last executing test programs: 10m47.482572694s ago: executing program 4 (id=466): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x10, &(0x7f0000000080)={[{@nodiscard}, {@nocheckpoint_merge}, {@fastboot}, {@background_gc_off}, {@flush_merge}, {@fault_injection={'fault_injection', 0x3d, 0x4ef}}, {@grpjquota={'grpjquota', 0x3d, 'noacl'}}, {@noacl}, {@noextent_cache}, {@alloc_mode_def}, {@noextent_cache}, {@grpjquota}, {@noquota}]}, 0x1, 0x550c, &(0x7f00000089c0)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r0, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 10m46.813403122s ago: executing program 4 (id=470): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="140000"], 0x18}, 0xc800) recvmmsg(r4, &(0x7f0000001140), 0x700, 0x2, 0x0) 10m43.850055979s ago: executing program 4 (id=479): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000100)={[{@oldalloc}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@noblock_validity}]}, 0x1, 0x5a8, &(0x7f0000001900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 10m43.417325155s ago: executing program 4 (id=482): syz_mount_image$exfat(&(0x7f0000000700), &(0x7f0000000640)='./file0\x00', 0x810450, &(0x7f0000000280)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d312c646d61736b3d30303030303030303030303033373737373737373737372c696f636861727365743d6b6f69382d72752c696f636861727365743d63703433372c6e616d65636173653d312c6e616d65636173653d312c009a8d4d9016e3d8128333e260a1b926dd0c5f7619710e03ea1ae6521494f87e5737dc0c5bec3f76668140a15258818b6fbc51f9a13940e63c378688559c351287f0e09ef0b7330db20eef797e5004484649e7f5fb64b746683a75b9ed822f5ae34fac"], 0x1, 0x1501, &(0x7f0000000780)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) fchdir(r0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r1, 0x4b49, 0x0) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x1304c24, 0x0) 10m43.045466815s ago: executing program 4 (id=484): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="000000000000000000000000000000009500000000000000"], &(0x7f00000003c0)='GPL\x00'}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) close_range(r0, r0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) getresgid(0x0, 0x0, 0x0) close(0xffffffffffffffff) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_opts(r3, 0x0, 0x4, 0x0, &(0x7f0000000cc0)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)="18c44975a308f7bc8870750ef9a660d182c982352552b03aef593e77d99c5dae0706af766324fa3aecf225d7c722a4cadf", &(0x7f0000000180), 0x3dbc4689, r4}, 0x38) 10m42.421498282s ago: executing program 4 (id=489): unshare(0x26020480) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 10m40.730651533s ago: executing program 32 (id=489): unshare(0x26020480) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 8m26.233643079s ago: executing program 2 (id=908): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={0xffffffffffffffff, r0, 0x1, 0x0, @void}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x20006, @mcast1, 0xb}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 8m25.013486305s ago: executing program 2 (id=914): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 8m24.225394919s ago: executing program 2 (id=915): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/120, 0x78}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 8m22.392662225s ago: executing program 2 (id=919): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000001640)=ANY=[], 0x20, 0x6de, &(0x7f0000000f40)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r0 = socket(0x15, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) 8m21.203068386s ago: executing program 2 (id=923): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix_mp={0x80000000, 0x9, 0x31363553, 0x0, 0xa, [{0x4, 0x5}, {0x6, 0x7f36}, {0x8, 0x70}, {0x3, 0xf}, {0xa, 0xff}, {0x6, 0x589}, {0x8, 0x7}, {0x10041, 0x8}], 0x10, 0x8, 0x2, 0x2, 0x5}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x10008d0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x444b, &(0x7f000000cd00)="$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") mkdir(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) 8m19.824057748s ago: executing program 2 (id=929): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000300)={0x2, {{0xa, 0x4e21, 0x50000000, @local, 0xb}}}, 0x88) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x8f) socketpair$unix(0x1, 0x2, 0x0, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_mount_image$bcachefs(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x8000, &(0x7f0000000480)=ANY=[@ANYRESHEX], 0x1, 0x5a2a, &(0x7f00000010c0)="$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") socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x68042, 0x62) r3 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r3, 0x2007ffb) sendfile(r2, r3, 0x0, 0x1000000201005) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'dac02\x00', [0x4f27, 0x5, 0x2, 0x47, 0x2, 0xcc7, 0xfff, 0x7, 0x5, 0x3ff, 0x7f, 0x1600, 0x1, 0x0, 0x3, 0xe1cb, 0xff7fffc0, 0x0, 0x2f, 0x395, 0x80000089, 0xfffffffd, 0x7, 0x1007, 0xffffeadb, 0x3, 0x1003c, 0x5, 0x4, 0x8000000, 0x5]}) syz_emit_ethernet(0x6d, &(0x7f0000000540)={@multicast, @empty, @val={@void, {0x8100, 0x4, 0x0, 0x4}}, {@llc_tr={0x11, {@llc={0xdc, 0x42, "5515", "33762244bebd569637c54853a92ce976a7b67d38b83a5b91e1d18914ab289ed24815f822fa9fa12ecefe8ebc310d9e6ede7320707a57e429a3ca4ff269cc1b9e9e3f7e358b8e285f0dc95d83476e62a094c7b950e3dae6"}}}}}, 0x0) 8m4.697460202s ago: executing program 33 (id=929): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000300)={0x2, {{0xa, 0x4e21, 0x50000000, @local, 0xb}}}, 0x88) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x8f) socketpair$unix(0x1, 0x2, 0x0, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_mount_image$bcachefs(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x8000, &(0x7f0000000480)=ANY=[@ANYRESHEX], 0x1, 0x5a2a, &(0x7f00000010c0)="$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") socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x68042, 0x62) r3 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r3, 0x2007ffb) sendfile(r2, r3, 0x0, 0x1000000201005) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'dac02\x00', [0x4f27, 0x5, 0x2, 0x47, 0x2, 0xcc7, 0xfff, 0x7, 0x5, 0x3ff, 0x7f, 0x1600, 0x1, 0x0, 0x3, 0xe1cb, 0xff7fffc0, 0x0, 0x2f, 0x395, 0x80000089, 0xfffffffd, 0x7, 0x1007, 0xffffeadb, 0x3, 0x1003c, 0x5, 0x4, 0x8000000, 0x5]}) syz_emit_ethernet(0x6d, &(0x7f0000000540)={@multicast, @empty, @val={@void, {0x8100, 0x4, 0x0, 0x4}}, {@llc_tr={0x11, {@llc={0xdc, 0x42, "5515", "33762244bebd569637c54853a92ce976a7b67d38b83a5b91e1d18914ab289ed24815f822fa9fa12ecefe8ebc310d9e6ede7320707a57e429a3ca4ff269cc1b9e9e3f7e358b8e285f0dc95d83476e62a094c7b950e3dae6"}}}}}, 0x0) 3m18.67171517s ago: executing program 1 (id=1726): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) sched_getaffinity(r3, 0x8, &(0x7f0000000240)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x7, 0xfff, 0x7}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300), &(0x7f00000001c0), 0xd35, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r5, 0x2000300, 0xe, 0x30, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f000001ca40)={{{@in6=@mcast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@mcast2}}, &(0x7f0000001740)=0xe8) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r9, 0x0, 0x0) lchown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000001aa40)="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", 0x2000, &(0x7f00000018c0)={&(0x7f00000002c0)={0x50, 0x0, 0x3e6, {0x7, 0x2b, 0x1, 0x8, 0x9, 0x7, 0xfffffff8, 0x7fff, 0x0, 0x0, 0x80, 0x3fb9}}, &(0x7f0000000340)={0x18, 0x0, 0xffffffff, {0x3}}, &(0x7f0000000400)={0x18, 0x0, 0xfffffffffffff800, {0x105}}, &(0x7f0000000580)={0x18, 0x0, 0x100000000}, &(0x7f00000005c0)={0x18, 0x0, 0x0, {0x8}}, &(0x7f0000000600)={0x28, 0x0, 0x7ff, {{0x8, 0x7fffffffffffffff, 0x2, r3}}}, &(0x7f0000000680)={0x60, 0x0, 0x2, {{0xdb9, 0x3, 0x199f2f7000000000, 0x100000001, 0x20000000000000, 0x800, 0x8001}}}, &(0x7f0000000700)={0x18, 0x0, 0x10001, {0x9}}, &(0x7f000001cb40)=ANY=[@ANYBLOB="14000000daffffff080000000000000047504c0008b2507ad98a077f8cca3d1cc9d31f20623e843f90e4d7b90f2ccc1f1dc022c98149452bf083720045d34710d90706593078e11999"], &(0x7f0000000780)={0x20, 0x0, 0x8000000000000001, {0x0, 0x3}}, &(0x7f0000000880)={0x78, 0x0, 0x9, {0x200, 0x7, 0x0, {0x3, 0x7f, 0x100000000, 0x10000, 0xffffffffffffffff, 0x3, 0x6, 0x1ff, 0xd, 0x6000, 0x0, 0x0, 0x0, 0x3}}}, &(0x7f0000000900)={0x90, 0x0, 0x6, {0x2, 0x1, 0x8, 0x80000000, 0xefa4, 0x1, {0x6, 0x10001, 0xe, 0x2, 0x9, 0x9, 0x4, 0x5, 0x3, 0xa000, 0xe, 0xee00, 0xffffffffffffffff, 0x9, 0xd94}}}, &(0x7f0000000a40)={0x10, 0xfffffffffffffff5, 0x5}, &(0x7f0000000f40)={0x10, 0x0, 0x8d}, &(0x7f0000001540)={0xa0, 0x0, 0x0, {{0x1, 0x1, 0x9, 0x0, 0x10, 0x3, {0x1, 0x3, 0x40, 0xed, 0x1, 0x9, 0xa, 0xe71, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x3957, 0x9}}, {0x0, 0x4}}}, &(0x7f0000001600)={0x20, 0x0, 0xfffffffffffffffe, {0x61bb, 0x4, 0xc58, 0x1}}, &(0x7f0000001780)={0x130, 0x0, 0x4, {0x0, 0x6, 0x0, '\x00', {0x1, 0x100, 0x3ff, 0x5, r8, 0x0, 0xb000, '\x00', 0x5, 0x2, 0x100000000, 0xb5, {0x7}, {0x9, 0x8}, {0xd2, 0x4}, {0x0, 0x2a2c}, 0x7ca3, 0x40, 0xffffffff, 0x646a}}}}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r6, 0xc01864b0, &(0x7f0000000080)={r7, 0x0, 0x1, 0x0, 0x3}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000100)) 3m14.885173837s ago: executing program 1 (id=1738): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}, 0x10}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000004780)=[{&(0x7f0000003280)=""/148, 0x94}, {&(0x7f0000003440)=""/63, 0x3f}, {0x0}], 0x3}, 0x100}], 0x3, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000500)='./bus\x00', 0x2000006, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB="2c6f626a5f636f6c61a3ea000073683c000e1c906ec52a91a85a14cb7fb0c282c5737a29f37a113e"], 0x28, 0x363, &(0x7f0000000100)="$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") openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x120) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) fchmod(0xffffffffffffffff, 0x42) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) shmctl$SHM_LOCK(0x0, 0xb) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000001700)=ANY=[], 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendto$packet(r2, 0x0, 0x0, 0x800, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x2, 0x4, 0x0, 0x22, 0x0, 'syz1\x00', 0x0}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2880853, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 3m13.38196635s ago: executing program 1 (id=1746): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) ptrace(0x10, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@private=0xa010120, 0x2, 0x0, 0x4e21, 0xfffc, 0x2, 0x80, 0x0, 0x2f}, {0x0, 0x4, 0x5, 0x0, 0x20, 0x0, 0x0, 0x6}, {0xffffbffffffffffc, 0xfffffffffffffffc, 0x0, 0x1000000000}, 0x0, 0xfffffffe, 0x1, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x35}, 0x4d4, 0x3c}, 0x2, @in=@local, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf}}, 0xe8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111}}, 0x20) geteuid() openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 3m12.306256333s ago: executing program 1 (id=1749): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000100)=0x7f, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e29, 0xffffffff, @private0={0xfc, 0x0, '\x00', 0x2}, 0x5}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) 3m11.008745387s ago: executing program 1 (id=1756): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x8f) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$bcachefs(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x8000, &(0x7f0000000480)=ANY=[@ANYRESHEX], 0x1, 0x5a2a, &(0x7f00000010c0)="$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") socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x68042, 0x62) r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r1, r2, 0x0, 0x1000000201005) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'dac02\x00', [0x4f27, 0x5, 0x2, 0x47, 0x2, 0xcc7, 0xfff, 0x7, 0x5, 0x3ff, 0x7f, 0x1600, 0x1, 0x0, 0x3, 0xe1cb, 0xff7fffc0, 0x0, 0x2f, 0x395, 0x80000089, 0xfffffffd, 0x7, 0x1007, 0xffffeadb, 0x3, 0x1003c, 0x5, 0x4, 0x8000000, 0x5]}) syz_emit_ethernet(0x6d, &(0x7f0000000540)={@multicast, @empty, @val={@void, {0x8100, 0x4, 0x0, 0x4}}, {@llc_tr={0x11, {@llc={0xdc, 0x42, "5515", "33762244bebd569637c54853a92ce976a7b67d38b83a5b91e1d18914ab289ed24815f822fa9fa12ecefe8ebc310d9e6ede7320707a57e429a3ca4ff269cc1b9e9e3f7e358b8e285f0dc95d83476e62a094c7b950e3dae6"}}}}}, 0x0) 3m4.97804764s ago: executing program 1 (id=1764): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) unshare(0x2c020400) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = io_uring_setup(0x2ef3, &(0x7f0000000000)={0x0, 0x5716, 0x80, 0x0, 0x1}) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c"], 0x10b8}, 0xff00) close_range(r2, r3, 0x0) 2m49.571202962s ago: executing program 34 (id=1764): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) unshare(0x2c020400) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = io_uring_setup(0x2ef3, &(0x7f0000000000)={0x0, 0x5716, 0x80, 0x0, 0x1}) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c"], 0x10b8}, 0xff00) close_range(r2, r3, 0x0) 2m28.934343751s ago: executing program 8 (id=1842): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x2c, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 2m25.191491218s ago: executing program 8 (id=1849): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m21.892971342s ago: executing program 8 (id=1861): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='coredump_filter\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) r1 = syz_io_uring_setup(0x2e3b, &(0x7f0000000240)={0x0, 0x69e1, 0x10000, 0x0, 0x295, 0x0, r0}, &(0x7f00000003c0)=0x0, &(0x7f0000001040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}) io_uring_enter(r1, 0x567, 0xa1ff, 0x0, 0x0, 0x0) 2m21.622653664s ago: executing program 8 (id=1865): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000009500000000000008000000000000000000000000c7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r1, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2m21.435342569s ago: executing program 8 (id=1867): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000300)={0x2, {{0xa, 0x4e21, 0x50000000, @local, 0xb}}}, 0x88) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x8f) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$bcachefs(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x8000, &(0x7f0000000480)=ANY=[@ANYRESHEX], 0x1, 0x5a2a, &(0x7f00000010c0)="$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") socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x68042, 0x62) r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r1, r2, 0x0, 0x1000000201005) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'dac02\x00', [0x4f27, 0x5, 0x2, 0x47, 0x2, 0xcc7, 0xfff, 0x7, 0x5, 0x3ff, 0x7f, 0x1600, 0x1, 0x0, 0x3, 0xe1cb, 0xff7fffc0, 0x0, 0x2f, 0x395, 0x80000089, 0xfffffffd, 0x7, 0x1007, 0xffffeadb, 0x3, 0x1003c, 0x5, 0x4, 0x8000000, 0x5]}) syz_emit_ethernet(0x6d, &(0x7f0000000540)={@multicast, @empty, @val={@void, {0x8100, 0x4, 0x0, 0x4}}, {@llc_tr={0x11, {@llc={0xdc, 0x42, "5515", "33762244bebd569637c54853a92ce976a7b67d38b83a5b91e1d18914ab289ed24815f822fa9fa12ecefe8ebc310d9e6ede7320707a57e429a3ca4ff269cc1b9e9e3f7e358b8e285f0dc95d83476e62a094c7b950e3dae6"}}}}}, 0x0) 2m16.801024207s ago: executing program 8 (id=1873): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="000500004ec6"}) 2m1.301303885s ago: executing program 35 (id=1873): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="000500004ec6"}) 18.196385831s ago: executing program 3 (id=2143): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x6}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x3}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r3, 0x1, 0x80, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x87}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$tipc(r6, 0x0, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e62}, 0x6e) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x0, 0x5, 0x8, 0x6, 0x2, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x3}, @jmp={0x5, 0x0, 0x8, 0xb, 0x4, 0x50, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xe2, &(0x7f00000004c0)=""/226, 0x41000, 0x21, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x6, 0x100, 0x3}, 0x10, 0x28817, 0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000640)=[{0x0, 0x4, 0x9, 0x9}, {0x4, 0x1, 0x2, 0x6}, {0x2, 0x3, 0x9, 0x2}, {0x1, 0x1, 0x0, 0xb}, {0x0, 0x3, 0x9, 0xc}, {0x0, 0x2, 0x1, 0x4}, {0x4, 0x3, 0x5, 0x1}], 0x10, 0x8}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="340000001000010829bd7000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="28800000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08006e1300000000"], 0x34}, 0x1, 0x0, 0x0, 0x5b4efbb362ec214f}, 0x7000000) r9 = syz_open_dev$vim2m(&(0x7f0000000100), 0x80000000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000010c0)=ANY=[@ANYBLOB="4800000010003b000000000000060000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000280012800b00010065727370616e0000180002800400120006000f00ef210000060011004e230000"], 0x48}}, 0x40080c0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa4010203010902240001000000000904000002437d67000905fc57"], 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r9, 0x40045612, &(0x7f0000000080)=0x2) 17.782067596s ago: executing program 7 (id=2144): pipe(&(0x7f0000000500)) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000380)='./bus\x00', 0x2830804, &(0x7f00000000c0)=ANY=[], 0x0, 0x290, &(0x7f0000000800)="$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") mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x51) r0 = getuid() lsetxattr$security_capability(&(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000140), &(0x7f0000000180)=@v3={0x3000000, [{0x0, 0x89}, {0x6, 0x5}], r0}, 0x18, 0x1) io_submit(0x0, 0x0, &(0x7f0000000040)) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_tcp(0x2, 0x1, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) socket$inet6(0x10, 0x2, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r3, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4040940}, 0x0) 17.01498238s ago: executing program 6 (id=2146): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x10, 0x7, 0x4, 0x400, {{0x1b, 0x4, 0x2, 0x4, 0x6c, 0x65, 0x0, 0x7, 0x29, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x1f, 0x36, [@rand_addr=0x64010100, @remote, @loopback, @private=0xa010100, @local, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0xd}]}, @generic={0x82, 0x4, "c0e0"}, @end, @ssrr={0x89, 0x27, 0x59, [@dev={0xac, 0x14, 0x14, 0x2a}, @dev={0xac, 0x14, 0x14, 0x24}, @loopback, @multicast2, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2, @multicast2, @multicast2, @rand_addr=0x64010102]}, @timestamp_addr={0x44, 0xc, 0x29, 0x1, 0x3, [{@multicast1, 0xffffff01}]}]}}}}}) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @multicast}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYRES32], 