last executing test programs: 6m38.224441341s ago: executing program 1 (id=146): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @local}], 0x10) sendto$inet6(r0, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000080)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x40000023, 0x0) 6m36.100087976s ago: executing program 1 (id=150): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) r1 = io_uring_setup(0x7d1, &(0x7f0000000240)={0x0, 0xddf9, 0x100, 0xfffffffe, 0x183}) close_range(r1, r1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) read$FUSE(r4, 0x0, 0x2000) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0xe9, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)='\x00\x00\x00\x00\x00\x00', 0x0, 0xb, 0x0, 0x80, 0x0}) ioctl$FE_GET_EVENT(r0, 0x80286f4e, &(0x7f0000000140)) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x3, 0xb, 0xa}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f00000001c0)) 6m34.951282077s ago: executing program 1 (id=158): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x50bd29, 0x25dfdc03, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x8008}, 0x8010) 6m34.467311058s ago: executing program 1 (id=161): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0xfd, 0xf4f, &(0x7f0000001ec0)="$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") r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r3 = dup(r0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) readlink(0x0, 0x0, 0x0) pipe(&(0x7f0000000000)) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8005, 0xbffc, 0xe652, 0x2, 0x51, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e23, 0x7, @empty, 0x2001}}, 0x6, 0x6}, 0x90) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x20) r5 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000000180)=0x2) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000280)={0x1c, r8, 0x1, 0x70bd22, 0x40, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x0) fcntl$setsig(r6, 0xa, 0x12) ppoll(&(0x7f0000000140)=[{r7, 0x8002}], 0x1, 0x0, 0x0, 0x0) r11 = dup2(r6, r7) fcntl$setown(r11, 0x8, r5) mknodat(r11, &(0x7f0000000000)='./file1\x00', 0x200, 0x9) 6m31.747752156s ago: executing program 1 (id=175): fchdir(0xffffffffffffffff) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7fee}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000000)={0x6f0a, r0}, 0x0) landlock_restrict_self(r1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) 6m26.687348907s ago: executing program 1 (id=188): socket$inet(0xa, 0x801, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f00000004c0)) listen(r2, 0x8) listen(0xffffffffffffffff, 0x100) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x4) r5 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000080)={'#! ', './file1/../file0', [{0x20, '\x00'}, {0x20, '\\%'}, {0x20, '#'}, {0x20, '\x00'}], 0xa, "8e4927a7000278414808f90249ecb1bda8974898280f3c430aa9f74dc5855ce647cbec19744a6dd89dca"}, 0x47) write$UHID_INPUT(r6, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, 0x1}, [@map_fd={0x18, 0x9, 0x1, 0x0, r3}]}, &(0x7f0000000280)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', r4, 0x0, r6, 0x8, &(0x7f0000000340)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0x0, 0x2, 0x80000}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x5, 0x3, 0x3}], 0x10, 0x4}, 0x94) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe0060000000059", 0x1d}], 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89b0, &(0x7f00000000c0)={'vlan0\x00', @random='\x00\x00\x00\x00\x00 '}) r7 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r7, 0x0, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r8, 0x3b87, &(0x7f0000000000)={0x18, 0x1, 0x2dac7d9b6236ea8b, 0x0, r9, 0x1}) ioctl$IOMMU_VFIO_IOAS$GET(r6, 0x3b88, &(0x7f00000005c0)={0xc, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r7, 0x3b83, &(0x7f0000000600)={0x28, 0x4, r9, r10, 0x1753e, 0x0, 0x8, 0x195ebf}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080081000000060027"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000202505a1a4400000000101090248000101006015090400001a02020000052406000005240004000d240f01800000000100fcff500424020209058103ff03000306090582020000020d0309050302"], 0x0) 6m26.161358123s ago: executing program 32 (id=188): socket$inet(0xa, 0x801, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f00000004c0)) listen(r2, 0x8) listen(0xffffffffffffffff, 0x100) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x4) r5 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000080)={'#! ', './file1/../file0', [{0x20, '\x00'}, {0x20, '\\%'}, {0x20, '#'}, {0x20, '\x00'}], 0xa, "8e4927a7000278414808f90249ecb1bda8974898280f3c430aa9f74dc5855ce647cbec19744a6dd89dca"}, 0x47) write$UHID_INPUT(r6, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, 0x1}, [@map_fd={0x18, 0x9, 0x1, 0x0, r3}]}, &(0x7f0000000280)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', r4, 0x0, r6, 0x8, &(0x7f0000000340)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0x0, 0x2, 0x80000}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x5, 0x3, 0x3}], 0x10, 0x4}, 0x94) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe0060000000059", 0x1d}], 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89b0, &(0x7f00000000c0)={'vlan0\x00', @random='\x00\x00\x00\x00\x00 '}) r7 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r7, 0x0, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r8, 0x3b87, &(0x7f0000000000)={0x18, 0x1, 0x2dac7d9b6236ea8b, 0x0, r9, 0x1}) ioctl$IOMMU_VFIO_IOAS$GET(r6, 0x3b88, &(0x7f00000005c0)={0xc, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r7, 0x3b83, &(0x7f0000000600)={0x28, 0x4, r9, r10, 0x1753e, 0x0, 0x8, 0x195ebf}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080081000000060027"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000202505a1a4400000000101090248000101006015090400001a02020000052406000005240004000d240f01800000000100fcff500424020209058103ff03000306090582020000020d0309050302"], 0x0) 6m7.573752951s ago: executing program 4 (id=234): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) 6m7.351554158s ago: executing program 4 (id=236): r0 = syz_open_dev$video4linux(&(0x7f0000000140), 0x1, 0xc0000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) prctl$PR_SCHED_CORE(0x3e, 0x4, r3, 0x2, &(0x7f0000000000)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000002000000", 0xfe60) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000005c0)={0x40, r2, 0x1, 0x70bd26, 0x2, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x40}}, 0x40) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, 0x0) 6m5.963090765s ago: executing program 4 (id=239): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x204e9, 0x500}, [@IFLA_GROUP={0x8, 0x1b, 0x2000000}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4529}, @IFLA_OPERSTATE={0x5, 0x10, 0x2}]}, 0x38}, 0x1, 0xffffa888, 0x0, 0x50}, 0x20000880) 6m5.39631247s ago: executing program 4 (id=240): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@i_version}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x1, 0x43a, &(0x7f0000000340)="$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") syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x34) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x100) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x3) rmdir(&(0x7f0000000000)='./file0/../file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000580)="4386", 0x2, 0xab53) 6m4.94826088s ago: executing program 4 (id=242): sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYBLOB="000200000000000000001d0000000c000600020000000200000014002f800800010000000000080001"], 0x34}}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x2c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 6m1.770548602s ago: executing program 2 (id=247): r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005400e5012abd7000ffffffff07000086", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r1, @ANYBLOB="01030300ff"], 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x200004d0) 5m57.747644935s ago: executing program 2 (id=251): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@i_version}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x1, 0x43a, &(0x7f0000000340)="$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") syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x34) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x100) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x3) rmdir(&(0x7f0000000000)='./file0/../file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000580)="4386", 0x2, 0xab53) 5m57.348281276s ago: executing program 4 (id=253): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f00000010c0)={0x0, 0x0}) syz_emit_vhci(&(0x7f0000001140)=ANY=[@ANYBLOB="04224c05aaaaaaaaaa1005010952e4ce0e06a3ffffffffffffff0107741000003800000210030e847b050059aaaaaaaaaa1209070d3bf9420900d1aaaaaaaaaa12090a0076ae06000203"], 0x4f) mknod(&(0x7f00000011c0)='./file0\x00', 0x10, 0xfff) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) mount$nfs(&(0x7f0000001240)='*r\\-^*)@*%.*$\x00', &(0x7f0000001280)='./file0/../file0\x00', 0x0, 0x8, &(0x7f0000001300)={[{'/dev/v4l-subdev#\x00'}, {}, {'\x00'}, {'TIPC\x00'}, {}, {'+}&'}], [{@subj_user={'subj_user', 0x3d, 'TIPC\x00'}}]}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001440)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0\x00'}) r1 = openat$mice(0xffffffffffffff9c, 0x0, 0x90000) bind$unix(r1, 0x0, 0x0) write$ppp(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFNL_MSG_ACCT_GET(r2, 0x0, 0x44010) syz_emit_vhci(0x0, 0x0) ioctl$PPPIOCSDEBUG(r0, 0x40047440, 0x0) rmdir(&(0x7f00000019c0)='./file0/file0\x00') ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r1, 0x3b8b, &(0x7f0000001a00)={0x10}) 5m57.099092126s ago: executing program 33 (id=253): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f00000010c0)={0x0, 0x0}) syz_emit_vhci(&(0x7f0000001140)=ANY=[@ANYBLOB="04224c05aaaaaaaaaa1005010952e4ce0e06a3ffffffffffffff0107741000003800000210030e847b050059aaaaaaaaaa1209070d3bf9420900d1aaaaaaaaaa12090a0076ae06000203"], 0x4f) mknod(&(0x7f00000011c0)='./file0\x00', 0x10, 0xfff) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) mount$nfs(&(0x7f0000001240)='*r\\-^*)@*%.*$\x00', &(0x7f0000001280)='./file0/../file0\x00', 0x0, 0x8, &(0x7f0000001300)={[{'/dev/v4l-subdev#\x00'}, {}, {'\x00'}, {'TIPC\x00'}, {}, {'+}&'}], [{@subj_user={'subj_user', 0x3d, 'TIPC\x00'}}]}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001440)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0\x00'}) r1 = openat$mice(0xffffffffffffff9c, 0x0, 0x90000) bind$unix(r1, 0x0, 0x0) write$ppp(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFNL_MSG_ACCT_GET(r2, 0x0, 0x44010) syz_emit_vhci(0x0, 0x0) ioctl$PPPIOCSDEBUG(r0, 0x40047440, 0x0) rmdir(&(0x7f00000019c0)='./file0/file0\x00') ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r1, 0x3b8b, &(0x7f0000001a00)={0x10}) 5m56.37556246s ago: executing program 2 (id=256): syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe}, 0x0) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000000040)={[{@nodatacow}, {@flushoncommit}]}, 0x11, 0x5109, &(0x7f000000f400)="$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") llistxattr(&(0x7f0000000100)='./file1\x00', 0x0, 0x60) (fail_nth: 2) 5m52.540649738s ago: executing program 2 (id=264): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@i_version}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x1, 0x43a, &(0x7f0000000340)="$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") syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x34) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x100) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x3) rmdir(&(0x7f0000000000)='./file0/../file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 5m51.033909975s ago: executing program 2 (id=267): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x120) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xec37}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MTU={0x8, 0x4, 0x80}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0xc000802) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000340)={0x0, &(0x7f0000000280)=[@nested_load_code={0x12e, 0x5e, {0x3, "26676466430f388093d67b71ea3e0fc7b74200000066b8ef000f00d80f7893d7992ff83e450f91b6f5000000642626660f5beb400f3802628740df639fc4a2754011420f01d1"}}, @enable_nested={0x12c, 0x18}, @cpuid={0x64, 0x18, {0x7ff, 0x5}}], 0x8e}) ioctl$KVM_GET_XSAVE(r3, 0x9000aea4, &(0x7f00000004c0)) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) 5m49.055449371s ago: executing program 2 (id=276): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@i_version}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x1, 0x43a, &(0x7f0000000340)="$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") syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x34) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x100) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x3) rmdir(&(0x7f0000000000)='./file0/../file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 5m48.818790618s ago: executing program 34 (id=276): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@i_version}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x1, 0x43a, &(0x7f0000000340)="$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") syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x34) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x100) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x3) rmdir(&(0x7f0000000000)='./file0/../file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 10.242097838s ago: executing program 7 (id=1106): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000023c0)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x3, 0x0, r2}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r3, 0x0, 0x0}, 0x20) 7.432688067s ago: executing program 5 (id=1113): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d0009058203"], 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000001240)={{r1, &(0x7f0000000000)='/dev/snapshot\x00', 0x406881, &(0x7f0000000040)={@align=0x3, {0x4, 0x0, 0x80b1, 0x74}}, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0xc}, 0x2, &(0x7f0000001200)=[{0x1, 0x32, &(0x7f0000000140)='/dev/snapshot\x00', &(0x7f0000000180)="de43cccec42673a35543ad337939774bf32ec028ac86824f044f830b6617aeba266aa487005d5d836bbcc97ea3786a780db272f0c34273e09f58e6435431a17124ae471198c058d55c8cb7f0f4e9e82d0666f2e760f528946897bebcd64c486e68d6b80393a7b8830ae155b60f480524935b8541a6334b86f5c29abf3921a004dc05628c8bfcb82de24b95e48a96d5ed55551b2c6c65dc74b8b1065a13cd451b11d1b401ebab6202d38694cbe47b8f8fc8b008a97cedc69e3c160aeae5ccb83c23e9d1de3cb410ce176d65ba60c54d7315a5b8684306c6cbfbb6a3a6762833f0c956bf429e0f1ef9133cd2fbbbde46c29dfc90795d65f1df9b689e0cca1f2bab82c7a33860cf8c6f9257006c13097cf3d30cbb2fe583a5b6b93f83784f9ca8ffc09a1ad0c66980ad742d8a92e919f6ca72a28ea9c3ee3ace1a56fd0a3e4e704bee5a5aeebdfebc88973a6f0e8a32edc871aa073988e6baf14c7349a06e16dcdf47b1651a125e032d8164e528efff8bbba09c637698153599bd6a1d3a570be294f000884ae22cbb0bb47f399bbd048f89bac54eafa3b37762e900c7cbdd5da42d7d98843eb402c33eda901e2564153baae01f7252842325186ac8eea3f7860d8bb6b3b569cd2da921dbed6d18ddbd8e27ee723596bb9769d68cbe0c857a6129b12bb48ece56db47f95a2400d59fe6445ef6dd0e17d7ce13984b81b1b59986524db4b29fbed33b3ba10b686f6d80b9d1c1a8ab120d7efd83f4b4c3c63d833412dd3a6488a0cc584c9d8d652e8fc1257e70dfa75e71b10821456f1060dfe3aa88836ce0cb4fa21f4ed37fe81fcb75748eb1447452ca4995cc7a33797052decde6cc0c3e79cb5ffb891034faa6c2dae662d00d08d912a195ad087c05704c409eb9b226452464d3f698a15587e9c0b2c284f04762f04b8d560c5b649bc28ecd5f75b33801d6e770fb89d4eea1f1bbb4c58aaa93707fe533dd972bd5984cf572ac84a480992306fa3da630f9bf7efeebfcaba0e63cf45c9c18b49ee476aca6397ec26b2d50ffc19274c44c2121a2961b504f7f0646e0fb33325000aa607f14a3e402562fabdef9c23ad0e71fe04c953029151bfdbc5c1bab99d977b81653543a38f6f4ab7a8a4ec28fcb9b611a7e2702d0a82883f3cdcba793244753310ca5b8f51547c79fe9fd81d0013482420c1cbd296d2580fd5928b494ffea3b1ef5eaeba01f1079e7acb299d6055fd234e6835c5bc0b9d9c86d5f4f05b24350b873f65e82e6226a27d89f7c214322350697596537692c54b5eee7520ec4b3f75392270f220d734ba150ad4a49dfa496d4a94dc0bb27e75e3f3a5ece2aedd647374260d191a4d15bf98a9243360a1990bbc13cf5fd682440e40fbb1b2fd7649a17f9d509cd919ba16e87d7885823691e1e116aabc8087c307c00a2740ad6ae4ce8ed7ff4bf7dcd178b8495fef7712b90c986e32adf8fe375a2fd621de8533baf0d83441c3eb4ccceb326294955bbb465252e3012c860e467e01046e62b6557596e9ff9892c82d3dd11c123a7ef8c7e6c5406ab8cfc530b24d6b6c1cb95694cb533f7a5a2107721d81fbb2c63f0360b52aa8b75a3bc62c7bc8cf52bb01dcbba22987169b86e38fb1e61693ab89ba240a97f47341bddf3c6cac9998aa79d67b33396e57b04eebad50c1f049006a1e1449c171f089c9dd452e79e6b9a4317c4121d0626881aa6873425d70b9a5a573a22d0eef91c463361b1da350c2b28f13e871f000702daaeaf8e696448e3b1b4d12dec83d8ab988ebed8fd91ba142e95b38805e1acdfc9207c407e0763709efedec54f3ea4a1447e6a113d9770b772962346c4ddbff88fae84107d99a9f7a0c3184dfa2e0b6e40c7de9a08c30fc241fef3a02a11cc68aed4348d3566a2a2baaa778778fb04bb49d8ab8819bd0df456f8ef36dfeb68aa908e5383b602cf78fc9b7c882d02c927cfb82b74de343b67c63d68ef21a5ffc5ae99b10d4246dbb7ba7bb82dd4a1c0743a6097bbeeeb2d10cddce3f671b52400293125bb65b4c61a5aa8d2e9f53fb3a3a572143ad36648b925068b1c6291010aa8bbad4d399450057148769646048a82e3db6060fc93365a9f0c9b8bda43e5589f2c56ccd8b2d4894d6b14748eb6596d3a43db0344574c9bf27667c8807eabe7cea60109794e3f045e0d394a5caf2e6c9af107da80b966319b8bd426fc929e7533e850c60bc829b4ee7db0b301861ab4f6f8d3c5f48d54c5277728b364f404153cd2627f088f9b981b656812be3c7c7731b7516509350817ad9158c46f657bf87bc7a6c3149d530cecc723800066cf938a1f72c925b465ec6150d72c95b046e5658384f927045d84bd82f2cd1450d5118e0e7e18ee528cc1e21fd3129b749a4aa1bc3474cdb00ed500595a504b7860b0fd7c3d49911b7691afc4f5881cece556b31c93ec5a8e93aca95b11ddc7ee06a5c70b836ada2fbf01223c02992fb86e42f11cd77ec265cdeef6424c440a2277003592f22195723c7c26b41e470b74325e5bf419e82348e8533cd3ba03e09f864784a2f8e9a7e5e8821b232057508237491322262db18b53c089d6ada415f6aee4a9959a2afc17f451a62c04cfb30888f563a5873d293d700679f8a414363da09ca3faaa6011c3a4c92ecfed6df36a1c4598adf7cf6d6da6a7158c56a8021307bf77e6d8e35a8555c6a20f0de75ebf5f5f410e2fef62ceab05b0799dd15aa11e87ad441d8dbd37c79f83b1221ddfe1b984e5c39cb37f90f5476b5aa64c0ea030e4224d454e32dba564cdef903a3bb422f13f50fff34c6194732d2c4c228be514b40ede91722195f659e9124a3382c6b3b53f7819c5b0b5e6797dda69d73af02da8a388d8c669ef769acad938bdfa2e22a0325a4d57d55b8c9724f99d1387bf17d8d06f2fec4e6b010e59c8f01d95e1aa2f0232f0327df8ea5acb92b9665bdb051b25738322c0e8e6f2cd246188e8fa4e4d11006173ddd0a041bdbaa192860d76c2393ea9cb9476d9627ce1c12493e2246e42a50424af50c702d66719491c22d7b737a0887788d39e4132e9b2533aa0893ba8c8ade4ac8439434453c20f6d7873555714d3247cb693d37dd82d02c65eb65b5910c4261c58cfe204ebc3e0595b59ea3b3629a6e988a8a2d9c41f16b28999acabc8105aec85e7912bf07090a00b47ad10b11925a7b24df5c30458e2d3d1cb7a3893d8b9767f1ab3dbdbdf5f8358d742c4bd9107173d76c99950ed054cd53ace65d8fda67677c576f4252984355bdf1f1d6fa4df734cec3c5b1a81ba006d15caf4645c897be117ab696aa5b70b9b87723a869cca613df90c96ce2be91fca1ef738fcf245888ed7dc3419696baa60fb83e00421f6e51a4cc7f6db01ac06b86cd1b75226cc137dc9163637e5a1c41929a9113a8fab0a97d3e325f6bf6acc546cebd95dce3a03dc942717e08ec749e98533d042f3a9fca0d5df7048227618f66dd6fade51fd61edbd0dcb21ed633f67fb59550470d6e9c021fdb2f158b74b76a1f298330696138f2fbd2f2f6d212aba49109383ac6bdf414c8aa039d8ce50ff6a88bb3fa07cf353b8fe6f61d6b383f25978bf562095f03e1e9d64fef9bf413dddbd05607010980d85e2243f9dfba57cb95d1cab262f811bdc9266855f6538584c1e701d63f14007bf1a69a73d0c9f152224a986d67d1f713b01beb49e287ebf51c6eb544b4d7f48b676e700a565d94c73c17f10c25b35ff28a2b56dd7639acd012dde2e5cf75272b171c093ef886b1e913c41e73f7537158b22de26557a836f492cdb016d0da4f4f19f75df5d1b45d170915e5d808e22e9ce614c796876c19737973331b6d07a9de2929911dba8838eb9a715a4a9e6733a5039ef8c46804564d53dff59292027b1c3f865cb3a75d9232dd89220ab8f69b2d061a7e182a8c2b4f5f1d9406758ef198490dd63484647c455c19d8f631d33872735d79c649c11394db388847d3dedc021228927de521a9b2719f42f065a9841b05ea743564f853e2964262c0512b568ad0883d71600707f055cd08a420aa48efd831ec18a11de6b8f5ab8813f4dfd392517dd9d142281560215837c5c638af5114fc7d505f23b141bd89a7db639d3fa761dc8dff20dbf79ed1e9c820dcf433faf0d8c424ef0f581e986a19d70ba564fc1f58d83de61160ae183b278cbcf4a9d01886da0c97de563c9a88e50a2091cfac6037bb6e413d6bc1b179b54289beac764d86e9bbee261f06070fa3b70bd643c518670d52e0a996f0de7788e0533b8fa94e9ef253507ca450e0736615aaf6bfedae84235a9cb9148e7c634ccea64f9c5f8f5d9ffd9603db59b50a0ef8cc50af095f256c400a4030c93a3b8f95a66fe0ebed313e2df2ac9bb8dc04dfbc51ae9c8fedf8e1465800ace4fbce8d297e45302f34d415ca666ffda08c19c7106365e5c8c6de5f4750d0337e34eb0d916308c1bd78915d65c555f5f130875f48df47010d8358f64d0aa6ef4713784c0ac3755af8ddda227442a650b985d3bff744dd7035918b5ca4eed0517a5920c781b902c92507faa2bac5c2068d0ccd8fec54b170114e9891306a3ca582548b950acd808459d7c71521a7ee1d7eaf945f74b7a0e9c39256c5e242a01f22da15739b0a8d3f05f2fadc64fb179e29ce8e8e69ba927a9990ac94c417bd93ad76d64b6ef7d983a5f2661abac6b63c9df1af8eb9d6401db589206b5a85deff65cb0f44ad6ff005b29847f9c444608d94a92fde1198118c206249e4e57b94df69420e1f88a2fccba29a5c110bd273400bf28fc502b87fed892d0b08aa2ee2b549ca650008e39bd8591630a4991864651eb6cd22d1603f0ad3d61b1f42977f0877807377c4e2636206e7f79e6b455e9975897648ad261a002b810b4b927b5aa6b6768e77e0a18dbd58777da3fdb2c5995725d134bc618ca51aa2e1dbe4d2eb3237d5449346150412950dcbe8e0541b7e531bfc66f8a7fd37f63655b635fd9f8cef6867c53c78fb9bda9c668ba4f1aabea79ce3fc8f407f794e5ecb38b2766bc5b664f61b4b5e647293207ab92ca27dea2e365be07c00c785f3ddadd46be83287ee07b6e2086882b66b3c62ec5980a4d4f6656ec64083a3c51e29a5aaea7deb615c0c3210214d17cadabf54ad45522ff5cfeca813ca7f62da6a26bdb6adc4f701cc6f4f4e6b4244cf6ce6cd08aebdfa3c6a43d95dcc599295378e8270bee9593daf4a3662d941512af805043901ef2337e47c602fc9638ee34fffc93de66be243853406afc6f26639450fa6d5b1f2790b22c04d9edb4697468436c6c4f4cdf643de42336297b5233a1dbc0047a13ac8dc62bf349d729d160195fe0408f397435291db67f72a7df2f605c068da08ec5e4902b3285f0a09f9313d65f90b6a85432507c85465b58219a48148f185fe848ce8d283e4d26ffcce75c12bb1ab236947f04eb9cb66be0c95215dbaf2df7c4a05a12782673ba9b9524658b1f2552ef99fd7af0be909d0cdb2a9b808f60a95f21c152fea9a9bdac3c7b15b875428b4f2e5dd6c9638171ba40308dcd041687d640185036bedf924bb500a489d42279e7dad6007698876bdcc6f453d8f8856c51f66fde6df18480aeadd718d31f9f9b4a6ce9c79e29bf8d2b63f218dac10d51059bbee460509095836dfff665018410494a7c2d597c04682772ee06cb4db6fed6933050aab7514d2c6cff71028db42df1043306ce636f97fe5ff2cf98d8c6f5e5220b8ec0824052d448e2e87111bfb45538304cf813b090097c741a8bb19e6ce301eaa4ae8fd10c7422", 0x1000, 0x8}, {0x1, 0xe, &(0x7f0000001180)='^%-\x00', &(0x7f00000011c0)="ebb348b57a37128dd1bc6e5199f5793a4a5553ce2bf3da746c9a847648308685a504701088341b88101c7c27a25f5d5ea3f365ae1c63070cb22ed0403b886a41", 0x40, 0x12}]}) setsockopt$inet6_buf(r2, 0x29, 0x2d, &(0x7f0000001300)="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", 0x1000) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 7.290720958s ago: executing program 3 (id=1114): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0), 0x0, 0x9200000000000000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x80000001, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000160a030200000000001fc700020000000900020073790000000000000900010073797a30000000002c0003801800038014000100776c616e310000000000000000000000080002400000d250080001400000000014000000110001"], 0x80}}, 0x20000084) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_vlan\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}]}]}], {0x14}}, 0x80}}, 0x0) close(0xffffffffffffffff) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) 6.245300531s ago: executing program 0 (id=1119): r0 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000b40)={0xfffffffc, [[0x54c3, 0x7e, 0x6225, 0x800, 0x40000008, 0x7fff], [0x5, 0x100001, 0x587c5f2f, 0x400000, 0x0, 0x0, 0x6], [0x4000094, 0xff80000, 0x7f, 0x8, 0x4000, 0x0, 0x4, 0x9]], '\x00', [{0x6, 0x7}, {0x5, 0xfa}, {}, {}, {0x0, 0xffffffe8}, {0x8, 0xfffffffd}, {0x1}, {}, {0x81}, {0x10000000}, {0x6}, {0xcbe, 0x2}], '\x00', 0x4}) (fail_nth: 5) 5.889461076s ago: executing program 0 (id=1120): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r1, 0x6a98047402e98331, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2804c040}, 0x4886) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e23, 0xf6a, @private1, 0x3}}, 0x7, 0xe3d}, &(0x7f0000000140)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000240)={r2, 0x8, 0xa3, "5755e1d9f7a0a26da547f9493f526210962bcb553c3b0f5edbe58d19fd563777ec34e23601fced9aef892f20fae471733fc0fd696ae8abdc55868089046e0c9abec411374fc4e936fdb16462e1a492e6d5d46f30455e0171b98b43e1cf4ca74b61a56ff78e4685f83bc38da46ba0eacc9bd924a2da18b0a784d219209a1525bd1889c6997cb1ac20b40db3d4991c6908759ce11f7b2b919b9949cdf4f3bcc1caaebfbd"}, 