one_work+0x87c/0x1650 [ 828.797324][ T12] process_one_work+0x949/0x1650 [ 828.797378][ T12] ? __pfx_process_one_work+0x10/0x10 [ 828.797401][ T12] ? do_raw_spin_lock+0x12b/0x2f0 [ 828.797443][ T12] worker_thread+0xb46/0x1140 [ 828.797506][ T12] kthread+0x388/0x470 [ 828.797528][ T12] ? __pfx_worker_thread+0x10/0x10 [ 828.797551][ T12] ? __pfx_kthread+0x10/0x10 [ 828.797574][ T12] ret_from_fork+0x51e/0xb90 [ 828.797605][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 828.797629][ T12] ? __switch_to+0xc7d/0x1450 [ 828.797658][ T12] ? __pfx_kthread+0x10/0x10 [ 828.797681][ T12] ret_from_fork_asm+0x1a/0x30 [ 828.797731][ T12] [ 828.797738][ T12] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 829.000887][T12050] loop5: detected capacity change from 0 to 32768 [ 829.083857][T12050] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1202 (12050) [ 829.147312][T12040] loop1: detected capacity change from 0 to 40427 [ 829.167720][T12050] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 829.187601][T12040] F2FS-fs (loop1): Wrong SSA boundary, start(3584) end(4096) blocks(0) [ 829.205383][T12050] BTRFS info (device loop5): using blake2b checksum algorithm [ 829.247127][T12040] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 829.275922][T12040] F2FS-fs (loop1): build fault injection type: 0x6 [ 829.309819][T12040] F2FS-fs (loop1): invalid crc value [ 829.426896][T12050] BTRFS info (device loop5): enabling ssd optimizations [ 829.482977][T12050] BTRFS info (device loop5): turning on async discard [ 829.648025][T12072] loop6: detected capacity change from 0 to 32768 [ 829.674647][T12072] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1206 (12072) [ 829.688489][T12050] BTRFS info (device loop5): enabling free space tree [ 829.701414][T12072] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 829.711555][T12072] BTRFS info (device loop6): using sha256 checksum algorithm [ 829.872094][T12040] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 829.930376][T12072] BTRFS info (device loop6): enabling ssd optimizations [ 829.937586][T12072] BTRFS info (device loop6): turning on async discard [ 829.944362][T12072] BTRFS info (device loop6): enabling free space tree [ 829.954086][T12040] F2FS-fs (loop1): Start checkpoint disabled! [ 829.983110][T12040] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 830.081406][T12040] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 830.129131][T12040] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 830.175380][T10058] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 830.332159][ T9503] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 830.347471][ T7255] kworker/u8:13: attempt to access beyond end of device [ 830.347471][ T7255] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 830.396279][ T7255] CPU: 1 UID: 0 PID: 7255 Comm: kworker/u8:13 Tainted: G L syzkaller #0 PREEMPT(full) [ 830.396308][ T7255] Tainted: [L]=SOFTLOCKUP [ 830.396314][ T7255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 830.396325][ T7255] Workqueue: writeback wb_workfn (flush-7:1) [ 830.396353][ T7255] Call Trace: [ 830.396361][ T7255] [ 830.396368][ T7255] dump_stack_lvl+0xe8/0x150 [ 830.396396][ T7255] f2fs_handle_critical_error+0x37c/0x540 [ 830.396427][ T7255] f2fs_write_end_io+0xcdb/0xff0 [ 830.396473][ T7255] __submit_merged_bio+0x256/0x700 [ 830.396502][ T7255] f2fs_submit_merged_write+0x282/0x390 [ 830.396531][ T7255] ? __pfx_f2fs_submit_merged_write+0x10/0x10 [ 830.396572][ T7255] f2fs_sync_node_pages+0x14bf/0x1680 [ 830.396615][ T7255] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 830.396636][ T7255] ? __percpu_counter_sum+0x1c2/0x1e0 [ 830.396691][ T7255] ? do_raw_spin_lock+0x12b/0x2f0 [ 830.396715][ T7255] ? blk_start_plug+0x51/0x1b0 [ 830.396738][ T7255] f2fs_write_node_pages+0x312/0x700 [ 830.396766][ T7255] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 830.396799][ T7255] ? __pfx_f2fs_inode_chksum_set+0x10/0x10 [ 830.396820][ T7255] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 830.396842][ T7255] do_writepages+0x32e/0x550 [ 830.396873][ T7255] ? reacquire_held_locks+0x104/0x190 [ 830.396897][ T7255] ? writeback_sb_inodes+0x43d/0x19a0 [ 830.396926][ T7255] __writeback_single_inode+0x133/0x11a0 [ 830.396950][ T7255] ? do_raw_spin_unlock+0xf5/0x210 [ 830.396973][ T7255] writeback_sb_inodes+0x944/0x19a0 [ 830.397001][ T7255] ? ret_from_fork_asm+0x1a/0x30 [ 830.397047][ T7255] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 830.397066][ T7255] ? do_raw_spin_lock+0x12b/0x2f0 [ 830.397130][ T7255] ? rcu_is_watching+0x15/0xb0 [ 830.397163][ T7255] wb_writeback+0x456/0xb70 [ 830.397188][ T7255] ? queue_io+0x241/0x4a0 [ 830.397217][ T7255] ? __pfx_wb_writeback+0x10/0x10 [ 830.397246][ T7255] ? do_raw_spin_lock+0x12b/0x2f0 [ 830.397280][ T7255] wb_workfn+0x414/0xf50 [ 830.397302][ T7255] ? look_up_lock_class+0x57/0x110 [ 830.397338][ T7255] ? __pfx_wb_workfn+0x10/0x10 [ 830.397361][ T7255] ? do_raw_spin_lock+0x12b/0x2f0 [ 830.397383][ T7255] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 830.397429][ T7255] ? process_one_work+0x87c/0x1650 [ 830.397452][ T7255] process_one_work+0x949/0x1650 [ 830.397502][ T7255] ? __pfx_process_one_work+0x10/0x10 [ 830.397524][ T7255] ? do_raw_spin_lock+0x12b/0x2f0 [ 830.397565][ T7255] worker_thread+0xb46/0x1140 [ 830.397603][ T7255] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 830.397640][ T7255] kthread+0x388/0x470 [ 830.397660][ T7255] ? __pfx_worker_thread+0x10/0x10 [ 830.397684][ T7255] ? __pfx_kthread+0x10/0x10 [ 830.397705][ T7255] ret_from_fork+0x51e/0xb90 [ 830.397735][ T7255] ? __pfx_ret_from_fork+0x10/0x10 [ 830.397758][ T7255] ? __switch_to+0xc7d/0x1450 [ 830.397785][ T7255] ? __pfx_kthread+0x10/0x10 [ 830.397806][ T7255] ret_from_fork_asm+0x1a/0x30 [ 830.397854][ T7255] [ 830.397863][ T7255] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 830.812013][ T7255] CPU: 1 UID: 0 PID: 7255 Comm: kworker/u8:13 Tainted: G L syzkaller #0 PREEMPT(full) [ 830.812047][ T7255] Tainted: [L]=SOFTLOCKUP [ 830.812054][ T7255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 830.812064][ T7255] Workqueue: writeback wb_workfn (flush-7:1) [ 830.812095][ T7255] Call Trace: [ 830.812103][ T7255] [ 830.812111][ T7255] dump_stack_lvl+0xe8/0x150 [ 830.812140][ T7255] f2fs_handle_critical_error+0x37c/0x540 [ 830.812173][ T7255] f2fs_write_end_io+0xcdb/0xff0 [ 830.812237][ T7255] __submit_merged_bio+0x256/0x700 [ 830.812271][ T7255] f2fs_submit_merged_write+0x282/0x390 [ 830.812302][ T7255] ? __pfx_f2fs_submit_merged_write+0x10/0x10 [ 830.812347][ T7255] f2fs_sync_node_pages+0x14bf/0x1680 [ 830.812398][ T7255] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 830.812421][ T7255] ? __percpu_counter_sum+0x1c2/0x1e0 [ 830.812482][ T7255] ? do_raw_spin_lock+0x12b/0x2f0 [ 830.812508][ T7255] ? blk_start_plug+0x51/0x1b0 [ 830.812534][ T7255] f2fs_write_node_pages+0x312/0x700 [ 830.812567][ T7255] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 830.812602][ T7255] ? __pfx_f2fs_inode_chksum_set+0x10/0x10 [ 830.812627][ T7255] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 830.812652][ T7255] do_writepages+0x32e/0x550 [ 830.812689][ T7255] ? reacquire_held_locks+0x104/0x190 [ 830.812717][ T7255] ? writeback_sb_inodes+0x43d/0x19a0 [ 830.812749][ T7255] __writeback_single_inode+0x133/0x11a0 [ 830.812776][ T7255] ? do_raw_spin_unlock+0xf5/0x210 [ 830.812801][ T7255] writeback_sb_inodes+0x944/0x19a0 [ 830.812833][ T7255] ? ret_from_fork_asm+0x1a/0x30 [ 830.812884][ T7255] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 830.812907][ T7255] ? do_raw_spin_lock+0x12b/0x2f0 [ 830.812976][ T7255] ? rcu_is_watching+0x15/0xb0 [ 830.813013][ T7255] wb_writeback+0x456/0xb70 [ 830.813043][ T7255] ? queue_io+0x241/0x4a0 [ 830.813078][ T7255] ? __pfx_wb_writeback+0x10/0x10 [ 830.813099][ T7255] ? do_raw_spin_lock+0x12b/0x2f0 [ 830.813142][ T7255] wb_workfn+0x414/0xf50 [ 830.813175][ T7255] ? look_up_lock_class+0x57/0x110 [ 830.813225][ T7255] ? __pfx_wb_workfn+0x10/0x10 [ 830.813252][ T7255] ? do_raw_spin_lock+0x12b/0x2f0 [ 830.813277][ T7255] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 830.813327][ T7255] ? process_one_work+0x87c/0x1650 [ 830.813351][ T7255] process_one_work+0x949/0x1650 [ 830.813404][ T7255] ? __pfx_process_one_work+0x10/0x10 [ 830.813425][ T7255] ? do_raw_spin_lock+0x12b/0x2f0 [ 830.813465][ T7255] worker_thread+0xb46/0x1140 [ 830.813502][ T7255] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 830.813539][ T7255] kthread+0x388/0x470 [ 830.813560][ T7255] ? __pfx_worker_thread+0x10/0x10 [ 830.813582][ T7255] ? __pfx_kthread+0x10/0x10 [ 830.813604][ T7255] ret_from_fork+0x51e/0xb90 [ 830.813672][ T7255] ? __pfx_ret_from_fork+0x10/0x10 [ 830.813697][ T7255] ? __switch_to+0xc7d/0x1450 [ 830.813725][ T7255] ? __pfx_kthread+0x10/0x10 [ 830.813747][ T7255] ret_from_fork_asm+0x1a/0x30 [ 830.813798][ T7255] [ 830.813806][ T7255] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 831.383858][T12098] loop7: detected capacity change from 0 to 32768 [ 831.518501][T12109] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1209'. [ 831.544899][T12098] JBD2: Ignoring recovery information on journal [ 831.606157][T12098] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 831.628795][T12109] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1209'. [ 832.336597][ T9664] ocfs2: Unmounting device (7,7) on (node local) [ 833.820445][T12119] loop1: detected capacity change from 0 to 131072 [ 833.943177][T12119] F2FS-fs (loop1): Test dummy encryption mode enabled [ 833.951738][T12119] F2FS-fs (loop1): invalid crc value [ 834.676675][T12119] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 834.694701][T12119] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 835.162835][T12150] loop7: detected capacity change from 0 to 32768 [ 835.179942][T12150] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1223 (12150) [ 835.229902][T12150] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 835.240535][T12150] BTRFS info (device loop7): using sha256 checksum algorithm [ 835.356827][T12150] BTRFS info (device loop7): enabling ssd optimizations [ 835.363837][T12150] BTRFS info (device loop7): turning on async discard [ 835.370704][T12150] BTRFS info (device loop7): enabling free space tree [ 836.066912][T12171] loop1: detected capacity change from 0 to 512 [ 836.183449][ T9664] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 836.207981][T12176] af_packet: tpacket_rcv: packet too big, clamped from 125 to 4294967286. macoff=82 [ 836.320357][T12171] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.1226: Parent and EA inode have the same ino 15 [ 836.363887][T12171] loop1: lost filesystem error report for type 5 error -117 [ 836.366046][ C0] EXT4-fs (loop1): initial error at time 1770233618: ext4_xattr_inode_iget:437 [ 836.382418][ C0] EXT4-fs (loop1): last error at time 1770233618: ext4_xattr_inode_iget:437 [ 836.486322][T12147] loop5: detected capacity change from 0 to 32768 [ 836.542441][T12147] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1220 (12147) [ 836.614651][T12147] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 836.661393][T12147] BTRFS info (device loop5): using sha256 checksum algorithm [ 836.942843][T12185] loop7: detected capacity change from 0 to 32768 [ 836.968089][T12185] BTRFS info: device /dev/loop7 (7:7) using temp-fsid 063f6bde-209a-4d2f-9ef1-f6ee3c46e6b4 [ 836.978194][T12185] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1230 (12185) [ 837.044275][T12185] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 837.054532][T12185] BTRFS info (device loop7): using sha256 checksum algorithm [ 837.126516][T12171] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.1226: Parent and EA inode have the same ino 15 [ 837.186008][T12171] loop1: lost filesystem error report for type 5 error -117 [ 837.239771][T12171] EXT4-fs (loop1): 1 orphan inode deleted [ 837.276428][T12147] BTRFS info (device loop5): enabling ssd optimizations [ 837.296307][T12171] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 837.321674][T12147] BTRFS info (device loop5): turning on async discard [ 837.337043][T12185] BTRFS info (device loop7): enabling ssd optimizations [ 837.344056][T12185] BTRFS info (device loop7): turning on async discard [ 837.351024][T12185] BTRFS info (device loop7): enabling free space tree [ 837.373620][T12147] BTRFS info (device loop5): enabling free space tree [ 838.150619][ T5830] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 838.207786][ T9664] BTRFS info (device loop7): last unmount of filesystem 063f6bde-209a-4d2f-9ef1-f6ee3c46e6b4 [ 839.015830][T12227] loop7: detected capacity change from 0 to 32768 [ 839.040639][T12227] BTRFS info: device /dev/loop7 (7:7) using temp-fsid a0e2a506-6558-4e69-8330-d902e98a8c49 [ 839.051349][T12227] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1232 (12227) [ 839.094798][T12227] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 839.105000][T12227] BTRFS info (device loop7): using sha256 checksum algorithm [ 839.346168][T12227] BTRFS info (device loop7): enabling ssd optimizations [ 839.353169][T12227] BTRFS info (device loop7): turning on async discard [ 839.360148][T12227] BTRFS info (device loop7): enabling free space tree [ 839.849606][T12223] loop6: detected capacity change from 0 to 32768 [ 839.897469][T12223] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1233 (12223) [ 839.978534][T12223] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 840.101479][T12223] BTRFS info (device loop6): using blake2b checksum algorithm [ 840.259714][ T9664] BTRFS info (device loop7): last unmount of filesystem a0e2a506-6558-4e69-8330-d902e98a8c49 [ 840.518463][T12223] BTRFS info (device loop6): enabling ssd optimizations [ 840.538616][T12223] BTRFS info (device loop6): turning on async discard [ 840.558865][T12223] BTRFS info (device loop6): enabling free space tree [ 840.603606][T12223] BTRFS info (device loop6): use zstd compression, level 3 [ 841.282425][T10058] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 841.309440][ T9503] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 841.773104][T12280] loop1: detected capacity change from 0 to 4096 [ 843.617452][T12281] loop7: detected capacity change from 0 to 40427 [ 843.648370][T12281] F2FS-fs (loop7): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 843.681496][T12281] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 843.746300][T12281] F2FS-fs (loop7): Image doesn't support compression [ 843.765251][T12281] F2FS-fs (loop7): build fault injection rate: 690 [ 843.817055][T12281] F2FS-fs (loop7): build fault injection type: 0x35f7 [ 843.877513][T12281] F2FS-fs (loop7): invalid crc value [ 844.432340][T12281] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 844.510246][T12281] F2FS-fs (loop7): Start checkpoint disabled! [ 844.542278][T12281] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0 [ 845.255798][T12300] loop5: detected capacity change from 0 to 32768 [ 845.323466][T12300] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 845.363809][T12300] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 845.367249][T12317] loop6: detected capacity change from 0 to 256 [ 845.417946][T12317] exfat: Deprecated parameter 'utf8' [ 845.436967][T12300] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 845.502416][T12317] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011d93, chksum : 0x8501cc5b, utbl_chksum : 0xe619d30d) [ 845.742681][T12300] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 845.945106][ T8656] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 846.008689][T12327] syzkaller1: entered promiscuous mode [ 846.014712][T12327] syzkaller1: entered allmulticast mode [ 846.144990][ T8656] usb 2-1: Using ep0 maxpacket: 32 [ 846.201901][ T8656] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 846.211361][ T8656] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.280276][ T8656] usb 2-1: Product: syz [ 846.298519][ T8656] usb 2-1: Manufacturer: syz [ 846.322631][ T8656] usb 2-1: SerialNumber: syz [ 846.365949][ T8656] usb 2-1: config 0 descriptor?? [ 846.422544][T12334] ip6erspan0: entered allmulticast mode [ 846.554980][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 846.619994][ T8656] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 014 [ 846.724613][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 846.748811][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 846.767412][ T10] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 846.777233][ T10] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 846.785751][ T10] usb 6-1: Product: syz [ 846.794168][ T10] usb 6-1: Manufacturer: syz [ 846.803977][ T10] usb 6-1: SerialNumber: syz [ 846.823290][ T10] usb 6-1: config 0 descriptor?? [ 846.832836][T12332] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 846.862274][ T5912] usb 2-1: USB disconnect, device number 14 [ 846.879584][ T10] hub 6-1:0.0: bad descriptor, ignoring hub [ 846.886459][ T10] hub 6-1:0.0: probe with driver hub failed with error -5 [ 847.768844][ T24] usb 6-1: USB disconnect, device number 8 [ 848.104714][ T24] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 848.287570][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 848.316046][ T24] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 848.335282][ T24] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 848.352276][ T24] usb 6-1: Product: syz [ 848.364717][ T24] usb 6-1: Manufacturer: syz [ 848.380018][ T24] usb 6-1: SerialNumber: syz [ 848.397866][ T24] usb 6-1: config 0 descriptor?? [ 848.414075][T12339] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 848.443618][ T24] hub 6-1:0.0: bad descriptor, ignoring hub [ 848.457792][ T24] hub 6-1:0.0: probe with driver hub failed with error -5 [ 848.764917][ T47] usb 6-1: USB disconnect, device number 9 [ 849.121635][T12363] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1269'. [ 849.175420][T12352] loop6: detected capacity change from 0 to 40427 [ 849.182687][ T1159] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888035478000 (11)(syz0) rdma_ndev=ffff88803264c000 (35)(veth0_vlan) cookie=ffff88805dc1c000 (13)(syzkaller1) start [ 849.233264][T12352] F2FS-fs (loop6): invalid crc value [ 849.239061][ T1159] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888035478000 (11)(syz0) rdma_ndev=ffff88803264c000 (35)(veth0_vlan) cookie=ffff88805dc1c000 (5)(syzkaller1) end [ 849.310527][ T1159] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e2c000 (13)() rdma_ndev=ffff888055c0e000 (36)(veth0_vlan) cookie=ffff88805dc1c000 (3)(syzkaller1) start [ 849.427932][ T1159] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e2c000 (13)() rdma_ndev=ffff888055c0e000 (36)(veth0_vlan) cookie=ffff88805dc1c000 (3)(syzkaller1) end [ 849.520394][T12372] loop1: detected capacity change from 0 to 1024 [ 849.538139][T12372] EXT4-fs: Ignoring removed orlov option [ 849.579979][T12372] EXT4-fs: inline encryption not supported [ 849.617460][T12352] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 849.662963][T12352] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 849.671120][T12372] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 849.863329][ T9503] syz-executor: attempt to access beyond end of device [ 849.863329][ T9503] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 849.864520][ T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 849.892787][ T9503] CPU: 0 UID: 0 PID: 9503 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 849.892820][ T9503] Tainted: [L]=SOFTLOCKUP [ 849.892826][ T9503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 849.892837][ T9503] Call Trace: [ 849.892845][ T9503] [ 849.892853][ T9503] dump_stack_lvl+0xe8/0x150 [ 849.892886][ T9503] f2fs_handle_critical_error+0x37c/0x540 [ 849.892919][ T9503] f2fs_write_end_io+0xcdb/0xff0 [ 849.892966][ T9503] __submit_merged_bio+0x256/0x700 [ 849.892996][ T9503] __submit_merged_write_cond+0x3c3/0x4e0 [ 849.893025][ T9503] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 849.893078][ T9503] f2fs_write_data_pages+0x2975/0x35e0 [ 849.893146][ T9503] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 849.893187][ T9503] ? css_rstat_updated+0x23a/0x530 [ 849.893241][ T9503] ? rcu_is_watching+0x15/0xb0 [ 849.893266][ T9503] ? mod_memcg_lruvec_state+0x1a7/0x360 [ 849.893295][ T9503] ? __lock_acquire+0x6b5/0x2cf0 [ 849.893332][ T9503] ? __lock_acquire+0x6b5/0x2cf0 [ 849.893360][ T9503] ? do_raw_spin_lock+0x12b/0x2f0 [ 849.893393][ T9503] ? do_raw_spin_unlock+0xf5/0x210 [ 849.893422][ T9503] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 849.893450][ T9503] do_writepages+0x32e/0x550 [ 849.893488][ T9503] ? do_raw_spin_unlock+0xf5/0x210 [ 849.893511][ T9503] filemap_fdatawrite+0x1e9/0x2f0 [ 849.893542][ T9503] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 849.893615][ T9503] ? do_raw_spin_unlock+0xf5/0x210 [ 849.893641][ T9503] f2fs_sync_dirty_inodes+0x30e/0x860 [ 849.893685][ T9503] f2fs_write_checkpoint+0x9cf/0x2680 [ 849.893750][ T9503] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 849.893838][ T9503] kill_f2fs_super+0x314/0x720 [ 849.893874][ T9503] ? __pfx_kill_f2fs_super+0x10/0x10 [ 849.893916][ T9503] ? lockdep_hardirqs_on+0x7a/0x110 [ 849.893953][ T9503] deactivate_locked_super+0xbc/0x130 [ 849.893984][ T9503] cleanup_mnt+0x437/0x4d0 [ 849.894004][ T9503] ? _raw_spin_unlock_irq+0x23/0x50 [ 849.894028][ T9503] task_work_run+0x1d9/0x270 [ 849.894053][ T9503] ? __pfx_task_work_run+0x10/0x10 [ 849.894084][ T9503] exit_to_user_mode_loop+0xed/0x480 [ 849.894105][ T9503] ? rcu_is_watching+0x15/0xb0 [ 849.894134][ T9503] do_syscall_64+0x32d/0xf80 [ 849.894153][ T9503] ? trace_irq_disable+0x3b/0x150 [ 849.894183][ T9503] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.894202][ T9503] ? clear_bhb_loop+0x40/0x90 [ 849.894227][ T9503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.894246][ T9503] RIP: 0033:0x7fbe0cb9c117 [ 849.894267][ T9503] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 849.894283][ T9503] RSP: 002b:00007fff9e616068 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 849.894305][ T9503] RAX: 0000000000000000 RBX: 00007fbe0cc0471f RCX: 00007fbe0cb9c117 [ 849.894318][ T9503] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff9e616120 [ 849.894330][ T9503] RBP: 00007fff9e616120 R08: 00007fff9e617120 R09: 00000000ffffffff [ 849.894342][ T9503] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff9e6171b0 [ 849.894355][ T9503] R13: 00007fbe0cc0471f R14: 00000000000cf771 R15: 00007fff9e6171f0 [ 849.894393][ T9503] [ 850.227423][ T9503] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 850.394531][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 850.424536][ T24] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 850.472778][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 850.553427][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 850.564874][ T5830] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 850.590888][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 850.619644][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 850.654033][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 850.674628][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.931713][ T24] usb 6-1: usb_control_msg returned -32 [ 850.975241][ T24] usbtmc 6-1:16.0: can't read capabilities [ 851.651074][ T10] usb 6-1: USB disconnect, device number 10 [ 851.810425][T12413] batadv_slave_1: entered promiscuous mode [ 851.832044][T12412] batadv_slave_1: left promiscuous mode [ 851.917965][T12398] loop7: detected capacity change from 0 to 32768 [ 851.945932][T12398] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1280 (12398) [ 851.957959][T12415] loop1: detected capacity change from 0 to 2048 [ 851.997622][T12417] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 852.264750][T12398] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 852.317411][T12398] BTRFS info (device loop7): using sha256 checksum algorithm [ 852.360365][T12415] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 852.447061][T12415] Remounting filesystem read-only [ 852.492988][T12421] NILFS error (device loop1): nilfs_readdir: zero-length directory entry [ 852.549198][T12398] BTRFS info (device loop7): enabling ssd optimizations [ 852.577504][T12398] BTRFS info (device loop7): turning on async discard [ 852.591669][T12398] BTRFS info (device loop7): enabling free space tree [ 852.697706][ T10] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 852.933784][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 852.962951][ T10] usb 7-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 852.999930][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.025057][ T10] usb 7-1: Product: syz [ 853.034563][ T10] usb 7-1: Manufacturer: syz [ 853.041765][ T10] usb 7-1: SerialNumber: syz [ 853.058087][ T10] usb 7-1: config 0 descriptor?? [ 853.077852][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 853.193682][T12453] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 854.101454][ T10] gspca_sonixj: reg_w1 err -71 [ 854.160760][ T10] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 854.201036][ T10] usb 7-1: USB disconnect, device number 12 [ 855.143067][ T9664] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 856.177495][T12485] loop6: detected capacity change from 0 to 32768 [ 856.220071][T12485] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1308 (12485) [ 856.256709][T12485] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 856.266993][T12485] BTRFS info (device loop6): using sha256 checksum algorithm [ 856.386292][T12485] BTRFS info (device loop6): enabling ssd optimizations [ 856.393279][T12485] BTRFS info (device loop6): turning on async discard [ 856.400211][T12485] BTRFS info (device loop6): enabling free space tree [ 856.534864][ T10] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 857.024530][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 857.032018][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 857.073538][ T10] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 857.109108][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.180080][ T9503] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 857.191907][ T10] usb 8-1: config 0 descriptor?? [ 857.429439][ T10] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 857.907930][ T47] usb 8-1: USB disconnect, device number 13 [ 858.205003][ T10] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 858.254800][ T29] audit: type=1326 audit(1770233640.264:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12528 comm="syz.1.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053239aeb9 code=0x7ffc0000 [ 858.336258][ T29] audit: type=1326 audit(1770233640.274:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12528 comm="syz.1.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053239aeb9 code=0x7ffc0000 [ 858.410041][ T29] audit: type=1326 audit(1770233640.294:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12528 comm="syz.1.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f053239aeb9 code=0x7ffc0000 [ 858.440772][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 858.457952][ T29] audit: type=1326 audit(1770233640.294:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12528 comm="syz.1.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053239aeb9 code=0x7ffc0000 [ 858.483047][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 858.505399][ T29] audit: type=1326 audit(1770233640.294:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12528 comm="syz.1.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053239aeb9 code=0x7ffc0000 [ 858.529614][ T10] usb 7-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 858.549228][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.568034][ T10] usb 7-1: Product: syz [ 858.575809][ T10] usb 7-1: Manufacturer: syz [ 858.581648][ T10] usb 7-1: SerialNumber: syz [ 858.586846][ T29] audit: type=1326 audit(1770233640.294:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12528 comm="syz.1.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f053239aeb9 code=0x7ffc0000 [ 858.619538][ T10] usb 7-1: config 0 descriptor?? [ 858.624514][ T24] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 858.642435][ T29] audit: type=1326 audit(1770233640.294:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12528 comm="syz.1.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053239aeb9 code=0x7ffc0000 [ 858.665607][ T29] audit: type=1326 audit(1770233640.294:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12528 comm="syz.1.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053239aeb9 code=0x7ffc0000 [ 858.695387][ T8656] IPVS: starting estimator thread 0... [ 858.699434][T12535] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 858.701383][ T29] audit: type=1326 audit(1770233640.294:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12528 comm="syz.1.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f053239aeb9 code=0x7ffc0000 [ 858.749869][ T29] audit: type=1326 audit(1770233640.294:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12528 comm="syz.1.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053239aeb9 code=0x7ffc0000 [ 858.809819][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 858.809828][T12537] IPVS: using max 51 ests per chain, 122400 per kthread [ 858.875751][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 858.877211][ T10] kaweth 7-1:0.0: Firmware present in device. [ 858.924583][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 859.021702][ T24] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 859.044849][ T10] kaweth 7-1:0.0: Statistics collection: 0 [ 859.050924][ T10] kaweth 7-1:0.0: Multicast filter limit: 0 [ 859.076044][ T10] kaweth 7-1:0.0: MTU: 0 [ 859.079378][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.100084][T12543] sctp: [Deprecated]: syz.5.1324 (pid 12543) Use of int in max_burst socket option deprecated. [ 859.100084][T12543] Use struct sctp_assoc_value instead [ 859.120401][ T24] usb 2-1: config 0 descriptor?? [ 859.120407][ T10] kaweth 7-1:0.0: Read MAC address 00:00:00:00:00:00 [ 859.323548][ T1109] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888035478000 (11)(syz0) rdma_ndev=ffff88803264c000 (36)(veth0_vlan) cookie=ffff888055954000 (8)(syzkaller1) start [ 859.369871][ T1109] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888035478000 (11)(syz0) rdma_ndev=ffff88803264c000 (35)(veth0_vlan) cookie=ffff888055954000 (3)(syzkaller1) end [ 859.411942][ T1109] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e2c000 (13)() rdma_ndev=ffff888055c0e000 (36)(veth0_vlan) cookie=ffff888055954000 (3)(syzkaller1) start [ 859.436977][ T1109] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e2c000 (13)() rdma_ndev=ffff888055c0e000 (36)(veth0_vlan) cookie=ffff888055954000 (3)(syzkaller1) end [ 859.578054][ T24] savu 0003:1E7D:2D5A.000E: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 859.654687][ T10] kaweth 7-1:0.0: Error setting receive filter [ 859.662041][ T10] kaweth 7-1:0.0: probe with driver kaweth failed with error -5 [ 859.695267][ T10] usb 7-1: USB disconnect, device number 13 [ 859.829324][ T24] usb 2-1: USB disconnect, device number 15 [ 860.077749][T12561] loop7: detected capacity change from 0 to 32768 [ 860.087316][T12561] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1331 (12561) [ 860.126961][T12561] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 860.137264][T12561] BTRFS info (device loop7): using sha256 checksum algorithm [ 860.255624][T12561] BTRFS info (device loop7): enabling ssd optimizations [ 860.262657][T12561] BTRFS info (device loop7): turning on async discard [ 860.270200][T12561] BTRFS info (device loop7): enabling free space tree [ 860.521917][ T9664] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 860.551521][T12583] loop5: detected capacity change from 0 to 1024 [ 861.288343][T12587] loop1: detected capacity change from 0 to 131072 [ 861.337307][T12587] F2FS-fs (loop1): Wrong CP boundary, start(512) end(198144) blocks(1024) [ 861.346050][T12587] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 861.356260][T12587] F2FS-fs (loop1): invalid crc value [ 861.487362][T12587] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 861.504261][T12587] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 861.511454][T12587] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 862.375890][T12585] loop6: detected capacity change from 0 to 32768 [ 862.433156][T12585] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1336 (12585) [ 862.511657][T12607] loop1: detected capacity change from 0 to 1024 [ 862.533626][T12585] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 862.545927][T12607] EXT4-fs: Ignoring removed bh option [ 862.551344][T12607] EXT4-fs: Ignoring removed bh option [ 862.581400][T12585] BTRFS info (device loop6): using sha256 checksum algorithm [ 862.656400][T12607] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 862.699683][T12607] ext4 filesystem being mounted at /339/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 