0x50) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x200001, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x46}}, 0x14) read$FUSE(r2, &(0x7f00000060c0)={0x2020}, 0x2020) syz_mount_image$udf(&(0x7f0000001000), &(0x7f0000001040)='./file0\x00', 0x0, &(0x7f0000001080), 0x1, 0xffb, &(0x7f00000010c0)="$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") 16.793682509s ago: executing program 5 (id=2147): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001300)={0x84, &(0x7f0000000e40)=ANY=[@ANYBLOB="050003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 16.498271666s ago: executing program 7 (id=2148): syz_open_dev$evdev(0x0, 0x0, 0x822b01) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 15.380190127s ago: executing program 6 (id=2150): r0 = socket$key(0xf, 0x3, 0x2) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x10008d0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x4440, &(0x7f00000088c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x40000000015, 0x5, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x40942, 0x0) copy_file_range(r5, 0x0, r4, 0x0, 0xfffffbffa003e458, 0x700000000000000) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0x8}}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$key(r0, 0x0, 0xc) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000380)={0x2c, &(0x7f0000000140)={0x0, 0x31, 0x2, {0x2}}, 0x0, &(0x7f00000002c0)={0x0, 0xf, 0x8, {0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x60, 0x4, 0x3, 0x0, "e92426ae", "2e6e6ab3"}}, 0x0}, 0x0) accept(r0, 0x0, 0x0) 14.348156164s ago: executing program 3 (id=2152): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./bus\x00', 0xc802, &(0x7f0000001980)=ANY=[@ANYBLOB="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"], 0x1, 0x5f85, &(0x7f0000008340)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x43440, 0x0, 0x1, 0x0, &(0x7f0000000040)) chdir(0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0xc8000, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 14.2457822s ago: executing program 9 (id=2153): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000004c0)=ANY=[], 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x420, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}]}) 14.170794759s ago: executing program 0 (id=2154): socket$packet(0x11, 0x2, 0x300) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x63}], 0x1}}], 0x1, 0x20008000) 13.426764005s ago: executing program 9 (id=2155): ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x1d, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) 13.241491525s ago: executing program 7 (id=2156): sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x20493859, 0x0, 0x0, 0x0, 0x5, 0xfeedcafe, 0x3, 0x7}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x0, 0x7, 0x7, 0x100000}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) 13.198963902s ago: executing program 0 (id=2157): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', 0x0}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000060c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 12.896411006s ago: executing program 5 (id=2158): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 12.751717889s ago: executing program 0 (id=2159): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000900)={0x1c, &(0x7f0000000a00)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000880)={0x2c, &(0x7f00000006c0)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0}) 12.122658003s ago: executing program 3 (id=2160): r0 = syz_create_resource$binfmt(&(0x7f0000000100)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c7278f1080ddb08f4fa303030fe309a240000000000000002f130300900000030303030303030303130", @ANYRES8=r1, @ANYRESDEC=0x0, @ANYBLOB=',']) syz_open_dev$loop(0x0, 0x3, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) accept4$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x0, 0x181800) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) 11.546000379s ago: executing program 6 (id=2161): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)=0x0) syz_open_procfs$namespace(r0, &(0x7f0000000240)='ns/ipc\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x80002, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x301300, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r2, 0x3b87, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a30000000001400000002"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a0300000000f5ffffff00010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a010200000000000000"], 0xe8}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000080)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x10) syz_open_dev$tty1(0xc, 0x4, 0x2) 11.173726545s ago: executing program 3 (id=2162): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000000040), &(0x7f0000000380)='./bus\x00', 0x8, &(0x7f0000000080)={[{@noflushoncommit}, {@autodefrag}, {@noacl}, {@compress_algo={'compress', 0x3d, 'no'}}, {@clear_cache}, {@noacl}, {@discard}, {@barrier}, {@nobarrier}]}, 0x1, 0x55ae, &(0x7f000000ac40)="$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") io_setup(0x7d, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x31a8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x1}, 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "fb7faf0400", "0d35db0d4af1cbcce779bbc24b53fc4988c215118dd14cb837de56339a336a19", "a9a9f902", "8891ea13f18ef0be"}, 0x13) 11.0816956s ago: executing program 9 (id=2163): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x287, &(0x7f0000001d00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @value=0x1}) r4 = add_key$user(0x0, &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000200)='\x00\x00', 0x2, 0xfffffffffffffffe) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x40002000}) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r6, r4}, &(0x7f00000000c0)=""/67, 0x43, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r7, 0x0, 0x40000c0) rename(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='./bus\x00') 10.962089937s ago: executing program 5 (id=2164): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(r0, r0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x894) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) 9.748103058s ago: executing program 9 (id=2165): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000480000000000000000000000000000000000000000488d8e02aa27db0f33a5a1666b119fe9058d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000380)) getuid() lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)) bpf$BPF_MAP_GET_FD_BY_ID(0x9, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)=ANY=[@ANYBLOB='fe=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000002540)='./file0\x00', &(0x7f0000002580)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000010000000000000004000000000000001000000000000000200000000000000010e123a773d6149fd642ad7b58662a14a810cbe38c47233d2398ecd6df47c6f4814cbb86d2b8efe796ecb4017bb520fc9df7a1dba9729f9a98b37bac7bb59a3c748949fd67b6ce004fb80ba7bced91c31084d20e0099edde7bb0e1a487f74351488f7c7c05856eef10d54effd1dc32d1d95f87d2b54014932ede2055af1d8e86a921a15d89c81a570f579c4e2ddb0697"], 0x24, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004900)="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", 0x2000, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ptype\x00') preadv(r4, &(0x7f0000000d40)=[{&(0x7f0000000bc0)=""/106, 0x6a}], 0x1, 0x6, 0xffffffff) 9.321903925s ago: executing program 6 (id=2166): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000000000000000000095000000000000"], &(0x7f00000003c0)='GPL\x00'}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) close_range(r0, r0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getresgid(0x0, 0x0, 0x0) close(0xffffffffffffffff) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_opts(r2, 0x0, 0x4, 0x0, &(0x7f0000000cc0)) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)="18c44975a308f7bc8870750ef9a660d182c982352552b03aef593e77d99c5dae0706af766324fa3aecf225d7c722a4cadf", &(0x7f0000000180), 0x3dbc4689, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r3}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) 7.651464533s ago: executing program 9 (id=2167): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x1, 0x1513, &(0x7f0000002d00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0xffffffe8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x0, 0x0, &(0x7f0000000d40)) landlock_restrict_self(0xffffffffffffffff, 0x0) readlink(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000780)=""/209, 0xd1) 7.507687439s ago: executing program 6 (id=2168): syz_init_net_socket$bt_l2cap(0x1f, 0x6, 0x0) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0xef}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 7.505973972s ago: executing program 3 (id=2169): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000180)={0x7, 0x9, 0x1, 0x0, 0x6}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x3}, 0xfe}, 0x18) r3 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000200), 0x408000, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e23, @remote}}, 0xa, 0x7, 0x7fff, 0xc33c}, &(0x7f0000000240)=0x98) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r5, 0x5425, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r6 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r6, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 6.737006019s ago: executing program 0 (id=2170): r0 = socket(0x28, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) faccessat2(0xffffffffffffff9c, 0x0, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(r4, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000b00)=""/81, 0x51}], 0x1}}], 0x1, 0x0, 0x0) 6.459787322s ago: executing program 7 (id=2171): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) ptrace(0x10, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@private=0xa010120, 0x2, 0x0, 0x4e21, 0xfffc, 0x2, 0x80, 0x0, 0x2f}, {0x0, 0x4, 0x5, 0x0, 0x20, 0x0, 0x0, 0x6}, {0xffffbffffffffffc, 0xfffffffffffffffc, 0x0, 0x1000000000}, 0x0, 0xfffffffe, 0x1, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x35}, 0x4d4, 0x3c}, 0x2, @in=@local, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf}}, 0xe8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111}}, 0x20) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, 0x0) ptrace$peek(0x1, r0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x11) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000092ecc620ac05c2773aeb010203010902240001000020000904c4"], 0x0) 6.43629585s ago: executing program 9 (id=2172): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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") mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000240)={0x84, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, 0x0) mount$9p_tcp(&(0x7f0000000000), 0x0, &(0x7f0000000080), 0x100040, &(0x7f0000000440)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[], [{@fowner_lt={'fowner<', r1}}, {@audit}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}, {@context={'context', 0x3d, 'system_u'}}, {@fowner_gt}]}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) rt_tgsigqueueinfo(0x0, 0x0, 0x3f, &(0x7f0000000300)={0x34, 0x7, 0x4}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = fanotify_init(0x1a, 0x800) fanotify_mark(r3, 0x441, 0x4800001a, 0xffffffffffffffff, 0x0) fanotify_mark(r3, 0x1, 0x20, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x5000003a, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) 5.535725153s ago: executing program 5 (id=2173): mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x400, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES64]) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x4, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) ioctl$sock_ifreq(0xffffffffffffffff, 0x8943, 0x0) shutdown(0xffffffffffffffff, 0x1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) syz_usb_connect(0x3, 0x36, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f00000030c0)={0x18, {"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", 0x1000}}, 0x1006) 4.489132196s ago: executing program 6 (id=2174): r0 = syz_pidfd_open(0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000002, 0x3ffe, r0, 0x26871000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='oom_adj\x00') syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x1, 0x1513, &(0x7f0000002d00)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffe8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x0, 0x0, &(0x7f0000000d40)) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f0000000200), &(0x7f0000000300)}, 0x20) landlock_restrict_self(0xffffffffffffffff, 0x0) readlink(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000780)=""/209, 0xd1) 3.76544724s ago: executing program 3 (id=2175): ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x1d, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) 2.358815036s ago: executing program 5 (id=2176): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800702, &(0x7f0000000100)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8001}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@noauto_da_alloc}, {@noload}, {@oldalloc}, {@resuid}]}, 0x2, 0x470, &(0x7f0000000dc0)="$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") chdir(&(0x7f0000000000)='./file0\x00') lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0x15, 0x0) unlink(&(0x7f0000000100)='./file0\x00') 2.34144174s ago: executing program 7 (id=2177): socket$igmp(0x2, 0x3, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x2, 0x6}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec85000000750000000400000007000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ptrace(0x4207, r2) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x1c}]}}}]}, 0x3c}}, 0x20048010) 1.508743855s ago: executing program 0 (id=2178): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) socket$netlink(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x1a0, 0x1a0, 0x1a0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@remote, @loopback, [0xffffff00, 0x0, 0xffffffff, 0xff], [0x0, 0xffffff00, 0xff000000, 0xff], 'veth1_virt_wifi\x00', 'ip6_vti0\x00', {}, {0xff}, 0xe4, 0x8, 0x2, 0x20}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x81, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x3a0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 1.507251243s ago: executing program 5 (id=2179): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) ptrace(0x10, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@private=0xa010120, 0x2, 0x0, 0x4e21, 0xfffc, 0x2, 0x80, 0x0, 0x2f}, {0x0, 0x4, 0x5, 0x0, 0x20, 0x0, 0x0, 0x6}, {0xffffbffffffffffc, 0xfffffffffffffffc, 0x0, 0x1000000000}, 0x0, 0xfffffffe, 0x1, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x35}, 0x4d4, 0x3c}, 0x2, @in=@local, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf}}, 0xe8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x11) 1.279788105s ago: executing program 7 (id=2180): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000000000000000000095000000000000"], &(0x7f00000003c0)='GPL\x00'}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) close_range(r0, r0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getresgid(0x0, 0x0, 0x0) close(0xffffffffffffffff) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_opts(r2, 0x0, 0x4, 0x0, &(0x7f0000000cc0)) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)="18c44975a308f7bc8870750ef9a660d182c982352552b03aef593e77d99c5dae0706af766324fa3aecf225d7c722a4cadf", &(0x7f0000000180), 0x3dbc4689, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r3}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) 0s ago: executing program 0 (id=2181): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) recvmmsg(r0, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/93, 0x5d}, 0x6}], 0x2, 0x100, 0x0) kernel console output (not intermixed with test programs): 6.852538][ T5862] ? __mod_zone_page_state+0xd7/0x140 [ 676.852577][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 676.852618][ T5862] ? folios_put_refs+0x560/0x640 [ 676.852649][ T5862] ? __pfx_folios_put_refs+0x10/0x10 [ 676.852675][ T5862] ? rcu_is_watching+0x15/0xb0 [ 676.852699][ T5862] ? lru_add+0xa2f/0xd80 [ 676.852723][ T5862] ? lru_add+0x198/0xd80 [ 676.852748][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 676.852775][ T5862] ? folio_batch_move_lru+0x319/0x3a0 [ 676.852804][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 676.852832][ T5862] ? rcu_is_watching+0x15/0xb0 [ 676.852857][ T5862] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 676.852895][ T5862] do_writepages+0x32e/0x550 [ 676.852928][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 676.852955][ T5862] ? rcu_is_watching+0x15/0xb0 [ 676.852978][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 676.853012][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 676.853039][ T5862] ? do_raw_spin_unlock+0x122/0x240 [ 676.853072][ T5862] filemap_fdatawrite+0x199/0x240 [ 676.853106][ T5862] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 676.853160][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 676.853187][ T5862] ? rcu_is_watching+0x15/0xb0 [ 676.853210][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 676.853240][ T5862] ? do_raw_spin_unlock+0x122/0x240 [ 676.853272][ T5862] f2fs_sync_dirty_inodes+0x31f/0x830 [ 676.853304][ T5862] f2fs_write_checkpoint+0x95a/0x1df0 [ 676.853341][ T5862] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 676.853364][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 676.853417][ T5862] ? kill_f2fs_super+0x298/0x6c0 [ 676.853443][ T5862] kill_f2fs_super+0x2c3/0x6c0 [ 676.853470][ T5862] ? __pfx_kill_f2fs_super+0x10/0x10 [ 676.853492][ T5862] ? radix_tree_delete_item+0x2b6/0x400 [ 676.853528][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 676.853560][ T5862] ? shrinker_free+0x2ce/0x3e0 [ 676.853588][ T5862] deactivate_locked_super+0xbc/0x130 [ 676.853613][ T5862] cleanup_mnt+0x425/0x4c0 [ 676.853635][ T5862] task_work_run+0x1d4/0x260 [ 676.853660][ T5862] ? __pfx_task_work_run+0x10/0x10 [ 676.853683][ T5862] ? __x64_sys_umount+0x122/0x160 [ 676.853707][ T5862] ? __pfx___x64_sys_umount+0x10/0x10 [ 676.853730][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 676.853751][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 676.853772][ T5862] ? rcu_is_watching+0x15/0xb0 [ 676.853791][ T5862] exit_to_user_mode_loop+0xec/0x110 [ 676.853817][ T5862] do_syscall_64+0x2bd/0x3b0 [ 676.853843][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 676.853864][ T5862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.853881][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 676.853901][ T5862] ? exc_page_fault+0x9f/0xf0 [ 676.853926][ T5862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.853943][ T5862] RIP: 0033:0x7f8547b8ff17 [ 676.853959][ T5862] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 676.853974][ T5862] RSP: 002b:00007ffdd0ee0878 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 676.853993][ T5862] RAX: 0000000000000000 