0xab) 5.783133519s ago: executing program 6 (id=1121): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xf5}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x28}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d86dd6266b5efb88aaa87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) 5.780376863s ago: executing program 7 (id=1122): openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x8257f) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket(0xa, 0x5, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f00000003c0)=0x2, 0x1) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, 0x0, &(0x7f0000000140)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x198c, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x30}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xf, 0x3}, {0xfff3, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 5.753802873s ago: executing program 0 (id=1123): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xfffffffffffffffe, 0x40) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000040)=""/209) r1 = socket(0x11, 0x6, 0x2) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000140)) r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x42a00, 0x4) r3 = getpid() getresuid(&(0x7f0000000380), &(0x7f00000003c0)=0x0, &(0x7f0000000400)) read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000002800)='/proc/asound/card1/oss_mixer\x00', 0x100, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000002a00)=0x0) fstat(r2, &(0x7f0000002a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000002ac0)=0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002b00)=0x0) lstat(&(0x7f0000002b40)='./file1\x00', &(0x7f0000002b80)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000002c00)='./file0\x00', &(0x7f0000002c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000003040)=0x0) statx(r2, &(0x7f0000003080)='./file0\x00', 0x1000, 0x4, &(0x7f00000030c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000031c0)='./file0\x00', &(0x7f0000003200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r16 = getpgid(0xffffffffffffffff) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000003280)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000032c0)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './file1\x00'}) r19 = socket$inet6_tcp(0xa, 0x1, 0x0) r20 = eventfd(0x1000) sendmmsg$unix(r1, &(0x7f0000003380)=[{{&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000240)="5954c9d37b07e115992aa8966115a166b7faf751dfaaceb4a0919096b14f9c7b339f222d969d4adebe1e772a5e997b3302d497fa2a6e8fed9d05d25dc4dca4c86de08354a43626e5f71c4c6f99610d0e6873dd1164dc959e91c47f53df78731dd3760b8a0834ff86355f029dd991039f24b02b5f1b87d3d44da91132483a82bf84e4599e4c891542491f6cd7645bafb5787de2ed9e22a7417efb274457c3cb1166603f4a6266e5a9762272fb7e41667531e6f0cb3c3244e10459b5057d02195e91ac7c626af2dfa5a0a2195b9f", 0xcd}], 0x1, &(0x7f0000002480)=[@cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}], 0x20, 0x20040091}}, {{&(0x7f00000024c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000027c0)=[{&(0x7f0000002540)="de534458814d18974d5c924ee55789c3bd088f5660cbac8af489456ad2328bfd5a5524c15ce47e5519328764f5154e848d95895ff3597db3da7fb6f3f77fdf1df86d474ad9a4b599cfb7624e4bc6dd4279bfdc411c4ffc289e45a18f7207a55c1c0ce5e5da564ce3dd62c5b513b51164596780d69956d17e1d2bcbbf45876ef65f37679c98b9d9b3eca56ff9722214c56849ef435f5fffaeced276d3fe3c9b6b77d0d14c21847b0b98d98810b5cef5ed44fabaca530418095ab551a3cee31aee8c615754c2dd1180d3fbc05c24d50348b3e4ee54c59d4a31140218c208d413898236ec3de672f2db86634a63de019f05c47482adc72d", 0xf6}, {&(0x7f0000002640)="8e020d7c819f30463e155e434a02d48448e07573f8bc3030b30240e5db5b4dde01f064f652ae15cdda22a631f8e788", 0x2f}, {&(0x7f0000002680)="c297010086712a972048283034e0ecd2bad5419552821b089e2d4cad47865687980991a987b35a83e9b1909fadebae613003eb586dd82b0e78bd4fee1f5635e3ec6d30251c867aa66119dd2be3de07d154a3b0bbe4c11d44249f063655d3c261f2a43da4ba66f89875ab012db6c45081049803e6931848c1626132d50b38d7077559349c9e085162", 0x88}, {&(0x7f0000002740)="35a66bb4615ce4037807208c353c8ad8e872a7a63f66e6180287c6f0bd070a3a5bf46e721e679da3d02a8c0ba8ba652bfd897c7769fe6b7ff68585017853b21858e3a6c296", 0x45}], 0x4, &(0x7f0000002840)=[@rights={{0x1c, 0x1, 0x1, [r6, r1, r0]}}], 0x20, 0x44}}, {{&(0x7f0000002880)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000029c0)=[{&(0x7f0000002900)="6c10cd448f1ee42e29b681df81d062075cc969c98b50e32b7538a0f7d30faab47ece5ea03591ddc8b092136377671e508788daf8b20437c927ec097efc46888cae167568816f4369dae2a99ba0b61ef82e8071aa3c024597324515656bc66af134487a4b7d387e1cb911d489b65871845b9c27ad437119619afc6e269fcccb75456052f489deb15e5b7451da66797dfe91b8aaee363c2b3829120930697512f667d16fa062ce935c57069d736685ee540f62be2d8c55c0e3ee4799", 0xbb}], 0x1, &(0x7f0000002cc0)=[@cred={{0x1c, 0x1, 0x2, {r7, 0xee00, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, 0xee01, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}, @rights={{0x18, 0x1, 0x1, [r2, r1]}}], 0x78, 0x44800}}, {{&(0x7f0000002d40)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000003000)=[{&(0x7f0000002dc0)="852a76cc1232e81f4108ff44b76382eaab842c633f675c21c0e91a0b0ff7aa97f402b80e86aacf57a2b823e31e8b616d472ea07db1aa34c6d4a9a31b1732514f4f1a561c071ada840d25cddb29efb3c502d5cab12ac8fe650ac2930e755b57a33856ee9ab2971be104937046808135deb03bef7013a26369a39cd6a5f3beb82c3adf0cd38fa51e8cb84ed543f12b840296a3889708dab6112368c853d0a0d8ea44bd0ba795e6739ca6e0eb734b28460578cc97b59b29df710112d23fcaf0bf0c348de9bab173b05a8942", 0xca}, {&(0x7f0000002ec0)="62b58883aa57e97c3f4886b66cb50371aacd47a01f7c3a", 0x17}, {&(0x7f0000002f00)="391f62c995de7717da1a857d0671d9780188ae06486fc07fb6f3e291e173407602c03e14e8e969355aaeb0a0ae6c0906f7caf586cea3579813c87335be77a3dfc3401071a3e607a9afcebe2aa51704a716e02f663958870cd1b1b10883264d4aebe4cdd8238dc16f5394e74c9b326c86a1eeff5a1655746ceb431e8edb85b37e57d68f1d3035239ec9bd99f1ea09d937e8ac79d8d098750b14900e9664c1ed09dce6a22e8e50e1f5f45772091edcbf0e949faeb6a7b2918e5296f3fb8e347b403b0078772b12fe2d2dab28ab534172520326584925e7c7774f1edea763128f7448ab08fd3f95213e58e461b1da77e046fcb7c5", 0xf3}], 0x3, &(0x7f0000003300)=[@cred={{0x1c, 0x1, 0x2, {r13, r14, r15}}}, @cred={{0x1c, 0x1, 0x2, {r16, r17, r18}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r19, r1, r20, r2]}}], 0x68, 0x4001}}], 0x4, 0x20000001) getsockname(r1, &(0x7f0000003480)=@l2, &(0x7f0000003500)=0x80) getsockopt$IP_VS_SO_GET_SERVICES(r19, 0x0, 0x482, &(0x7f0000003540)=""/183, &(0x7f0000003600)=0xb7) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000003800)={&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x0, 0x0, 0x0, &(0x7f0000003640)=""/134, 0x86, 0x1, &(0x7f0000003700)=""/195, 0xc3}, &(0x7f0000003840)=0x40) readahead(r20, 0xfffffffffffffffc, 0x3) r21 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000003880), 0x290000, 0x0) ioctl$VIDIOC_S_EDID(r21, 0xc0285629, &(0x7f0000003900)={0x0, 0x1111, 0xfffffff6, '\x00', &(0x7f00000038c0)=0x3}) 5.673938545s ago: executing program 6 (id=1124): sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="140100002000010000000000fbdbdf250401"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 5.672553909s ago: executing program 3 (id=1125): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000001c0)={0x0}) r2 = socket(0x10, 0x2, 0x0) r3 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r5, &(0x7f0000001940), 0x0}, 0x20) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, &(0x7f00000002c0)) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x5, 0x80000) ioctl$VIDIOC_SUBDEV_G_SELECTION(r10, 0xc040563d, &(0x7f0000000100)={0x1, 0x0, 0x3, 0x0, {0x9, 0x0, 0xfff, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000180)={0x0, @multicast1, @remote}, &(0x7f00000001c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'ip6tnl0\x00', r8, 0x2f, 0x1, 0x8, 0x7, 0x8, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x8, 0x6, 0x3}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000480)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)={0x1b0, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x50}, 0x200000d1) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x400001, &(0x7f0000000040)={@align=0xffffffffffffffff, {0x60, 0x2, 0xd31b, 0x2}}, 0x8, 0x0, 0x0}) ptrace(0x10, r9) ptrace$setregs(0x1a, r9, 0x0, &(0x7f0000000040)) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r8, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 5.553841458s ago: executing program 6 (id=1126): openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200080000002, 0x7, 0x8, 0x3}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) dup2(0xffffffffffffffff, r5) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, r6) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000980)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, 0x0, &(0x7f0000000180)=@keyring) request_key(&(0x7f0000000280)='logon\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000200)='/vekiB(\x00\x00', 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ptrace$setregset(0x4205, 0x0, 0x1, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0xf000, 0x2, 0x0, 0xeffffdff, 0x0, [{0x0, 0xec, 0xff}, {0x19, 0x5, 0xfe}, {0xfc, 0x1}, {0xfe, 0x0, 0x7f, '\x00', 0x6}, {0x8, 0x0, 0x9, '\x00', 0xb}, {}, {0x20, 0x81}, {0x0, 0xe}, {0x0, 0x0, 0x0, '\x00', 0x7f}, {0x8, 0x6, 0x81}, {}, {0x1, 0x50, 0x9}, {0x4, 0x7, 0x4, '\x00', 0x3}, {0x1, 0x4e}, {0x2, 0x3, 0x4, '\x00', 0xfe}, {}, {0x0, 0x0, 0x4, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0x2}, {0x1, 0x5, 0x7, '\x00', 0x8}, {0x80, 0x4, 0x7f, '\x00', 0x40}, {0x0, 0x4, 0x8}, {0x0, 0x0, 0x0, '\x00', 0xfe}, {0x1, 0x6}, {0xfc, 0x5, 0xe}]}}) 5.344380555s ago: executing program 0 (id=1127): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000040020000090a010400000000000000000700000008000a40000000020900020073797a30000000000900010073797a3000000000080005400000000c0c0009800800014000000910080003400000011008000c40000000e758000d40cb1bb2a268f2a8d772f533aea2b34553e9f72db9c5511f08bcecdcaa2e8e6002ac0b393efc0b6a935573c2904eeb4ba4fe120b91be17f83871c579c18e340af9c1e78107697d4b07549fa1e2dd39556687194d610800084000000001"], 0x288}}, 0x20050800) (fail_nth: 5) 5.183734206s ago: executing program 0 (id=1128): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x20000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7fffffffffffffff, 0x3, &(0x7f0000006680)) timerfd_create(0x6, 0x80800) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x21, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r4, 0x0, 0x80c0) ioctl$KVM_GET_REG_LIST(r3, 0xc008aeb0, &(0x7f0000000040)) futex(&(0x7f000000cffc)=0x1, 0x2, 0xffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000080180100002020642500000000002020207b0a00fe00000000bda106000000000026010000f8ffffff2a1b4036b702000008000000b70300000000000085000000050000001801000020207025000000000020a020c31af8ffa1000000bfa10000000000000701000000feffffb702000008000000b70300000000000085000000ca00000095000000a9c552bf51ecf3d58b41f7"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000044}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r7, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) futex(&(0x7f0000000000)=0x1, 0x6, 0x22, 0x0, 0x0, 0xfffffffd) futex(&(0x7f000000cffc), 0x2, 0x2, 0x0, &(0x7f0000000000)=0x4005, 0x4ffffff) ioctl$TCSBRKP(r0, 0x5425, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a090400000000000000000200000024000480efc5f803279b796b9820000180080001006c6f670014000280080006400000000d08000540000000080900010073797a30000000000900020073797a32000000001400000011000100000000", @ANYRESDEC, @ANYRESOCT=r0], 0x78}}, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$TIOCGICOUNT(r0, 0x5409, 0x0) 4.710605791s ago: executing program 7 (id=1129): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$PTP_CLOCK_GETCAPS(r0, 0x40043d14, &(0x7f0000000040)) 4.515937165s ago: executing program 7 (id=1130): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x11, 0x200000000000003, 0x300) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000480)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a5d0292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000840)="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", 0x1cb}, {&(0x7f0000000a40)="0a985d7879f1bb", 0x7}], 0x3}, 0x8001) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000040020000090a010400000000000000000700000008000a40000000020900020073797a30000000000900010073797a3000000000080005400000000c0c0009800800014000000910080003400000011008000c40000000e758000d40cb1bb2a268f2a8d772f533aea2b34553e9f72db9c5511f08bcecdcaa2e8e6002ac0b393efc0b6a935573c2904eeb4ba4fe120b91be17f83871c579c18e340af9c1e78107697d4b07549fa1e2dd39556687194d610800084000000001"], 0x288}}, 0x20050800) 4.501276184s ago: executing program 0 (id=1131): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x1000001d}) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x801ec) 4.318329939s ago: executing program 7 (id=1132): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000023c0)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x3, 0x0, r2}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r3, 0x0, 0x0}, 0x20) 4.047324086s ago: executing program 5 (id=1133): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) creat(&(0x7f00000000c0)='./file0\x00', 0x74) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) ioctl$SOUND_PCM_READ_RATE(0xffffffffffffffff, 0x80045002, &(0x7f0000000140)) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x5}) (fail_nth: 5) 4.042730906s ago: executing program 6 (id=1134): r0 = syz_clone(0x50a254d83289a454, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) capset(&(0x7f0000000000)={0x20080522, r0}, &(0x7f0000000040)={0xd8, 0x100, 0xb5, 0x1ff, 0x800, 0x5}) socket$netlink(0x10, 0x3, 0xe) r1 = syz_pidfd_open(r0, 0x0) wait4(0x0, 0x0, 0x1, 0x0) setns(r1, 0x8000000) 3.932280938s ago: executing program 5 (id=1135): r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x1000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f00000001c0)={'nat\x00', 0x0, 0x3, 0x48, [0xe, 0x677, 0x7, 0x80, 0x10000, 0x8d16], 0x2, &(0x7f0000000100)=[{}, {}], &(0x7f0000000140)=""/72}, &(0x7f0000000280)=0x78) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) mount$bind(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x800000, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BLKCRYPTOPREPAREKEY(r2, 0xc040128b, &(0x7f00000003c0)={&(0x7f00000002c0)="5eba58c96bcfac6d7105624295d068183e1de17e3bf46e289560eb2cbc1813cdb14644e375b700427df21395f4914cd570d38c2b364211254922c25b356c087e13dff00314053c8cad72b198ae9d10f4ac613a5dec06013b5b2b4351cc334c5537cf71aa5e64766e83874f63308eb23948e2d4f9a3bc3658b6c9276c2a", 0x7d, &(0x7f0000000340)=""/118, 0x76}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r7, 0x0, 0xa3, 0x2) r8 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r8, 0x29, 0x16, &(0x7f0000fcb000)=0xb, 0x4) close(r5) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$cgroup_int(r9, &(0x7f0000001480)=0x2, 0x12) splice(r6, 0x0, r5, 0x0, 0x3ffff9, 0x2) setsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f0000000240)={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3}}, 0x8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00ac9800", @ANYRES16=r11, @ANYBLOB="0100ffffffff0000000001000000040007800c000200ff7f000000000000"], 0x24}}, 0x4000000) connect$inet(r0, &(0x7f0000000b00)={0x2, 0x4e20, @multicast2}, 0x10) 3.784153793s ago: executing program 3 (id=1136): sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="140100002000010000000000fbdbdf250401"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 3.565523803s ago: executing program 3 (id=1137): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x0, 0x6, 0x1) set_mempolicy_home_node(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 3.035589478s ago: executing program 6 (id=1138): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x18, 0x40}, 0x40000) sendmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000005e40)=[{&(0x7f0000007380)='S', 0x1}], 0x1, &(0x7f0000005e80)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x18, 0x4000000}, 0x4004080) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, 0x0) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x32) setresuid(0x0, r6, 0x0) mount$overlay(0x0, &(0x7f0000000180)='\x00', 0x0, 0x8000, &(0x7f00000016c0)={[{@metacopy_off}, {@nfs_export_on}, {@volatile}, {@redirect_dir_off}, {@verity_require}, {@nfs_export_on}, {@uuid_on}], [{@subj_user={'subj_user', 0x3d, '*-&'}}, {@fowner_lt={'fowner<', 0xee00}}, {@uid_eq={'uid', 0x3d, r6}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@smackfsdef={'smackfsdef', 0x3d, 'nfs_export=on'}}, {@subj_role={'subj_role', 0x3d, '(]&&*'}}], 0x5c}) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000200)={0xb, "34ad9987ffed3bbabd18cf501922de974a27000000000000000000f6ffffff00"}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000c80)={[{@default_permissions}, {@index_on}], [{@subj_type}]}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000940)={0x40, 0x26, 0xe1, "1c949b9270239ba137087198151743b95af5b4fe70bf307b4e1a51572d50c9c2f061ad97e566bcbbc9302b5f1a29a7abd71c3b4f70e16d7f213d1dc54dfa9ff6e37e01671329ec6668e0d3204434ec5b7a12cdde88a7a6f233059e6129e8272518eccf0a0654e397675077c5f7af360b4d73adfffd7dd5922f15e0750e18aab7831a0d8b5bb3635a96c26bea356acb4eaba53263e85ac3f04ae1c1696e078079a292fa06ca00e7992e197992bcbf6a0bab07a508f38c40949ab055cff412479524a1d3de769c6a216be6f9f806ce1171148fca4c655402c0ed558269993de01f82"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x7a}, &(0x7f0000000ac0)={0x20, 0x80, 0x1c, {0x3, 0xfbc, 0x987b, 0x401, 0x1, 0xe02b, 0xdc, 0x80000001, 0x9, 0x7, 0x5, 0x3}}, &(0x7f0000000b00)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000b40)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000b80)={0x20, 0x87, 0x2, 0x6}, &(0x7f0000000bc0)={0x20, 0x89, 0x2}}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r9 = syz_usb_connect$cdc_ecm(0x0, 0x143, &(0x7f0000000d40)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x131, 0x1, 0x1, 0x9, 0xd0, 0x5, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0x8, {{0x6, 0x24, 0x6, 0x0, 0x0, '*'}, {0x5, 0x24, 0x0, 0x5f}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xaa6, 0x3, 0x74}, [@ncm={0x6, 0x24, 0x1a, 0x31, 0x8}, @mdlm_detail={0xe1, 0x24, 0x13, 0xab, "bd16184ce8d7667f7927e14241ba5a27336cd11cc6fa459450007f5f49d584b4bb3a82ccf7c6d6901de42819b38ab7f1b2b4d48c864c9830ae4baeb30a2e50f1b96881f7b68cc06a69864e9dfcf17d205af8536bdb38c67a37f645a52195da16169e126920a25f95c04a378796488e56ee15213286b4c6d61afd3c7dec57fef031f389304f000d51e7aebd5d85f7d24695fedafa8b49ab8fc10313a67ca0c6a0ef2c22bcf5ac9f43d2fb975c10f53d9e44fedd9e893d48f4cb8a87a9407f98964b54ae4b9ea3bb6b967823e52dea7cae478b7b9da21ca50f86101d4ea1"}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x9}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x2b, 0x50, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x5, 0xee, 0xa}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x8, 0x7, 0xf8}}}}}]}}]}}, &(0x7f0000001280)={0xa, &(0x7f0000000ec0)={0xa, 0x6, 0x310, 0x56, 0x9, 0x8, 0xff, 0x8}, 0xf9, &(0x7f0000000f00)={0x5, 0xf, 0xf9, 0x3, [@ptm_cap={0x3}, @generic={0xea, 0x10, 0x1, "fba893d821c5f373d701f394535f2b2b6dc83f1861e997b56a61797b954e6756d1b6cb25fe2376812906b1cacacf87636c1ea8b7ccb1779818ee62f61682a028429be8b4c8d04f1d9f4f899a6eee67bca62b02a5e0de09d5ce6fded58a5a2273e86fb4526ec046a1cf2f0125b1e90c2be7cb7e9f52358eb373776443ea7d63cca4302f1d7f39df4edffaf478a831f025b70e595be53fa5cee7665820dc4d3931044714b8c897f3398174b96798a9ed5d371950d13f6855ab173c5ec012fb58e2ab43a0372a7c4cc3c6abea23718c562b5b9f29f2ee81483e4b8572d49a472241afc39a291cb2e5"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xc, 0x9, 0x6}]}, 0x8, [{0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x1809}}, {0x1e, &(0x7f0000001040)=@string={0x1e, 0x3, "ada235da155246238ad619dc1f1aa743d2105b4da4c07c6e489f6237"}}, {0xaa, &(0x7f0000001080)=@string={0xaa, 0x3, "e445725c24f773b6dee4d889db6833ddda3d501768b711b8cd5cc1fb02685280705aaca3420b92c8e985b1ba4d707897a2f576a6b5e1f49c70a8c675b920ec6d8248f52cb9b73433a73be8b74f9c8fe45133ab66afe246e407fb8baa337fe466009493ea8ab5b452ee8ca3770b26e4ddd5ef04f1dc80e7ba2100d8860646bd1488151688ec7c0400df71c9bdd4917d7f5257f1d6f1e128c2a0fa11be00ecf66beaa95eb5b6c47924"}}, {0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x81d}}, {0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x2001}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x1804}}]}) syz_usb_control_io$cdc_ecm(r9, &(0x7f0000001380)={0x14, &(0x7f0000001300)={0x0, 0xf, 0xb, {0xb, 0x21, "23c5ad48b8541c4a19"}}, &(0x7f0000001340)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001580)={0x1c, &(0x7f00000013c0)={0x0, 0x31, 0xfd, "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"}, &(0x7f0000001500)={0x0, 0xa, 0x1, 0xfe}, &(0x7f0000001540)={0x0, 0x8, 0x1, 0x3}}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000800)={0x34, &(0x7f0000000cc0)={0x40, 0x7, 0x5e, "16bb609c251849063ccec78337d37d3802d6062b95ace6dc4fb6590ac5673c72569ca8c5cf96dc9997ad4cd3e9ccd9ea675372b6eadafd077f12cbe4c8caf0ba20a3984862369295751b91ffc5e23f9a81dd81749af59e8af0fabbdf6e74"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0xa1}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x2e}, &(0x7f0000000680)={0x20, 0x0, 0xd9, {0xd7, "4d0c2415f1728e54770dbd895adf4c7f44eb9110f04340f9ff768ee7b2394963e686d0b6fd18d6e1634e5741f841cd450d11cc1c4a5b2f031870ca68e2ff06b7c5e5f218dd648e206d1ed02ce45df4d4b92a27a2000167fa0f6c1322c1afc0388009e8127d0944daa35151ef10a3112f2906c44b7d3ec6aed80d882962359a32dda2ebe96046c8a2f09503c7cb9657127d74f7166335ef81c0612e361052884eabe29987956cc6db7775f55d86ebb4db2e55d74215ea13d7feaf07251c4cd457cfb1ad64d1f14b0cdb0bfa62e68dda1478364621b58a70"}}, &(0x7f0000000780)={0x20, 0x1, 0x1, 0x2}, &(0x7f00000007c0)={0x20, 0x0, 0x1, 0x40}}) syz_usb_control_io$uac3(r0, &(0x7f0000000280)={0x14, &(0x7f0000000000)={0x40, 0x4, 0x100, {0x100, 0x22, "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"}}, &(0x7f00000001c0)={0x0, 0x3, 0xb1, @string={0xb1, 0x3, "d78c73a2fc17a8175fc4da8cbec5f9c4e09b7e94319b8e4d9e1c1641b8f114d232d8d59c2c1646cb5fb39492ad9f7841604838ae356bc82f9ec6d4d9410435a183acc785d7c64b1444b084f7111d33d7ca0cb9e31b26fbdce16a14e59777e48bdc4cb533406f8c6d00656e92caa1ffb7262df67b717826d2793cb16f4bad58935fb8216000e11ba206102c33faf7a9cc7f2e82b624a5a8e2df53eaffe6b30784afd576d47619873c704b4e612bfb1f"}}}, &(0x7f00000008c0)={0x44, &(0x7f0000000340)={0x40, 0x16, 0x5b, "82021a3cb046a31f6a7373ddf3252e9dafdc91e1dfe069e8a39ce380b61c3f3a3e2a51d327f6825ae0989c00f450f3a74e07221c4375208f4a62dc82e446b471200adac69cdf389ab0c3b4a89c00aea6478db990348a4019fd3103"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000480)={0x20, 0x81, 0x1, "f4"}, &(0x7f00000004c0)={0x20, 0x82, 0x2, "73fb"}, &(0x7f0000000500)={0x20, 0x83, 0x3, "388d34"}, &(0x7f0000000840)={0x20, 0x84, 0x1, 'g'}, &(0x7f0000000880)={0x20, 0x85, 0x3, "2ce156"}}) 2.882910358s ago: executing program 5 (id=1139): openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x8257f) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket(0xa, 0x5, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f00000003c0)=0x2, 0x1) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, 0x0, &(0x7f0000000140)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x198c, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x30}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xf, 0x3}, {0xfff3, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 2.528433848s ago: executing program 5 (id=1140): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') prlimit64(0x0, 0xe, &(0x7f0000000600)={0x80000000, 0x20000008b}, 0x0) times(&(0x7f00000002c0)) prlimit64(0x0, 0x3, &(0x7f0000000580)={0x8b6, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f0000000540)=0xfffffffffffffffd) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) syz_read_part_table(0x105f, &(0x7f0000000640)="$eJzsz89NwzAcx9Fv/iAFRZCMwAXBQozAAExAtmAHFmANJukt6tFV4szQ9vDexfbH8k9yuLGnY/1Jsn4l5+lz6JKHrQ1J+rd1v28f3/9K+d/jvPUky0tXHy/HkHFMmz7Pc16b8l3bVOekqcdTyXxs8/F7vX8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP26BAAA//9oUg6Y") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socket$qrtr(0x2a, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x95) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'vlan1\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180), 0x3, r1}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r1, &(0x7f0000001940), &(0x7f00000002c0)=""/187}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x3}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x5a}, 0x20) fchdir(r0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x809d) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 