862.747743][T12585] BTRFS info (device loop6): enabling ssd optimizations [ 862.777098][T12585] BTRFS info (device loop6): turning on async discard [ 862.796719][T12607] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: block 3: comm syz.1.1340: lblock 3 mapped to illegal pblock 3 (length 3) [ 862.812254][T12585] BTRFS info (device loop6): enabling free space tree [ 862.880799][T12607] EXT4-fs (loop1): Remounting filesystem read-only [ 863.385949][T12634] loop7: detected capacity change from 0 to 32768 [ 863.425757][T12634] BTRFS info: device /dev/loop7 (7:7) using temp-fsid 3414c830-42a4-48a5-b7e5-ad9f3a50ffe5 [ 863.436014][T12634] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1346 (12634) [ 863.450618][ T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 863.461592][T12634] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 863.471790][T12634] BTRFS info (device loop7): using sha256 checksum algorithm [ 863.600440][T12634] BTRFS info (device loop7): enabling ssd optimizations [ 863.607511][T12634] BTRFS info (device loop7): turning on async discard [ 863.614295][T12634] BTRFS info (device loop7): enabling free space tree [ 863.754561][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 864.267760][ T24] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 864.477505][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 864.523181][ T24] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 864.546119][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.635303][ T5830] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 864.638766][ T9664] BTRFS info (device loop7): last unmount of filesystem 3414c830-42a4-48a5-b7e5-ad9f3a50ffe5 [ 864.678029][ T24] usb 6-1: config 0 descriptor?? [ 866.329975][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 866.374985][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 866.485232][ T24] usb 6-1: USB disconnect, device number 11 [ 866.771516][ T1109] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888035478000 (11)(syz0) rdma_ndev=ffff88803264c000 (35)(veth0_vlan) cookie=ffff88802038c000 (12)(syzkaller1) start [ 866.821156][ T1109] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888035478000 (11)(syz0) rdma_ndev=ffff88803264c000 (35)(veth0_vlan) cookie=ffff88802038c000 (7)(syzkaller1) end [ 866.920142][ T1109] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e2c000 (13)() rdma_ndev=ffff888055c0e000 (36)(veth0_vlan) cookie=ffff88802038c000 (3)(syzkaller1) start [ 867.000985][ T1109] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e2c000 (13)() rdma_ndev=ffff888055c0e000 (36)(veth0_vlan) cookie=ffff88802038c000 (3)(syzkaller1) end [ 867.604827][ T24] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 867.668951][ T9503] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 867.824533][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 867.858789][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 867.903232][ T24] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 867.944445][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.995227][ T24] usb 8-1: Product: syz [ 867.999554][ T24] usb 8-1: Manufacturer: syz [ 868.004202][ T24] usb 8-1: SerialNumber: syz [ 868.094541][ T24] usb 8-1: config 0 descriptor?? [ 868.555899][ T24] gs_usb 8-1:0.0: Configuring for 34 interfaces [ 870.245628][ T24] gs_usb 8-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 870.261474][ T24] gs_usb 8-1:0.0: probe with driver gs_usb failed with error -71 [ 870.284842][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.291609][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.301737][ T24] usb 8-1: USB disconnect, device number 14 [ 870.780739][T12709] loop1: detected capacity change from 0 to 128 [ 870.860072][T12709] syz.1.1369: attempt to access beyond end of device [ 870.860072][T12709] loop1: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 872.010438][T12721] loop6: detected capacity change from 0 to 128 [ 872.078377][T12721] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 872.146033][T12721] hpfs: filesystem error: improperly stopped [ 872.152735][T12721] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 872.211525][T12721] hpfs: You really don't want any checks? You are crazy... [ 872.234840][T12721] hpfs: hpfs_map_sector(): read error [ 872.240361][T12721] hpfs: code page support is disabled [ 872.276397][T12721] hpfs: hpfs_map_4sectors(): unaligned read [ 872.291500][T12721] hpfs: hpfs_map_4sectors(): unaligned read [ 872.304811][T12721] hpfs: filesystem error: unable to find root dir [ 872.332235][T12721] hpfs: hpfs_map_4sectors(): unaligned read [ 872.626293][T12715] loop7: detected capacity change from 0 to 32768 [ 872.682212][T12715] XFS (loop7): DAX unsupported by block device. Turning off DAX. [ 872.711892][T12715] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 872.807345][T12715] XFS (loop7): Ending clean mount [ 872.830794][T12715] XFS (loop7): Quotacheck needed: Please wait. [ 872.951319][T12715] XFS (loop7): Quotacheck: Done. [ 872.998264][T12753] loop5: detected capacity change from 0 to 1024 [ 873.032155][T12739] loop6: detected capacity change from 0 to 32768 [ 873.041787][T12739] xfs: Deprecated parameter 'attr2' [ 873.051770][T12753] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 873.078315][T12739] XFS: attr2 mount option is deprecated. [ 873.175899][T12739] XFS (loop6): DAX unsupported by block device. Turning off DAX. [ 873.191174][ T9664] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 873.201846][T12739] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 873.239474][T12739] XFS (loop6): Ending clean mount [ 873.249995][T12753] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 873.254295][T12739] XFS (loop6): Quotacheck needed: Please wait. [ 873.276232][T12753] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 480 with error 28 [ 873.312630][T12753] EXT4-fs (loop5): This should not happen!! Data will be lost [ 873.312630][T12753] [ 873.360659][T12753] EXT4-fs (loop5): Total free blocks count 0 [ 873.377571][T12753] EXT4-fs (loop5): Free/Dirty block details [ 873.379169][T12739] XFS (loop6): Quotacheck: Done. [ 873.390603][T12753] EXT4-fs (loop5): free_blocks=68451041280 [ 873.439464][T12753] EXT4-fs (loop5): dirty_blocks=496 [ 873.445484][T12753] EXT4-fs (loop5): Block reservation details [ 873.451612][T12753] EXT4-fs (loop5): i_reserved_data_blocks=31 [ 873.698942][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 873.698963][ T29] audit: type=1804 audit(1770233655.714:106): pid=12739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1377" name="/newroot/131/file0/file1" dev="loop6" ino=6150 res=1 errno=0 [ 873.839585][ T9503] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 873.872501][ T77] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 480 with error 28 [ 874.417899][T12785] loop1: detected capacity change from 0 to 2048 [ 874.558429][T12785] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 874.677651][ T5830] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 875.597201][T12796] loop7: detected capacity change from 0 to 32768 [ 875.626455][T12810] loop8: detected capacity change from 0 to 8 [ 875.651454][T12796] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1395 (12796) [ 875.704450][T12810] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 875.728107][T12810] loop8: p1 start 1920369115 is beyond EOD, truncated [ 875.739847][T12796] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 875.756368][T12810] loop8: p2 start 170274598 is beyond EOD, truncated [ 875.765086][T12796] BTRFS info (device loop7): using crc32c checksum algorithm [ 875.773548][T12810] loop8: p3 start 1700808554 is beyond EOD, truncated [ 875.780596][T12796] BTRFS warning (device loop7): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 875.796006][T12810] loop8: p4 start 3734314525 is beyond EOD, truncated [ 875.803429][T12810] loop8: p5 start 1853241 is beyond EOD, truncated [ 875.812322][T12810] loop8: p6 start 778566279 is beyond EOD, truncated [ 875.820403][T12810] loop8: p7 start 428211758 is beyond EOD, truncated [ 875.832775][T12810] loop8: p8 start 4092590060 is beyond EOD, truncated [ 875.842220][T12810] loop8: p9 start 1720302894 is beyond EOD, truncated [ 875.850042][T12810] loop8: p10 start 3338666446 is beyond EOD, truncated [ 875.857791][T12810] loop8: p11 start 308068324 is beyond EOD, truncated [ 875.865835][T12810] loop8: p12 start 33557084 is beyond EOD, truncated [ 875.922638][T12803] loop1: detected capacity change from 0 to 32768 [ 876.071452][T12803] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 876.120752][T12796] BTRFS info (device loop7): rebuilding free space tree [ 876.121318][T12803] JBD2: Ignoring recovery information on journal [ 876.167657][T12833] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1402'. [ 876.177092][T12833] bridge_slave_0: default FDB implementation only supports local addresses [ 876.188134][T12796] BTRFS info (device loop7): disabling free space tree [ 876.195745][T12833] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1402'. [ 876.206087][T12796] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 876.229236][T12833] bridge_slave_0: default FDB implementation only supports local addresses [ 876.247747][T12796] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 876.337319][T12796] BTRFS info (device loop7): enabling ssd optimizations [ 876.356379][T12803] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 876.374218][T12796] BTRFS info (device loop7): enabling disk space caching [ 876.400628][T12796] BTRFS info (device loop7): force clearing of disk cache [ 876.445868][T12796] BTRFS info (device loop7): force zstd compression, level 3 [ 876.698177][ T77] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888035478000 (11)(syz0) rdma_ndev=ffff88803264c000 (35)(veth0_vlan) cookie=ffff88802bdac000 (10)(rose0) start [ 876.744495][ T77] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888035478000 (11)(syz0) rdma_ndev=ffff88803264c000 (35)(veth0_vlan) cookie=ffff88802bdac000 (5)(rose0) end [ 876.770517][ T77] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e2c000 (13)() rdma_ndev=ffff888055c0e000 (36)(veth0_vlan) cookie=ffff88802bdac000 (5)(rose0) start [ 876.787333][ T77] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e2c000 (13)() rdma_ndev=ffff888055c0e000 (36)(veth0_vlan) cookie=ffff88802bdac000 (5)(rose0) end [ 876.869839][ T9664] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 877.015197][ T5830] ocfs2: Unmounting device (7,1) on (node local) [ 877.226763][T12851] loop6: detected capacity change from 0 to 1024 [ 877.814518][T10215] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 877.997034][T10215] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 878.039854][T10215] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 878.077027][T10215] usb 7-1: config 0 interface 0 has no altsetting 0 [ 878.101072][T10215] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 878.128236][T10215] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 878.146850][T10215] usb 7-1: Product: syz [ 878.151074][T10215] usb 7-1: Manufacturer: syz [ 878.168804][T10215] usb 7-1: SerialNumber: syz [ 878.188794][T10215] usb 7-1: config 0 descriptor?? [ 878.211659][T10215] usb 7-1: selecting invalid altsetting 0 [ 878.298154][T12867] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1406'. [ 878.452632][T12857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 878.481763][T12857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 878.555591][ T8656] usb 7-1: USB disconnect, device number 14 [ 878.684783][T10215] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 878.846961][T10215] usb 6-1: config 0 has an invalid interface number: 225 but max is 0 [ 878.864645][T10215] usb 6-1: config 0 has no interface number 0 [ 878.873745][T10215] usb 6-1: New USB device found, idVendor=14ea, idProduct=ab11, bcdDevice=4a.d2 [ 878.878155][T12873] loop7: detected capacity change from 0 to 64 [ 878.890534][T10215] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.899551][T12873] BFS-fs: bfs_fill_super(): loop7 is unclean, continuing [ 878.900511][T10215] usb 6-1: Product: syz [ 878.923257][T10215] usb 6-1: Manufacturer: syz [ 878.928158][T10215] usb 6-1: SerialNumber: syz [ 878.939374][T10215] usb 6-1: config 0 descriptor?? [ 878.973820][T10215] asix 6-1:0.225: probe with driver asix failed with error -22 [ 879.222709][T10215] usb 6-1: USB disconnect, device number 12 [ 879.491839][T12881] loop7: detected capacity change from 0 to 32768 [ 879.525260][T12881] loop7: p9 p11 p16 [ 879.843255][T12891] loop7: detected capacity change from 0 to 32768 [ 879.858754][T12891] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1422 (12891) [ 879.873949][T12891] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 879.884258][T12891] BTRFS info (device loop7): using sha256 checksum algorithm [ 879.996531][T12891] BTRFS info (device loop7): enabling ssd optimizations [ 880.003502][T12891] BTRFS info (device loop7): turning on async discard [ 880.010427][T12891] BTRFS info (device loop7): enabling free space tree [ 880.841386][ T9664] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 880.894499][ T8656] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 880.944041][T12861] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 881.076626][ T8656] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 881.126802][ T8656] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.169696][ T8656] usb 6-1: Product: syz [ 881.173946][ T8656] usb 6-1: Manufacturer: syz [ 881.204072][ T8656] usb 6-1: SerialNumber: syz [ 881.282014][ T8656] hub 6-1:24.0: bad descriptor, ignoring hub [ 881.293372][ T8656] hub 6-1:24.0: probe with driver hub failed with error -5 [ 881.325321][ T10] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 881.503358][ T8656] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 881.541317][ T8656] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 881.616417][ T8656] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 881.628728][ T10] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 881.643577][ T8656] usb 6-1: media controller created [ 881.649895][ T10] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 881.674163][ T10] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 881.727595][ T8656] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 881.742403][T10177] udevd[10177]: inotify_add_watch(7, /dev/loop7p11, 10) failed: No such file or directory [ 881.754760][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 881.770065][T11155] udevd[11155]: inotify_add_watch(7, /dev/loop7p9, 10) failed: No such file or directory [ 881.772990][T10706] udevd[10706]: inotify_add_watch(7, /dev/loop7p16, 10) failed: No such file or directory [ 881.801555][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 881.869199][ T10] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 881.881990][ T10] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 881.890364][ T10] usb 8-1: Product: syz [ 881.895543][ T10] usb 8-1: Manufacturer: syz [ 881.910322][ T10] cdc_wdm 8-1:1.0: skipping garbage [ 881.922656][ T10] cdc_wdm 8-1:1.0: skipping garbage [ 881.941483][ T10] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 881.953082][ T10] cdc_wdm 8-1:1.0: Unknown control protocol [ 882.030686][ T8656] DVB: Unable to find symbol dib7000p_attach() [ 882.039900][ T8656] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 882.100260][T12919] loop1: detected capacity change from 0 to 32768 [ 882.127099][T12919] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1426 (12919) [ 882.174513][ T8656] rc_core: IR keymap rc-dib0700-rc5 not found [ 882.199109][ T8656] Registered IR keymap rc-empty [ 882.217036][T12919] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 882.217948][ T8656] dvb-usb: could not initialize remote control. [ 882.278479][ T8656] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 882.309338][T12919] BTRFS info (device loop1): using sha256 checksum algorithm [ 882.385653][ T8656] usb 6-1: USB disconnect, device number 13 [ 882.423239][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 882.497001][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 882.503672][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 882.509989][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 882.516690][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 882.523420][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 882.530055][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 