RBX: 00007f8547c11c05 RCX: 00007f8547b8ff17 [ 676.854011][ T5862] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd0ee0930 [ 676.854022][ T5862] RBP: 00007ffdd0ee0930 R08: 0000000000000000 R09: 0000000000000000 [ 676.854034][ T5862] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdd0ee19c0 [ 676.854047][ T5862] R13: 00007f8547c11c05 R14: 00000000000a5324 R15: 00007ffdd0ee1a00 [ 676.854067][ T5862] [ 677.004564][ T5868] usb 1-1: can't set config #0, error -71 [ 677.231876][ T5862] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 677.385522][ T5868] usb 1-1: USB disconnect, device number 25 [ 677.409485][T13547] exFAT-fs (loop6): error, invalid access to FAT (entry 0xffffffff) [ 677.422702][T13547] exFAT-fs (loop6): error, invalid access to FAT (entry 0xffffffff) [ 678.262114][ T10] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 678.452250][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 678.478450][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 678.550010][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 678.627385][ T5866] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 678.637237][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 678.656882][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.665253][ T5176] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 678.672851][ T10] usb 6-1: Product: syz [ 678.781740][T13567] loop7: detected capacity change from 0 to 764 [ 679.092029][ T5176] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 679.099653][ T10] usb 6-1: Manufacturer: syz [ 679.104287][ T10] usb 6-1: SerialNumber: syz [ 679.135991][ T5176] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 679.143817][ T10] usb 6-1: config 0 descriptor?? [ 679.149137][ T5176] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 679.159797][ T10] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 679.177536][ T10] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 680.741322][ T10] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 680.747684][ T10] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 680.786528][T13565] chnl_net:caif_netlink_parms(): no params data found [ 680.812280][ T10] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 680.892051][ T10] em28xx 6-1:0.0: No AC97 audio processor [ 680.936304][ T10] usb 6-1: USB disconnect, device number 27 [ 680.958007][ T10] em28xx 6-1:0.0: Disconnecting em28xx [ 680.978042][ T10] em28xx 6-1:0.0: Freeing device [ 681.076465][T11915] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 681.100967][T13581] netlink: 'syz.5.1806': attribute type 72 has an invalid length. [ 681.236274][ T5861] Bluetooth: hci5: command tx timeout [ 681.302497][T11915] usb 4-1: Using ep0 maxpacket: 16 [ 681.425473][T11915] usb 4-1: unable to get BOS descriptor or descriptor too short [ 681.434491][T11915] usb 4-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 681.446244][T11915] usb 4-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 681.458262][T11915] usb 4-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 681.471510][T11915] usb 4-1: config 1 interface 0 has no altsetting 0 [ 681.482369][T11915] usb 4-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 681.491404][T11915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.567919][T11915] usb 4-1: Product: syz [ 681.577271][T13565] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.586228][T11915] usb 4-1: Manufacturer: syz [ 681.597511][T13565] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.605836][T11915] usb 4-1: SerialNumber: syz [ 681.617642][T13565] bridge_slave_0: entered allmulticast mode [ 681.625388][T13578] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 681.652742][T13565] bridge_slave_0: entered promiscuous mode [ 681.660939][T13565] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.669090][T13565] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.679908][T13565] bridge_slave_1: entered allmulticast mode [ 681.694756][T13565] bridge_slave_1: entered promiscuous mode [ 681.794689][T13565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 681.834863][T13565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 681.877775][T11915] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input30 [ 681.906751][T13565] team0: Port device team_slave_0 added [ 681.951347][T13565] team0: Port device team_slave_1 added [ 682.117910][T13565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 682.143226][T13565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 682.388299][T13591] loop7: detected capacity change from 0 to 32768 [ 682.502428][T13565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 682.516386][T13565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 682.524597][T13565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 682.550481][ C1] vkms_vblank_simulate: vblank timer overrun [ 682.565168][T13565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 682.614832][T13591] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 682.614861][T13591] allowing incompatible features above 0.0: (unknown version) [ 682.614877][T13591] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 682.653544][T13591] bcachefs (loop7): Using encoding defined by superblock: utf8-12.1.0 [ 682.661754][T13591] bcachefs (loop7): initializing new filesystem [ 682.674468][T13591] bcachefs (loop7): going read-write [ 682.690725][T13591] bcachefs (loop7): marking superblocks [ 682.700090][T13592] can0: slcan on ttyS3. [ 682.702577][T13591] bcachefs (loop7): initializing freespace [ 682.713722][T13591] bcachefs (loop7): done initializing freespace [ 682.721618][T13591] bcachefs (loop7): reading snapshots table [ 682.727594][T13591] bcachefs (loop7): reading snapshots done [ 682.786158][T13591] bcachefs (loop7): done starting filesystem [ 683.169646][T13598] delete_channel: no stack [ 683.191136][ T5211] bcm5974 4-1:1.0: could not read from device [ 683.278376][ T5211] bcm5974 4-1:1.0: could not read from device [ 683.322792][ T5860] Bluetooth: hci5: command tx timeout [ 683.530801][T11915] usb 4-1: USB disconnect, device number 29 [ 683.564137][T13588] can0 (unregistered): slcan off ttyS3. [ 683.570853][ T10] kernel write not supported for file /694/coredump_filter (pid: 10 comm: kworker/0:1) [ 683.799544][ T9809] bcachefs (loop7): shutting down [ 683.805965][ T9809] bcachefs (loop7): going read-only [ 683.821423][ T9809] bcachefs (loop7): finished waiting for writes to stop [ 683.827227][T13565] hsr_slave_0: entered promiscuous mode [ 683.849152][ T9809] bcachefs (loop7): flushing journal and stopping allocators, journal seq 3 [ 683.859618][T13587] loop5: detected capacity change from 0 to 32768 [ 683.899265][T13565] hsr_slave_1: entered promiscuous mode [ 683.923535][T13565] debugfs: 'hsr0' already exists in 'hsr' [ 683.944502][T13587] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1807 (13587) [ 683.961364][T13565] Cannot create hsr debugfs directory [ 683.961894][ T5863] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 683.989860][T13587] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 684.095876][T13587] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 684.225129][ T9809] bcachefs (loop7): flushing journal and stopping allocators complete, journal seq 4 [ 684.241864][ T5863] usb 1-1: Using ep0 maxpacket: 32 [ 684.273357][ T5863] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 684.282113][ T5863] usb 1-1: config 0 has no interface number 0 [ 684.303276][ T5863] usb 1-1: config 0 interface 184 has no altsetting 0 [ 684.331542][ T5863] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 684.345536][ T9809] bcachefs (loop7): clean shutdown complete, journal seq 5 [ 684.357481][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.384389][ T9809] bcachefs (loop7): marking filesystem clean [ 684.427631][ T5863] usb 1-1: Product: syz [ 684.431854][ T5863] usb 1-1: Manufacturer: syz [ 684.436501][ T5863] usb 1-1: SerialNumber: syz [ 684.445166][ T5863] usb 1-1: config 0 descriptor?? [ 684.453733][ T5863] smsc75xx v1.0.0 [ 684.505228][T13587] BTRFS info (device loop5): enabling ssd optimizations [ 684.522122][T13587] BTRFS info (device loop5): enabling free space tree [ 684.557222][ T9809] bcachefs (loop7): shutdown complete [ 684.649117][T13565] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 684.661388][ T5855] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 684.694078][T11915] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 684.717868][T13565] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 684.810255][T13565] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 684.855362][T13565] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 684.872930][T11915] usb 7-1: Using ep0 maxpacket: 32 [ 684.953576][T11915] usb 7-1: config 0 interface 0 has no altsetting 0 [ 684.970609][T11915] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 685.014044][T11915] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.067841][ T5863] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 685.078716][T11915] usb 7-1: Product: syz [ 685.078760][T11915] usb 7-1: Manufacturer: syz [ 685.078785][T11915] usb 7-1: SerialNumber: syz [ 685.103253][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.109853][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.123390][ T5863] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 685.204887][T11915] usb 7-1: config 0 descriptor?? [ 685.331994][ T5861] Bluetooth: hci5: command tx timeout [ 685.545646][ T5863] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 685.546616][T13565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 685.591685][T13648] loop7: detected capacity change from 0 to 1024 [ 685.603807][ T5863] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 685.622107][ T5863] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 685.630514][T13565] 8021q: adding VLAN 0 to HW filter on device team0 [ 685.643866][ T5863] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 685.738253][ T5863] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 685.768219][ T30] audit: type=1800 audit(2000000541.479:99): pid=13648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1810" name="file1" dev="loop7" ino=0 res=0 errno=0 [ 685.841519][ T5863] usb 1-1: USB disconnect, device number 26 [ 686.141471][T11915] gs_usb 7-1:0.0: Configuring for 1 interfaces [ 686.150897][T11915] gs_usb 7-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 686.214085][ T7499] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.221183][ T7499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 687.001350][T11915] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -121 [ 687.180423][T13659] loop7: detected capacity change from 0 to 512 [ 687.212612][T13659] EXT4-fs: Ignoring removed bh option [ 687.227021][ T1035] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.234121][ T1035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 687.271000][T13661] netlink: 'syz.0.1818': attribute type 72 has an invalid length. [ 687.289885][T13659] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 687.357903][T13659] EXT4-fs (loop7): 1 truncate cleaned up [ 687.386733][T13659] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 687.411859][ T5860] Bluetooth: hci5: command tx timeout [ 687.516574][T13659] overlayfs: missing 'lowerdir' [ 687.568060][ T10] usb 7-1: USB disconnect, device number 12 [ 687.640543][T13669] loop0: detected capacity change from 0 to 256 [ 687.735607][T13669] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 687.800854][T13674] loop3: detected capacity change from 0 to 256 [ 687.972886][T13676] exFAT-fs (loop0): error, invalid access to FAT (entry 0xffffffff) [ 687.995170][T13676] exFAT-fs (loop0): error, invalid access to FAT (entry 0xffffffff) [ 688.153947][ T10] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 688.352167][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 688.363261][T13565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 688.380656][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 688.395296][T13674] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 688.443196][ T10] usb 7-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 688.464634][ T10] usb 7-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 688.506525][ T10] usb 7-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 688.562587][ T10] usb 7-1: config 1 interface 0 has no altsetting 0 [ 688.579218][ T10] usb 7-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 688.588816][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.602448][ T10] usb 7-1: Product: syz [ 688.611977][ T10] usb 7-1: Manufacturer: syz [ 688.616664][ T10] usb 7-1: SerialNumber: syz [ 688.864461][T13681] exFAT-fs (loop3): error, invalid access to FAT (entry 0xffffffff) [ 688.925264][T13673] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 688.950658][T13681] exFAT-fs (loop3): error, invalid access to FAT (entry 0xffffffff) [ 689.024547][T13679] loop0: detected capacity change from 0 to 4096 [ 689.204075][ T10] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input31 [ 689.285075][T13679] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 689.306754][ T9809] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 689.333121][T13679] ntfs3(loop0): Failed to load $Extend (-22). [ 689.488693][T13679] ntfs3(loop0): Failed to initialize $Extend. [ 689.772849][T13689] delete_channel: no stack [ 689.852451][ T5211] bcm5974 7-1:1.0: could not read from device [ 689.863043][T11915] usb 7-1: USB disconnect, device number 13 [ 689.981086][T12220] bcm5974 7-1:1.0: could not read from device [ 690.723116][T13565] veth0_vlan: entered promiscuous mode [ 690.745149][T13565] veth1_vlan: entered promiscuous mode [ 691.048364][T13565] veth0_macvtap: entered promiscuous mode [ 691.283755][T13565] veth1_macvtap: entered promiscuous mode [ 691.366823][T13565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 691.492879][T13565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 691.565851][ T1133] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.588346][ T1133] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.618293][ T1133] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.657186][ T1133] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.907624][T13700] loop6: detected capacity change from 0 to 40427 [ 691.914596][T13700] F2FS-fs: heap/no_heap options were deprecated [ 691.921395][T13700] F2FS-fs (loop6): build fault injection rate: 19 [ 691.927854][T13700] F2FS-fs (loop6): build fault injection type: 0x3bfe8c [ 691.942030][T13700] F2FS-fs (loop6): invalid crc value [ 691.953085][T13700] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970 [ 692.013401][T13700] F2FS-fs (loop6): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x20a/0x3f0 [ 692.026164][T13700] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 692.037509][T13700] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 692.049194][T13700] F2FS-fs (loop6): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40 [ 692.061026][ T30] audit: type=1800 audit(2000000547.829:100): pid=13700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1826" name="file1" dev="loop6" ino=10 res=0 errno=0 [ 692.093188][T13700] F2FS-fs (loop6): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0x249/0x1cf0 [ 692.107104][T13700] F2FS-fs (loop6): inconsistent node block, node_type:1, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:0,blkaddr:0] [ 692.172433][ T8040] syz-executor: attempt to access beyond end of device [ 692.172433][ T8040] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 692.193896][ T8040] CPU: 0 UID: 0 PID: 8040 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 692.193926][ T8040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 692.193941][ T8040] Call Trace: [ 692.193951][ T8040] [ 692.193960][ T8040] dump_stack_lvl+0x189/0x250 [ 692.193994][ T8040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 692.194025][ T8040] ? __pfx_dump_stack_lvl+0x10/0x10 [ 692.194053][ T8040] ? __pfx_queue_work_on+0x10/0x10 [ 692.194077][ T8040] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 692.194110][ T8040] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 692.194150][ T8040] f2fs_handle_critical_error+0x37c/0x540 [ 692.194189][ T8040] f2fs_write_end_io+0x886/0xb60 [ 692.194223][ T8040] __submit_merged_bio+0x27a/0x6a0 [ 692.194260][ T8040] __submit_merged_write_cond+0x255/0x530 [ 692.194297][ T8040] f2fs_write_data_pages+0x261d/0x3000 [ 692.194334][ T8040] ? arch_stack_walk+0xfc/0x150 [ 692.194386][ T8040] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 692.194422][ T8040] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 692.194461][ T8040] ? rcu_is_watching+0x15/0xb0 [ 692.194505][ T8040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 692.194539][ T8040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 692.194566][ T8040] ? folios_put_refs+0x559/0x640 [ 692.194601][ T8040] ? __pfx_folios_put_refs+0x10/0x10 [ 692.194626][ T8040] ? rcu_is_watching+0x15/0xb0 [ 692.194650][ T8040] ? lru_add+0xa2f/0xd80 [ 692.194674][ T8040] ? lru_add+0x198/0xd80 [ 692.194699][ T8040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 692.194726][ T8040] ? do_raw_spin_lock+0x121/0x290 [ 692.194760][ T8040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 692.194799][ T8040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 692.194826][ T8040] ? do_raw_spin_unlock+0x122/0x240 [ 692.194856][ T8040] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 692.194894][ T8040] do_writepages+0x32e/0x550 [ 692.194923][ T8040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 692.194951][ T8040] ? rcu_is_watching+0x15/0xb0 [ 692.194972][ T8040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 692.195001][ T8040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 692.195028][ T8040] ? do_raw_spin_unlock+0x122/0x240 [ 692.195061][ T8040] filemap_fdatawrite+0x199/0x240 [ 692.195095][ T8040] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 692.195154][ T8040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 692.195180][ T8040] ? rcu_is_watching+0x15/0xb0 [ 692.195203][ T8040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 692.195233][ T8040] ? do_raw_spin_unlock+0x122/0x240 [ 692.195265][ T8040] f2fs_sync_dirty_inodes+0x31f/0x830 [ 692.195298][ T8040] f2fs_write_checkpoint+0x95a/0x1df0 [ 692.195338][ T8040] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 692.195360][ T8040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 692.195419][ T8040] ? kill_f2fs_super+0x298/0x6c0 [ 692.195446][ T8040] kill_f2fs_super+0x2c3/0x6c0 [ 692.195473][ T8040] ? __pfx_kill_f2fs_super+0x10/0x10 [ 692.195495][ T8040] ? radix_tree_delete_item+0x2b6/0x400 [ 692.195532][ T8040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 692.195558][ T8040] ? shrinker_free+0x2ce/0x3e0 [ 692.195586][ T8040] deactivate_locked_super+0xbc/0x130 [ 692.195617][ T8040] cleanup_mnt+0x425/0x4c0 [ 692.195647][ T8040] task_work_run+0x1d4/0x260 [ 692.195682][ T8040] ? __pfx_task_work_run+0x10/0x10 [ 692.195712][ T8040] ? __x64_sys_umount+0x122/0x160 [ 692.195744][ T8040] ? __pfx___x64_sys_umount+0x10/0x10 [ 692.195774][ T8040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 692.195809][ T8040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 692.195837][ T8040] ? rcu_is_watching+0x15/0xb0 [ 692.195862][ T8040] exit_to_user_mode_loop+0xec/0x110 [ 692.195898][ T8040] do_syscall_64+0x2bd/0x3b0 [ 692.195932][ T8040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 692.195960][ T8040] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.195983][ T8040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 692.196010][ T8040] ? exc_page_fault+0x9f/0xf0 [ 692.196043][ T8040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.196066][ T8040] RIP: 0033:0x7fb86118ff17 [ 692.196086][ T8040] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 692.196107][ T8040] RSP: 002b:00007ffc53e29128 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 692.196131][ T8040] RAX: 0000000000000000 RBX: 00007fb861211c05 RCX: 00007fb86118ff17 [ 692.196148][ T8040] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc53e291e0 [ 692.196164][ T8040] RBP: 00007ffc53e291e0 R08: 0000000000000000 R09: 0000000000000000 [ 692.196180][ T8040] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc53e2a270 [ 692.196197][ T8040] R13: 00007fb861211c05 R14: 00000000000a8f81 R15: 00007ffc53e2a2b0 [ 692.196227][ T8040] [ 692.196237][ T8040] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 692.207272][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.542129][ T5176] Bluetooth: hci5: command 0x0405 tx timeout [ 692.672230][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.735002][ T1035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.751365][ T1035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.154458][T13709] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1830'. [ 693.522099][ T5868] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 693.742541][ T5868] usb 6-1: Using ep0 maxpacket: 32 [ 693.854679][ T5868] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 693.954800][ T5868] usb 6-1: config 0 has no interface number 0 [ 694.192238][ T5868] usb 6-1: config 0 interface 184 has no altsetting 0 [ 694.322544][ T5868] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 694.332142][T13720] svc: failed to register nfsdv3 RPC service (errno 512). [ 694.336475][ T5868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.435963][ T5868] usb 6-1: Product: syz [ 694.440409][T13720] svc: failed to register nfsaclv3 RPC service (errno 512). [ 694.449028][ T5868] usb 6-1: Manufacturer: syz [ 694.457855][ T5868] usb 6-1: SerialNumber: syz [ 694.488836][ T5868] usb 6-1: config 0 descriptor?? [ 694.511233][ T5868] smsc75xx v1.0.0 [ 694.553027][T13728] loop3: detected capacity change from 0 to 512 [ 694.580244][T13728] EXT4-fs: Ignoring removed bh option [ 694.640539][T13725] svc: failed to register nfsdv3 RPC service (errno 111). [ 694.648555][T13725] svc: failed to register nfsaclv3 RPC service (errno 111). [ 694.794180][T13728] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 694.886225][T13730] tipc: Started in network mode [ 694.905904][T13730] tipc: Node identity e6c13dd1b8c8, cluster identity 4711 [ 694.905937][T13728] EXT4-fs (loop3): 1 truncate cleaned up [ 694.942055][T13730] tipc: Enabled bearer , priority 0 [ 694.982459][T13733] syzkaller0: entered promiscuous mode [ 694.988893][T13728] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 695.001931][T13733] syzkaller0: entered allmulticast mode [ 695.018734][T13730] tipc: Resetting bearer [ 695.035339][T13728] overlayfs: missing 'lowerdir' [ 695.042189][T13729] tipc: Resetting bearer [ 695.054158][T13729] tipc: Disabling bearer [ 695.151332][ T5868] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 695.195574][ T5868] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 695.562739][T13744] can0: slcan on ttyS3. [ 695.705133][ T5924] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 695.713455][ T5868] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 695.901924][ T5868] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 695.922720][ T5868] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 695.949672][ T5868] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -32 [ 696.042062][ T5924] usb 4-1: Using ep0 maxpacket: 8 [ 696.297573][ T5924] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 696.313362][ T5924] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 696.326814][T13747] loop8: detected capacity change from 0 to 2048 [ 696.512384][ T5924] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 696.522489][ T5924] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 696.536319][ T5924] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 696.550583][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.554263][T13747] NILFS (loop8): invalid segment: Magic number mismatch [ 696.565874][T13747] NILFS (loop8): trying rollback from an earlier position [ 696.573776][T13746] svc: failed to register nfsdv3 RPC service (errno 111). [ 696.594264][T13747] NILFS (loop8): recovery complete [ 696.600571][T13748] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 696.612694][T13746] svc: failed to register nfsaclv3 RPC service (errno 111). [ 696.854880][ T5924] usb 4-1: GET_CAPABILITIES returned 0 [ 696.860456][ T5924] usbtmc 4-1:16.0: can't read capabilities [ 697.152525][ T10] usb 6-1: USB disconnect, device number 28 [ 697.164094][T13738] can0 (unregistered): slcan off ttyS3. [ 698.141936][ T5947] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 698.221873][ T5863] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 698.298241][ T5924] usb 4-1: USB disconnect, device number 30 [ 698.303581][ T5947] usb 6-1: Using ep0 maxpacket: 32 [ 698.339649][ T5947] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 698.382100][ T5863] usb 9-1: Using ep0 maxpacket: 16 [ 698.393998][ T5933] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 698.412689][ T5947] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 698.424074][ T5863] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 698.433268][T13754] loop6: detected capacity change from 0 to 32768 [ 698.435678][ T5947] usb 6-1: config 0 has no interface number 0 [ 698.447151][ T5863] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 698.486095][ T5947] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 698.486991][ T5862] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 698.519661][T13754] JBD2: Ignoring recovery information on journal [ 698.520959][ T5863] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 698.562982][ T5947] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.586469][ T5933] usb 1-1: Using ep0 maxpacket: 32 [ 698.601608][ T5947] usb 6-1: Product: syz [ 698.606422][ T5933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 698.644561][T13754] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 698.655418][ T5863] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.673221][ T5947] usb 6-1: Manufacturer: syz [ 698.677820][ T5947] usb 6-1: SerialNumber: syz [ 698.693173][T13766] binder: BINDER_SET_CONTEXT_MGR already set [ 698.699515][T13766] binder: 13765:13766 ioctl 4018620d 2000000001c0 returned -16 [ 698.707348][ T5933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 698.718076][ T5863] usb 9-1: Product: syz [ 698.729192][T13766] loop3: detected capacity change from 0 to 512 [ 698.729962][ T5947] usb 6-1: config 0 descriptor?? [ 698.741255][ T5863] usb 9-1: Manufacturer: syz [ 698.750827][ T5933] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 698.753259][T13766] EXT4-fs: Ignoring removed nobh option [ 698.771980][ T5863] usb 9-1: SerialNumber: syz [ 698.784155][T13766] EXT4-fs: Ignoring removed oldalloc option [ 698.800771][ T5863] usb 9-1: config 0 descriptor?? [ 698.818824][ T5933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.842483][T13766] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 698.856915][ T5933] usb 1-1: config 0 descriptor?? [ 698.902210][T13766] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 698.922333][ T8040] ocfs2: Unmounting device (7,6) on (node local) [ 699.182135][T13768] loop6: detected capacity change from 0 to 512 [ 699.214337][T13768] EXT4-fs: inline encryption not supported [ 699.230259][T13768] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 700.138626][ T5933] ft260 0003:0403:6030.0008: unknown main item tag 0x7 [ 700.161337][T13768] EXT4-fs (loop6): 1 truncate cleaned up [ 700.187450][T13768] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 700.242213][ T5933] ft260 0003:0403:6030.0008: chip code: 6424 8183 [ 700.257140][ T5933] ft260 0003:0403:6030.0008: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 700.284092][T13780] loop3: detected capacity change from 0 to 512 [ 700.302985][T13780] EXT4-fs: inline encryption not supported [ 700.330519][ T5863] usb 6-1: USB disconnect, device number 29 [ 700.369667][T13780] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 700.584378][ T5933] ft260 0003:0403:6030.0008: failed to retrieve status: -32, no wakeup [ 700.723992][T13780] EXT4-fs (loop3): 1 truncate cleaned up [ 700.730312][T13780] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 701.136795][ T5933] usb 9-1: USB disconnect, device number 2 [ 701.145626][ T5924] usb 1-1: USB disconnect, device number 27 [ 701.247324][ T8040] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 701.291000][ T5862] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 701.565069][T13800] loop3: detected capacity change from 0 to 256 [ 701.591569][T13800] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 701.611961][ T5933] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 701.626968][T13800] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 701.688015][T13800] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 702.034839][ T5933] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 702.055287][ T5933] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 702.084215][ T5933] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 702.211074][ T5933] usb 9-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 702.249098][ T5933] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.279944][ T5933] usb 9-1: Product: syz [ 702.317499][T13806] syz.0.1854: attempt to access beyond end of device [ 702.317499][T13806] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 702.330888][ T5933] usb 9-1: Manufacturer: syz [ 702.344475][ T5933] usb 9-1: SerialNumber: syz [ 702.359053][ T5933] usb 9-1: config 0 descriptor?? [ 702.366720][T13792] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 702.379456][ T5933] usb 9-1: ucan: probing device on interface #0 [ 702.450128][ T5933] usb 9-1: ucan: invalid EP count (1) [ 702.481990][T13806] syz.0.1854: attempt to access beyond end of device [ 702.481990][T13806] nbd0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 702.495150][ T5933] usb 9-1: ucan: probe failed; try to update the device firmware [ 702.500800][T13790] loop5: detected capacity change from 0 to 32768 [ 702.685594][T13809] loop0: detected capacity change from 0 to 512 [ 703.324555][T13809] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 703.533079][T13809] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1854: bg 0: block 248: padding at end of block bitmap is not set [ 703.941570][T13809] Quota error (device loop0): write_blk: dquota write failed [ 703.987819][T13809] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 704.041920][T13809] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.1854: Failed to acquire dquot type 1 [ 704.136416][T13809] EXT4-fs (loop0): 1 truncate cleaned up [ 704.440664][ T5933] usb 9-1: USB disconnect, device number 3 [ 704.447504][T13809] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 704.571523][T13809] ext4 filesystem being mounted at /313/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 704.607719][ T5924] kernel write not supported for file /20/coredump_filter (pid: 5924 comm: kworker/1:3) [ 704.768009][T13837] loop6: detected capacity change from 0 to 512 [ 704.862464][T13837] EXT4-fs: inline encryption not supported [ 704.884317][T13837] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 705.034691][T13846] loop8: detected capacity change from 0 to 32768 [ 705.051948][ T5933] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 705.074827][T13837] EXT4-fs (loop6): 1 truncate cleaned up [ 705.204763][T13837] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 705.223058][ T5947] IPVS: starting estimator thread 0... [ 705.258940][ T5933] usb 4-1: Using ep0 maxpacket: 16 [ 705.293052][ T5933] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 705.302414][T13846] bcachefs (loop8): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 705.320171][T13846] allowing incompatible features above 0.0: (unknown version) [ 705.327836][T13846] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 705.331896][T13853] IPVS: using max 36 ests per chain, 86400 per kthread [ 705.342137][T13846] bcachefs (loop8): Using encoding defined by superblock: utf8-12.1.0 [ 705.342177][T13846] bcachefs (loop8): initializing new filesystem [ 705.367619][T13846] bcachefs (loop8): going read-write [ 705.414403][ T5933] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 705.436027][T13846] bcachefs (loop8): marking superblocks [ 705.446458][T13846] bcachefs (loop8): initializing freespace [ 705.454806][T13846] bcachefs (loop8): done initializing freespace [ 705.462569][T13846] bcachefs (loop8): reading snapshots table [ 705.468466][T13846] bcachefs (loop8): reading snapshots done [ 705.484723][T13846] bcachefs (loop8): done starting filesystem [ 707.841836][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.849853][ T5933] usb 4-1: Product: syz [ 707.889543][ T5933] usb 4-1: Manufacturer: syz [ 707.898204][ T5933] usb 4-1: SerialNumber: syz [ 707.924671][ T5933] usb 4-1: config 0 descriptor?? [ 708.018135][ T5933] usb 4-1: can't set config #0, error -71 [ 708.033203][ T8040] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 708.082824][ T5933] usb 4-1: USB disconnect, device number 31 [ 708.570992][T13850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 708.703774][T13869] hub 8-0:1.0: USB hub found [ 708.719304][T13869] hub 8-0:1.0: 1 port detected [ 709.045912][ T5933] kernel write not supported for file /963/coredump_filter (pid: 5933 comm: kworker/0:5) [ 709.835286][T13880] bridge5: entered promiscuous mode [ 709.840597][T13880] bridge5: entered allmulticast mode [ 710.592098][ T5924] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 710.847626][ T5936] kernel write not supported for file /525/coredump_filter (pid: 5936 comm: kworker/0:6) [ 710.923218][ T5924] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 711.203118][ T5924] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 711.257449][ T5924] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 711.360524][ T5924] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 711.388506][ T5924] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.408962][ T5924] usb 7-1: Product: syz [ 711.425185][ T5924] usb 7-1: Manufacturer: syz [ 711.434093][ T5924] usb 7-1: SerialNumber: syz [ 711.440427][ T5924] usb 7-1: config 0 descriptor?? [ 711.452117][T13882] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 711.463219][ T5924] usb 7-1: ucan: probing device on interface #0 [ 711.469443][ T5924] usb 7-1: ucan: invalid EP count (1) [ 711.476114][ T5924] usb 7-1: ucan: probe failed; try to update the device firmware [ 711.715505][T13565] bcachefs (loop8): shutting down [ 711.722459][T13565] bcachefs (loop8): going read-only [ 711.731314][T13565] bcachefs (loop8): finished waiting for writes to stop [ 711.758894][T13565] bcachefs (loop8): flushing journal and stopping allocators, journal seq 9 [ 711.782094][ T5868] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 711.860806][T13897] loop7: detected capacity change from 0 to 512 [ 711.900350][T13897] EXT4-fs: inline encryption not supported [ 711.910670][T13897] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 711.931619][T13897] EXT4-fs (loop7): 1 truncate cleaned up [ 711.939953][T13897] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 712.012718][ T5868] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 712.032725][ T5868] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 712.045985][ T5868] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 712.058289][ T5868] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 712.067811][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.078113][T13893] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 712.100581][ T9809] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 712.182055][ T5933] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 712.354006][ T5933] usb 4-1: Using ep0 maxpacket: 16 [ 712.360585][ T5933] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 712.380144][ T5933] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 712.392194][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.400443][ T5933] usb 4-1: Product: syz [ 712.404877][ T5933] usb 4-1: Manufacturer: syz [ 712.409461][ T5933] usb 4-1: SerialNumber: syz [ 712.416493][ T5933] usb 4-1: config 0 descriptor?? [ 712.462154][ T5924] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 712.631882][ T5924] usb 8-1: Using ep0 maxpacket: 32 [ 712.638638][ T5924] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 712.655122][ T5924] usb 8-1: config 0 has no interface number 0 [ 712.667878][ T5924] usb 8-1: config 0 interface 184 has no altsetting 0 [ 712.683901][ T5924] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 712.693745][ T5924] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.704347][ T5924] usb 8-1: Product: syz [ 712.708563][ T5924] usb 8-1: Manufacturer: syz [ 712.713285][ T5924] usb 8-1: SerialNumber: syz [ 712.728496][ T5924] usb 8-1: config 0 descriptor?? [ 712.737224][ T5924] smsc75xx v1.0.0 [ 712.932414][ T5868] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 712.952711][ T5853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 712.956734][ T5868] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input32 [ 713.337931][T13909] netlink: 'syz.0.1883': attribute type 4 has an invalid length. [ 713.346324][T13909] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1883'. [ 713.430195][ T5936] usb 7-1: USB disconnect, device number 14 [ 714.240796][ T5924] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): EEPROM is busy [ 714.985217][ T5924] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 714.996263][ T5924] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 715.006270][ T5924] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 715.017397][ T5924] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -32 [ 715.225385][ T43] usb 4-1: USB disconnect, device number 32 [ 715.263981][ T5936] usb 6-1: USB disconnect, device number 30 [ 715.264079][ C1] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 715.715950][T13926] loop3: detected capacity change from 0 to 64 [ 716.071880][ T43] usb 8-1: USB disconnect, device number 3 [ 716.094646][ T5936] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 716.486940][ T5936] usb 6-1: Using ep0 maxpacket: 16 [ 717.000475][ T5936] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 717.072013][ T5936] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 717.091648][ T5936] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 717.103049][ T5936] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.112175][ T5936] usb 6-1: Product: syz [ 717.116560][ T5936] usb 6-1: Manufacturer: syz [ 717.121173][ T5936] usb 6-1: SerialNumber: syz [ 717.200266][ T5936] usb 6-1: config 0 descriptor?? [ 717.366278][ T5936] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 717.466099][ T5936] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 718.362082][ T43] IPVS: starting estimator thread 0... [ 718.388948][ T5936] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 718.399402][ T5936] em28xx 6-1:0.0: Config register raw data: 0x00 [ 718.491927][T13952] IPVS: using max 37 ests per chain, 88800 per kthread [ 718.534714][T13956] loop7: detected capacity change from 0 to 512 [ 718.606726][T13956] EXT4-fs: inline encryption not supported [ 718.645068][T13956] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 718.676181][T13958] tipc: Started in network mode [ 718.737970][T13958] tipc: Node identity d66f4e75c6, cluster identity 4711 [ 718.795534][T13956] EXT4-fs (loop7): 1 truncate cleaned up [ 718.797510][T13958] tipc: Enabled bearer , priority 0 [ 718.857381][T13959] syzkaller0: entered promiscuous mode [ 718.902243][T13959] syzkaller0: entered allmulticast mode [ 718.910476][T13956] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 718.929979][T13957] tipc: Resetting bearer [ 719.788767][ T5933] usb 6-1: USB disconnect, device number 31 [ 719.795365][ T5933] em28xx 6-1:0.0: Disconnecting em28xx [ 719.810600][ T5863] tipc: Node number set to 275730037 [ 719.822605][T13957] tipc: Disabling bearer [ 719.881932][ T5933] em28xx 6-1:0.0: Freeing device [ 720.348784][ T9809] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.736496][T13977] loop6: detected capacity change from 0 to 1024 [ 720.765158][T13977] EXT4-fs: Ignoring removed nobh option [ 720.773889][T13951] loop0: detected capacity change from 0 to 32768 [ 720.809569][T13977] EXT4-fs: Ignoring removed bh option [ 720.861898][ T5933] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 720.897442][T13977] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 720.942464][ T5867] Allocator stuck? Waited for 30 seconds [ 720.942481][ T5867] Allocator debug: [ 720.942492][ T5867] capacity26112 [ 720.942503][ T5867] reserved 6656 [ 720.942515][ T5867] hidden 0 [ 720.942526][ T5867] btree 512 [ 720.942538][ T5867] data 1264 [ 720.942550][ T5867] cached 0 [ 720.942562][ T5867] reserved 0 [ 720.942573][ T5867] online_reserved 96 [ 720.942585][ T5867] nr_inodes 0 [ 720.942596][ T5867] [ 720.942606][ T5867] freelist_wait waiting [ 720.942618][ T5867] open buckets allocated3 [ 720.942630][ T5867] open buckets total 1024 [ 720.942642][ T5867] open_buckets_wait empty [ 720.942653][ T5867] open_buckets_btree 1 [ 720.942665][ T5867] open_buckets_user 1 [ 720.942676][ T5867] btree reserve cache 0 [ 720.942687][ T5867] [ 720.942697][ T5867] Dev 0: [ 720.942707][ T5867] buckets sectors fragmented [ 720.942721][ T5867] free 2 0 0 [ 720.942735][ T5867] sb 25 6152 248 [ 720.942749][ T5867] journal 8 2048 0 [ 720.942763][ T5867] btree 9 512 1792 [ 720.942776][ T5867] user 5 1264 16 [ 720.942790][ T5867] cached 0 0 0 [ 720.942805][ T5867] parity 0 0 0 [ 720.942819][ T5867] stripe 0 0 0 [ 720.942833][ T5867] need_gc_gens 0 0 0 [ 720.942855][ T5867] need_discard 79 0 0 [ 720.942870][ T5867] unstriped 0 0 0 [ 720.942884][ T5867] capacity 128 [ 720.942895][ T5867] [ 720.942905][ T5867] reserves: [ 720.942916][ T5867] stripe 12 [ 720.942928][ T5867] normal 10 [ 720.942939][ T5867] copygc 8 [ 720.942952][ T5867] btree 4 [ 720.942964][ T5867] btree_copygc 0 [ 720.942975][ T5867] reclaim 0 [ 720.942987][ T5867] interior_updates 0 [ 720.942999][ T5867] [ 720.943009][ T5867] open buckets 2 [ 720.943020][ T5867] buckets to invalidate 0 [ 720.943032][ T5867] [ 720.943042][ T5867] Copygc debug: [ 720.943052][ T5867] running: 0 [ 720.943063][ T5867] copygc_wait:26656 [ 720.943074][ T5867] copygc_wait_at:18816 [ 720.943085][ T5867] Currently waiting for:0 B [ 720.943097][ T5867] Currently waiting since:11.1 MiB [ 720.943109][ T5867] Currently calculated wait: [ 720.943120][ T5867] loop1: 6.61 KiB [ 720.943131][ T5867] [ 720.943141][ T5867] Journal debug: [ 720.943151][ T5867] flags: replay_done,running,may_skip_flush [ 720.943165][ T5867] dirty journal entries: 1/32768 [ 720.943177][ T5867] seq: 217 [ 720.943188][ T5867] seq_ondisk: 217 [ 720.943200][ T5867] last_seq: 217 [ 720.943212][ T5867] last_seq_ondisk: 217 [ 720.943223][ T5867] flushed_seq_ondisk: 217 [ 720.943235][ T5867] watermark: stripe [ 720.943247][ T5867] each entry reserved: 321 [ 720.943259][ T5867] nr flush writes: 27 [ 720.943271][ T5867] nr noflush writes: 190 [ 720.943282][ T5867] average write size: 4.80 KiB [ 720.943294][ T5867] free buf: 65536 [ 720.943307][ T5867] nr direct reclaim: 0 [ 720.943319][ T5867] nr background reclaim: 42 [ 720.943331][ T5867] reclaim kicked: 0 [ 720.943342][ T5867] reclaim runs in: 0 ms [ 720.943354][ T5867] blocked: 0 [ 720.943366][ T5867] current entry sectors: 256 [ 720.943378][ T5867] current entry error: (No error) [ 720.943390][ T5867] current entry: closed [ 720.943403][ T5867] unwritten entries: [ 720.943414][ T5867] last buf closed [ 720.943424][ T5867] space: [ 720.943434][ T5867] discarded 256:768 [ 720.943447][ T5867] clean ondisk 256:1536 [ 720.943459][ T5867] clean 256:1536 [ 720.943472][ T5867] total 256:2048 [ 720.943484][ T5867] dev 0: [ 720.943494][ T5867] durability 1: [ 720.943505][ T5867] nr 8 [ 720.943517][ T5867] bucket size 256 [ 720.943528][ T5867] available 3:200 [ 720.943576][ T5867] discard_idx 1 [ 720.943588][ T5867] dirty_ondisk 4 (seq 217) [ 720.943601][ T5867] dirty_idx 4 (seq 217) [ 720.943613][ T5867] cur_idx 4 (seq 217) [ 720.943626][ T5867] replicas want 1 need 1 [ 721.055946][T13983] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.1899: Allocating blocks 385-513 which overlap fs metadata [ 721.281964][ T5933] usb 8-1: Using ep0 maxpacket: 32 [ 721.290421][ T5933] usb 8-1: config 0 interface 0 has no altsetting 0 [ 721.297144][ T5933] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 721.297177][ T5933] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.297202][ T5933] usb 8-1: Product: syz [ 721.297220][ T5933] usb 8-1: Manufacturer: syz [ 721.297238][ T5933] usb 8-1: SerialNumber: syz [ 721.298903][ T5933] usb 8-1: config 0 descriptor?? [ 721.360916][T13976] EXT4-fs (loop6): pa ffff8880824d8e80: logic 16, phys. 129, len 24 [ 721.360948][T13976] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 721.432102][T13951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 721.593174][ T8040] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 721.728268][ T5933] gs_usb 8-1:0.0: Configuring for 1 interfaces [ 721.906883][ T5933] gs_usb 8-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 721.906935][ T5933] gs_usb 8-1:0.0: probe with driver gs_usb failed with error -121 [ 722.493482][T13992] loop6: detected capacity change from 0 to 512 [ 722.495008][T13992] EXT4-fs: inline encryption not supported [ 722.497521][T13992] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 722.900541][T13992] EXT4-fs (loop6): 1 truncate cleaned up [ 723.322802][T13992] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 724.471913][ T5924] usb 8-1: USB disconnect, device number 4 [ 725.053376][ T8040] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 726.477384][T14022] bridge3: entered promiscuous mode [ 726.482661][T14022] bridge3: entered allmulticast mode [ 726.968458][T14023] loop6: detected capacity change from 0 to 1024 [ 727.381347][ T5936] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 727.575510][ T5861] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 727.583330][ T5861] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 727.590540][ T5861] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 727.591819][ T5936] usb 1-1: Using ep0 maxpacket: 16 [ 727.603715][ T5861] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 727.611222][ T5861] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 728.116634][ T5936] usb 1-1: unable to get BOS descriptor or descriptor too short [ 728.133861][ T49] hfsplus: b-tree write err: -5, ino 4 [ 728.196210][ T5936] usb 1-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 728.228851][ T5936] usb 1-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 728.324050][T14046] tipc: Enabled bearer , priority 0 [ 728.394334][ T5936] usb 1-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 728.414797][T14046] syzkaller0: entered promiscuous mode [ 728.434279][ T5936] usb 1-1: config 1 interface 0 has no altsetting 0 [ 728.441334][T14046] syzkaller0: entered allmulticast mode [ 728.455298][ T5936] usb 1-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 728.474582][ T5936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.485347][ T5936] usb 1-1: Product: syz [ 728.489491][ T5936] usb 1-1: Manufacturer: syz [ 728.505681][ T5936] usb 1-1: SerialNumber: syz [ 728.522112][T14028] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 728.573395][T14046] tipc: Resetting bearer [ 728.632760][T14044] tipc: Resetting bearer [ 728.649858][T14044] tipc: Disabling bearer [ 728.690430][T14035] chnl_net:caif_netlink_parms(): no params data found [ 728.761837][ T5924] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 728.761900][ T5936] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input33 [ 728.915089][ T5924] usb 4-1: Using ep0 maxpacket: 32 [ 728.939067][ T5924] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 728.950866][ T5924] usb 4-1: config 0 has no interface number 0 [ 728.965887][ T5924] usb 4-1: config 0 interface 184 has no altsetting 0 [ 729.008861][ T5924] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 729.011912][T14043] loop5: detected capacity change from 0 to 32768 [ 729.025453][T14035] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.069500][T14035] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.079927][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.088151][ T5924] usb 4-1: Product: syz [ 729.103396][ T5924] usb 4-1: Manufacturer: syz [ 729.108006][ T5924] usb 4-1: SerialNumber: syz [ 729.243342][ T5924] usb 4-1: config 0 descriptor?? [ 729.255762][ T5924] smsc75xx v1.0.0 [ 729.308447][T14043] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1916 (14043) [ 729.609006][T14043] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 729.619511][T14035] bridge_slave_0: entered allmulticast mode [ 729.629433][T14035] bridge_slave_0: entered promiscuous mode [ 729.651942][ T5176] Bluetooth: hci7: command tx timeout [ 729.652433][T14035] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.941888][T14035] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.964628][T14035] bridge_slave_1: entered allmulticast mode [ 729.993944][T14043] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 730.028556][T14063] delete_channel: no stack [ 730.050690][T14035] bridge_slave_1: entered promiscuous mode [ 730.096874][ T5211] bcm5974 1-1:1.0: could not read from device [ 730.104635][ T43] usb 1-1: USB disconnect, device number 28 [ 730.128167][ T5211] bcm5974 1-1:1.0: could not read from device [ 730.192190][ T6329] bcm5974 1-1:1.0: could not read from device [ 730.209039][T14035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 730.232697][T14043] BTRFS info (device loop5): rebuilding free space tree [ 730.253148][T14043] BTRFS info (device loop5): enabling ssd optimizations [ 730.263424][T14035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 730.276269][T14043] BTRFS info (device loop5): turning off barriers [ 730.312558][T14043] BTRFS info (device loop5): turning on sync discard [ 730.511830][T14043] BTRFS info (device loop5): enabling free space tree [ 730.751299][ T5924] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 731.018678][T14043] BTRFS info (device loop5): force clearing of disk cache [ 731.048464][ T5924] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 731.065684][ T5924] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 731.079295][ T5924] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 731.096158][ T5924] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 731.097263][T14043] BTRFS info (device loop5): enabling auto defrag [ 731.313750][T14035] team0: Port device team_slave_0 added [ 731.320511][ T5855] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 731.354527][ T5924] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 731.356065][T14035] team0: Port device team_slave_1 added [ 731.415383][ T5924] usb 4-1: USB disconnect, device number 33 [ 731.436678][T14088] loop7: detected capacity change from 0 to 512 [ 731.473456][T14088] EXT4-fs: inline encryption not supported [ 731.502961][T14088] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 731.538980][T14035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 731.569545][T14088] EXT4-fs (loop7): 1 truncate cleaned up [ 731.662864][T14088] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 731.677677][T14035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 731.731959][ T5176] Bluetooth: hci7: command tx timeout [ 732.003458][T14096] svc: failed to register nfsdv3 RPC service (errno 111). [ 732.057516][T14035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 732.061686][T14096] svc: failed to register nfsaclv3 RPC service (errno 111). [ 732.403164][T14035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 732.410538][T14035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 732.500107][ T9809] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 732.593518][T14035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 732.765333][T14099] svc: failed to register nfsdv3 RPC service (errno 111). [ 732.818841][T14099] svc: failed to register nfsaclv3 RPC service (errno 111). [ 732.858841][T14091] loop6: detected capacity change from 0 to 32768 [ 733.806693][T14112] loop7: detected capacity change from 0 to 32768 [ 733.839636][ T5176] Bluetooth: hci7: command tx timeout [ 733.896738][T14035] hsr_slave_0: entered promiscuous mode [ 734.051608][T14035] hsr_slave_1: entered promiscuous mode [ 734.114222][T14035] debugfs: 'hsr0' already exists in 'hsr' [ 734.119959][T14035] Cannot create hsr debugfs directory [ 734.411306][T14105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 734.475498][T14124] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 734.482020][T14124] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 734.683199][T14124] vhci_hcd vhci_hcd.0: Device attached [ 735.179572][T14130] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 735.201899][ T43] vhci_hcd: vhci_device speed not set [ 735.209789][T14124] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 735.231140][T14124] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 735.258587][T14124] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 735.267044][ T43] usb 39-1: new full-speed USB device number 6 using vhci_hcd [ 735.285499][T14035] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 735.312315][T14130] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(19) [ 735.318901][T14130] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 735.342229][T14035] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 735.351914][T14130] vhci_hcd vhci_hcd.0: Device attached [ 735.414577][T14035] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 735.432743][T14035] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 735.494799][T14124] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 735.513190][T14130] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(23) [ 735.519796][T14130] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 735.525212][T14143] loop6: detected capacity change from 0 to 256 [ 735.545026][T14143] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 735.573793][T14130] vhci_hcd vhci_hcd.0: Device attached [ 735.613965][T14143] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 735.663350][T14124] vhci_hcd vhci_hcd.0: port 0 already used [ 735.671316][T14140] vhci_hcd: connection closed [ 735.672342][T13940] vhci_hcd: stop threads [ 735.681317][T14132] vhci_hcd: connection closed [ 735.682726][T14125] vhci_hcd: connection reset by peer [ 735.718994][T13940] vhci_hcd: release socket [ 735.866425][T14035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 735.882441][T13940] vhci_hcd: disconnect device [ 735.882945][T14143] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 736.034764][ T5176] Bluetooth: hci7: command tx timeout [ 736.102110][T13940] vhci_hcd: stop threads [ 737.059388][T14035] 8021q: adding VLAN 0 to HW filter on device team0 [ 737.066388][T13940] vhci_hcd: release socket [ 737.108995][T13940] vhci_hcd: disconnect device [ 737.113278][ T7499] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.120756][ T7499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 737.132120][T13940] vhci_hcd: stop threads [ 737.140377][T13940] vhci_hcd: release socket [ 737.175169][T13940] vhci_hcd: disconnect device [ 737.197435][ T7499] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.204570][ T7499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 737.531983][ T5868] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 737.539177][T14035] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 737.723482][ T5868] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 737.761719][ T5868] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 737.807797][ T5868] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 737.845200][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.891469][ T5868] usb 4-1: Product: syz [ 737.901488][T14035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 737.968425][ T5868] usb 4-1: Manufacturer: syz [ 737.983607][ T5868] usb 4-1: SerialNumber: syz [ 738.019009][ T5868] usb 4-1: config 0 descriptor?? [ 738.050875][T14162] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 738.067306][ T5868] usb 4-1: ucan: probing device on interface #0 [ 738.090686][ T5868] usb 4-1: ucan: invalid EP count (1) [ 738.108318][ T5868] usb 4-1: ucan: probe failed; try to update the device firmware [ 738.758825][T14035] veth0_vlan: entered promiscuous mode [ 738.801201][T14035] veth1_vlan: entered promiscuous mode [ 739.009706][T14186] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1941'. [ 739.047194][T14035] veth0_macvtap: entered promiscuous mode [ 739.060800][T14186] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1941'. [ 739.135127][T14186] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1941'. [ 739.513156][T14186] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1941'. [ 739.546196][T14035] veth1_macvtap: entered promiscuous mode [ 739.950029][T14035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 740.034935][T14035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 