2.320752341s ago: executing program 7 (id=1141): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x48, r3, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x48}}, 0x4) r4 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x2101) sendmsg$NL80211_CMD_STOP_NAN(r1, 0x0, 0x20000000) syz_usb_control_io(r4, 0x0, 0x0) 1.463801872s ago: executing program 5 (id=1142): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000001c0)='./file2\x00', 0x800c08, &(0x7f0000000540)=ANY=[@ANYBLOB="2c756d61736b3d300004000000000000000000", @ANYRES8=0x0, @ANYRES16=0x0, @ANYRESDEC, @ANYRES8=0x0, @ANYBLOB, @ANYRESDEC, @ANYRES64, @ANYRES8, @ANYRES8=0x0, @ANYBLOB="c49ecfdd8711048bea9eb55574810b5cbc454ccd5a63c7941ba393a86e5b7a8fdcf7b75e9bd7459f7e129fadabeef1e9b084a7568c9ce90014069121b0700a4f948941c59d1e8e3f80ffa601a20f979dd6e1fe150ba283f14999be8b6fe530f67dbac2443da65608409abd01602980fb5227c272180171dfa09978bf40bd650d5c4a54e6cecfcfd2e41e9ec85c6a274e668e7443cdd2c3cba6972ccffb41487a8202816ac3ba65bb5cb3d1323194c102f39aae52e46500849660e484f39210872d958d69f61e1311c51a34b64f81cb8a5cc30bf568185b0bb1f0d438777c833a9b362a10cace728b508eb7642244"], 0x21, 0x627f, &(0x7f0000001600)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x1d8}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r1 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x74, 0x5, 0x2, 0x4002004c4, 0x1004, 0x8000000000000000, 0x6, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@ipv6_newroute={0x1c, 0x18, 0x1ef, 0x70bd2b, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}}, 0x1c}, 0x1, 0x11}, 0x0) r5 = fcntl$dupfd(r2, 0x203, r1) ioctl$USBDEVFS_RELEASE_PORT(r5, 0x80045519, &(0x7f0000000000)=0x9) r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000a80)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c01048100010f0008cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8800) fsync(r6) 1.37970335s ago: executing program 3 (id=1143): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty=0x106}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x588) landlock_restrict_self(0xffffffffffffffff, 0xc) 1.274425449s ago: executing program 3 (id=1144): openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200080000002, 0x7, 0x8, 0x3}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) dup2(0xffffffffffffffff, r5) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, r6) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000980)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, 0x0, &(0x7f0000000180)=@keyring) request_key(&(0x7f0000000280)='logon\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000200)='/vekiB(\x00\x00', 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ptrace$setregset(0x4205, 0x0, 0x1, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0xf000, 0x2, 0x0, 0xeffffdff, 0x0, [{0x0, 0xec, 0xff}, {0x19, 0x5, 0xfe}, {0xfc, 0x1}, {0xfe, 0x0, 0x7f, '\x00', 0x6}, {0x8, 0x0, 0x9, '\x00', 0xb}, {}, {0x20, 0x81}, {0x0, 0xe}, {0x0, 0x0, 0x0, '\x00', 0x7f}, {0x8, 0x6, 0x81}, {}, {0x1, 0x50, 0x9}, {0x4, 0x7, 0x4, '\x00', 0x3}, {0x1, 0x4e}, {0x2, 0x3, 0x4, '\x00', 0xfe}, {}, {0x0, 0x0, 0x4, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0x2}, {0x1, 0x5, 0x7, '\x00', 0x8}, {0x80, 0x4, 0x7f, '\x00', 0x40}, {0x0, 0x4, 0x8}, {0x0, 0x0, 0x0, '\x00', 0xfe}, {0x1, 0x6}, {0xfc, 0x5, 0xe}]}}) 0s ago: executing program 6 (id=1145): r0 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x5, 0x10000) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x5, 0x7, 0x0, 0x5, 0x5, 0x15, "54c870a80300000000000013a34a10622e64ee4edb80cc9bd36b93b23733e6180aa539ec68114b5aba1c9891ba72296d56740d56ea4d0434aa3592a4791300", "fc0159a6f3bb16d509568693e0e50bbf206c0500997c00040000000000005f8a654e14dc7c4cc6020000003b3acc0100cd3eac8be657b569bfa1142100696b29", "c921095856cdf9fd8199034f3b875fe5090094e3c7a178fb1c16c99189819ef4", [0x9, 0x6]}}) prlimit64(0x0, 0x9, &(0x7f0000000000)={0x8, 0x56e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_mount_image$f2fs(&(0x7f0000010580), &(0x7f00000105c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c6a71666d743d76667376302c70726a6a71756f74613d66326673002c6d6f64653d61646170746976652c686561702c6e6f7265636f766572792c6673d99a7c796e635f6d6f64653d706f7369782c757365725f78617474722c64697361626c655f726f6c6c5f666f72776172642c"], 0x1, 0x105df, &(0x7f00000311c0)="$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") r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000840)={0x2020, 0x0, 0x0}, 0x2020) fcntl$getownex(r1, 0x10, &(0x7f0000002880)={0x0, 0x0}) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) ioctl$FS_IOC_GETVERSION(r6, 0xff07, 0x0) write$FUSE_LK(r2, &(0x7f00000028c0)={0x28, 0x0, r3, {{0x5, 0x4, 0x2, r4}}}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) getrlimit(0x9, &(0x7f0000000200)) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12363800d5e9bd40eb030200c0ba058145d79a26d1990000010902115c01000000000904000001b584b10009058193c5c6a6856964c4ea9cd77856a8a4105106575a8625e096a83fc40a"], 0x0) syz_open_dev$vcsn(&(0x7f00000002c0), 0x5, 0x10000) (async) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x5, 0x7, 0x0, 0x5, 0x5, 0x15, "54c870a80300000000000013a34a10622e64ee4edb80cc9bd36b93b23733e6180aa539ec68114b5aba1c9891ba72296d56740d56ea4d0434aa3592a4791300", "fc0159a6f3bb16d509568693e0e50bbf206c0500997c00040000000000005f8a654e14dc7c4cc6020000003b3acc0100cd3eac8be657b569bfa1142100696b29", "c921095856cdf9fd8199034f3b875fe5090094e3c7a178fb1c16c99189819ef4", [0x9, 0x6]}}) (async) prlimit64(0x0, 0x9, &(0x7f0000000000)={0x8, 0x56e}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) syz_mount_image$f2fs(&(0x7f0000010580), &(0x7f00000105c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c6a71666d743d76667376302c70726a6a71756f74613d66326673002c6d6f64653d61646170746976652c686561702c6e6f7265636f766572792c6673d99a7c796e635f6d6f64653d706f7369782c757365725f78617474722c64697361626c655f726f6c6c5f666f72776172642c"], 0x1, 0x105df, &(0x7f00000311c0)="$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") (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) read$FUSE(r2, &(0x7f0000000840)={0x2020}, 0x2020) (async) fcntl$getownex(r1, 0x10, &(0x7f0000002880)) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_pidfd_open(r5, 0x0) (async) ioctl$FS_IOC_GETVERSION(r6, 0xff07, 0x0) (async) write$FUSE_LK(r2, &(0x7f00000028c0)={0x28, 0x0, r3, {{0x5, 0x4, 0x2, r4}}}, 0x28) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) getrlimit(0x9, &(0x7f0000000200)) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) (async) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12363800d5e9bd40eb030200c0ba058145d79a26d1990000010902115c01000000000904000001b584b10009058193c5c6a6856964c4ea9cd77856a8a4105106575a8625e096a83fc40a"], 0x0) (async) kernel console output (not intermixed with test programs): cnt=0x0, refcnt=1 [ 481.036445][ T396] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 481.045933][ T396] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 481.047218][ T218] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 481.048183][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 481.048897][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 481.051846][ T5625] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 481.055865][ T44] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 481.056699][ T44] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 481.057638][ T44] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 481.068230][ T44] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 481.159490][ T44] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 481.171486][ T9934] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 481.183958][ T218] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 481.184023][ T218] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 481.191878][ T218] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 481.192182][ T9934] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 481.192209][ T9934] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 481.219971][ T784] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 481.237142][ T668] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 481.238844][ T44] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 481.251552][ T784] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 481.263144][ T668] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 481.271161][ T44] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 481.276265][ T784] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 481.276323][ T784] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 481.276352][ T784] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 481.278199][ T44] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 481.297678][ T44] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 481.526199][ T9] usb 4-1: USB disconnect, device number 34 [ 481.569986][ T9] sierra_net 4-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem [ 481.897555][ T44] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 481.966502][ T396] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 482.440941][ T668] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 482.482059][ T9] sierra_net 4-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 483.253307][ T784] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 483.912837][ T9961] loop7: detected capacity change from 0 to 1024 [ 483.925357][ T56] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.925546][ T56] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.926299][ T56] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.926336][ T56] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.926360][ T56] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.926385][ T56] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.926407][ T56] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.926432][ T56] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.926455][ T56] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.926478][ T56] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.927582][ T56] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.927622][ T56] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.927647][ T56] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.927671][ T56] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.927694][ T56] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.927717][ T56] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.927741][ T56] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.927764][ T56] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.928830][ T56] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.928867][ T56] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.928890][ T56] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.928914][ T56] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.928946][ T56] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.928971][ T56] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.928994][ T56] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.929018][ T56] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.930015][ T56] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.930050][ T56] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.930075][ T56] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.930098][ T56] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.930121][ T56] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.930145][ T56] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.930169][ T56] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.930191][ T56] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.931244][ T56] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.949494][ T56] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.949641][ T56] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.950132][ T56] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.950254][ T56] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.950351][ T56] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.950447][ T56] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.950537][ T56] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.951346][ T56] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 483.967338][ T2241] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.967662][ T2241] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.967919][ T2241] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.968168][ T2241] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.968537][ T2241] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.968838][ T2241] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.969127][ T2241] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.969317][ T2241] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.969938][ T2241] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.970043][ T2241] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.970216][ T2241] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.970310][ T2241] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.970463][ T2241] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.970560][ T2241] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.970652][ T2241] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.970743][ T2241] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 483.987538][ T9961] fuse: Bad value for 'group_id' [ 483.987558][ T9961] fuse: Bad value for 'group_id' [ 484.358550][ T9967] loop0: detected capacity change from 0 to 256 [ 484.364816][ T218] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 484.365095][ T218] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 484.365267][ T218] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 484.365706][ T218] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 484.365864][ T218] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 484.366041][ T218] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 484.366263][ T218] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 484.366497][ T44] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 484.438279][ T218] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 484.438544][ T218] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 484.438713][ T218] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 484.438978][ T218] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 484.439356][ T218] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 484.440019][ T218] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 484.446985][ T218] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 484.448350][ T56] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 484.448595][ T56] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 484.448814][ T56] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 484.449105][ T56] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 484.449324][ T56] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 484.449553][ T56] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 484.449756][ T56] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 484.452300][ T56] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 484.452561][ T56] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 484.452776][ T56] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 484.453067][ T56] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 484.453233][ T9967] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 484.455528][ T56] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 484.672647][ T2241] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 484.677860][ T2241] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 484.695542][ T784] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 484.696650][ T784] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 484.701819][ T784] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 484.704544][ T56] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 484.704672][ T56] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 484.704771][ T56] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 484.704866][ T56] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 484.705007][ T56] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 484.707353][ T44] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 484.707401][ T44] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 484.713060][ T56] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 484.716694][ T44] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 484.716737][ T44] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 484.720417][ T536] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 484.720460][ T536] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 484.729290][ T56] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 484.729339][ T56] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 484.729364][ T56] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 484.729386][ T56] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 484.729412][ T56] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 484.729435][ T56] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 484.729458][ T56] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 484.733489][ T784] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 484.741126][ T44] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 484.741364][ T44] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 484.742106][ T44] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 484.746168][ T44] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 484.746222][ T44] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 484.750560][ T56] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 484.890302][ T9969] loop6: detected capacity change from 0 to 40427 [ 485.079256][ T536] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 485.079490][ T9969] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 485.079514][ T9969] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 485.106766][ T285] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 485.108174][ T218] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 485.112205][ T56] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 485.112252][ T56] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 485.113666][ T396] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 485.115717][ T9969] F2FS-fs (loop6): invalid crc value [ 485.173998][ T536] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 485.174064][ T536] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 485.178762][ T668] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 485.178839][ T668] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 485.179919][ T2241] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 485.184235][ T2241] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 485.190970][ T2241] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 485.197686][ T2241] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 485.209220][ T2241] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 485.211006][ T536] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 485.227549][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 485.236776][ T668] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 485.241669][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 485.247109][ T12] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 485.247915][ T12] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 485.250314][ T2241] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 485.255590][ T12] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 485.259418][ T12] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 485.263252][ T2241] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 485.269088][ T2241] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 485.277846][ T2241] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 485.277915][ T2241] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 485.285377][ T9969] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 485.292034][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 485.304611][ T12] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 485.305910][ T2241] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 485.310284][ T9969] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 485.310310][ T9969] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 485.316658][ T2241] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 485.317302][ T2241] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 485.322816][ T285] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 485.322867][ T285] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 485.338633][ T668] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 485.338703][ T668] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 485.351181][ T668] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 485.351246][ T668] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 485.353954][ T44] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 485.367432][ T44] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 485.374692][ T44] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 485.376687][ T44] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 485.377957][ T44] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 485.400778][ T536] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 485.400833][ T536] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 485.400863][ T536] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 485.405860][ T536] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 485.424702][ T536] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 485.480018][ T12] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 485.481429][ T285] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 485.481492][ T285] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 485.500234][ T6872] __loop_clr_fd(loop7) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 485.604951][ T44] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 485.622897][ T5625] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 485.895911][ T67] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 485.942490][ T285] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 485.956013][ T67] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 485.979649][ T67] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 486.090321][ T536] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 486.178801][ T285] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 486.193020][ T9] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 486.253486][ T9982] vlan2: entered allmulticast mode [ 486.253507][ T9982] veth0_to_bond: entered allmulticast mode [ 486.308184][ T12] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 486.364533][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 486.376795][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 486.377119][ T285] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 486.379866][ T2241] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 486.413566][ T285] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 486.424011][ T9] usb 8-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 486.424041][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.424061][ T9] usb 8-1: Product: syz [ 486.424075][ T9] usb 8-1: Manufacturer: syz [ 486.424093][ T9] usb 8-1: SerialNumber: syz [ 486.434968][ T9] usb 8-1: config 0 descriptor?? [ 486.439912][ T9] hub 8-1:0.0: bad descriptor, ignoring hub [ 486.439949][ T9] hub 8-1:0.0: probe with driver hub failed with error -5 [ 486.479739][ T9] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 486.594703][ T67] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 486.614315][ T536] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 486.619335][ T5738] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 486.626947][ T536] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 486.665869][ T536] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 486.855373][ T5738] usb 4-1: Using ep0 maxpacket: 8 [ 486.866229][ T5738] usb 4-1: config 1 has an invalid interface number: 187 but max is 0 [ 486.866256][ T5738] usb 4-1: config 1 has no interface number 0 [ 486.866287][ T5738] usb 4-1: config 1 interface 187 has no altsetting 0 [ 486.874467][ T5738] usb 4-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice=eb.4b [ 486.874498][ T5738] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.874518][ T5738] usb 4-1: Product: syz [ 486.874532][ T5738] usb 4-1: Manufacturer: syz [ 486.874546][ T5738] usb 4-1: SerialNumber: syz [ 486.912118][ T9] usb 8-1: USB disconnect, device number 22 [ 486.987090][ T536] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 487.027813][ T12] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 487.758619][ T7117] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 487.914981][ T6738] __loop_clr_fd(loop6) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 488.239271][ T5738] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.187/input/input17 [ 488.381463][ T4974] bcm5974 4-1:1.187: could not read from device [ 488.723141][T10007] loop5: detected capacity change from 0 to 2048 [ 488.744147][ T2241] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 488.796717][ T536] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 488.810567][ T668] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 488.810620][ T668] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 488.811749][ T668] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 488.836240][ T668] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 488.836418][ T536] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 488.842542][ T536] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 488.842715][ T536] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 488.874498][ T536] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 488.874537][ T536] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 488.874562][ T536] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 488.874603][ T536] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 488.874627][ T536] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 488.874651][ T536] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 488.874683][ T536] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 488.874707][ T536] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 488.874731][ T536] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 488.874755][ T536] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 488.874778][ T536] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 488.874803][ T536] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 488.874827][ T536] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 488.874850][ T536] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 488.917743][ T536] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 488.917797][ T536] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 488.917822][ T536] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 488.917846][ T536] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 488.917870][ T536] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 488.917894][ T536] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 488.917917][ T536] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 488.917941][ T536] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 488.917965][ T536] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 488.917989][ T536] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 488.918013][ T536] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 488.918036][ T536] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 488.918059][ T536] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 488.918083][ T536] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 488.918107][ T536] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 488.918130][ T536] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 489.036266][ T5738] usb 4-1: USB disconnect, device number 35 [ 489.048455][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 489.070910][ T2241] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 489.070994][ T2241] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 489.082618][ T536] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 489.103222][ T536] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 489.142921][ T285] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 489.158472][ T285] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 489.167098][ T536] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 489.185722][ T536] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 489.213619][ T536] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 489.232145][ T784] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 489.261978][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 489.262027][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 489.266379][T10010] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 489.441647][ T536] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 489.441894][ T536] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 489.442168][ T536] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 489.468829][ T668] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 489.482278][ T536] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 489.520186][T10020] netlink: 'syz.7.1013': attribute type 1 has an invalid length. [ 489.520207][T10020] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1013'. [ 489.534490][ T536] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 489.587595][ T285] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 489.657980][ T784] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 489.683307][T10005] NILFS error (device loop5): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 489.904909][ T784] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 490.009660][T10023] loop7: detected capacity change from 0 to 128 [ 490.011410][ T784] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 490.012222][ T784] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 490.032446][ T784] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 490.032500][ T784] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 490.041545][ T285] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 490.077079][T10023] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 490.077262][ T784] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 490.085465][T10023] ext4 filesystem being mounted at /129/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 490.105097][ T668] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 490.132955][T10005] Remounting filesystem read-only [ 490.202412][T10026] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 490.202428][T10026] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 490.208146][T10026] vhci_hcd vhci_hcd.0: Device attached [ 490.259048][T10031] vhci_hcd: connection closed [ 490.351199][ T7117] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 490.620978][ T2241] vhci_hcd vhci_hcd.6: stop threads [ 490.636119][ T2241] vhci_hcd vhci_hcd.6: release socket [ 490.671519][ T2241] vhci_hcd vhci_hcd.6: disconnect device [ 490.726909][ T6872] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 491.190268][ T668] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 491.215363][ T6872] __loop_clr_fd(loop7) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 491.280287][T10041] loop0: detected capacity change from 0 to 64 [ 491.294847][ T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 491.319987][ T2241] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 491.321457][ T2241] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 491.325541][ T285] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 491.325788][ T285] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 491.325985][ T285] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 491.326198][ T285] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 491.328217][ T285] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 491.430970][T10044] FAULT_INJECTION: forcing a failure. [ 491.430970][T10044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 491.431139][T10044] CPU: 0 UID: 0 PID: 10044 Comm: syz.3.1022 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 491.431156][T10044] Tainted: [L]=SOFTLOCKUP [ 491.431161][T10044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 491.431185][T10044] Call Trace: [ 491.431190][T10044] [ 491.431196][T10044] dump_stack_lvl+0xe8/0x150 [ 491.431216][T10044] should_fail_ex+0x46b/0x600 [ 491.431232][T10044] _copy_from_user+0x2d/0xb0 [ 491.431249][T10044] restore_altstack+0xab/0x4c0 [ 491.431320][T10044] ? reacquire_held_locks+0x104/0x190 [ 491.431335][T10044] ? rt_spin_lock+0x1e0/0x400 [ 491.431353][T10044] ? __pfx_restore_altstack+0x10/0x10 [ 491.431366][T10044] ? rt_spin_unlock+0x14f/0x200 [ 491.431383][T10044] ? rt_spin_unlock+0x160/0x200 [ 491.431400][T10044] __ia32_sys_rt_sigreturn+0x2bd/0x8e0 [ 491.431413][T10044] ? __lock_acquire+0x6b5/0x2d10 [ 491.431427][T10044] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 491.431439][T10044] ? signal_setup_done+0x22f/0x310 [ 491.431456][T10044] ? arch_do_signal_or_restart+0x4e7/0x840 [ 491.431470][T10044] ? __task_pid_nr_ns+0x28/0x470 [ 491.431488][T10044] ? __task_pid_nr_ns+0x28/0x470 [ 491.431503][T10044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.431514][T10044] do_syscall_64+0x15f/0xf80 [ 491.431528][T10044] ? clear_bhb_loop+0x40/0x90 [ 491.431541][T10044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.431551][T10044] RIP: 0033:0x7f5fd4b3e1d9 [ 491.431562][T10044] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 491.431572][T10044] RSP: 002b:00007f5fd2df5a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 491.431584][T10044] RAX: ffffffffffffffda RBX: 00007f5fd4e15fa0 RCX: 00007f5fd4b3e1d9 [ 491.431592][T10044] RDX: 00007f5fd2df5a80 RSI: 00007f5fd2df5bb0 RDI: 0000000000000021 [ 491.431599][T10044] RBP: 00007f5fd2df6090 R08: 0000000000000004 R09: 0000000000000001 [ 491.431606][T10044] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 491.431612][T10044] R13: 00007f5fd4e16038 R14: 00007f5fd4e15fa0 R15: 00007fff1cad0df8 [ 491.431628][T10044] [ 491.800327][ T5819] udevd[5819]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 492.599954][ T5738] usb usb46-port1: attempt power cycle [ 492.631198][ T5625] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 492.715694][T10063] netlink: 'syz.0.1027': attribute type 3 has an invalid length. [ 492.715716][T10063] netlink: 'syz.0.1027': attribute type 1 has an invalid length. [ 492.715731][T10063] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1027'. [ 492.715873][T10063] NCSI netlink: No device for ifindex 2147483648 [ 492.876399][ T5761] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 492.907337][ T10] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 493.178725][ T10] usb 8-1: device descriptor read/64, error -71 [ 493.304014][ T5761] usb 4-1: Using ep0 maxpacket: 16 [ 493.317758][ T5761] usb 4-1: unable to get BOS descriptor or descriptor too short [ 493.322257][ T5761] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 493.322291][ T5761] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1536, setting to 1024 [ 493.322318][ T5761] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 493.355183][ T5762] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 493.375768][ T5761] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 493.375798][ T5761] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.375819][ T5761] usb 4-1: Manufacturer: 䀊 [ 493.375833][ T5761] usb 4-1: SerialNumber: Л [ 493.444693][ T10] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 493.581292][T10072] : renamed from bond_slave_0 (while UP) [ 493.715387][T10073] netlink: 'syz.6.1031': attribute type 1 has an invalid length. [ 494.549788][ T5738] usb usb46-port1: unable to enumerate USB device [ 494.592034][ T5762] usb 6-1: Using ep0 maxpacket: 32 [ 494.645237][ T10] usb 8-1: device descriptor read/64, error -71 [ 494.665405][ T5762] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 494.665434][ T5762] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.742190][ T5762] usb 6-1: config 0 descriptor?? [ 494.753253][ T10] usb usb8-port1: attempt power cycle [ 494.838958][ T5762] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 494.925002][T10079] loop6: detected capacity change from 0 to 512 [ 494.929191][ T784] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 494.929736][ T784] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 494.993963][ T158] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 494.994223][ T158] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 495.004670][ T218] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 495.020558][ T218] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 495.049842][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 495.051391][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 495.060808][ T12] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 495.075370][ T12] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 495.084034][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 495.084164][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 495.084257][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 495.120040][ T784] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 495.121984][ T158] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 495.139886][ T158] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 495.151952][ T158] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 495.167387][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 495.217535][ T10] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 495.246224][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 495.248438][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 495.264937][ T158] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 495.280583][ T10] usb 8-1: device descriptor read/8, error -71 [ 495.318287][T10080] binfmt_misc: register: failed to install interpreter file ./file0 [ 495.367159][ T5761] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 495.399400][ T218] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 495.510677][T10079] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 495.514187][ T10] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 495.537716][ T10] usb 8-1: device descriptor read/8, error -71 [ 495.629956][T10079] EXT4-fs error (device loop6): ext4_readdir:225: inode #12: comm syz.6.1033: path /127/file0/file0: directory fails checksum at offset 0 [ 495.647916][ T10] usb usb8-port1: unable to enumerate USB device [ 496.278190][ T158] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 497.812488][ T5762] gspca_vc032x: reg_w err -110 [ 497.812507][ T5762] gspca_vc032x: I2c Bus Busy Wait 00 [ 497.812517][ T5762] gspca_vc032x: I2c Bus Busy Wait 00 [ 497.812536][ T5762] gspca_vc032x: I2c Bus Busy Wait 00 [ 497.812545][ T5762] gspca_vc032x: I2c Bus Busy Wait 00 [ 497.812554][ T5762] gspca_vc032x: I2c Bus Busy Wait 00 [ 497.812562][ T5762] gspca_vc032x: I2c Bus Busy Wait 00 [ 497.812569][ T5762] gspca_vc032x: I2c Bus Busy Wait 00 [ 497.812577][ T5762] gspca_vc032x: I2c Bus Busy Wait 00 [ 497.812586][ T5762] gspca_vc032x: I2c Bus Busy Wait 00 [ 497.812593][ T5762] gspca_vc032x: I2c Bus Busy Wait 00 [ 497.812600][ T5762] gspca_vc032x: I2c Bus Busy Wait 00 [ 497.812608][ T5762] gspca_vc032x: I2c Bus Busy Wait 00 [ 497.812616][ T5762] gspca_vc032x: I2c Bus Busy Wait 00 [ 497.812624][ T5762] gspca_vc032x: I2c Bus Busy Wait 00 [ 497.812632][ T5762] gspca_vc032x: I2c Bus Busy Wait 00 [ 497.812640][ T5762] gspca_vc032x: I2c Bus Busy Wait 00 [ 497.812649][ T5762] gspca_vc032x: I2c Bus Busy Wait 00 [ 497.812657][ T5762] gspca_vc032x: I2c Bus Busy Wait 00 [ 497.812664][ T5762] gspca_vc032x: Unknown sensor... [ 497.812739][ T5762] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 497.910601][ T5762] usb 6-1: USB disconnect, device number 15 [ 498.307695][ T5761] usb 4-1: USB disconnect, device number 36 [ 499.007722][ T784] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 499.015529][ T6738] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.102746][ T158] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 499.160955][ T158] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 499.192326][ T5952] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 499.207006][ T6738] __loop_clr_fd(loop6) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 499.416843][T10117] netlink: 'syz.3.1043': attribute type 1 has an invalid length. [ 500.268255][ T5952] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 500.268282][ T5952] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 500.268317][ T5952] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 500.268338][ T5952] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.358952][ T5952] usb 6-1: config 0 descriptor?? [ 500.621688][T10125] loop3: detected capacity change from 0 to 128 [ 500.635126][ T218] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 500.635487][ T218] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 500.644710][ T158] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 500.644765][ T158] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 500.648262][ T158] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 500.755911][T10125] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 500.756099][ T2241] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 500.756474][T10125] ext4 filesystem being mounted at /219/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 500.788445][ T491] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 500.797448][T10130] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1045'. [ 500.931493][ T56] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 500.931774][ T56] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 500.958166][ T67] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 500.965031][ T218] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 500.965087][ T218] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 500.965113][ T218] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 500.970064][ T218] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 500.972223][ T218] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 500.972275][ T218] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 500.972299][ T218] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 500.986955][ T218] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 501.010057][ T218] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 501.084124][ T5981] udevd[5981]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 501.207003][T10138] loop6: detected capacity change from 0 to 2048 [ 501.232585][ T784] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 501.233209][ T784] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 501.233483][ T784] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 501.233911][ T784] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 501.234139][ T784] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 501.243590][ T784] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 501.256218][T10139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.256804][T10139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.259049][ T218] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 501.259137][ T218] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 501.259187][ T218] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 501.264003][ T784] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 501.295042][T10138] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 501.313231][T10141] netlink: 'syz.3.1044': attribute type 10 has an invalid length. [ 501.383779][ T2241] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 501.394381][ T1353] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.394486][ T1353] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.427390][ T784] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 501.429474][ T2241] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 501.430304][ T218] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 501.430952][ T784] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 501.431679][ T218] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 501.436300][ T668] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 501.442130][ T668] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 501.457855][ T2241] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 501.526876][ T38] kauditd_printk_skb: 5 callbacks suppressed [ 501.526895][ T38] audit: type=1800 audit(2000000145.318:170): pid=10147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1046" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 501.576786][T10145] loop0: detected capacity change from 0 to 1024 [ 501.621720][ T56] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 501.621906][ T56] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 501.647073][ T668] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 501.647123][ T668] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 501.647148][ T668] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 501.647172][ T668] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 501.647901][ T668] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 501.648025][ T668] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 501.648051][ T668] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 501.648075][ T668] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 501.649577][ T668] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 501.649617][ T668] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 501.649643][ T668] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 501.649667][ T668] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 501.659635][ T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 501.659681][ T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 501.659708][ T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 501.659732][ T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 501.825492][ T668] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 501.825544][ T668] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 501.825564][ T668] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 501.825581][ T668] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 501.853093][ T56] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 501.855840][ T56] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 501.867655][ T668] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 501.871681][ T668] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 501.884750][ T668] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 501.888270][ T668] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 501.890652][ T668] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 501.907086][ T668] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 501.932154][ T396] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 501.933398][ T396] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 501.938222][ T668] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 501.940555][ T218] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 501.962620][ T668] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 502.053787][ T5638] Bluetooth: hci0: unexpected event for opcode 0x0c14 [ 502.249710][ T2241] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 502.281946][ T6738] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.385550][ T67] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 502.390661][ T2241] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 502.390752][ T2241] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 502.390818][ T2241] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 502.435707][ T5624] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 502.450977][ T56] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 502.461232][ T56] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 502.467431][ T5624] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 502.494887][ T67] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 502.495529][ T158] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 502.559733][ T784] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 502.560072][ T784] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 502.568534][ T6738] __loop_clr_fd(loop6) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 502.619617][ T5625] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 502.677096][ T5761] kernel write not supported for file [eventfd] (pid: 5761 comm: kworker/0:6) [ 502.724102][ T5761] usb 6-1: USB disconnect, device number 16 [ 503.182045][ T5952] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 503.332068][ T5952] usb 7-1: Using ep0 maxpacket: 32 [ 503.334784][ T5952] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 