882.536633][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 882.543369][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 882.549739][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 882.556376][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 882.563173][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 882.569813][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 882.576226][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 882.582949][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 882.589343][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 882.596001][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 882.603177][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 882.609905][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 882.616602][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 882.633839][ T10] usb 8-1: USB disconnect, device number 15 [ 882.639914][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 882.762634][T12919] BTRFS info (device loop1): rebuilding free space tree [ 882.983602][T12919] BTRFS info (device loop1): disabling free space tree [ 883.525294][T12919] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 883.564843][ T8656] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 883.589878][T12919] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 883.631768][T12919] BTRFS info (device loop1): enabling ssd optimizations [ 883.639007][T12919] BTRFS info (device loop1): turning on async discard [ 883.653217][T12919] BTRFS info (device loop1): force clearing of disk cache [ 883.703069][T12919] BTRFS info (device loop1): enabling auto defrag [ 883.717711][T12919] BTRFS info (device loop1): max_inline set to 4096 [ 884.486245][ T8656] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 884.593672][ T5830] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 884.767912][T12976] loop7: detected capacity change from 0 to 512 [ 884.940158][T12976] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 885.096933][T12976] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1440: bg 0: block 306: padding at end of block bitmap is not set [ 885.166754][ T8656] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 885.185714][ T8656] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 885.364942][ T8656] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 885.367765][ T9664] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 885.438744][ T8656] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 885.454631][ T5912] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 885.609724][ T5912] usb 6-1: config 0 has an invalid interface number: 113 but max is 0 [ 885.631064][ T8656] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 885.666931][ T5912] usb 6-1: config 0 has no interface number 0 [ 885.725937][ T5912] usb 6-1: config 0 interface 113 has no altsetting 0 [ 885.809269][ T5912] usb 6-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 885.848330][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.915580][ T5912] usb 6-1: Product: syz [ 885.938580][ T5912] usb 6-1: Manufacturer: syz [ 885.968441][ T5912] usb 6-1: SerialNumber: syz [ 886.022574][ T5912] usb 6-1: config 0 descriptor?? [ 886.178216][T10215] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 886.227272][ T8656] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 886.261071][ T8656] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 886.270829][ C1] usb 6-1: NFC: Urb failure (status -71) [ 886.274814][ C1] usb 6-1: NFC: Urb failure (status -71) [ 886.288646][ T5912] usb 6-1: NFC: Unable to get FW version [ 886.322351][ T5912] pn533_usb 6-1:0.113: probe with driver pn533_usb failed with error -71 [ 886.399846][T10215] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 886.410604][ T8656] usb 7-1: Product: syz [ 886.452396][ T5912] usb 6-1: USB disconnect, device number 14 [ 886.455608][ T8656] usb 7-1: Manufacturer: syz [ 886.473429][T10215] usb 8-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 886.728273][T10215] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.787416][T10215] usb 8-1: config 0 descriptor?? [ 886.842322][T12985] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 886.866815][ T8656] cdc_wdm 7-1:1.0: skipping garbage [ 886.872083][ T8656] cdc_wdm 7-1:1.0: skipping garbage [ 886.910316][T12992] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1444'. [ 886.990587][ T8656] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 887.132126][ T8656] cdc_wdm 7-1:1.0: Unknown control protocol [ 887.256413][ T8656] usb 7-1: USB disconnect, device number 15 [ 887.461006][T12999] loop6: detected capacity change from 0 to 256 [ 887.471842][T10215] elan 0003:04F3:0755.000F: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.7-1/input0 [ 887.801297][T12998] loop5: detected capacity change from 0 to 32768 [ 887.949978][T13003] elan 0003:04F3:0755.000F: pid 13003 passed too short report [ 888.217399][T12998] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1447 (12998) [ 888.276320][T10215] usb 8-1: USB disconnect, device number 16 [ 888.344530][T12998] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 888.355185][T12998] BTRFS info (device loop5): using sha256 checksum algorithm [ 888.866748][T12998] BTRFS info (device loop5): enabling ssd optimizations [ 888.874101][T12998] BTRFS info (device loop5): turning on async discard [ 888.881086][T12998] BTRFS info (device loop5): enabling free space tree [ 890.239160][T13023] loop6: detected capacity change from 0 to 512 [ 890.575712][T10058] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 890.746312][T13023] EXT4-fs error (device loop6): ext4_iget_extra_inode:5025: inode #15: comm syz.6.1450: corrupted in-inode xattr: e_value size too large [ 891.141338][T13028] loop7: detected capacity change from 0 to 32768 [ 891.185807][T13023] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 891.195042][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 891.210943][ C1] EXT4-fs (loop6): initial error at time 1770233673: ext4_iget_extra_inode:5025: inode 15 [ 891.220957][ C1] EXT4-fs (loop6): last error at time 1770233673: ext4_iget_extra_inode:5025: inode 15 [ 891.283818][T13023] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1450: couldn't read orphan inode 15 (err -117) [ 891.381840][T13023] loop6: lost filesystem error report for type 5 error -117 [ 891.394797][T13023] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 891.984146][ T9503] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 899.606443][T13062] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1463'. [ 899.744869][T10215] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 900.076341][T13061] loop7: detected capacity change from 0 to 32768 [ 900.113648][T13061] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1462 (13061) [ 900.254461][T10215] usb 7-1: Using ep0 maxpacket: 16 [ 900.372767][T13061] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 900.383155][T13061] BTRFS info (device loop7): using sha256 checksum algorithm [ 900.465629][T10215] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 900.522668][ T6089] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888035478000 (11)(syz0) rdma_ndev=ffff88803264c000 (35)(veth0_vlan) cookie=ffff88807d878000 (7)(ÌË.’) start [ 900.567206][T10215] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 900.614704][T10215] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 900.645653][ T6089] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888035478000 (11)(syz0) rdma_ndev=ffff88803264c000 (35)(veth0_vlan) cookie=ffff88807d878000 (3)(ÌË.’) end [ 900.660999][T10215] usb 7-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 901.528779][ T6089] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e2c000 (13)() rdma_ndev=ffff888055c0e000 (36)(veth0_vlan) cookie=ffff88807d878000 (3)(ÌË.’) start [ 901.740730][T13061] BTRFS info (device loop7): enabling ssd optimizations [ 901.752317][T13061] BTRFS info (device loop7): turning on async discard [ 901.759325][T13061] BTRFS info (device loop7): enabling free space tree [ 901.842440][T10215] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.934842][ T6089] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e2c000 (13)() rdma_ndev=ffff888055c0e000 (36)(veth0_vlan) cookie=ffff88807d878000 (3)(ÌË.’) end [ 902.397635][T10215] usb 7-1: config 0 descriptor?? [ 902.603848][T13062] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1463'. [ 902.995264][T10215] usb 7-1: can't set config #0, error -71 [ 903.148728][T10215] usb 7-1: USB disconnect, device number 16 [ 903.220300][ T6089] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888035478000 (11)(syz0) rdma_ndev=ffff88803264c000 (35)(veth0_vlan) cookie=ffff88807fde8000 (11)(ÌË.’) start [ 903.317881][ T9664] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 903.364903][ T6089] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888035478000 (11)(syz0) rdma_ndev=ffff88803264c000 (35)(veth0_vlan) cookie=ffff88807fde8000 (9)(ÌË.’) end [ 903.502056][ T6089] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e2c000 (13)() rdma_ndev=ffff888055c0e000 (36)(veth0_vlan) cookie=ffff88807fde8000 (9)(ÌË.’) start [ 903.656314][ T6089] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e2c000 (13)() rdma_ndev=ffff888055c0e000 (36)(veth0_vlan) cookie=ffff88807fde8000 (9)(ÌË.’) end [ 904.054019][T13090] loop6: detected capacity change from 0 to 1024 [ 904.200790][T13090] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 904.346976][T13088] loop1: detected capacity change from 0 to 4096 [ 904.377960][T13090] EXT4-fs (loop6): shut down requested (0) [ 904.437456][T13088] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 905.078668][ T9503] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 905.581041][T13095] loop5: detected capacity change from 0 to 32768 [ 905.684715][T13095] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1470 (13095) [ 905.807373][T13095] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 905.887919][T13095] BTRFS info (device loop5): using blake2b checksum algorithm [ 906.438419][T13095] BTRFS info (device loop5): enabling ssd optimizations [ 906.508665][T13095] BTRFS info (device loop5): turning on async discard [ 906.549090][T13095] BTRFS info (device loop5): enabling free space tree [ 906.784454][ T29] audit: type=1800 audit(1770233688.784:107): pid=13095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1470" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 907.243717][T10058] BTRFS info (device loop5): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 910.512164][T13135] loop6: detected capacity change from 0 to 32768 [ 910.725611][T13135] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1476 (13135) [ 914.291932][ C1] Unknown status report in ack skb [ 917.128827][T13175] loop5: detected capacity change from 0 to 8 [ 917.597440][T13175] SQUASHFS error: xz decompression failed, data probably corrupt [ 917.666855][T13175] SQUASHFS error: Failed to read block 0x108: -5 [ 917.673252][T13175] SQUASHFS error: Unable to read metadata cache entry [106] [ 917.944956][T13175] SQUASHFS error: Unable to read inode 0x11f [ 918.724765][T10215] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 920.448734][T10215] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 920.744429][T10215] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 920.971555][T10215] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 8.00 [ 921.044489][T10215] usb 8-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 921.175611][T10215] usb 8-1: config 0 descriptor?? [ 921.181012][T13185] loop5: detected capacity change from 0 to 2048 [ 921.214099][T10215] usb 8-1: can't set config #0, error -71 [ 921.259377][T10215] usb 8-1: USB disconnect, device number 17 [ 921.320026][T13185] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 921.681644][T10058] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 921.693426][ T24] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 921.822526][ T24] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 921.896649][T10215] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 922.115463][T10215] usb 7-1: config 0 has no interfaces? [ 922.136312][T10215] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 922.223853][T10215] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 922.304710][T10215] usb 7-1: SerialNumber: syz [ 922.375863][T10215] usb 7-1: config 0 descriptor?? [ 922.776312][ T5912] usb 7-1: USB disconnect, device number 17 [ 923.183831][T13213] input: syz0 as /devices/virtual/input/input17 [ 923.200206][T13216] netlink: 'syz.7.1505': attribute type 12 has an invalid length. [ 923.305037][T13217] loop5: detected capacity change from 0 to 512 [ 923.329702][T13217] EXT4-fs: Ignoring removed nobh option [ 923.392015][T13217] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 923.436046][T13217] ext4 filesystem being mounted at /147/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 924.995918][T13223] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #2: block 3: comm syz.5.1504: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 925.596974][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88804486f800: rx timeout, send abort [ 925.614703][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88804486f800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 925.632815][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88805ade5c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 927.215660][T13232] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1508'. [ 927.289074][T10058] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 927.994993][T13243] vivid-000: disconnect [ 929.799440][ C1] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 929.933283][T13255] loop1: detected capacity change from 0 to 32768 [ 930.014795][T13255] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1518 (13255) [ 930.161467][T10442] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888035478000 (11)(syz0) rdma_ndev=ffff88803264c000 (35)(veth0_vlan) cookie=ffff88803bcfc000 (10)(syzkaller1) start [ 930.239753][T13255] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 930.250066][T13255] BTRFS info (device loop1): using sha256 checksum algorithm [ 930.299698][T10442] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888035478000 (11)(syz0) rdma_ndev=ffff88803264c000 (35)(veth0_vlan) cookie=ffff88803bcfc000 (13)(syzkaller1) end [ 930.334278][T10442] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e2c000 (13)() rdma_ndev=ffff888055c0e000 (35)(veth0_vlan) cookie=ffff88803bcfc000 (10)(syzkaller1) start [ 930.353892][T10442] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e2c000 (13)() rdma_ndev=ffff888055c0e000 (35)(veth0_vlan) cookie=ffff88803bcfc000 (10)(syzkaller1) end [ 930.373156][T10442] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888035478000 (11)(syz0) rdma_ndev=ffff88803264c000 (35)(veth0_vlan) cookie=ffff888074754000 (4)(syzkaller1.3) start [ 930.391322][T10442] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888035478000 (11)(syz0) rdma_ndev=ffff88803264c000 (35)(veth0_vlan) cookie=ffff888074754000 (4)(syzkaller1.3) end [ 930.415251][T10442] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e2c000 (13)() rdma_ndev=ffff888055c0e000 (35)(veth0_vlan) cookie=ffff888074754000 (4)(syzkaller1.3) start [ 930.445145][T10442] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079e2c000 (13)() rdma_ndev=ffff888055c0e000 (35)(veth0_vlan) cookie=ffff888074754000 (4)(syzkaller1.3) end [ 930.468425][T13242] vivid-000: reconnect [ 930.568882][T13255] BTRFS info (device loop1): enabling ssd optimizations [ 930.576156][T13255] BTRFS info (device loop1): turning on async discard [ 930.582994][T13255] BTRFS info (device loop1): enabling free space tree [ 931.946211][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.959442][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.757119][ T5830] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 941.344375][ C1] sched: DL replenish lagged too much [ 994.957236][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 994.981637][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.789542][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.813175][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1091.856105][ T30] INFO: task kworker/0:2:119 blocked for more than 143 seconds. [ 1091.863910][ T30] Tainted: G L syzkaller #0 [ 1098.192513][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.