740.219948][ T7499] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.307272][ T7499] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.319102][T13940] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.363611][ T5936] usb 4-1: USB disconnect, device number 34 [ 740.754484][ T43] vhci_hcd: vhci_device speed not set [ 740.774677][ T36] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.795233][T14206] snd_dummy snd_dummy.0: control 0:-3:0:syz0:0 is already present [ 742.677129][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 742.761898][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.214980][T14222] can0: slcan on ttyS3. [ 743.251579][ T7499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.689588][ T7499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 744.399646][T14225] loop6: detected capacity change from 0 to 2048 [ 744.407342][T14217] can0 (unregistered): slcan off ttyS3. [ 744.477589][T14225] NILFS (loop6): invalid segment: Magic number mismatch [ 744.518175][T14225] NILFS (loop6): trying rollback from an earlier position [ 744.661990][T14230] loop3: detected capacity change from 0 to 1024 [ 744.671362][T14225] NILFS (loop6): recovery complete [ 744.681023][T14234] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 745.828588][T14243] loop5: detected capacity change from 0 to 1024 [ 745.843014][T14243] EXT4-fs: Ignoring removed oldalloc option [ 745.899733][T14243] EXT4-fs: Ignoring removed bh option [ 745.970397][T14243] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 746.105970][ T36] hfsplus: b-tree write err: -5, ino 4 [ 746.352623][T14251] loop7: detected capacity change from 0 to 4096 [ 746.513035][ T30] audit: type=1800 audit(2000000602.289:101): pid=14251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1957" name="file1" dev="loop7" ino=33 res=0 errno=0 [ 746.537902][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.544397][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.597681][T14261] loop9: detected capacity change from 0 to 2048 [ 746.721630][T14261] NILFS (loop9): invalid segment: Magic number mismatch [ 746.841344][T14261] NILFS (loop9): trying rollback from an earlier position [ 746.875379][T14261] NILFS (loop9): recovery complete [ 746.881178][T14267] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 747.075189][ T5855] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 747.657195][T14271] loop7: detected capacity change from 0 to 256 [ 747.765724][T14271] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 747.795278][T14274] loop5: detected capacity change from 0 to 2048 [ 747.822881][T14271] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 747.850300][T14274] NILFS (loop5): invalid segment: Magic number mismatch [ 747.888121][T14271] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 747.888305][T14274] NILFS (loop5): trying rollback from an earlier position [ 748.042574][T14274] NILFS (loop5): recovery complete [ 748.066384][T14281] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 750.900241][T14298] loop7: detected capacity change from 0 to 4096 [ 751.034691][T14301] can0: slcan on ttyS3. [ 751.397129][T14298] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 751.411204][T14298] ntfs3(loop7): Failed to load $Extend (-22). [ 751.417422][T14298] ntfs3(loop7): Failed to initialize $Extend. [ 751.613669][ T5868] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 751.912343][T14304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 752.157988][T14306] loop6: detected capacity change from 0 to 32768 [ 752.206938][T14306] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 752.216535][T14306] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 752.262200][ T5868] usb 4-1: Using ep0 maxpacket: 32 [ 752.289630][T14306] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 752.300388][ T43] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 752.328676][ T5868] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 752.346006][ T43] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 752.364952][ T5868] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 752.410893][ T5868] usb 4-1: config 0 has no interface number 0 [ 752.518393][ T5868] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 752.542177][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.641964][ T5868] usb 4-1: Product: syz [ 752.646661][ T5868] usb 4-1: Manufacturer: syz [ 752.655539][ T43] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 309ms [ 752.663297][ T5868] usb 4-1: SerialNumber: syz [ 752.669490][ T5868] usb 4-1: config 0 descriptor?? [ 752.674855][ T43] gfs2: fsid=syz:syz.0: jid=0: Done [ 752.681979][T14306] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 752.757086][T14312] loop7: detected capacity change from 0 to 256 [ 752.830373][T14312] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1972'. [ 752.934593][T14312] ip6gretap0: entered promiscuous mode [ 752.993591][T14312] macvtap1: entered promiscuous mode [ 753.013516][T14312] macvtap1: entered allmulticast mode [ 753.050284][T14312] ip6gretap0: entered allmulticast mode [ 753.138964][T14315] ip6gretap0: left allmulticast mode [ 753.175865][T14315] ip6gretap0: left promiscuous mode [ 754.180813][T14324] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1975'. [ 754.231994][ T5868] usb 4-1: USB disconnect, device number 35 [ 754.241057][T14326] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.1977'. [ 754.300724][T14301] can0 (unregistered): slcan off ttyS3. [ 757.145336][ T5924] kernel write not supported for file /1028/coredump_filter (pid: 5924 comm: kworker/1:3) [ 757.162138][T14352] loop9: detected capacity change from 0 to 764 [ 757.340015][ T5933] IPVS: starting estimator thread 0... [ 757.392153][T14358] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 757.398708][T14358] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 757.531916][T14358] vhci_hcd vhci_hcd.0: Device attached [ 757.711970][T14357] IPVS: using max 35 ests per chain, 84000 per kthread [ 757.999372][T14358] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 758.030271][T14358] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 758.062382][T13565] Allocator stuck? Waited for 30 seconds [ 758.062400][T13565] Allocator debug: [ 758.062412][T13565] capacity26112 [ 758.062422][T13565] reserved 6656 [ 758.062434][T13565] hidden 0 [ 758.062445][T13565] btree 512 [ 758.062457][T13565] data 1280 [ 758.062469][T13565] cached 0 [ 758.062480][T13565] reserved 0 [ 758.062492][T13565] online_reserved 96 [ 758.062504][T13565] nr_inodes 0 [ 758.062515][T13565] [ 758.062525][T13565] freelist_wait waiting [ 758.062537][T13565] open buckets allocated3 [ 758.062548][T13565] open buckets total 1024 [ 758.062560][T13565] open_buckets_wait empty [ 758.062571][T13565] open_buckets_btree 2 [ 758.062583][T13565] open_buckets_user 0 [ 758.062595][T13565] btree reserve cache 0 [ 758.062606][T13565] [ 758.062616][T13565] Dev 0: [ 758.062625][T13565] buckets sectors fragmented [ 758.062640][T13565] free 2 0 0 [ 758.062653][T13565] sb 25 6152 248 [ 758.062666][T13565] journal 8 2048 0 [ 758.062680][T13565] btree 10 512 2048 [ 758.062693][T13565] user 5 1280 0 [ 758.062707][T13565] cached 0 0 0 [ 758.062720][T13565] parity 0 0 0 [ 758.062734][T13565] stripe 0 0 0 [ 758.062747][T13565] need_gc_gens 0 0 0 [ 758.062761][T13565] need_discard 78 0 0 [ 758.062775][T13565] unstriped 0 0 0 [ 758.062789][T13565] capacity 128 [ 758.062800][T13565] [ 758.062810][T13565] reserves: [ 758.062820][T13565] stripe 12 [ 758.062831][T13565] normal 10 [ 758.062843][T13565] copygc 8 [ 758.062854][T13565] btree 4 [ 758.062866][T13565] btree_copygc 0 [ 758.062878][T13565] reclaim 0 [ 758.062889][T13565] interior_updates 0 [ 758.062900][T13565] [ 758.062910][T13565] open buckets 2 [ 758.062922][T13565] buckets to invalidate 0 [ 758.062933][T13565] [ 758.062943][T13565] Copygc debug: [ 758.062953][T13565] running: 0 [ 758.062963][T13565] copygc_wait:26688 [ 758.062975][T13565] copygc_wait_at:18848 [ 758.062987][T13565] Currently waiting for:0 B [ 758.062998][T13565] Currently waiting since:11.2 MiB [ 758.063010][T13565] Currently calculated wait: [ 758.063022][T13565] loop8: 6.25 KiB [ 758.063033][T13565] [ 758.063042][T13565] Journal debug: [ 758.063053][T13565] flags: replay_done,running,may_skip_flush [ 758.063067][T13565] dirty journal entries: 1/32768 [ 758.063079][T13565] seq: 231 [ 758.063091][T13565] seq_ondisk: 231 [ 758.063102][T13565] last_seq: 231 [ 758.063114][T13565] last_seq_ondisk: 231 [ 758.063126][T13565] flushed_seq_ondisk: 231 [ 758.063137][T13565] watermark: stripe [ 758.063149][T13565] each entry reserved: 321 [ 758.063161][T13565] nr flush writes: 21 [ 758.063173][T13565] nr noflush writes: 210 [ 758.063189][T13565] average write size: 4.53 KiB [ 758.063201][T13565] free buf: 131072 [ 758.063212][T13565] nr direct reclaim: 0 [ 758.063223][T13565] nr background reclaim: 46 [ 758.063235][T13565] reclaim kicked: 0 [ 758.063246][T13565] reclaim runs in: 0 ms [ 758.063258][T13565] blocked: 0 [ 758.063270][T13565] current entry sectors: 256 [ 758.063282][T13565] current entry error: (No error) [ 758.063293][T13565] current entry: closed [ 758.063305][T13565] unwritten entries: [ 758.063316][T13565] last buf closed [ 758.063327][T13565] space: [ 758.063337][T13565] discarded 256:1024 [ 758.063349][T13565] clean ondisk 256:1536 [ 758.063361][T13565] clean 256:1536 [ 758.063373][T13565] total 256:2048 [ 758.063385][T13565] dev 0: [ 758.063395][T13565] durability 1: [ 758.063406][T13565] nr 8 [ 758.063417][T13565] bucket size 256 [ 758.063428][T13565] available 4:120 [ 758.063440][T13565] discard_idx 2 [ 758.063452][T13565] dirty_ondisk 4 (seq 231) [ 758.063464][T13565] dirty_idx 4 (seq 231) [ 758.063476][T13565] cur_idx 4 (seq 231) [ 758.063488][T13565] replicas want 1 need 1 [ 758.112472][ T43] vhci_hcd: vhci_device speed not set [ 758.202780][ T43] usb 33-1: new full-speed USB device number 4 using vhci_hcd [ 758.332233][T14358] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 758.332743][T14358] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 758.361824][T14358] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(17) [ 758.361855][T14358] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 758.361911][T14358] vhci_hcd vhci_hcd.0: Device attached [ 758.362518][T14358] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 758.381555][T14358] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(21) [ 758.381583][T14358] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 758.381635][T14358] vhci_hcd vhci_hcd.0: Device attached [ 758.393513][T14358] vhci_hcd vhci_hcd.0: port 0 already used [ 758.395797][T14367] vhci_hcd: connection closed [ 758.397288][T14365] vhci_hcd: connection closed [ 758.397457][T13940] vhci_hcd: stop threads [ 758.397475][T13940] vhci_hcd: release socket [ 758.397506][T13940] vhci_hcd: disconnect device [ 758.397571][T14359] vhci_hcd: connection reset by peer [ 758.397706][T13940] vhci_hcd: stop threads [ 758.397715][T13940] vhci_hcd: release socket [ 758.397737][T13940] vhci_hcd: disconnect device [ 758.397878][T13940] vhci_hcd: stop threads [ 758.397886][T13940] vhci_hcd: release socket [ 758.397907][T13940] vhci_hcd: disconnect device [ 758.624530][T14373] loop6: detected capacity change from 0 to 256 [ 758.639462][T14373] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 758.639481][T14373] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 758.650241][T14373] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 758.880636][T14377] hub 8-0:1.0: USB hub found [ 759.270204][ T5933] kernel write not supported for file /1032/coredump_filter (pid: 5933 comm: kworker/0:5) [ 759.461412][T14377] hub 8-0:1.0: 1 port detected [ 760.902938][ T5924] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 761.111827][ T5924] usb 7-1: Using ep0 maxpacket: 32 [ 761.118417][ T5924] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 761.130393][ T5924] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 761.141957][ T5924] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 761.161229][ T5924] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.644294][ T5924] usb 7-1: config 0 descriptor?? [ 762.175679][ T5924] ft260 0003:0403:6030.0009: unknown main item tag 0x7 [ 763.182148][T14411] loop9: detected capacity change from 0 to 40427 [ 763.192071][T14411] F2FS-fs: heap/no_heap options were deprecated [ 763.309494][ T5924] ft260 0003:0403:6030.0009: chip code: 6424 8183 [ 764.307341][ T5924] ft260 0003:0403:6030.0009: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.6-1/input0 [ 764.815421][T14411] F2FS-fs (loop9): build fault injection rate: 19 [ 764.821920][T14411] F2FS-fs (loop9): build fault injection type: 0x3bfe8c [ 764.832346][T14411] F2FS-fs (loop9): invalid crc value [ 764.852343][ T43] vhci_hcd: vhci_device speed not set [ 764.865644][T14411] F2FS-fs (loop9): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970 [ 765.244576][T14411] F2FS-fs (loop9): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x20a/0x3f0 [ 765.262126][T14346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 765.280840][T14411] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 765.290731][T14411] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 765.306631][ T5924] ft260 0003:0403:6030.0009: failed to retrieve status: -71, no wakeup [ 765.356642][T14410] F2FS-fs (loop9): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40 [ 765.369403][ T5924] ft260 0003:0403:6030.0009: failed to retrieve status: -71 [ 765.383777][ T5924] ft260 0003:0403:6030.0009: failed to reset I2C controller: -71 [ 765.401564][T14410] F2FS-fs (loop9): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0x249/0x1cf0 [ 765.402851][ T5924] usb 7-1: USB disconnect, device number 15 [ 765.413666][T14410] F2FS-fs (loop9): inconsistent node block, node_type:1, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:0,blkaddr:0] [ 765.445606][ T30] audit: type=1800 audit(2000000621.139:102): pid=14410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1996" name="file1" dev="loop9" ino=10 res=0 errno=0 [ 765.509444][T14416] loop6: detected capacity change from 0 to 256 [ 765.546041][T14416] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 765.576086][T14416] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 766.054859][T14035] syz-executor: attempt to access beyond end of device [ 766.054859][T14035] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 766.122040][T14035] CPU: 1 UID: 0 PID: 14035 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 766.122071][T14035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 766.122088][T14035] Call Trace: [ 766.122097][T14035] [ 766.122108][T14035] dump_stack_lvl+0x189/0x250 [ 766.122142][T14035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 766.122173][T14035] ? __pfx_dump_stack_lvl+0x10/0x10 [ 766.122202][T14035] ? __pfx_queue_work_on+0x10/0x10 [ 766.122225][T14035] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 766.122258][T14035] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 766.122297][T14035] f2fs_handle_critical_error+0x37c/0x540 [ 766.122336][T14035] f2fs_write_end_io+0x886/0xb60 [ 766.122370][T14035] __submit_merged_bio+0x27a/0x6a0 [ 766.122405][T14035] __submit_merged_write_cond+0x255/0x530 [ 766.122433][T14035] f2fs_write_data_pages+0x261d/0x3000 [ 766.122476][T14035] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 766.122522][T14035] ? __mod_zone_page_state+0xd7/0x140 [ 766.122552][T14035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 766.122573][T14035] ? folios_put_refs+0x560/0x640 [ 766.122598][T14035] ? __pfx_folios_put_refs+0x10/0x10 [ 766.122617][T14035] ? rcu_is_watching+0x15/0xb0 [ 766.122636][T14035] ? lru_add+0xa2f/0xd80 [ 766.122654][T14035] ? lru_add+0x198/0xd80 [ 766.122672][T14035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 766.122692][T14035] ? folio_batch_move_lru+0x319/0x3a0 [ 766.122715][T14035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 766.122735][T14035] ? rcu_is_watching+0x15/0xb0 [ 766.122754][T14035] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 766.122783][T14035] do_writepages+0x32e/0x550 [ 766.122807][T14035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 766.122827][T14035] ? rcu_is_watching+0x15/0xb0 [ 766.122844][T14035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 766.122867][T14035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 766.122887][T14035] ? do_raw_spin_unlock+0x122/0x240 [ 766.122912][T14035] filemap_fdatawrite+0x199/0x240 [ 766.122937][T14035] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 766.122984][T14035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 766.123005][T14035] ? rcu_is_watching+0x15/0xb0 [ 766.123021][T14035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 766.123044][T14035] ? do_raw_spin_unlock+0x122/0x240 [ 766.123068][T14035] f2fs_sync_dirty_inodes+0x31f/0x830 [ 766.123093][T14035] f2fs_write_checkpoint+0x95a/0x1df0 [ 766.123122][T14035] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 766.123139][T14035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 766.123186][T14035] ? kill_f2fs_super+0x298/0x6c0 [ 766.123213][T14035] kill_f2fs_super+0x2c3/0x6c0 [ 766.123240][T14035] ? __pfx_kill_f2fs_super+0x10/0x10 [ 766.123262][T14035] ? radix_tree_delete_item+0x2b6/0x400 [ 766.123298][T14035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 766.123320][T14035] ? shrinker_free+0x2ce/0x3e0 [ 766.123340][T14035] deactivate_locked_super+0xbc/0x130 [ 766.123363][T14035] cleanup_mnt+0x425/0x4c0 [ 766.123385][T14035] task_work_run+0x1d4/0x260 [ 766.123411][T14035] ? __pfx_task_work_run+0x10/0x10 [ 766.123434][T14035] ? __x64_sys_umount+0x122/0x160 [ 766.123458][T14035] ? __pfx___x64_sys_umount+0x10/0x10 [ 766.123481][T14035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 766.123503][T14035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 766.123523][T14035] ? rcu_is_watching+0x15/0xb0 [ 766.123542][T14035] exit_to_user_mode_loop+0xec/0x110 [ 766.123569][T14035] do_syscall_64+0x2bd/0x3b0 [ 766.123595][T14035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 766.123616][T14035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.123633][T14035] ? srso_alias_return_thunk+0x5/0xfbef5 [ 766.123653][T14035] ? exc_page_fault+0x9f/0xf0 [ 766.123678][T14035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.123696][T14035] RIP: 0033:0x7fe82198ff17 [ 766.123712][T14035] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 766.123727][T14035] RSP: 002b:00007ffde36075f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 766.123746][T14035] RAX: 0000000000000000 RBX: 00007fe821a11c05 RCX: 00007fe82198ff17 [ 766.123759][T14035] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffde36076b0 [ 766.123771][T14035] RBP: 00007ffde36076b0 R08: 0000000000000000 R09: 0000000000000000 [ 766.123783][T14035] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffde3608740 [ 766.123795][T14035] R13: 00007fe821a11c05 R14: 00000000000bae09 R15: 00007ffde3608780 [ 766.123816][T14035] [ 766.123823][T14035] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 