503.334814][ T5952] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.366669][ T5952] usb 7-1: config 0 descriptor?? [ 503.469988][ T5952] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 504.052094][T10175] loop8: detected capacity change from 0 to 7 [ 504.359924][T10181] loop3: detected capacity change from 0 to 128 [ 504.392591][ T491] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 505.179605][T10183] loop0: detected capacity change from 0 to 131072 [ 505.201916][T10183] f2fs: Unknown parameter '$' [ 505.253796][ T648] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 505.259649][ T648] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 505.261196][ T648] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 505.271971][ T218] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 505.275454][ T218] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 505.284909][ T668] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 505.284980][ T668] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 505.303497][ T67] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 505.309153][ T56] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 505.313470][ T648] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 505.317959][ T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 505.323259][ T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 505.337390][ T285] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 505.343530][ T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 505.358056][ T784] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 505.374898][ T648] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 505.389834][ T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 505.410806][ T784] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 505.427490][ T784] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 505.452320][ T784] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 505.455941][ T285] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 505.457819][ T285] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 505.458492][ T285] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 505.480197][ T56] lo_rw_aio(loop8) starting read with raw_refcnt=0x1, refcnt=2 [ 505.492268][T10175] Dev loop8: unable to read RDB block 7 [ 505.492314][T10175] loop8: unable to read partition table [ 505.492525][T10175] loop8: partition table beyond EOD, truncated [ 505.492559][T10175] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 505.498146][ T285] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 505.501759][ T67] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 505.504042][ T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 505.513643][ T648] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 505.513696][ T648] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 505.537523][T10181] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 505.537614][T10181] hpfs: filesystem error: improperly stopped [ 505.537630][T10181] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 505.537645][T10181] hpfs: You really don't want any checks? You are crazy... [ 505.538121][T10181] hpfs: hpfs_map_sector(): read error [ 505.538169][T10181] hpfs: code page support is disabled [ 505.539145][ T668] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 505.541966][ T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 505.559042][T10181] hpfs: hpfs_map_4sectors(): unaligned read [ 505.559242][T10181] hpfs: hpfs_map_4sectors(): unaligned read [ 505.559284][T10181] hpfs: filesystem error: unable to find root dir [ 505.574216][ T491] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 505.584181][ T285] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 505.625249][ T218] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 505.747511][ T784] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 505.747571][ T784] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 505.747599][ T784] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 505.747622][ T784] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 505.747644][ T784] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 505.747667][ T784] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 505.769344][ T2241] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 505.777544][ T491] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 505.878668][T10189] binder: BINDER_SET_CONTEXT_MGR already set [ 505.878683][T10189] binder: 10186:10189 ioctl 4018620d 200000004a80 returned -16 [ 505.898995][ T285] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 505.899489][ T285] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 505.903312][ T285] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 505.913710][ T285] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 505.913764][ T285] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 505.922382][ T491] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 505.922479][ T491] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 505.924173][ T491] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 505.926373][ T5851] __loop_clr_fd(loop8) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 505.927376][ T56] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 505.927414][ T56] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 505.927437][ T56] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 505.927459][ T56] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 505.927481][ T56] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 505.931675][ T491] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 505.939305][ T491] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 505.969428][ T56] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 505.971165][ T56] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 505.978586][ T491] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 505.982777][ T285] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 505.985619][ T285] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 505.985668][ T285] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 505.991624][ T285] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 506.003844][ T285] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 506.113968][ T5952] gspca_vc032x: reg_w err -110 [ 506.113989][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 506.114001][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 506.114010][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 506.114019][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 506.114029][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 506.114037][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 506.114046][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 506.114054][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 506.114063][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 506.114071][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 506.114080][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 506.114088][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 506.114097][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 506.114106][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 506.114114][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 506.114123][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 506.114132][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 506.114140][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 506.114149][ T5952] gspca_vc032x: Unknown sensor... [ 506.114223][ T5952] vc032x 7-1:0.0: probe with driver vc032x failed with error -22 [ 506.187205][ T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 506.195703][ T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 506.196551][ T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 506.196672][ T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 506.200316][ T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 506.200376][ T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 506.203008][ T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 506.204665][ T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 506.204749][ T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 506.210011][ T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 506.211039][ T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 506.221717][ T285] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 506.221936][ T285] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 506.221990][ T285] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 506.309015][ T8014] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 506.636428][ T5952] usb 7-1: USB disconnect, device number 26 [ 506.771411][T10197] loop7: detected capacity change from 0 to 1024 [ 506.773111][T10197] EXT4-fs: Ignoring removed bh option [ 506.787715][ T285] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 506.788109][ T285] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 506.791169][ T285] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 506.793695][ T285] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 506.834910][ T2241] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 506.857213][ T285] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 506.857267][ T784] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 506.860976][ T784] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 506.867382][ T2241] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 506.889277][T10197] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 506.916718][ T5624] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 506.933168][ T784] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 507.258091][ T784] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 507.258141][ T784] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 507.349083][ T784] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 507.349130][ T784] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 507.352726][ T784] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 507.357645][ T784] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 507.357689][ T784] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 507.357713][ T784] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 507.358499][ T784] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 507.359157][ T784] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 507.359191][ T784] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 507.359215][ T784] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 507.361633][ T784] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 507.366776][ T2241] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 507.369163][ T67] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 507.375222][ T2241] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 508.613175][ T10] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 508.662468][ T5747] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 508.793411][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 508.796717][ T10] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 508.796754][ T10] usb 1-1: can't read configurations, error -22 [ 508.820814][ T5747] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 508.820836][ T5747] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 508.823263][ T5747] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 508.823291][ T5747] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.823310][ T5747] usb 7-1: Product: syz [ 508.823320][ T5747] usb 7-1: Manufacturer: syz [ 508.823328][ T5747] usb 7-1: SerialNumber: syz [ 508.831538][ T5747] usb 7-1: config 0 descriptor?? [ 508.891446][T10225] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 508.891536][T10225] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 508.942001][ T10] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 509.093347][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 509.103721][T10225] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 509.103904][T10225] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 509.108683][ T10] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 509.108721][ T10] usb 1-1: can't read configurations, error -22 [ 509.111868][ T10] usb usb1-port1: attempt power cycle [ 510.458120][ T10] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 510.472411][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 510.499526][ T10] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 510.499565][ T10] usb 1-1: can't read configurations, error -22 [ 510.506278][ T5747] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 510.661666][ T10] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 510.684870][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 510.700225][ T10] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 510.700265][ T10] usb 1-1: can't read configurations, error -22 [ 510.700771][ T10] usb usb1-port1: unable to enumerate USB device [ 510.799181][T10235] loop5: detected capacity change from 0 to 8 [ 510.810107][ T536] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 510.816901][ T285] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 510.818802][ T536] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 510.828460][T10235] SQUASHFS error: lzo decompression failed, data probably corrupt [ 510.828490][T10235] SQUASHFS error: Failed to read block 0x91: -5 [ 510.828507][T10235] SQUASHFS error: Unable to read metadata cache entry [8f] [ 510.828522][T10235] SQUASHFS error: Unable to read inode 0x11f [ 510.875521][ T5851] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 511.048035][T10235] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 511.216919][ T363] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 511.218179][ T285] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 511.218245][ T285] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 511.218278][ T285] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 511.218311][ T285] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 511.259361][ T6872] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.298965][ T5747] dm9601 7-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 511.350123][ T5747] dm9601 7-1:0.0 eth13: register 'dm9601' at usb-dummy_hcd.6-1, Davicom DM96xx USB 10/100 Ethernet, d2:59:b5:45:18:d1 [ 511.436229][ T2241] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 511.470970][ T5747] usb 7-1: USB disconnect, device number 27 [ 511.489028][ T5747] dm9601 7-1:0.0 eth13: unregister 'dm9601' usb-dummy_hcd.6-1, Davicom DM96xx USB 10/100 Ethernet [ 511.490842][ T285] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 511.693657][ T6872] __loop_clr_fd(loop7) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 511.894077][T10248] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1073'. [ 512.060404][T10251] loop0: detected capacity change from 0 to 256 [ 512.111656][ T5952] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 512.111990][ T363] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 512.112342][ T363] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 512.135811][ T536] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 512.141108][T10248] loop6: detected capacity change from 0 to 2048 [ 512.164334][ T536] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 512.176195][ T491] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 512.184087][ T491] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 512.186486][ T491] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 512.186699][ T363] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 512.188821][ T491] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 512.196220][ T491] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 512.197355][ T491] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 512.198289][ T491] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 512.198569][ T491] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 512.199044][ T491] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 512.199212][ T491] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 512.210589][ T491] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 512.212870][ T363] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 512.213105][ T363] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 512.213793][ T363] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 512.215527][ T363] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 512.215608][ T363] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 512.280048][ T5952] usb 8-1: Using ep0 maxpacket: 32 [ 512.296087][ T363] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 512.296149][ T363] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 512.313920][ T491] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 512.338057][T10248] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 512.339145][ T5952] usb 8-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 512.339161][ T5952] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.346859][ T5952] usb 8-1: config 0 descriptor?? [ 512.359563][ T5952] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 512.492032][ T363] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 512.492077][ T363] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 512.492091][ T363] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 512.492227][ T363] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 512.492248][ T363] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 512.506015][ T491] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 512.510566][ T2241] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 512.527142][ T491] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 512.527197][ T491] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 512.534333][ T668] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 512.535627][ T668] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 512.539236][ T668] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 512.553330][ T285] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 512.553985][ T668] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 512.554634][ T668] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 512.556725][ T668] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 512.558589][ T668] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 512.558722][ T2241] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 512.572362][ T285] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 512.588438][ T648] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 512.590671][ T491] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 512.605527][ T491] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 512.613350][ T285] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 512.613445][ T285] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 512.613469][ T285] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 512.613491][ T285] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 512.613513][ T285] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 512.613534][ T285] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 512.613841][ T285] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 512.637857][ T668] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 512.661944][ T668] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 512.673229][ T285] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 512.688675][ T648] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 512.708163][ T56] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 512.771506][ T648] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 512.788535][ T285] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 512.796406][ T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 512.796849][ T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 512.797046][T10251] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 512.940700][ T668] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 513.092388][ T285] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 513.399934][ T2241] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 513.775412][ T6738] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.902483][ T2241] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 513.936919][ T67] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 513.936991][ T67] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 513.937040][ T67] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 513.989528][ T56] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 514.006878][ T6738] __loop_clr_fd(loop6) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 514.047029][ T56] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 514.076567][ T5625] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 514.426476][ T5952] gspca_vc032x: reg_r err -71 [ 514.426497][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.426509][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.426519][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.426529][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.426539][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.426548][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.426558][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.426567][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.426577][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.426586][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.426597][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.426606][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.426615][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.426624][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.426634][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.426643][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.426653][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.426662][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.426672][ T5952] gspca_vc032x: Unknown sensor... [ 514.426755][ T5952] vc032x 8-1:0.0: probe with driver vc032x failed with error -22 [ 514.545389][ T5952] usb 8-1: USB disconnect, device number 27 [ 514.885573][T10266] loop5: detected capacity change from 0 to 40427 [ 514.886743][T10266] F2FS-fs: heap/no_heap options were deprecated [ 514.887532][ T668] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 514.903437][ T648] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 514.903601][T10266] F2FS-fs (loop5): build fault injection rate: 19 [ 514.903618][T10266] F2FS-fs (loop5): build fault injection type: 0x3bfe8c [ 514.904066][ T648] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 514.906997][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 515.026333][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 515.028570][T10266] F2FS-fs (loop5): invalid crc value [ 515.030613][ T2241] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 515.043772][ T5638] Bluetooth: hci5: command 0x0406 tx timeout [ 515.049429][ T668] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 515.094184][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 515.100939][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 515.108946][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 515.129717][ T363] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 515.130575][ T363] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 515.133240][ T363] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 515.138276][ T363] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 515.160879][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 515.173629][ T363] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 515.175830][ T363] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 515.176403][ T363] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 515.178335][ T668] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 515.180057][ T668] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 515.189722][ T668] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 515.191515][ T668] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 515.215798][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 515.220498][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 515.231771][ T363] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 515.242038][ T668] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 515.246033][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 515.248806][ T363] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 