766.715226][T14426] loop3: detected capacity change from 0 to 256 [ 766.725868][T14416] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 766.726158][T14426] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 767.119265][T14426] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 767.174243][T14426] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 768.866194][T14437] loop6: detected capacity change from 0 to 256 [ 768.941228][T14437] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 768.979468][T14422] loop5: detected capacity change from 0 to 32768 [ 769.675607][T14408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 769.764435][T14437] exFAT-fs (loop6): error, invalid access to FAT (entry 0xffffffff) [ 769.794744][T14437] exFAT-fs (loop6): error, invalid access to FAT (entry 0xffffffff) [ 769.812313][ T5924] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 769.940937][T14449] loop6: detected capacity change from 0 to 512 [ 770.003514][ T5924] usb 10-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 770.074090][ T5924] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.215083][ T5924] usb 10-1: config 0 descriptor?? [ 770.215770][T14449] EXT4-fs: Ignoring removed oldalloc option [ 770.606611][T14449] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.2011: Parent and EA inode have the same ino 15 [ 770.947144][T14449] EXT4-fs (loop6): 1 orphan inode deleted [ 770.975572][T14449] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 771.936320][ T5924] usb 10-1: Cannot set autoneg [ 771.952439][ T5924] MOSCHIP usb-ethernet driver 10-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 772.067620][ T8040] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 773.475735][T14481] can0: slcan on ttyS3. [ 773.869506][T14484] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2019'. [ 774.251311][T14485] usb 10-1: USB disconnect, device number 2 [ 774.259771][T14474] can0 (unregistered): slcan off ttyS3. [ 774.451824][ T5924] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 774.619689][T14486] loop5: detected capacity change from 0 to 4096 [ 774.632084][ T5924] usb 8-1: Using ep0 maxpacket: 16 [ 774.648511][T14486] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 774.659295][T14486] UDF-fs: Scanning with blocksize 512 failed [ 774.684488][ T5924] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 774.695138][ T5924] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 774.695430][ T5947] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 774.722179][T14485] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 774.732998][T14486] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 774.742266][T14492] binder: 14491:14492 ioctl c0306201 200000000080 returned -14 [ 774.821877][ T5924] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 774.857215][ T5924] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 774.911876][T14485] usb 10-1: Using ep0 maxpacket: 16 [ 774.912947][ T5924] usb 8-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 774.919402][T14485] usb 10-1: unable to get BOS descriptor or descriptor too short [ 774.934058][ T5947] usb 7-1: Using ep0 maxpacket: 16 [ 774.968188][ T5924] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.984309][ T5947] usb 7-1: unable to get BOS descriptor or descriptor too short [ 775.009997][T14485] usb 10-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.026236][ T5924] usb 8-1: Product: syz [ 775.060487][ T5924] usb 8-1: Manufacturer: syz [ 775.072092][ T5947] usb 7-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.091173][ T5924] usb 8-1: SerialNumber: syz [ 775.096112][ T5861] Bluetooth: hci7: command 0x0405 tx timeout [ 775.102272][T14485] usb 10-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 775.102308][T14485] usb 10-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 775.102340][T14485] usb 10-1: config 1 interface 0 has no altsetting 0 [ 775.102462][ T5947] usb 7-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 775.165466][T14485] usb 10-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 775.199659][T14485] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.268243][T14485] usb 10-1: Product: syz [ 775.268702][ T5924] usb 8-1: config 0 descriptor?? [ 775.273739][T14485] usb 10-1: Manufacturer: syz [ 775.282365][ T5947] usb 7-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 775.295369][T14485] usb 10-1: SerialNumber: syz [ 775.302589][ T5947] usb 7-1: config 1 interface 0 has no altsetting 0 [ 775.311583][ T5947] usb 7-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 775.323315][ T5947] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.359529][T14489] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 775.488521][ T5947] usb 7-1: Product: syz [ 775.505516][ T5947] usb 7-1: Manufacturer: syz [ 775.512045][ T5947] usb 7-1: SerialNumber: syz [ 775.533322][T14490] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 775.599095][ T5924] rc_core: IR keymap rc-xbox-dvd not found [ 775.606760][ T5924] Registered IR keymap rc-empty [ 775.663420][T14485] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/input/input35 [ 775.687934][ T5924] rc rc0: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 775.778887][ T5924] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input34 [ 775.802288][ T5947] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input36 [ 776.020663][T14502] delete_channel: no stack [ 776.043238][ T5211] bcm5974 10-1:1.0: could not read from device [ 776.223897][T14505] delete_channel: no stack [ 776.293523][ T5211] bcm5974 10-1:1.0: could not read from device [ 776.316170][T14485] usb 10-1: USB disconnect, device number 3 [ 776.321730][ T5211] bcm5974 10-1:1.0: could not read from device [ 776.348608][ T5211] bcm5974 10-1:1.0: could not read from device [ 776.348676][ T5947] usb 7-1: USB disconnect, device number 16 [ 776.550877][ T5211] bcm5974 7-1:1.0: could not read from device [ 776.591619][ T5211] bcm5974 7-1:1.0: could not read from device [ 776.744470][ C1] xbox_remote 8-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 776.752366][ T43] usb 8-1: USB disconnect, device number 5 [ 777.050762][T14510] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 777.645877][T14507] loop5: detected capacity change from 0 to 32768 [ 777.865025][T14516] snd_dummy snd_dummy.0: control 0:-3:0:syz0:0 is already present [ 779.371582][T14514] loop3: detected capacity change from 0 to 4096 [ 779.552438][T14521] loop7: detected capacity change from 0 to 256 [ 779.614570][T14521] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 779.659738][T14523] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 779.666262][T14523] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 779.722603][T14514] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 779.731129][T14523] vhci_hcd vhci_hcd.0: Device attached [ 779.731559][T14526] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 779.741081][T14514] UDF-fs: Scanning with blocksize 512 failed [ 779.792085][T14523] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 779.812357][T14521] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 779.842340][T14523] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 780.012052][T14521] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 780.022151][T14523] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 780.072006][T14485] vhci_hcd: vhci_device speed not set [ 780.152447][T14527] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 780.191950][T14485] usb 43-1: new full-speed USB device number 4 using vhci_hcd [ 780.539698][T14514] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 780.647472][T14523] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 780.685730][T14526] vhci_hcd vhci_hcd.0: pdev(5) rhport(7) sockfd(26) [ 780.692346][T14526] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 780.751866][T14526] vhci_hcd vhci_hcd.0: Device attached [ 780.767884][T14523] vhci_hcd vhci_hcd.0: port 0 already used [ 780.799678][T14533] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 780.806212][T14533] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 780.813986][T14529] vhci_hcd: connection closed [ 780.814258][T14524] vhci_hcd: connection reset by peer [ 780.846661][T14533] vhci_hcd vhci_hcd.0: Device attached [ 780.860719][T14540] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 780.872019][ T49] vhci_hcd: stop threads [ 780.876268][ T49] vhci_hcd: release socket [ 780.894457][ T49] vhci_hcd: disconnect device [ 780.901544][T14542] loop3: detected capacity change from 0 to 256 [ 780.917351][ T49] vhci_hcd: stop threads [ 780.928847][ T49] vhci_hcd: release socket [ 781.327276][T14540] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 781.327314][T14533] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 781.344958][ T49] vhci_hcd: disconnect device [ 781.480015][T14550] netlink: 'syz.0.2032': attribute type 4 has an invalid length. [ 781.487798][T14550] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2032'. [ 781.918085][ T5924] vhci_hcd: vhci_device speed not set [ 781.940399][T14533] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 781.968285][T14542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2031'. [ 782.002891][T14544] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 782.074150][T14542] ip6gretap0: entered promiscuous mode [ 782.106552][T14553] loop9: detected capacity change from 0 to 1024 [ 782.127307][T14542] macvtap1: entered promiscuous mode [ 782.150647][T14540] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 782.177545][T14542] macvtap1: entered allmulticast mode [ 782.193335][ T5947] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 782.227657][T14542] ip6gretap0: entered allmulticast mode [ 782.235673][T14533] vhci_hcd vhci_hcd.0: pdev(6) rhport(6) sockfd(21) [ 782.242264][T14533] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 782.292633][ T5924] usb 45-1: new full-speed USB device number 4 using vhci_hcd [ 782.311431][T14533] vhci_hcd vhci_hcd.0: Device attached [ 783.261883][ T5947] usb 8-1: Using ep0 maxpacket: 8 [ 783.273794][ T5947] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 783.282994][T14555] vhci_hcd: connection closed [ 783.284624][ T7499] vhci_hcd: stop threads [ 783.328662][ T7499] vhci_hcd: release socket [ 783.351459][ T7499] vhci_hcd: disconnect device [ 783.356716][T14554] ip6gretap0: left allmulticast mode [ 783.362365][T14535] vhci_hcd: connection reset by peer [ 783.366588][ T5947] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 783.369085][T14554] ip6gretap0: left promiscuous mode [ 783.381060][T14540] vhci_hcd vhci_hcd.0: port 0 already used [ 783.558285][ T7499] vhci_hcd: stop threads [ 783.568918][ T7499] vhci_hcd: release socket [ 783.569895][ T5947] usb 8-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 783.579792][ T7499] vhci_hcd: disconnect device [ 783.711198][ T5947] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.735428][ T5947] usb 8-1: config 0 descriptor?? [ 783.760985][ T5947] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 783.869273][ T1035] hfsplus: b-tree write err: -5, ino 4 [ 784.056136][ T43] usb 8-1: USB disconnect, device number 6 [ 785.029605][T14577] loop7: detected capacity change from 0 to 256 [ 785.086124][T14577] exFAT-fs (loop7): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 785.764838][T14586] loop5: detected capacity change from 0 to 256 [ 785.771195][T14485] vhci_hcd: vhci_device speed not set [ 785.815600][T14586] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 785.858601][T14586] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 785.918273][T14586] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 786.694823][T14593] random: crng reseeded on system resumption [ 786.919647][T14579] loop6: detected capacity change from 0 to 32768 [ 787.401866][ T5924] vhci_hcd: vhci_device speed not set [ 788.854169][T14612] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2052'. [ 789.472280][T14616] fuse: Unknown parameter 'fe' [ 790.253119][T14618] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2054'. [ 790.427457][T14618] team0 (unregistering): Port device team_slave_0 removed [ 790.764082][T14618] team0 (unregistering): Port device team_slave_1 removed [ 790.843604][T14618] team0 (unregistering): Port device geneve0 removed [ 790.959038][T14630] netlink: 'syz.5.2051': attribute type 10 has an invalid length. [ 791.772254][T14645] loop6: detected capacity change from 0 to 256 [ 791.785262][T14645] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 791.814006][T14645] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 791.900833][T14645] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 793.423437][T14640] loop7: detected capacity change from 0 to 32768 [ 793.448874][T14640] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2060 (14640) [ 795.141818][ T5924] IPVS: starting estimator thread 0... [ 795.261911][T14657] IPVS: using max 35 ests per chain, 84000 per kthread [ 795.662418][T14656] loop6: detected capacity change from 0 to 32768 [ 796.091017][T14671] can0: slcan on ttyS3. [ 796.361016][T14672] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2069'. [ 796.721967][ T43] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 797.104857][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 797.111357][ T43] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 797.127566][ T43] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 797.150519][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 797.162760][ T43] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 797.183301][ T43] usb 6-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 797.207181][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.241801][ T43] usb 6-1: Product: syz [ 797.270285][ T43] usb 6-1: Manufacturer: syz [ 797.312261][ T43] usb 6-1: SerialNumber: syz [ 797.323434][T14661] can0 (unregistered): slcan off ttyS3. [ 797.336965][T14653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 797.346100][ T43] usb 6-1: config 0 descriptor?? [ 797.722111][T14678] loop3: detected capacity change from 0 to 32768 [ 798.173127][ T43] rc_core: IR keymap rc-xbox-dvd not found [ 798.191320][ T43] Registered IR keymap rc-empty [ 798.221318][ T43] rc rc0: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 798.230944][T14682] netlink: 'syz.0.2071': attribute type 10 has an invalid length. [ 798.242120][T14682] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 798.391172][T14675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 798.505034][ T43] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input37 [ 798.838529][T11915] usb 6-1: USB disconnect, device number 32 [ 798.844501][ C1] xbox_remote 6-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 799.250030][T14696] loop5: detected capacity change from 0 to 1024 [ 799.416136][T14696] EXT4-fs: Ignoring removed oldalloc option [ 799.592001][T14696] EXT4-fs: Ignoring removed bh option [ 799.785367][T14696] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 800.340132][ T10] kernel write not supported for file /663/coredump_filter (pid: 10 comm: kworker/0:1) [ 800.835262][T14712] can0: slcan on ttyS3. [ 801.862799][T14709] can0 (unregistered): slcan off ttyS3. [ 803.124225][T14726] loop7: detected capacity change from 0 to 1024 [ 804.040487][ T49] hfsplus: b-tree write err: -5, ino 4 [ 805.057487][ T5861] Bluetooth: hci5: command 0x0405 tx timeout [ 806.106419][T14762] netlink: 'syz.9.2091': attribute type 4 has an invalid length. [ 806.114303][T14762] netlink: 17 bytes leftover after parsing attributes in process `syz.9.2091'. [ 807.778649][T14767] bridge4: entered promiscuous mode [ 807.784208][T14767] bridge4: entered allmulticast mode [ 807.982461][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 807.989041][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.967411][ T5855] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 809.367057][T14771] loop6: detected capacity change from 0 to 4096 [ 810.326053][T14771] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 810.335454][T14771] UDF-fs: Scanning with blocksize 512 failed [ 810.544605][T14771] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 811.081806][T14787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2099'. [ 811.517200][T14787] team0 (unregistering): Port device team_slave_0 removed [ 811.604794][T14787] team0 (unregistering): Port device team_slave_1 removed [ 811.671608][T14787] team0 (unregistering): Port device geneve0 removed [ 811.718641][T14797] tipc: Started in network mode [ 811.726081][T14797] tipc: Node identity 96d8f006359a, cluster identity 4711 [ 811.761925][T14797] tipc: Enabled bearer , priority 0 [ 811.778334][T14792] tipc: Resetting bearer [ 811.912395][T14799] syzkaller0: entered promiscuous mode [ 811.925488][T14799] syzkaller0: entered allmulticast mode [ 812.098303][T14791] tipc: Resetting bearer [ 812.237131][T14791] tipc: Disabling bearer [ 812.676004][T14808] loop6: detected capacity change from 0 to 32768 [ 812.873615][T14814] loop5: detected capacity change from 0 to 512 [ 812.901562][T14814] EXT4-fs: inline encryption not supported [ 812.955050][T14814] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 813.080036][T14803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 813.502013][T14814] EXT4-fs (loop5): 1 truncate cleaned up [ 813.516831][T14814] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 813.583747][T14823] svc: failed to register nfsdv3 RPC service (errno 111). [ 813.854685][T14823] svc: failed to register nfsaclv3 RPC service (errno 111). [ 813.912025][T14806] loop0: detected capacity change from 0 to 32768 [ 814.109799][T14806] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 814.109820][T14806] allowing incompatible features above 0.0: (unknown version) [ 814.109831][T14806] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 814.242958][T14806] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 814.265223][ T5855] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.284950][T14806] bcachefs (loop0): initializing new filesystem [ 814.352658][T14806] bcachefs (loop0): going read-write [ 815.166499][T14806] bcachefs (loop0): bch2_copygc_start(): error creating copygc thread EINTR [ 815.207259][T14810] loop7: detected capacity change from 0 to 32768 [ 815.214273][T14806] bcachefs (loop0): __bch2_fs_read_write(): error error starting copygc thread EINTR [ 815.227743][T14806] bcachefs (loop0): going read-only [ 815.244740][T14806] bcachefs (loop0): finished waiting for writes to stop [ 815.272432][T14806] bcachefs (loop0): flushing journal and stopping allocators, journal seq 0 [ 815.289661][T14810] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 815.316282][T14806] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 0 [ 815.713924][T14810] XFS (loop7): Ending clean mount [ 815.739876][T14806] bcachefs (loop0): unclean shutdown complete, journal seq 1 [ 815.780483][T14849] can0: slcan on ttyS3. [ 815.807607][T14806] bcachefs (loop0): done going read-only, filesystem not clean [ 815.816272][T14810] XFS (loop7): Quotacheck needed: Please wait. [ 