515.257648][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 515.261348][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 515.271049][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 515.278594][ T668] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 515.279303][ T668] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 515.286061][ T2241] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 515.286102][ T2241] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 515.286132][ T2241] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 515.290686][ T2241] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 515.309026][ T285] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 515.380958][ T38] audit: type=1326 audit(2000000159.168:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10275 comm="syz.6.1081" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21881dce59 code=0x7ffc0000 [ 515.381025][ T38] audit: type=1326 audit(2000000159.178:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10275 comm="syz.6.1081" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21881dce59 code=0x7ffc0000 [ 515.381066][ T38] audit: type=1326 audit(2000000159.178:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10275 comm="syz.6.1081" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21881dce59 code=0x7ffc0000 [ 515.382355][ T38] audit: type=1326 audit(2000000159.188:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10275 comm="syz.6.1081" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21881dce59 code=0x7ffc0000 [ 515.382401][ T38] audit: type=1326 audit(2000000159.188:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10275 comm="syz.6.1081" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21881dce59 code=0x7ffc0000 [ 515.382688][ T38] audit: type=1326 audit(2000000159.188:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10275 comm="syz.6.1081" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f21881dce59 code=0x7ffc0000 [ 515.385515][ T38] audit: type=1326 audit(2000000159.188:177): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=10275 comm="syz.6.1081" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21881dce59 code=0x7ffc0000 [ 515.386904][ T38] audit: type=1326 audit(2000000159.188:178): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=10275 comm="syz.6.1081" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21881dce59 code=0x7ffc0000 [ 515.386951][ T38] audit: type=1326 audit(2000000159.188:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10275 comm="syz.6.1081" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21881dce59 code=0x7ffc0000 [ 515.387261][ T38] audit: type=1326 audit(2000000159.188:180): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=10275 comm="syz.6.1081" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f21881dce59 code=0x7ffc0000 [ 515.854829][ T56] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 515.858233][ T56] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 515.885605][ T668] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 515.930546][T10266] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0x9d8/0x1810 [ 515.962021][ T56] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 515.967264][ T56] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 516.003084][ T668] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 516.552199][T10266] F2FS-fs (loop5): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x221/0x410 [ 516.552552][ T536] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 516.593227][T10266] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 516.915066][ T668] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 517.081393][ T5738] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 517.248884][ T5738] usb 8-1: Using ep0 maxpacket: 32 [ 517.254317][ T5738] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 517.254359][ T5738] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 517.254397][ T5738] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 517.254424][ T5738] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 517.254452][ T5738] usb 8-1: config 0 interface 0 has no altsetting 0 [ 517.259780][ T5738] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 517.259809][ T5738] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 517.259830][ T5738] usb 8-1: Product: syz [ 517.259844][ T5738] usb 8-1: Manufacturer: syz [ 517.259859][ T5738] usb 8-1: SerialNumber: syz [ 517.519066][ T5738] usb 8-1: config 0 descriptor?? [ 517.542234][ T5738] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 517.732749][ T5738] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 517.748356][T10302] loop0: detected capacity change from 0 to 1024 [ 517.749425][T10302] EXT4-fs: Ignoring removed nomblk_io_submit option [ 517.878881][T10304] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1086'. [ 517.980308][ T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 518.336752][T10296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.506771][ T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 518.515107][ T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 518.523251][ T67] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 518.549571][ T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 518.584577][ T285] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 518.586786][ T56] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 518.586834][ T56] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 518.588650][ T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 518.601434][ T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 518.601500][ T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 518.604956][ T668] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 518.627038][T10296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.634784][ T2241] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 518.686045][ T56] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 518.686668][ T56] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 518.689245][ T56] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 518.689467][ T2241] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 518.689497][ T2241] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 518.702442][ T2241] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 518.709555][ T2241] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 518.770834][T10302] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 518.771001][T10302] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 518.778409][ T218] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 518.779178][ T218] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 518.801148][ T5738] usb 8-1: USB disconnect, device number 28 [ 518.810380][T10302] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 3: comm syz.0.1087: lblock 3 mapped to illegal pblock 3 (length 2) [ 518.823504][ T218] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 518.861071][T10302] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.1087: lblock 0 mapped to illegal pblock 0 (length 1) [ 518.868714][ T668] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 518.906162][T10302] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 518.906186][T10302] EXT4-fs (loop0): This should not happen!! Data will be lost [ 518.906186][T10302] [ 518.908205][T10302] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.1087: lblock 0 mapped to illegal pblock 0 (length 1) [ 518.938999][ T668] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 518.950973][T10302] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 518.951018][T10302] EXT4-fs (loop0): This should not happen!! Data will be lost [ 518.951018][T10302] [ 519.197974][ T5738] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 519.470565][T10317] loop6: detected capacity change from 0 to 256 [ 519.481219][ T491] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 519.490379][ T363] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 519.507485][ T363] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 519.507731][ T363] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 519.531683][ T363] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 519.538283][ T285] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 519.542741][ T491] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 519.544230][ T363] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 519.544995][ T363] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 519.548238][ T491] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 519.548500][ T491] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 519.548685][ T491] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 519.556337][ T491] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 519.558044][ T491] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 519.558117][ T491] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 519.558144][ T491] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 519.558167][ T491] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 519.558191][ T491] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 519.559129][ T363] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 519.559357][ T363] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 519.559572][ T363] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 519.559802][ T363] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 519.560025][ T363] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 519.560238][ T363] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 519.560445][ T363] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 519.560660][ T363] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 519.570496][ T491] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 519.570560][ T491] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 519.580612][ T285] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 519.582529][ T285] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 519.582953][ T285] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 519.586339][ T285] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 519.601143][T10317] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 519.610537][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 519.679171][ T491] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 519.696854][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 519.696897][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 519.696920][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 519.696941][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 519.696964][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 519.696985][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 519.697007][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 519.706983][ T491] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 519.707069][ T491] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 519.707926][ T67] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 519.782768][ T285] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 519.814447][ T218] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1 [ 520.000920][ T67] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 4: comm kworker/u8:4: lblock 4 mapped to illegal pblock 4 (length 1) [ 520.058800][ T7117] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 520.106573][ T56] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 520.112540][ T67] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117 [ 520.112568][ T67] EXT4-fs (loop0): This should not happen!! Data will be lost [ 520.112568][ T67] [ 520.329206][ T67] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 520.338118][ T5625] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 520.412664][ T5625] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 520.432933][ T67] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 520.437321][ T491] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 520.513846][ T5625] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 520.604917][ T67] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 520.605382][ T491] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 520.605434][ T491] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 520.894483][ T668] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1 [ 520.897267][T10335] FAULT_INJECTION: forcing a failure. [ 520.897267][T10335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 520.897302][T10335] CPU: 1 UID: 0 PID: 10335 Comm: syz.5.1093 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 520.897330][T10335] Tainted: [L]=SOFTLOCKUP [ 520.897336][T10335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 520.897347][T10335] Call Trace: [ 520.897355][T10335] [ 520.897363][T10335] dump_stack_lvl+0xe8/0x150 [ 520.897394][T10335] should_fail_ex+0x46b/0x600 [ 520.897425][T10335] _copy_to_user+0x31/0xb0 [ 520.897456][T10335] sctp_getsockopt_maxburst+0x250/0x3a0 [ 520.897481][T10335] ? __local_bh_enable+0x1e1/0x2f0 [ 520.897513][T10335] ? __pfx_sctp_getsockopt_maxburst+0x10/0x10 [ 520.897537][T10335] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 520.897564][T10335] ? lockdep_hardirqs_on+0x7a/0x110 [ 520.897593][T10335] sctp_getsockopt+0x8b9/0xb90 [ 520.897620][T10335] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 520.897649][T10335] do_sock_getsockopt+0x51d/0x7e0 [ 520.897678][T10335] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 520.897717][T10335] ? __fget_files+0x3a6/0x420 [ 520.897740][T10335] ? __fget_files+0x2a/0x420 [ 520.897770][T10335] __x64_sys_getsockopt+0x1aa/0x250 [ 520.897798][T10335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.897820][T10335] do_syscall_64+0x15f/0xf80 [ 520.897842][T10335] ? trace_irq_disable+0x3b/0x140 [ 520.897872][T10335] ? clear_bhb_loop+0x40/0x90 [ 520.897897][T10335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.897916][T10335] RIP: 0033:0x7eff54dace59 [ 520.897935][T10335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 520.897952][T10335] RSP: 002b:00007eff52fdd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 520.897974][T10335] RAX: ffffffffffffffda RBX: 00007eff55026090 RCX: 00007eff54dace59 [ 520.897988][T10335] RDX: 0000000000000014 RSI: 0000000000000084 RDI: 0000000000000005 [ 520.898001][T10335] RBP: 00007eff52fdd090 R08: 0000200000001080 R09: 0000000000000000 [ 520.898021][T10335] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.898034][T10335] R13: 00007eff55026128 R14: 00007eff55026090 R15: 00007ffe1e27a818 [ 520.898066][T10335] [ 520.899345][T10329] binder_alloc: 10328: binder_alloc_buf, no vma [ 520.948219][ T6738] __loop_clr_fd(loop6) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 521.623803][T10344] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1095'. [ 521.624418][T10344] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1095'. [ 522.211646][T10346] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1099'. [ 522.261206][ T10] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 522.432835][ T10] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 522.432864][ T10] usb 1-1: config 1 has no interface number 0 [ 522.432917][ T10] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 522.432944][ T10] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 522.432970][ T10] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 32 [ 522.432994][ T10] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 522.603219][ T10] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 522.603252][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.603273][ T10] usb 1-1: Product: syz [ 522.603289][ T10] usb 1-1: Manufacturer: syz [ 522.603305][ T10] usb 1-1: SerialNumber: syz [ 522.653274][T10351] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1100'. [ 522.653774][T10341] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 522.653901][T10341] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 522.913386][T10354] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 522.913509][T10354] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 522.945111][ T10] usb 1-1: No status endpoint found [ 523.513303][T10354] loop0: detected capacity change from 0 to 512 [ 523.540442][T10354] EXT4-fs: Ignoring removed nobh option [ 523.540515][T10354] EXT4-fs: Ignoring removed mblk_io_submit option [ 523.812549][ T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 523.872975][ T67] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 523.888803][ T2241] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 523.889030][ T2241] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 523.889688][T10354] EXT4-fs (loop0): orphan cleanup on readonly fs [ 523.889788][T10354] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 523.890048][ T2241] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 523.897024][ T2241] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 523.900734][ T2241] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 523.912223][T10354] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.1098: attempt to clear invalid blocks 2 len 1 [ 523.912293][T10354] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 523.912691][ T2241] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 523.913254][ T2241] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 523.913494][T10354] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 523.913708][T10354] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1098: invalid indirect mapped block 1819239214 (level 0) [ 523.913739][T10354] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 523.913880][ T2241] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 523.914201][T10354] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1098: invalid indirect mapped block 1819239214 (level 1) [ 523.914230][T10354] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 523.916592][ T2241] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 523.917190][ T2241] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 523.918744][ T2241] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 523.919263][T10354] EXT4-fs (loop0): 1 truncate cleaned up [ 523.922819][T10354] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 523.925156][ T285] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 523.929898][T10354] EXT4-fs (loop0): Quota file not on filesystem root. Journaled quota will not work [ 524.069004][ T218] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 524.075663][ T491] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 524.076360][ T491] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 524.076397][ T491] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 524.084104][ T491] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 524.086546][ T2241] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 524.088981][ T285] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 524.090944][ T764] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 524.095688][ T218] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 524.097966][ T218] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 524.441063][ T5747] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 524.590864][ T5747] usb 7-1: Using ep0 maxpacket: 8 [ 524.593011][ T5747] usb 7-1: config index 0 descriptor too short (expected 30, got 18) [ 524.596294][ T5747] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 524.596324][ T5747] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.596344][ T5747] usb 7-1: Product: syz [ 524.596359][ T5747] usb 7-1: Manufacturer: syz [ 524.596375][ T5747] usb 7-1: SerialNumber: syz [ 524.630864][ T37] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 524.664697][ T38] kauditd_printk_skb: 81 callbacks suppressed [ 524.664718][ T38] audit: type=1400 audit(2000000168.459:262): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D3A12B33D21DAE356E1C51F03A801BE8189679A16DA18EC0AE564162A27AFEA62D84F3A1074649C6BC6EA9F2BCA4464F56E24E6D2105BD901204A1DEEED4155617572652D950AD31928B0B0C0DC2869F478341D02D0F5AD94B081FCD507ACB4B9C65FEE9D5A17F48A7382F13D pid=10369 comm="syz.7.1105" [ 524.666712][ T5747] usb 7-1: config 0 descriptor?? [ 524.728620][ T5747] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 524.728725][ T5747] usb 7-1: setting power ON [ 524.755119][ T5747] dvb-usb: bulk message failed: -22 (2/0) [ 524.951553][ T37] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 524.951587][ T37] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.951608][ T37] usb 6-1: Product: syz [ 524.951623][ T37] usb 6-1: Manufacturer: syz [ 524.951639][ T37] usb 6-1: SerialNumber: syz [ 525.090508][ T5952] usb 1-1: USB disconnect, device number 37 [ 525.110988][ T5747] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 525.121942][ T5747] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 525.122001][ T5747] usb 7-1: media controller created [ 525.177013][ T5747] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 525.208505][ T37] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 525.276932][ T5747] usb 7-1: selecting invalid altsetting 6 [ 525.276957][ T5747] usb 7-1: digital interface selection failed (-22) [ 525.276974][ T5747] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 525.304920][ T5625] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.403494][ T5747] usb 7-1: setting power OFF [ 525.430338][ T5747] dvb-usb: bulk message failed: -22 (2/0) [ 525.430365][ T5747] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 525.430380][ T5747] (NULL device *): no alternate interface [ 525.489391][ T2241] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 525.560245][ T842] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/1:2: No space for directory leaf checksum. Please run e2fsck -D. [ 525.560363][ T842] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm kworker/1:2: checksumming directory block 0 [ 525.600813][ T5625] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 525.730456][ T842] usb 6-1: loading /lib/firmware/updates/syzkaller/ath9k_htc/htc_9271-1.4.0.fw failed with error -74 [ 525.742538][ T842] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/1:2: No space for directory leaf checksum. Please run e2fsck -D. [ 525.742569][ T842] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm kworker/1:2: checksumming directory block 0 [ 525.790894][ T842] usb 6-1: loading /lib/firmware/updates/ath9k_htc/htc_9271-1.4.0.fw failed with error -74 [ 525.791030][ T842] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/1:2: No space for directory leaf checksum. Please run e2fsck -D. [ 525.791056][ T842] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm kworker/1:2: checksumming directory block 0 [ 525.791443][ T842] usb 6-1: loading /lib/firmware/syzkaller/ath9k_htc/htc_9271-1.4.0.fw failed with error -74 [ 525.791564][ T842] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/1:2: No space for directory leaf checksum. Please run e2fsck -D. [ 525.791588][ T842] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm kworker/1:2: checksumming directory block 0 [ 525.793288][ T842] usb 6-1: loading /lib/firmware/ath9k_htc/htc_9271-1.4.0.fw failed with error -74 [ 525.793414][ T842] usb 6-1: Direct firmware load for ath9k_htc/htc_9271-1.4.0.fw failed with error -74 [ 525.793465][ T842] usb 6-1: Falling back to sysfs fallback for: ath9k_htc/htc_9271-1.4.0.fw [ 526.104544][ T5747] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 526.119702][ T5747] usb 7-1: USB disconnect, device number 28 [ 526.156025][ T7888] udevd[7888]: setting mode of /dev/bus/usb/007/028 to 020664 failed: No such file or directory [ 526.156175][ T7888] udevd[7888]: setting owner of /dev/bus/usb/007/028 to uid=0, gid=0 failed: No such file or directory [ 526.164976][T10376] kthread_run failed with err -4 [ 527.440486][ T5738] usb 6-1: USB disconnect, device number 17 [ 527.523698][T10395] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1110'. [ 527.545062][T10396] program syz.0.1111 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 527.580326][T10396] FAULT_INJECTION: forcing a failure. [ 527.580326][T10396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 527.580359][T10396] CPU: 1 UID: 0 PID: 10396 Comm: syz.0.1111 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 527.580388][T10396] Tainted: [L]=SOFTLOCKUP [ 527.580395][T10396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 527.580407][T10396] Call Trace: [ 527.580415][T10396] [ 527.580424][T10396] dump_stack_lvl+0xe8/0x150 [ 527.580455][T10396] should_fail_ex+0x46b/0x600 [ 527.580485][T10396] _copy_to_user+0x31/0xb0 [ 527.580516][T10396] simple_read_from_buffer+0xe1/0x170 [ 527.580548][T10396] proc_fail_nth_read+0x1be/0x230 [ 527.580577][T10396] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 527.580603][T10396] ? rw_verify_area+0x2ac/0x4e0 [ 527.580630][T10396] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 527.580657][T10396] vfs_read+0x212/0xa80 [ 527.580692][T10396] ? __pfx_vfs_read+0x10/0x10 [ 527.580722][T10396] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 527.580746][T10396] ? lockdep_hardirqs_on+0x7a/0x110 [ 527.580769][T10396] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 527.580792][T10396] ? mutex_lock_nested+0x152/0x1d0 [ 527.580819][T10396] ? fdget_pos+0x252/0x320 [ 527.580851][T10396] ksys_read+0x156/0x270 [ 527.580881][T10396] ? __pfx_ksys_read+0x10/0x10 [ 527.580916][T10396] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.580938][T10396] do_syscall_64+0x15f/0xf80 [ 527.580961][T10396] ? trace_irq_disable+0x3b/0x140 [ 527.580990][T10396] ? clear_bhb_loop+0x40/0x90 [ 527.581014][T10396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.581033][T10396] RIP: 0033:0x7f9788bed68e [ 527.581058][T10396] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 527.581074][T10396] RSP: 002b:00007f9786e85fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 527.581094][T10396] RAX: ffffffffffffffda RBX: 00007f9786e866c0 RCX: 00007f9788bed68e [ 527.581108][T10396] RDX: 000000000000000f RSI: 00007f9786e860a0 RDI: 0000000000000007 [ 527.581121][T10396] RBP: 00007f9786e86090 R08: 0000000000000000 R09: 0000000000000000 [ 527.581134][T10396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.581145][T10396] R13: 00007f9788ea6038 R14: 00007f9788ea5fa0 R15: 00007fff7e48df68 [ 527.581175][T10396] [ 528.451062][T10410] FAULT_INJECTION: forcing a failure. [ 528.451062][T10410] name failslab, interval 1, probability 0, space 0, times 0 [ 528.451097][T10410] CPU: 0 UID: 0 PID: 10410 Comm: syz.0.1116 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 528.451124][T10410] Tainted: [L]=SOFTLOCKUP [ 528.451131][T10410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 528.451143][T10410] Call Trace: [ 528.451151][T10410] [ 528.451160][T10410] dump_stack_lvl+0xe8/0x150 [ 528.451191][T10410] should_fail_ex+0x46b/0x600 [ 528.451220][T10410] should_failslab+0xa8/0x100 [ 528.451253][T10410] kmem_cache_alloc_lru_noprof+0x8b/0x680 [ 528.451282][T10410] ? __d_alloc+0x37/0x6f0 [ 528.451313][T10410] __d_alloc+0x37/0x6f0 [ 528.451343][T10410] d_alloc_parallel+0xe6/0x1610 [ 528.451371][T10410] ? __d_lookup+0x66/0x780 [ 528.451402][T10410] ? __d_lookup+0x66/0x780 [ 528.451433][T10410] ? __d_lookup+0x66/0x780 [ 528.451465][T10410] ? __pfx_d_alloc_parallel+0x10/0x10 [ 528.451498][T10410] ? __rt_spin_lock_init+0x3e/0x50 [ 528.451528][T10410] ? __init_waitqueue_head+0xae/0x160 [ 528.451553][T10410] proc_fill_cache+0x196/0x470 [ 528.451578][T10410] ? __pfx_proc_map_files_instantiate+0x10/0x10 [ 528.451606][T10410] ? __pfx_proc_fill_cache+0x10/0x10 [ 528.451645][T10410] ? __pfx_snprintf+0x10/0x10 [ 528.451722][T10410] proc_map_files_readdir+0x7e5/0xa50 [ 528.451760][T10410] ? __pfx_proc_map_files_readdir+0x10/0x10 [ 528.451801][T10410] ? iterate_dir+0x29e/0x580 [ 528.451818][T10410] ? down_read_killable+0x14c/0x220 [ 528.451847][T10410] ? __pfx_down_read_killable+0x10/0x10 [ 528.451873][T10410] ? apparmor_file_permission+0x1f4/0x300 [ 528.451908][T10410] iterate_dir+0x3a5/0x580 [ 528.451933][T10410] __se_sys_getdents+0xf1/0x270 [ 528.451956][T10410] ? __pfx___se_sys_getdents+0x10/0x10 [ 528.451975][T10410] ? __pfx_filldir+0x10/0x10 [ 528.452015][T10410] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.452037][T10410] do_syscall_64+0x15f/0xf80 [ 528.452062][T10410] ? clear_bhb_loop+0x40/0x90 [ 528.452086][T10410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.452105][T10410] RIP: 0033:0x7f9788c2ce59 [ 528.452125][T10410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.452142][T10410] RSP: 002b:00007f9786e86028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 528.452164][T10410] RAX: ffffffffffffffda RBX: 00007f9788ea5fa0 RCX: 00007f9788c2ce59 [ 528.452179][T10410] RDX: 00000000000000f3 RSI: 0000200000000f40 RDI: 0000000000000003 [ 528.452191][T10410] RBP: 00007f9786e86090 R08: 0000000000000000 R09: 0000000000000000 [ 528.452205][T10410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 528.452217][T10410] R13: 00007f9788ea6038 R14: 00007f9788ea5fa0 R15: 00007fff7e48df68 [ 528.452250][T10410] [ 528.795939][T10414] FAULT_INJECTION: forcing a failure. [ 528.795939][T10414] name failslab, interval 1, probability 0, space 0, times 0 [ 528.795975][T10414] CPU: 1 UID: 0 PID: 10414 Comm: syz.0.1119 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 528.796002][T10414] Tainted: [L]=SOFTLOCKUP [ 528.796009][T10414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 528.796021][T10414] Call Trace: [ 528.796029][T10414] [ 528.796038][T10414] dump_stack_lvl+0xe8/0x150 [ 528.796068][T10414] should_fail_ex+0x46b/0x600 [ 528.796097][T10414] should_failslab+0xa8/0x100 [ 528.796129][T10414] __kmalloc_noprof+0xdf/0x7b0 [ 528.796157][T10414] ? snd_pcm_hw_refine+0x9b1/0x1710 [ 528.796275][T10414] snd_pcm_hw_refine+0x9b1/0x1710 [ 528.796303][T10414] ? __lock_acquire+0x6b5/0x2d10 [ 528.796333][T10414] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 528.796370][T10414] ? __might_fault+0xaf/0x130 [ 528.796404][T10414] ? __pfx_snd_pcm_ioctl+0x10/0x10 [ 528.796439][T10414] ? __pfx_snd_pcm_ioctl+0x10/0x10 [ 528.796473][T10414] ? _copy_from_user+0x94/0xb0 [ 528.796501][T10414] ? __pfx_snd_pcm_ioctl+0x10/0x10 [ 528.796527][T10414] snd_pcm_hw_refine_user+0x40/0xe0 [ 528.796550][T10414] snd_pcm_ioctl+0x8e/0xb0 [ 528.796575][T10414] __se_sys_ioctl+0xff/0x170 [ 528.796604][T10414] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.796625][T10414] do_syscall_64+0x15f/0xf80 [ 528.796648][T10414] ? trace_irq_disable+0x3b/0x140 [ 528.796675][T10414] ? clear_bhb_loop+0x40/0x90 [ 528.796697][T10414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.796716][T10414] RIP: 0033:0x7f9788c2ce59 [ 528.796733][T10414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.796750][T10414] RSP: 002b:00007f9786e86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 528.796771][T10414] RAX: ffffffffffffffda RBX: 00007f9788ea5fa0 RCX: 00007f9788c2ce59 [ 528.796786][T10414] RDX: 0000200000000b40 RSI: 00000000c2604110 RDI: 0000000000000003 [ 528.796799][T10414] RBP: 00007f9786e86090 R08: 0000000000000000 R09: 0000000000000000 [ 528.796813][T10414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 528.796825][T10414] R13: 00007f9788ea6038 R14: 00007f9788ea5fa0 R15: 00007fff7e48df68 [ 528.796856][T10414] [ 529.304730][T10429] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1124'. [ 529.365437][T10426] binder: BINDER_SET_CONTEXT_MGR already set [ 529.365454][T10426] binder: 10424:10426 ioctl 4018620d 200000004a80 returned -16 [ 529.440364][T10436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1125'. [ 529.440389][T10436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 529.440424][T10436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.518817][T10433] IPVS: length: 183 != 8 [ 529.570189][T10436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.570219][T10436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.622955][T10442] FAULT_INJECTION: forcing a failure. [ 529.622955][T10442] name failslab, interval 1, probability 0, space 0, times 0 [ 529.622992][T10442] CPU: 1 UID: 0 PID: 10442 Comm: syz.0.1127 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 529.623020][T10442] Tainted: [L]=SOFTLOCKUP [ 529.623027][T10442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 529.623039][T10442] Call Trace: [ 529.623047][T10442] [ 529.623056][T10442] dump_stack_lvl+0xe8/0x150 [ 529.623079][T10442] should_fail_ex+0x46b/0x600 [ 529.623102][T10442] should_failslab+0xa8/0x100 [ 529.623128][T10442] kmem_cache_alloc_noprof+0x87/0x680 [ 529.623150][T10442] ? skb_clone+0x212/0x3a0 [ 529.623171][T10442] skb_clone+0x212/0x3a0 [ 529.623192][T10442] __netlink_deliver_tap+0x424/0x8b0 [ 529.623218][T10442] ? netlink_deliver_tap+0x2e/0x1b0 [ 529.623235][T10442] netlink_deliver_tap+0x19c/0x1b0 [ 529.623252][T10442] netlink_unicast+0x754/0x920 [ 529.623283][T10442] netlink_sendmsg+0x813/0xb40 [ 529.623306][T10442] ? __pfx_netlink_sendmsg+0x10/0x10 [ 529.623325][T10442] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 529.623347][T10442] ? aa_sock_msg_perm+0x122/0x200 [ 529.623372][T10442] ? __pfx_netlink_sendmsg+0x10/0x10 [ 529.623395][T10442] sock_sendmsg_nosec+0x112/0x150 [ 529.623419][T10442] ____sys_sendmsg+0x55c/0x870 [ 529.623440][T10442] ? __pfx_____sys_sendmsg+0x10/0x10 [ 529.623468][T10442] ? import_iovec+0x73/0xa0 [ 529.623493][T10442] ___sys_sendmsg+0x2a5/0x360 [ 529.623510][T10442] ? __lock_acquire+0x6b5/0x2d10 [ 529.623530][T10442] ? __pfx____sys_sendmsg+0x10/0x10 [ 529.623574][T10442] ? __fget_files+0x2a/0x420 [ 529.623594][T10442] ? __fget_files+0x3a6/0x420 [ 529.623621][T10442] __x64_sys_sendmsg+0x1c3/0x2a0 [ 529.623641][T10442] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 529.623666][T10442] ? __pfx_ksys_write+0x10/0x10 [ 529.623696][T10442] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.623713][T10442] do_syscall_64+0x15f/0xf80 [ 529.623732][T10442] ? trace_irq_disable+0x3b/0x140 [ 529.623756][T10442] ? clear_bhb_loop+0x40/0x90 [ 529.623775][T10442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.623791][T10442] RIP: 0033:0x7f9788c2ce59 [ 529.623807][T10442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.623820][T10442] RSP: 002b:00007f9786e86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 529.623837][T10442] RAX: ffffffffffffffda RBX: 00007f9788ea5fa0 RCX: 00007f9788c2ce59 [ 529.623850][T10442] RDX: 0000000020050800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 529.623860][T10442] RBP: 00007f9786e86090 R08: 0000000000000000 R09: 0000000000000000 [ 529.623870][T10442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.623880][T10442] R13: 00007f9788ea6038 R14: 00007f9788ea5fa0 R15: 00007fff7e48df68 [ 529.623905][T10442] [ 529.624214][T10442] netlink: 392 bytes leftover after parsing attributes in process `syz.0.1127'. [ 530.501827][T10456] netlink: 392 bytes leftover after parsing attributes in process `syz.7.1130'. [ 530.947367][T10462] FAULT_INJECTION: forcing a failure. [ 530.947367][T10462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 530.947402][T10462] CPU: 0 UID: 0 PID: 10462 Comm: syz.5.1133 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 530.947428][T10462] Tainted: [L]=SOFTLOCKUP [ 530.947435][T10462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 530.947446][T10462] Call Trace: [ 530.947454][T10462] [ 530.947463][T10462] dump_stack_lvl+0xe8/0x150 [ 530.947492][T10462] should_fail_ex+0x46b/0x600 [ 530.947522][T10462] _copy_to_user+0x31/0xb0 [ 530.947550][T10462] simple_read_from_buffer+0xe1/0x170 [ 530.947579][T10462] proc_fail_nth_read+0x1be/0x230 [ 530.947609][T10462] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 530.947637][T10462] ? rw_verify_area+0x2ac/0x4e0 [ 530.947663][T10462] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 530.947689][T10462] vfs_read+0x212/0xa80 [ 530.947725][T10462] ? __pfx_vfs_read+0x10/0x10 [ 530.947756][T10462] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 530.947780][T10462] ? lockdep_hardirqs_on+0x7a/0x110 [ 530.947802][T10462] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 530.947826][T10462] ? mutex_lock_nested+0x152/0x1d0 [ 530.947864][T10462] ? fdget_pos+0x252/0x320 [ 530.947896][T10462] ksys_read+0x156/0x270 [ 530.947925][T10462] ? __pfx_ksys_read+0x10/0x10 [ 530.947950][T10462] ? __pfx_v4l2_ioctl+0x10/0x10 [ 530.948053][T10462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.948073][T10462] do_syscall_64+0x15f/0xf80 [ 530.948093][T10462] ? trace_irq_disable+0x3b/0x140 [ 530.948121][T10462] ? clear_bhb_loop+0x40/0x90 [ 530.948144][T10462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.948161][T10462] RIP: 0033:0x7eff54d6d68e [ 530.948179][T10462] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 530.948196][T10462] RSP: 002b:00007eff52ffdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 530.948216][T10462] RAX: ffffffffffffffda RBX: 00007eff52ffe6c0 RCX: 00007eff54d6d68e [ 530.948231][T10462] RDX: 000000000000000f RSI: 00007eff52ffe0a0 RDI: 0000000000000005 [ 530.948243][T10462] RBP: 00007eff52ffe090 R08: 0000000000000000 R09: 0000000000000000 [ 530.948255][T10462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.948267][T10462] R13: 00007eff55026038 R14: 00007eff55025fa0 R15: 00007ffe1e27a818 [ 530.948297][T10462] [ 531.297439][T10473] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1136'. [ 532.162527][ T841] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 532.209302][T10483] binder_alloc: 10482: binder_alloc_buf, no vma [ 532.328027][ T841] usb 7-1: Using ep0 maxpacket: 32 [ 532.332535][ T841] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 532.332577][ T841] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.378158][ T841] usb 7-1: config 0 descriptor?? [ 532.396167][ T841] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 532.592132][T10485] loop5: detected capacity change from 0 to 8192 [ 532.646721][ T56] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.647370][ T56] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.647842][ T56] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.696100][ T56] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.704208][ T56] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.724490][ T764] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.729102][ T764] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.750003][ T285] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.754100][ T285] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.781594][ T491] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.785619][ T491] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.788827][ T491] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.793759][ T491] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.796950][ T491] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.801531][ T491] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.804726][ T491] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.808111][ T491] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.815094][ T764] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.857322][ T285] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.873645][ T56] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.878335][ T56] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.887474][ T218] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.902373][ T56] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.905811][ T56] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.907589][ T56] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.910129][ T56] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.922489][ T56] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.936128][ T56] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.944516][ T668] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 532.954033][ T56] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 533.436267][ T7117] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 534.153969][T10495] loop5: detected capacity change from 0 to 32768 [ 534.189394][ T56] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 534.189516][ T56] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 534.218575][ T491] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 534.219910][ T764] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 534.225721][ T764] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 534.235121][ T491] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 534.245012][ T764] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 534.246970][ T764] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 534.252321][ T764] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 534.276122][ T218] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 534.307223][ T218] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 534.308020][ T218] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 534.321863][ T841] gspca_vc032x: reg_w err -71 [ 534.321882][ T841] gspca_vc032x: I2c Bus Busy Wait 00 [ 534.321892][ T841] gspca_vc032x: I2c Bus Busy Wait 00 [ 534.321901][ T841] gspca_vc032x: I2c Bus Busy Wait 00 [ 534.321911][ T841] gspca_vc032x: I2c Bus Busy Wait 00 [ 534.321919][ T841] gspca_vc032x: I2c Bus Busy Wait 00 [ 534.321928][ T841] gspca_vc032x: I2c Bus Busy Wait 00 [ 534.321937][ T841] gspca_vc032x: I2c Bus Busy Wait 00 [ 534.321945][ T841] gspca_vc032x: I2c Bus Busy Wait 00 [ 534.321955][ T841] gspca_vc032x: I2c Bus Busy Wait 00 [ 534.321963][ T841] gspca_vc032x: I2c Bus Busy Wait 00 [ 534.321973][ T841] gspca_vc032x: I2c Bus Busy Wait 00 [ 534.321982][ T841] gspca_vc032x: I2c Bus Busy Wait 00 [ 534.321990][ T841] gspca_vc032x: I2c Bus Busy Wait 00 [ 534.322000][ T841] gspca_vc032x: I2c Bus Busy Wait 00 [ 534.322009][ T841] gspca_vc032x: I2c Bus Busy Wait 00 [ 534.322017][ T841] gspca_vc032x: I2c Bus Busy Wait 00 [ 534.322025][ T841] gspca_vc032x: I2c Bus Busy Wait 00 [ 534.322034][ T841] gspca_vc032x: I2c Bus Busy Wait 00 [ 534.322042][ T841] gspca_vc032x: Unknown sensor... [ 534.322122][ T841] vc032x 7-1:0.0: probe with driver vc032x failed with error -22 [ 534.333067][ T218] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 534.366338][ T218] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 534.376269][ T218] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 534.437769][ T841] usb 7-1: USB disconnect, device number 29 [ 534.439382][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 534.446386][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 534.450242][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 534.451806][ T764] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 534.472622][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 534.496722][ T668] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 534.496982][ T668] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 534.504402][ T56] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 534.516469][ T491] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 534.517179][ T491] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 534.535047][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 534.536735][ T491] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 534.537442][ T668] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 534.554141][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 534.565327][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 534.568890][ T668] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 534.571071][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 534.571118][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 534.571147][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 534.581886][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 534.588359][ T668] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 534.609560][ T491] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 534.656433][ T491] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 534.660132][ T491] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 534.728245][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 534.854903][ T491] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 535.013742][ T56] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 535.018709][ T56] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 535.019039][ T56] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 535.082303][ T56] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 535.186146][T10487] [ 535.186161][T10487] ====================================================== [ 535.186197][T10487] WARNING: possible circular locking dependency detected [ 535.186273][T10487] syzkaller #0 Tainted: G L [ 535.186288][T10487] ------------------------------------------------------ [ 535.186332][T10487] syz.7.1141/10487 is trying to acquire lock: [ 535.186377][T10487] ffff88801bed32c0 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4ed/0x5c0 [ 535.186454][T10487] [ 535.186454][T10487] but task is already holding lock: [ 535.186464][T10487] ffff88801bed3238 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5d0 [ 535.186521][T10487] [ 535.186521][T10487] which lock already depends on the new lock. [ 535.186521][T10487] [ 535.186531][T10487] [ 535.186531][T10487] the existing dependency chain (in reverse order) is: [ 535.186540][T10487] [ 535.186540][T10487] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 535.186635][T10487] down_write+0x3a/0x50 [ 535.186665][T10487] kernfs_add_one+0x41/0x5d0 [ 535.186695][T10487] kernfs_create_dir_ns+0xde/0x130 [ 535.186725][T10487] internal_create_group+0x425/0x1180 [ 535.186750][T10487] cpuhp_invoke_callback+0x445/0x860 [ 535.186773][T10487] cpuhp_issue_call+0x430/0x7a0 [ 535.186840][T10487] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 535.186875][T10487] __cpuhp_setup_state+0x3f/0x60 [ 535.186907][T10487] do_one_initcall+0x250/0x870 [ 535.186935][T10487] do_initcall_level+0x104/0x190 [ 535.187047][T10487] do_initcalls+0x59/0xa0 [ 535.187073][T10487] kernel_init_freeable+0x2a6/0x3e0 [ 535.187100][T10487] kernel_init+0x1d/0x1d0 [ 535.187140][T10487] ret_from_fork+0x514/0xb70 [ 535.187168][T10487] ret_from_fork_asm+0x1a/0x30 [ 535.187200][T10487] [ 535.187200][T10487] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 535.187233][T10487] [ 535.187233][T10487] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 535.187264][T10487] cpus_read_lock+0x42/0x160 [ 535.187291][T10487] static_key_slow_inc+0x12/0x30 [ 535.187359][T10487] tcp_md5_do_add+0x1d4/0x390 [ 535.187391][T10487] tcp_v6_parse_md5_keys+0x562/0x680 [ 535.187416][T10487] do_tcp_setsockopt+0x12ec/0x2060 [ 535.187437][T10487] do_sock_setsockopt+0x17c/0x1b0 [ 535.187459][T10487] __x64_sys_setsockopt+0x143/0x1b0 [ 535.187480][T10487] do_syscall_64+0x15f/0xf80 [ 535.187506][T10487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.187528][T10487] [ 535.187528][T10487] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 535.187558][T10487] lock_sock_nested+0x41/0x130 [ 535.187586][T10487] inet_shutdown+0x6a/0x390 [ 535.187610][T10487] nbd_mark_nsock_dead+0x2e9/0x560 [ 535.187678][T10487] recv_work+0x1c4c/0x1d60 [ 535.187706][T10487] process_one_work+0x98b/0x1630 [ 535.187766][T10487] worker_thread+0xb49/0x1140 [ 535.187798][T10487] kthread+0x388/0x470 [ 535.187821][T10487] ret_from_fork+0x514/0xb70 [ 535.187846][T10487] ret_from_fork_asm+0x1a/0x30 [ 535.187875][T10487] [ 535.187875][T10487] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 535.187905][T10487] mutex_lock_nested+0x5a/0x1d0 [ 535.187936][T10487] nbd_queue_rq+0x37b/0x1100 [ 535.187962][T10487] blk_mq_dispatch_rq_list+0xa77/0x1910 [ 535.188036][T10487] __blk_mq_sched_dispatch_requests+0xddb/0x1610 [ 535.188092][T10487] blk_mq_sched_dispatch_requests+0xda/0x1a0 [ 535.188126][T10487] blk_mq_run_hw_queue+0x368/0x520 [ 535.188182][T10487] blk_mq_dispatch_list+0xd1f/0xe20 [ 535.188204][T10487] blk_mq_flush_plug_list+0x48d/0x570 [ 535.188226][T10487] __blk_flush_plug+0x3ed/0x4d0 [ 535.188274][T10487] __submit_bio+0x28d/0x580 [ 535.188300][T10487] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 535.188324][T10487] block_read_full_folio+0x7b7/0x830 [ 535.188349][T10487] filemap_read_folio+0x137/0x3b0 [ 535.188405][T10487] do_read_cache_folio+0x2bf/0x560 [ 535.188431][T10487] read_part_sector+0xb8/0x2b0 [ 535.188478][T10487] adfspart_check_ICS+0xb1/0x960 [ 535.188501][T10487] bdev_disk_changed+0x817/0x1770 [ 535.188520][T10487] blkdev_get_whole+0x2e5/0x480 [ 535.188569][T10487] bdev_open+0x31e/0xcc0 [ 535.188591][T10487] blkdev_open+0x485/0x620 [ 535.188614][T10487] do_dentry_open+0x83d/0x13e0 [ 535.188637][T10487] vfs_open+0x3b/0x350 [ 535.188637][T10487] vfs_open+0x3b/0x350 [ 535.188660][T10487] path_openat+0x2e43/0x38a0 [ 535.188690][T10487] do_file_open+0x23e/0x4a0 [ 535.188719][T10487] do_sys_openat2+0x113/0x200 [ 535.188744][T10487] __x64_sys_openat+0x138/0x170 [ 535.188769][T10487] do_syscall_64+0x15f/0xf80 [ 535.188794][T10487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.188816][T10487] [ 535.188816][T10487] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 535.188845][T10487] mutex_lock_nested+0x5a/0x1d0 [ 535.188876][T10487] nbd_queue_rq+0xc6/0x1100 [ 535.188901][T10487] blk_mq_dispatch_rq_list+0xa77/0x1910 [ 535.188923][T10487] __blk_mq_sched_dispatch_requests+0xddb/0x1610 [ 535.188947][T10487] blk_mq_sched_dispatch_requests+0xda/0x1a0 [ 535.188971][T10487] blk_mq_run_hw_queue+0x368/0x520 [ 535.189003][T10487] blk_mq_dispatch_list+0xd1f/0xe20 [ 535.189024][T10487] blk_mq_flush_plug_list+0x48d/0x570 [ 535.189046][T10487] __blk_flush_plug+0x3ed/0x4d0 [ 535.189068][T10487] __submit_bio+0x28d/0x580 [ 535.189090][T10487] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 535.189111][T10487] block_read_full_folio+0x7b7/0x830 [ 535.189177][T10487] filemap_read_folio+0x137/0x3b0 [ 535.189201][T10487] do_read_cache_folio+0x2bf/0x560 [ 535.189224][T10487] read_part_sector+0xb8/0x2b0 [ 535.189245][T10487] adfspart_check_ICS+0xb1/0x960 [ 535.189266][T10487] bdev_disk_changed+0x817/0x1770 [ 535.189286][T10487] blkdev_get_whole+0x2e5/0x480 [ 535.189308][T10487] bdev_open+0x31e/0xcc0 [ 535.189328][T10487] blkdev_open+0x485/0x620 [ 535.189352][T10487] do_dentry_open+0x83d/0x13e0 [ 535.189375][T10487] vfs_open+0x3b/0x350 [ 535.189397][T10487] path_openat+0x2e43/0x38a0 [ 535.189425][T10487] do_file_open+0x23e/0x4a0 [ 535.189455][T10487] do_sys_openat2+0x113/0x200 [ 535.189480][T10487] __x64_sys_openat+0x138/0x170 [ 535.189506][T10487] do_syscall_64+0x15f/0xf80 [ 535.189531][T10487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.189551][T10487] [ 535.189551][T10487] -> #4 (set->srcu){.