815.838826][T14810] XFS (loop7): Quotacheck: Done. [ 815.848520][T14806] bcachefs (loop0): bch2_fs_initialize(): error EINTR [ 815.904987][T14806] bcachefs (loop0): bch2_fs_start(): error starting filesystem EINTR [ 815.933595][ T9809] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 815.944798][T14806] bcachefs (loop0): shutting down [ 815.996281][T14806] bcachefs (loop0): shutdown complete [ 816.193213][T14842] can0 (unregistered): slcan off ttyS3. [ 816.284875][T14859] loop5: detected capacity change from 0 to 256 [ 816.328348][T14859] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 816.340036][T14806] bcachefs: bch2_fs_get_tree() error: EINTR [ 816.391870][T14859] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 816.429410][T14859] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 816.749945][T14863] can0: slcan on ttyS3. [ 817.652135][T14485] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 818.132036][T14485] usb 7-1: Using ep0 maxpacket: 32 [ 818.144852][T14485] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 819.001853][T14485] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 819.052034][T14485] usb 7-1: config 0 has no interface number 0 [ 819.087521][T14485] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 819.112301][T14485] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.120291][T14485] usb 7-1: Product: syz [ 819.800025][T14485] usb 7-1: Manufacturer: syz [ 819.997414][T14485] usb 7-1: SerialNumber: syz [ 820.013117][T14863] can0 (unregistered): slcan off ttyS3. [ 820.175902][T14485] usb 7-1: config 0 descriptor?? [ 820.190242][T14485] usb 7-1: can't set config #0, error -71 [ 820.274553][T14485] usb 7-1: USB disconnect, device number 17 [ 820.301914][ T10] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 820.537764][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 821.227807][T14894] fuse: Unknown parameter 'fe' [ 821.519611][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 821.530547][T14901] can0: slcan on ttyS3. [ 821.541997][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 821.652038][ T10] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 821.661154][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.691944][ T10] usb 1-1: config 0 descriptor?? [ 821.773870][T14485] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 822.624707][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 822.645330][T14485] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 822.657350][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 822.669241][ T10] usb 1-1: USB disconnect, device number 29 [ 822.676002][T14485] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 822.704302][T14485] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 822.849962][T14485] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 822.892261][T14485] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.938250][T14898] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 823.209131][T14925] bridge5: entered promiscuous mode [ 823.214449][T14925] bridge5: entered allmulticast mode [ 823.833464][T14901] can0 (unregistered): slcan off ttyS3. [ 824.077117][T14485] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 824.133171][T14485] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input38 [ 824.199704][T14485] usb 6-1: USB disconnect, device number 33 [ 824.205788][ C0] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 824.460938][T14940] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2136'. [ 824.911153][T14930] loop7: detected capacity change from 0 to 4096 [ 825.261303][T14943] bridge6: entered promiscuous mode [ 825.266612][T14943] bridge6: entered allmulticast mode [ 825.641864][T14930] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 825.752458][T14930] ntfs3(loop7): Failed to load $Extend (-22). [ 825.784985][T14930] ntfs3(loop7): Failed to initialize $Extend. [ 826.595597][T14954] loop9: detected capacity change from 0 to 1024 [ 826.617316][T14954] EXT4-fs: Ignoring removed oldalloc option [ 826.657640][T14954] EXT4-fs: Ignoring removed bh option [ 826.693984][T14954] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 827.825796][T14035] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 828.901374][T14973] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2143'. [ 829.181864][T11915] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 829.290952][T14968] loop9: detected capacity change from 0 to 4096 [ 829.330916][T14977] loop7: detected capacity change from 0 to 256 [ 829.353904][T14968] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found [ 829.388870][T14968] UDF-fs: Scanning with blocksize 512 failed [ 829.394543][T14979] bridge7: entered promiscuous mode [ 829.407210][T14977] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2144'. [ 829.416163][T11915] usb 4-1: Using ep0 maxpacket: 16 [ 829.424036][T14979] bridge7: entered allmulticast mode [ 829.434262][T11915] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 829.464049][T14977] syz_tun: entered promiscuous mode [ 829.510333][T14968] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 829.529537][T14977] macvtap2: entered promiscuous mode [ 829.543012][T11915] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 829.547959][T14977] macvtap2: entered allmulticast mode [ 829.590192][T11915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 829.592378][T14977] syz_tun: entered allmulticast mode [ 829.672994][T11915] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 829.695002][T14985] loop6: detected capacity change from 0 to 4096 [ 829.702020][T14982] syz_tun: left allmulticast mode [ 829.707361][T14982] syz_tun: left promiscuous mode [ 829.759594][T11915] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 829.805879][T11915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.854277][T11915] usb 4-1: Product: syz [ 829.855322][T14985] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 829.874315][T14985] UDF-fs: Scanning with blocksize 512 failed [ 829.889532][T11915] usb 4-1: Manufacturer: syz [ 829.906570][T11915] usb 4-1: SerialNumber: syz [ 829.935683][T11915] usb 4-1: config 0 descriptor?? [ 829.951852][ T5998] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 830.057869][T14985] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 830.124232][ T5998] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 830.178672][ T5998] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 830.245881][ T5998] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 830.306635][ T5998] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 830.324743][ T5998] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.341912][T11915] rc_core: IR keymap rc-xbox-dvd not found [ 830.353323][T11915] Registered IR keymap rc-empty [ 830.379916][T11915] rc rc0: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 830.399380][T14986] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 830.425202][T11915] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input39 [ 831.925490][ C1] xbox_remote 4-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 831.961906][T11915] usb 4-1: USB disconnect, device number 36 [ 832.245003][ T5998] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 832.679063][ T5998] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input40 [ 833.237481][T14997] loop6: detected capacity change from 0 to 32768 [ 833.429296][T14926] usb 6-1: USB disconnect, device number 34 [ 833.429564][ C1] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 833.446246][T14997] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 833.625089][T15001] loop3: detected capacity change from 0 to 32768 [ 834.127686][ T30] audit: type=1800 audit(2000000689.499:103): pid=15024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2150" name="file1" dev="loop6" ino=17059 res=0 errno=0 [ 834.795888][ T5998] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 835.037787][ T8040] ocfs2: Unmounting device (7,6) on (node local) [ 835.220291][ T5998] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 835.261276][ T5998] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.291485][ T5998] usb 1-1: Product: syz [ 835.301790][ T5998] usb 1-1: Manufacturer: syz [ 835.306425][ T5998] usb 1-1: SerialNumber: syz [ 835.323313][ T5998] usb 1-1: config 0 descriptor?? [ 835.423232][T15037] loop9: detected capacity change from 0 to 64 [ 835.661966][ T5998] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 836.297653][T15046] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2161'. [ 837.317017][T15054] fuse: Unknown parameter 'fe' [ 838.828325][T15058] loop9: detected capacity change from 0 to 256 [ 838.873986][T15058] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 838.926857][T15058] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 838.983611][T15058] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 839.010343][ T5998] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 839.041026][ T5998] usb 1-1: USB disconnect, device number 30 [ 840.079935][T15069] loop9: detected capacity change from 0 to 512 [ 840.218689][T15069] EXT4-fs: Ignoring removed bh option [ 840.568537][T15074] can0: slcan on ttyS3. [ 840.846067][T15069] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 841.392647][T15069] EXT4-fs (loop9): 1 truncate cleaned up [ 841.786908][T15069] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 841.811878][T15069] overlayfs: missing 'lowerdir' [ 841.949486][T15087] loop6: detected capacity change from 0 to 256 [ 841.968943][T15087] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 841.980901][T15087] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 842.048705][T15087] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 842.062787][ T43] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 842.226484][ T43] usb 10-1: Using ep0 maxpacket: 8 [ 842.241289][ T43] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 842.290886][ T43] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 842.349080][ T43] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 842.384172][ T43] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 842.430256][ T43] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 842.478935][ T43] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.723990][ T43] usb 10-1: GET_CAPABILITIES returned 0 [ 842.756461][ T43] usbtmc 10-1:16.0: can't read capabilities [ 843.983991][T15074] can0 (unregistered): slcan off ttyS3. [ 844.035540][ T6029] usb 10-1: USB disconnect, device number 4 [ 844.084227][T15096] loop5: detected capacity change from 0 to 512 [ 844.097309][T15096] EXT4-fs: Ignoring removed oldalloc option [ 844.225498][T15096] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.2176: Parent and EA inode have the same ino 15 [ 844.284785][T15096] EXT4-fs (loop5): 1 orphan inode deleted [ 844.365135][T15100] bridge1: entered promiscuous mode [ 844.370399][T15100] bridge1: entered allmulticast mode [ 844.697499][T15096] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 844.729004][T15096] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2176: invalid indirect mapped block 234881024 (level 0) [ 844.840177][ T5855] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 846.231988][T15111] can0: slcan on ttyS3. [ 846.372284][ T31] INFO: task bch-reclaim/loo:13421 blocked for more than 143 seconds. [ 846.380777][ T31] Not tainted syzkaller #0 [ 846.449100][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 846.494359][T15108] can0 (unregistered): slcan off ttyS3. [ 846.541792][ T31] task:bch-reclaim/loo state:D stack:18824 pid:13421 tgid:13421 ppid:2 task_flags:0x200040 flags:0x00004000 [ 846.586926][ T31] Call Trace: [ 846.601513][ T31] [ 846.613503][ T31] __schedule+0x1798/0x4cc0 [ 846.618088][ T31] ? __pfx___schedule+0x10/0x10 [ 846.628130][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 846.647158][ T31] ? rcu_is_watching+0x15/0xb0 [ 846.657372][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 846.666171][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 846.674535][ T31] ? lock_release+0x4b/0x3e0 [ 846.679315][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 846.694527][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 846.701113][ T31] schedule+0x165/0x360 [ 846.708389][ T31] schedule_preempt_disabled+0x13/0x30 [ 846.719580][ T31] __mutex_lock+0x7e6/0x1350 [ 846.726265][ T31] ? __mutex_lock+0x5bb/0x1350 [ 846.733448][ T31] ? bch2_journal_reclaim_thread+0x16b/0x4f0 [ 846.739498][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 846.758343][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 846.764157][ T31] ? do_raw_spin_lock+0x121/0x290 [ 846.771319][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 846.779956][ T31] ? rcu_is_watching+0x15/0xb0 [ 846.785837][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 846.793361][ T31] bch2_journal_reclaim_thread+0x16b/0x4f0 [ 846.799605][ T31] ? bch2_journal_reclaim_thread+0x223/0x4f0 [ 846.808615][ T31] kthread+0x711/0x8a0 [ 846.813853][ T31] ? __pfx_bch2_journal_reclaim_thread+0x10/0x10 [ 846.820578][ T31] ? __pfx_kthread+0x10/0x10 [ 846.830246][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 846.837375][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 846.845687][ T31] ? rcu_is_watching+0x15/0xb0 [ 846.851362][ T31] ? __pfx_kthread+0x10/0x10 [ 846.856345][ T31] ret_from_fork+0x3fc/0x770 [ 846.861080][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 846.868495][ T31] ? __switch_to_asm+0x39/0x70 [ 846.873889][ T31] ? __switch_to_asm+0x33/0x70 [ 846.878845][ T31] ? __pfx_kthread+0x10/0x10 [ 846.891889][ T31] ret_from_fork_asm+0x1a/0x30 [ 846.899124][ T31] [ 846.905827][ T31] INFO: lockdep is turned off. [ 846.917880][T14035] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 846.928521][ T31] NMI backtrace for cpu 0 [ 846.928542][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 846.928567][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 846.928583][ T31] Call Trace: [ 846.928592][ T31] [ 846.928602][ T31] dump_stack_lvl+0x189/0x250 [ 846.928635][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 846.928664][ T31] ? __pfx__printk+0x10/0x10 [ 846.928699][ T31] ? preempt_schedule_irq+0xde/0x150 [ 846.928731][ T31] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 846.928769][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 846.928799][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 846.928828][ T31] ? __pfx__printk+0x10/0x10 [ 846.928861][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 846.928889][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 846.928917][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 846.928956][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 846.928986][ T31] watchdog+0xf93/0xfe0 [ 846.929022][ T31] ? watchdog+0x1de/0xfe0 [ 846.929059][ T31] kthread+0x711/0x8a0 [ 846.929090][ T31] ? __pfx_watchdog+0x10/0x10 [ 846.929129][ T31] ? __pfx_kthread+0x10/0x10 [ 846.929157][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 846.929187][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 846.929217][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 846.929244][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 846.929280][ T31] ? __pfx_kthread+0x10/0x10 [ 846.929310][ T31] ret_from_fork+0x3fc/0x770 [ 846.929336][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 846.929362][ T31] ? __switch_to_asm+0x39/0x70 [ 846.929394][ T31] ? __switch_to_asm+0x33/0x70 [ 846.929424][ T31] ? __pfx_kthread+0x10/0x10 [ 846.929454][ T31] ret_from_fork_asm+0x1a/0x30 [ 846.929495][ T31] [ 846.929557][ T31] Sending NMI from CPU 0 to CPUs 1: [ 847.111147][ C1] NMI backtrace for cpu 1 [ 847.111166][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 847.111190][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 847.111204][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 847.111239][ C1] Code: 3e ad 96 f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 96 0e 00 f3 0f 1e fa fb f4 13 ad 96 f5 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 847.111259][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 847.111278][ C1] RAX: b54a225e13758d00 RBX: ffffffff819683b8 RCX: b54a225e13758d00 [ 847.111295][ C1] RDX: 0000000000000001 RSI: ffffffff8be33660 RDI: ffffffff819683b8 [ 847.111311][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 847.111328][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa38430 [ 847.111345][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d9b40 [ 847.111369][ C1] FS: 0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 847.111387][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 847.111403][ C1] CR2: 0000200000028000 CR3: 00000000117bc000 CR4: 0000000000350ef0 [ 847.111421][ C1] Call Trace: [ 847.111429][ C1] [ 847.111437][ C1] default_idle+0x13/0x20 [ 847.111457][ C1] default_idle_call+0x74/0xb0 [ 847.111478][ C1] do_idle+0x1e8/0x510 [ 847.111502][ C1] ? __pfx_do_idle+0x10/0x10 [ 847.111531][ C1] cpu_startup_entry+0x44/0x60 [ 847.111552][ C1] start_secondary+0x101/0x110 [ 847.111585][ C1] common_startup_64+0x13e/0x147 [ 847.111624][ C1] [ 847.276466][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 847.283325][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 847.292433][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 847.302480][ T31] Call Trace: [ 847.305737][ T31] [ 847.308646][ T31] dump_stack_lvl+0x99/0x250 [ 847.313232][ T31] ? __asan_memcpy+0x40/0x70 [ 847.317806][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 847.322987][ T31] ? __pfx__printk+0x10/0x10 [ 847.327566][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 847.333185][ T31] vpanic+0x281/0x750 [ 847.337151][ T31] ? __pfx_vpanic+0x10/0x10 [ 847.341634][ T31] ? preempt_schedule+0xae/0xc0 [ 847.346470][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 847.352084][ T31] ? preempt_schedule_common+0x83/0xd0 [ 847.357534][ T31] panic+0xb9/0xc0 [ 847.361236][ T31] ? __pfx_panic+0x10/0x10 [ 847.365634][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 847.371248][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 847.376610][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 847.382227][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 847.388365][ T31] watchdog+0xfd2/0xfe0 [ 847.392510][ T31] ? watchdog+0x1de/0xfe0 [ 847.396828][ T31] kthread+0x711/0x8a0 [ 847.400882][ T31] ? __pfx_watchdog+0x10/0x10 [ 847.405546][ T31] ? __pfx_kthread+0x10/0x10 [ 847.410120][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 847.415738][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 847.420921][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 847.426538][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 847.431895][ T31] ? __pfx_kthread+0x10/0x10 [ 847.436486][ T31] ret_from_fork+0x3fc/0x770 [ 847.441058][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 847.446150][ T31] ? __switch_to_asm+0x39/0x70 [ 847.450898][ T31] ? __switch_to_asm+0x33/0x70 [ 847.455645][ T31] ? __pfx_kthread+0x10/0x10 [ 847.460240][ T31] ret_from_fork_asm+0x1a/0x30 [ 847.464996][ T31] [ 847.468213][ T31] Kernel Offset: disabled [ 847.472520][ T31] Rebooting in 86400 seconds..