+.+}-{0:0}: [ 535.189580][T10487] __synchronize_srcu+0xca/0x300 [ 535.189653][T10487] elevator_switch+0x1e8/0x7a0 [ 535.189699][T10487] elevator_change+0x2cc/0x450 [ 535.189716][T10487] elevator_set_default+0x36c/0x430 [ 535.189735][T10487] blk_register_queue+0x3e9/0x4e0 [ 535.189756][T10487] __add_disk+0x677/0xd50 [ 535.189780][T10487] add_disk_fwnode+0xfb/0x480 [ 535.189803][T10487] nbd_dev_add+0x72c/0xb50 [ 535.189825][T10487] nbd_init+0x168/0x1f0 [ 535.189892][T10487] do_one_initcall+0x250/0x870 [ 535.189917][T10487] do_initcall_level+0x104/0x190 [ 535.189942][T10487] do_initcalls+0x59/0xa0 [ 535.189965][T10487] kernel_init_freeable+0x2a6/0x3e0 [ 535.189988][T10487] kernel_init+0x1d/0x1d0 [ 535.190014][T10487] ret_from_fork+0x514/0xb70 [ 535.190037][T10487] ret_from_fork_asm+0x1a/0x30 [ 535.190064][T10487] [ 535.190064][T10487] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 535.190093][T10487] mutex_lock_nested+0x5a/0x1d0 [ 535.190126][T10487] elevator_change+0x1b3/0x450 [ 535.190139][T10487] elevator_set_none+0xb5/0x140 [ 535.190154][T10487] blk_mq_update_nr_hw_queues+0x607/0x1a80 [ 535.190174][T10487] nbd_start_device+0x17f/0xb20 [ 535.190191][T10487] nbd_genl_connect+0x1651/0x1c80 [ 535.190209][T10487] genl_family_rcv_msg_doit+0x22a/0x330 [ 535.190233][T10487] genl_rcv_msg+0x61c/0x7a0 [ 535.190256][T10487] netlink_rcv_skb+0x232/0x4b0 [ 535.190274][T10487] genl_rcv+0x28/0x40 [ 535.190297][T10487] netlink_unicast+0x780/0x920 [ 535.190325][T10487] netlink_sendmsg+0x813/0xb40 [ 535.190344][T10487] sock_sendmsg_nosec+0x112/0x150 [ 535.190368][T10487] ____sys_sendmsg+0x55c/0x870 [ 535.190387][T10487] ___sys_sendmsg+0x2a5/0x360 [ 535.190407][T10487] __x64_sys_sendmsg+0x1c3/0x2a0 [ 535.190426][T10487] do_syscall_64+0x15f/0xf80 [ 535.190448][T10487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.190467][T10487] [ 535.190467][T10487] -> #2 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 535.190537][T10487] blk_alloc_queue+0x54e/0x690 [ 535.190568][T10487] __blk_mq_alloc_disk+0x197/0x390 [ 535.190589][T10487] nbd_dev_add+0x499/0xb50 [ 535.190609][T10487] nbd_init+0x168/0x1f0 [ 535.190630][T10487] do_one_initcall+0x250/0x870 [ 535.190655][T10487] do_initcall_level+0x104/0x190 [ 535.190679][T10487] do_initcalls+0x59/0xa0 [ 535.190700][T10487] kernel_init_freeable+0x2a6/0x3e0 [ 535.190723][T10487] kernel_init+0x1d/0x1d0 [ 535.190750][T10487] ret_from_fork+0x514/0xb70 [ 535.190771][T10487] ret_from_fork_asm+0x1a/0x30 [ 535.190798][T10487] [ 535.190798][T10487] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 535.190826][T10487] fs_reclaim_acquire+0x71/0x100 [ 535.190913][T10487] kmem_cache_alloc_noprof+0x44/0x680 [ 535.190941][T10487] __kernfs_iattrs+0xdf/0x320 [ 535.190966][T10487] kernfs_iop_setattr+0xea/0x3f0 [ 535.190989][T10487] notify_change+0xc18/0xf60 [ 535.191008][T10487] do_truncate+0x1c2/0x250 [ 535.191064][T10487] path_openat+0x2fc4/0x38a0 [ 535.191091][T10487] do_file_open+0x23e/0x4a0 [ 535.191122][T10487] do_sys_openat2+0x113/0x200 [ 535.191142][T10487] __x64_sys_openat+0x138/0x170 [ 535.191161][T10487] do_syscall_64+0x15f/0xf80 [ 535.191181][T10487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.191198][T10487] [ 535.191198][T10487] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 535.191223][T10487] __lock_acquire+0x15a5/0x2d10 [ 535.191241][T10487] lock_acquire+0x106/0x350 [ 535.191258][T10487] down_write+0x3a/0x50 [ 535.191279][T10487] kernfs_link_sibling+0x4ed/0x5c0 [ 535.191304][T10487] kernfs_add_one+0x1ca/0x5d0 [ 535.191329][T10487] kernfs_create_dir_ns+0xde/0x130 [ 535.191356][T10487] sysfs_create_dir_ns+0x12f/0x2a0 [ 535.191379][T10487] kobject_add_internal+0x631/0xd10 [ 535.191407][T10487] kobject_add+0x163/0x240 [ 535.191432][T10487] elevator_change_done+0x28a/0x5f0 [ 535.191451][T10487] elv_update_nr_hw_queues+0x22f/0x290 [ 535.191470][T10487] blk_mq_update_nr_hw_queues+0x11cb/0x1a80 [ 535.191493][T10487] nbd_start_device+0x17f/0xb20 [ 535.191515][T10487] nbd_genl_connect+0x1651/0x1c80 [ 535.191536][T10487] genl_family_rcv_msg_doit+0x22a/0x330 [ 535.191563][T10487] genl_rcv_msg+0x61c/0x7a0 [ 535.191587][T10487] netlink_rcv_skb+0x232/0x4b0 [ 535.191604][T10487] genl_rcv+0x28/0x40 [ 535.191625][T10487] netlink_unicast+0x780/0x920 [ 535.191653][T10487] netlink_sendmsg+0x813/0xb40 [ 535.191672][T10487] sock_sendmsg_nosec+0x112/0x150 [ 535.191698][T10487] ____sys_sendmsg+0x55c/0x870 [ 535.191718][T10487] ___sys_sendmsg+0x2a5/0x360 [ 535.191737][T10487] __x64_sys_sendmsg+0x1c3/0x2a0 [ 535.191757][T10487] do_syscall_64+0x15f/0xf80 [ 535.191779][T10487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.191799][T10487] [ 535.191799][T10487] other info that might help us debug this: [ 535.191799][T10487] [ 535.191806][T10487] Chain exists of: [ 535.191806][T10487] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 535.191806][T10487] [ 535.191835][T10487] Possible unsafe locking scenario: [ 535.191835][T10487] [ 535.191876][T10487] CPU0 CPU1 [ 535.191909][T10487] ---- ---- [ 535.191922][T10487] lock(&root->kernfs_rwsem); [ 535.191937][T10487] lock(cpuhp_state_mutex); [ 535.191951][T10487] lock(&root->kernfs_rwsem); [ 535.191966][T10487] lock(&root->kernfs_iattr_rwsem); [ 535.191980][T10487] [ 535.191980][T10487] *** DEADLOCK *** [ 535.191980][T10487] [ 535.191986][T10487] 5 locks held by syz.7.1141/10487: [ 535.191998][T10487] #0: ffffffff8f3e1c80 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 535.192079][T10487] #1: ffffffff8f3e1a98 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 535.192137][T10487] #2: ffff8880275da9b0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xbf/0x1a80 [ 535.192190][T10487] #3: ffff8880275da8c8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xd2/0x1a80 [ 535.192241][T10487] #4: ffff88801bed3238 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5d0 [ 535.192293][T10487] [ 535.192293][T10487] stack backtrace: [ 535.192308][T10487] CPU: 1 UID: 0 PID: 10487 Comm: syz.7.1141 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 535.192338][T10487] Tainted: [L]=SOFTLOCKUP [ 535.192346][T10487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 535.192359][T10487] Call Trace: [ 535.192366][T10487] [ 535.192376][T10487] dump_stack_lvl+0xe8/0x150 [ 535.192402][T10487] print_circular_bug+0x2e1/0x300 [ 535.192428][T10487] check_noncircular+0x12e/0x150 [ 535.192452][T10487] __lock_acquire+0x15a5/0x2d10 [ 535.192474][T10487] ? __lock_acquire+0x6b5/0x2d10 [ 535.192500][T10487] ? kernfs_link_sibling+0x4ed/0x5c0 [ 535.192528][T10487] lock_acquire+0x106/0x350 [ 535.192547][T10487] ? kernfs_link_sibling+0x4ed/0x5c0 [ 535.192576][T10487] down_write+0x3a/0x50 [ 535.192599][T10487] ? kernfs_link_sibling+0x4ed/0x5c0 [ 535.192626][T10487] kernfs_link_sibling+0x4ed/0x5c0 [ 535.192659][T10487] kernfs_add_one+0x1ca/0x5d0 [ 535.192688][T10487] kernfs_create_dir_ns+0xde/0x130 [ 535.192719][T10487] sysfs_create_dir_ns+0x12f/0x2a0 [ 535.192746][T10487] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 535.192773][T10487] ? rcu_is_watching+0x15/0xb0 [ 535.192836][T10487] kobject_add_internal+0x631/0xd10 [ 535.192871][T10487] kobject_add+0x163/0x240 [ 535.192902][T10487] ? __pfx_kobject_add+0x10/0x10 [ 535.192931][T10487] ? lockdep_hardirqs_on+0x7a/0x110 [ 535.192956][T10487] ? rt_mutex_slowunlock+0x1cb/0x300 [ 535.192989][T10487] elevator_change_done+0x28a/0x5f0 [ 535.193013][T10487] ? __pfx_elevator_change_done+0x10/0x10 [ 535.193035][T10487] ? elv_update_nr_hw_queues+0x20c/0x290 [ 535.193058][T10487] elv_update_nr_hw_queues+0x22f/0x290 [ 535.193081][T10487] blk_mq_update_nr_hw_queues+0x11cb/0x1a80 [ 535.193107][T10487] ? lock_acquire+0x106/0x350 [ 535.193142][T10487] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 535.193173][T10487] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 535.193207][T10487] ? nbd_start_device+0x174/0xb20 [ 535.193233][T10487] nbd_start_device+0x17f/0xb20 [ 535.193260][T10487] ? device_create_file+0xf4/0x1b0 [ 535.193287][T10487] nbd_genl_connect+0x1651/0x1c80 [ 535.193311][T10487] ? __pfx___schedule+0x10/0x10 [ 535.193337][T10487] ? __pfx_nbd_genl_connect+0x10/0x10 [ 535.193359][T10487] ? irqentry_exit+0x218/0x760 [ 535.193382][T10487] ? lockdep_hardirqs_on+0x7a/0x110 [ 535.193406][T10487] ? irqentry_exit+0x218/0x760 [ 535.193435][T10487] ? __pfx_nbd_genl_connect+0x10/0x10 [ 535.193463][T10487] genl_family_rcv_msg_doit+0x22a/0x330 [ 535.193495][T10487] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 535.193528][T10487] ? lockdep_hardirqs_on+0x7a/0x110 [ 535.193552][T10487] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 535.193580][T10487] genl_rcv_msg+0x61c/0x7a0 [ 535.193609][T10487] ? __pfx_genl_rcv_msg+0x10/0x10 [ 535.193635][T10487] ? __pfx_nbd_genl_connect+0x10/0x10 [ 535.193664][T10487] netlink_rcv_skb+0x232/0x4b0 [ 535.193685][T10487] ? __pfx_genl_rcv_msg+0x10/0x10 [ 535.193711][T10487] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 535.193738][T10487] ? netlink_deliver_tap+0x2e/0x1b0 [ 535.193758][T10487] ? netlink_deliver_tap+0x2e/0x1b0 [ 535.193782][T10487] genl_rcv+0x28/0x40 [ 535.193814][T10487] netlink_unicast+0x780/0x920 [ 535.193849][T10487] netlink_sendmsg+0x813/0xb40 [ 535.193872][T10487] ? irqentry_exit+0x218/0x760 [ 535.193898][T10487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 535.193926][T10487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 535.193947][T10487] sock_sendmsg_nosec+0x112/0x150 [ 535.193977][T10487] ____sys_sendmsg+0x55c/0x870 [ 535.194003][T10487] ? __pfx_____sys_sendmsg+0x10/0x10 [ 535.194029][T10487] ? import_iovec+0x73/0xa0 [ 535.194060][T10487] ___sys_sendmsg+0x2a5/0x360 [ 535.194082][T10487] ? __lock_acquire+0x6b5/0x2d10 [ 535.194106][T10487] ? __pfx____sys_sendmsg+0x10/0x10 [ 535.194137][T10487] ? futex_wait+0x2a2/0x390 [ 535.194242][T10487] ? __fget_files+0x2a/0x420 [ 535.194268][T10487] ? __fget_files+0x3a6/0x420 [ 535.194298][T10487] __x64_sys_sendmsg+0x1c3/0x2a0 [ 535.194321][T10487] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 535.194348][T10487] ? rcu_is_watching+0x15/0xb0 [ 535.194377][T10487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.194397][T10487] do_syscall_64+0x15f/0xf80 [ 535.194421][T10487] ? trace_irq_disable+0x3b/0x140 [ 535.194452][T10487] ? clear_bhb_loop+0x40/0x90 [ 535.194475][T10487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.194496][T10487] RIP: 0033:0x7f70b486ce59 [ 535.194516][T10487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.194534][T10487] RSP: 002b:00007f70b2ac6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 535.194555][T10487] RAX: ffffffffffffffda RBX: 00007f70b4ae5fa0 RCX: 00007f70b486ce59 [ 535.194571][T10487] RDX: 0000000000000004 RSI: 0000200000001ac0 RDI: 0000000000000006 [ 535.194585][T10487] RBP: 00007f70b4902d6f R08: 0000000000000000 R09: 0000000000000000 [ 535.194599][T10487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.194612][T10487] R13: 00007f70b4ae6038 R14: 00007f70b4ae5fa0 R15: 00007fff87f23ed8 [ 535.194634][T10487] [ 535.196680][ T56] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 535.202625][ T491] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 535.217737][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 535.225034][T10495] find_entry called with index >= next_index [ 535.225079][T10495] find_entry called with index >= next_index [ 535.225089][T10495] find_entry called with index >= next_index [ 535.225097][T10495] find_entry called with index >= next_index [ 535.225105][T10495] find_entry called with index >= next_index [ 535.225168][T10495] add_index: next_index = 0. Resetting! [ 535.225187][T10495] find_entry called with index >= next_index [ 535.225195][T10495] find_entry called with index >= next_index [ 535.225202][T10495] find_entry called with index >= next_index [ 535.233685][ T67] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 535.382176][T10495] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1142'. [ 535.591310][ T668] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 535.591439][ T668] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 535.591600][ T668] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 535.591945][ T668] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 535.592296][ T491] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 535.592485][ T491] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 535.592937][ T491] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 535.593091][ T491] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 535.593223][ T491] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 535.594328][ T491] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 535.595477][ T491] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 535.595795][ T491] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 535.596088][ T491] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 535.597338][ T491] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 535.597488][ T491] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 535.597659][ T491] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 535.597772][ T491] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 535.601288][ T491] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 535.601336][ T491] ================================================================== [ 535.601346][ T491] BUG: KASAN: use-after-free in copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 535.601383][ T491] Read of size 4096 at addr ffff888026541000 by task kworker/u8:17/491 [ 535.601400][ T491] [ 535.601485][ T491] CPU: 0 UID: 0 PID: 491 Comm: kworker/u8:17 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 535.601520][ T491] Tainted: [L]=SOFTLOCKUP [ 535.601528][ T491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 535.601541][ T491] Workqueue: loop5 loop_workfn [ 535.601607][ T491] Call Trace: [ 535.601616][ T491] [ 535.601624][ T491] dump_stack_lvl+0xe8/0x150 [ 535.601651][ T491] print_address_description+0x55/0x1e0 [ 535.601685][ T491] ? copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 535.601709][ T491] print_report+0x58/0x70 [ 535.601730][ T491] kasan_report+0x117/0x150 [ 535.601760][ T491] ? copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 535.601787][ T491] kasan_check_range+0x264/0x2c0 [ 535.601814][ T491] ? copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 535.601839][ T491] __asan_memcpy+0x29/0x70 [ 535.601863][ T491] copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 535.601896][ T491] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 535.601921][ T491] ? rcu_is_watching+0x15/0xb0 [ 535.601945][ T491] ? shmem_write_begin+0x1ce/0x320 [ 535.602009][ T491] generic_perform_write+0x5b1/0x8b0 [ 535.602036][ T491] ? __pfx_generic_perform_write+0x10/0x10 [ 535.602056][ T491] ? __mark_inode_dirty+0x4cf/0x13b0 [ 535.602103][ T491] ? preempt_count_add+0x91/0x190 [ 535.602159][ T491] ? mnt_put_write_access_file+0xbf/0x100 [ 535.602188][ T491] ? file_update_time_flags+0x406/0x4b0 [ 535.602219][ T491] shmem_file_write_iter+0xfb/0x120 [ 535.602242][ T491] lo_rw_aio+0xef0/0x1170 [ 535.602273][ T491] ? __pfx_lo_rw_aio+0x10/0x10 [ 535.602299][ T491] ? kthread_associate_blkcg+0x30f/0x600 [ 535.602324][ T491] ? kthread_associate_blkcg+0x490/0x600 [ 535.602344][ T491] ? rt_spin_unlock+0x160/0x200 [ 535.602374][ T491] loop_process_work+0x637/0x11b0 [ 535.602408][ T491] ? __pfx_loop_process_work+0x10/0x10 [ 535.602436][ T491] ? rcu_is_watching+0x15/0xb0 [ 535.602458][ T491] ? trace_hrtimer_start+0x82/0x200 [ 535.602522][ T491] ? hrtimer_start_range_ns_common+0x821/0xba0 [ 535.602549][ T491] ? rcu_is_watching+0x15/0xb0 [ 535.602573][ T491] ? do_raw_spin_lock+0x12b/0x2f0 [ 535.602600][ T491] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 535.602627][ T491] ? rcu_is_watching+0x15/0xb0 [ 535.602649][ T491] ? process_one_work+0x8be/0x1630 [ 535.602673][ T491] ? rcu_is_watching+0x15/0xb0 [ 535.602694][ T491] ? lock_acquire+0x5f/0x350 [ 535.602714][ T491] ? rcu_is_watching+0x15/0xb0 [ 535.602738][ T491] ? process_one_work+0x8be/0x1630 [ 535.602762][ T491] process_one_work+0x98b/0x1630 [ 535.602794][ T491] ? __pfx_process_one_work+0x10/0x10 [ 535.602818][ T491] ? do_raw_spin_lock+0x12b/0x2f0 [ 535.602851][ T491] worker_thread+0xb49/0x1140 [ 535.602886][ T491] kthread+0x388/0x470 [ 535.602906][ T491] ? __pfx_worker_thread+0x10/0x10 [ 535.602930][ T491] ? __pfx_kthread+0x10/0x10 [ 535.602950][ T491] ret_from_fork+0x514/0xb70 [ 535.602973][ T491] ? __pfx_ret_from_fork+0x10/0x10 [ 535.602995][ T491] ? __switch_to+0xc79/0x1410 [ 535.603014][ T491] ? __pfx_kthread+0x10/0x10 [ 535.603034][ T491] ret_from_fork_asm+0x1a/0x30 [ 535.603065][ T491] [ 535.603073][ T491] [ 535.603078][ T491] The buggy address belongs to the physical page: [ 535.603092][ T491] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x200000000 pfn:0x26541 [ 535.603114][ T491] flags: 0x80000000000000(node=0|zone=1) [ 535.603137][ T491] raw: 0080000000000000 ffffea000190da88 ffffea0001795208 0000000000000000 [ 535.603154][ T491] raw: 0000000200000000 0000000000000000 00000000ffffffff 0000000000000000 [ 535.603164][ T491] page dumped because: kasan: bad access detected [ 535.603177][ T491] page_owner tracks the page as freed [ 535.603184][ T491] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xdc0(GFP_KERNEL|__GFP_ZERO), pid 10495, tgid 10494 (syz.5.1142), ts 534808016080, free_ts 535597911918 [ 535.603213][ T491] post_alloc_hook+0x1f9/0x250 [ 535.603237][ T491] get_page_from_freelist+0x27d6/0x2850 [ 535.603255][ T491] __alloc_frozen_pages_noprof+0x18d/0x380 [ 535.603272][ T491] alloc_pages_mpol+0xd1/0x380 [ 535.603315][ T491] alloc_pages_noprof+0xd2/0x2f0 [ 535.603331][ T491] lmLogInit+0x357/0x1a00 [ 535.603403][ T491] lmLogOpen+0x4e1/0xfa0 [ 535.603421][ T491] jfs_mount_rw+0xee/0x670 [ 535.603483][ T491] jfs_fill_super+0x754/0xd80 [ 535.603513][ T491] get_tree_bdev_flags+0x431/0x4f0 [ 535.603540][ T491] vfs_get_tree+0x92/0x2a0 [ 535.603564][ T491] do_new_mount+0x341/0xd30 [ 535.603583][ T491] __se_sys_mount+0x31d/0x420 [ 535.603602][ T491] do_syscall_64+0x15f/0xf80 [ 535.603622][ T491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.603644][ T491] page last free pid 7117 tgid 7117 stack trace: [ 535.603655][ T491] __free_frozen_pages+0x1075/0x11b0 [ 535.603679][ T491] lmLogShutdown+0x44e/0x850 [ 535.603698][ T491] lmLogClose+0x28a/0x520 [ 535.603718][ T491] jfs_umount+0x2fb/0x3d0 [ 535.603752][ T491] jfs_put_super+0x8c/0x190 [ 535.603777][ T491] generic_shutdown_super+0x13d/0x2d0 [ 535.603804][ T491] kill_block_super+0x44/0x90 [ 535.603827][ T491] deactivate_locked_super+0xbc/0x130 [ 535.603849][ T491] cleanup_mnt+0x437/0x4d0 [ 535.603872][ T491] task_work_run+0x1d9/0x270 [ 535.603891][ T491] exit_to_user_mode_loop+0xf3/0x4d0 [ 535.603908][ T491] do_syscall_64+0x33e/0xf80 [ 535.603928][ T491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.603945][ T491] [ 535.603951][ T491] Memory state around the buggy address: [ 535.603962][ T491] ffff888026540f00: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 535.603974][ T491] ffff888026540f80: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 535.604020][ T491] >ffff888026541000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 535.604030][ T491] ^ [ 535.604040][ T491] ffff888026541080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 535.604053][ T491] ffff888026541100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 535.604062][ T491] ================================================================== [ 535.616787][ T7117] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 535.618293][ T491] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 535.618320][ T491] CPU: 0 UID: 0 PID: 491 Comm: kworker/u8:17 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 535.618347][ T491] Tainted: [L]=SOFTLOCKUP [ 535.618354][ T491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 535.618368][ T491] Workqueue: loop5 loop_workfn [ 535.618401][ T491] Call Trace: [ 535.618409][ T491] [ 535.618418][ T491] vpanic+0x56c/0xa60 [ 535.618446][ T491] ? __pfx_vpanic+0x10/0x10 [ 535.618470][ T491] ? rcu_is_watching+0x15/0xb0 [ 535.618503][ T491] panic+0xc5/0xd0 [ 535.618526][ T491] ? __pfx_panic+0x10/0x10 [ 535.618551][ T491] ? preempt_schedule_thunk+0x16/0x40 [ 535.618572][ T491] ? copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 535.618597][ T491] ? preempt_schedule_thunk+0x16/0x40 [ 535.618619][ T491] ? copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 535.618644][ T491] check_panic_on_warn+0x89/0xb0 [ 535.618667][ T491] ? copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 535.618690][ T491] end_report+0x73/0x170 [ 535.618718][ T491] ? copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 535.618742][ T491] kasan_report+0x128/0x150 [ 535.618769][ T491] ? copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 535.618796][ T491] kasan_check_range+0x264/0x2c0 [ 535.618824][ T491] ? copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 535.618849][ T491] __asan_memcpy+0x29/0x70 [ 535.618872][ T491] copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 535.618905][ T491] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 535.618930][ T491] ? rcu_is_watching+0x15/0xb0 [ 535.618954][ T491] ? shmem_write_begin+0x1ce/0x320 [ 535.618982][ T491] generic_perform_write+0x5b1/0x8b0 [ 535.619008][ T491] ? __pfx_generic_perform_write+0x10/0x10 [ 535.619029][ T491] ? __mark_inode_dirty+0x4cf/0x13b0 [ 535.619048][ T491] ? preempt_count_add+0x91/0x190 [ 535.619074][ T491] ? mnt_put_write_access_file+0xbf/0x100 [ 535.619103][ T491] ? file_update_time_flags+0x406/0x4b0 [ 535.619131][ T491] shmem_file_write_iter+0xfb/0x120 [ 535.619152][ T491] lo_rw_aio+0xef0/0x1170 [ 535.619186][ T491] ? __pfx_lo_rw_aio+0x10/0x10 [ 535.619211][ T491] ? kthread_associate_blkcg+0x30f/0x600 [ 535.619235][ T491] ? kthread_associate_blkcg+0x490/0x600 [ 535.619256][ T491] ? rt_spin_unlock+0x160/0x200 [ 535.619285][ T491] loop_process_work+0x637/0x11b0 [ 535.619320][ T491] ? __pfx_loop_process_work+0x10/0x10 [ 535.619346][ T491] ? rcu_is_watching+0x15/0xb0 [ 535.619368][ T491] ? trace_hrtimer_start+0x82/0x200 [ 535.619396][ T491] ? hrtimer_start_range_ns_common+0x821/0xba0 [ 535.619421][ T491] ? rcu_is_watching+0x15/0xb0 [ 535.619445][ T491] ? do_raw_spin_lock+0x12b/0x2f0 [ 535.619474][ T491] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 535.619505][ T491] ? rcu_is_watching+0x15/0xb0 [ 535.619526][ T491] ? process_one_work+0x8be/0x1630 [ 535.619550][ T491] ? rcu_is_watching+0x15/0xb0 [ 535.619569][ T491] ? lock_acquire+0x5f/0x350 [ 535.619587][ T491] ? rcu_is_watching+0x15/0xb0 [ 535.619608][ T491] ? process_one_work+0x8be/0x1630 [ 535.619628][ T491] process_one_work+0x98b/0x1630 [ 535.619661][ T491] ? __pfx_process_one_work+0x10/0x10 [ 535.619684][ T491] ? do_raw_spin_lock+0x12b/0x2f0 [ 535.619716][ T491] worker_thread+0xb49/0x1140 [ 535.619752][ T491] kthread+0x388/0x470 [ 535.619771][ T491] ? __pfx_worker_thread+0x10/0x10 [ 535.619795][ T491] ? __pfx_kthread+0x10/0x10 [ 535.619814][ T491] ret_from_fork+0x514/0xb70 [ 535.619838][ T491] ? __pfx_ret_from_fork+0x10/0x10 [ 535.619861][ T491] ? __switch_to+0xc79/0x1410 [ 535.619880][ T491] ? __pfx_kthread+0x10/0x10 [ 535.619899][ T491] ret_from_fork_asm+0x1a/0x30 [ 535.619930][ T491] [ 535.620220][ T491] Kernel Offset: disabled