last executing test programs: 13m1.228162794s ago: executing program 5 (id=261): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0x2284, &(0x7f00000000c0)={0x0, 0x2083, 0x0, 0x0}) 13m0.065559951s ago: executing program 5 (id=263): ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0xffff030c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x3}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r2, 0x0, 0xf, 0x0, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000180)={'veth0_virt_wifi\x00', &(0x7f0000000100)=@ethtool_cmd={0xa, 0xf, 0x80, 0x3, 0x1, 0x9, 0x80, 0x6, 0x3, 0x63, 0x9, 0x7, 0x1, 0x3, 0x7, 0x8001, [0x0, 0x7]}}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 12m51.191124299s ago: executing program 5 (id=282): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = inotify_init1(0x80000) r4 = syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)) dup(r3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) 12m49.289315865s ago: executing program 5 (id=285): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) ptrace$ARCH_SHSTK_DISABLE(0x1e, r1, 0x1, 0x5002) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) modify_ldt$write(0x1, &(0x7f0000000180)={0x1fff, 0x20000000, 0x3000}, 0x10) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b88f8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ptrace$getregset(0x4205, r4, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) 12m47.308305975s ago: executing program 5 (id=290): socket(0x2000000000000021, 0x2, 0x10000000000002) syz_open_dev$ndb(0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{0x0}], 0x1}, 0x4000000) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x10) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000040)={'wg1\x00', @random="0200ac7f7f00"}) ioctl$SIOCSIFHWADDR(r1, 0x8916, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"}) 12m46.51965295s ago: executing program 5 (id=292): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f00000000c0)=0x2) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, &(0x7f0000000040)) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r5, 0x4112, 0x0) 12m31.11352045s ago: executing program 32 (id=292): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f00000000c0)=0x2) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, &(0x7f0000000040)) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r5, 0x4112, 0x0) 5m52.912230326s ago: executing program 1 (id=1412): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000bc0), 0x0, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) fchdir(0xffffffffffffffff) connect$inet(r4, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x8000, 0x0) 5m50.334708605s ago: executing program 1 (id=1417): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$alg(r1, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) 5m47.872453338s ago: executing program 1 (id=1421): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x800db, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x102) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0xdff, 0x59e2, 0x10}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) dup(r2) close_range(r0, 0xffffffffffffffff, 0x0) 5m46.252166578s ago: executing program 1 (id=1425): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0xe8e80) r4 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x3}, &(0x7f0000002000), &(0x7f0000000000)) io_uring_enter(r4, 0x48e9, 0x0, 0x2, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) r5 = dup2(r3, r3) r6 = open(0x0, 0x2000, 0x0) fcntl$notify(r6, 0x402, 0x8000003d) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0106434, &(0x7f0000000280)={0x8, 0x0, 0x10001}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000140)={@mcast1, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20) sendmmsg$unix(r5, &(0x7f0000008380), 0x400000000000174, 0x4008890) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$nl_xfrm(r0, 0x0, 0x0) 5m36.600079519s ago: executing program 1 (id=1442): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x1a066042, 0x0, 0x0, 0x3}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents(r4, &(0x7f0000000080)=""/64, 0x40) syz_fuse_handle_req(r0, &(0x7f00000021c0)="7b1713b4c6f02da7493fb6859f0143c68a58166f472c5078104b859bc37f9a49a8f85c9101df3b2736ff9bebcb1a3c2f570b28279b8ff7afdef7451b3d10b4578c2e81784b6e4f410800d997f0689546cee0852e9e9c64c1f95df7b136243cf7aee1b8e7a4e1d6e6fc01337370f0dfc098d975e9a6f90a08f5b845054d1e1fc81adadbf2836ff758bade0484377855b05b3556a91827599638458ad30baea03240b302638b88423ecaba6da1e40f6f1b24d60dde1652f2d5f818af43d49dd55c4eadea945e9b6aa744dca07ec2e00320bef5b045414836941469129670c4cdb953ed61efeeae2ced1b7cb3e7fa4c93cce5623a9e33c69d068b801fd1369aba759e2829c67c705853262fef6669aab956f0f733619dd361be5e1414c7e7ff6218e330156d609fa9f3244a0a4fb678a58e70b86f6dabc3331f755b786c42b4198149941a7a58c83f1f2811209025269c5ffcbe0c34ac98cc091cec2c993bca0aa8400ff9e39cc9fba8dda886f95357957bbad8bb850ab92f7aa9bebcdb0ef188749a1742e5597d199f3ccdc2d807bf757da45acc93e3e9645a1036cb041b3c38dafef367b8dae802bbbc03bacb905d40e1da78591687b416ee380103a670aa8f722c76e13f7f0e3effbb37f15a821b8315fe541e3ffc09289d96db1dfa8861e5da41c812b54ee20ca8b3180f2f46db56954791465cb572de0cce16d789d6fff216ca46977ed724dc0cc8cef7b295ebb2998a5c4662e32ae1001e59f3bfefcd72543bfe1aa6688d65c547089ec0fe1f1d9610095a5a4008b14f46775c368417376ee143856031947db71c455dc40eeeda210fbf258452781ce46e51f6df683a7918770f73d324d9401648d271cb9a7e919401567e400fec420cf363444a78eea03e73176abd6546e1657945aa88f64a21e07fc23edd74512cf89781e8ffe9bb1601ab25d31801332a6c5be9cebb6cb08207bb832106553ea9fc19b4b4f1f0cd55efc2925ffef75e9b12f06b5a7496506a274ca25f88398a1734b7013c3f78a2e49ef0d946a1aff362e37c9b5f5473de11401097722adda87944ee3eeb1bdde60e97484af4d2e5f8b0a9c63bb8bb99461b16edd824add1caf9d5247811cc4f6b48004774f1a4fe4dd125ddbfd8b69ff3ee314aeb445bee9f217a2f5a9e0e84ccd8718471f949086df6cdcbf95e568317e31dd01be1b826cf9a09373b16935fc864794a3886a2f4aacc42135db85f8921916a10aa7111a686979e2a5c9959cafc9774c416c4dfe0b9e06657feb2fbc31e7c11f6e2841680986557c1f2b1ec3c0fcc6a749a3c97a5b370550ab7110e25851b13c0b75a7fb0cd3c4659878209867659c216b467bdcf51e786a59fad084886490fc77e186ab827d844d0ac4682651fc4043f8e87b905532a53017ada44feee1f89f9bc6d2a8b144e721a479f7b90acb91033774f4c12df633548a9097c791ec7e80fa2607c86fce6e9abcae1296528b8488ccf18a4bb0fc9b50c15d294e8d380465465b4eeae26eb6800faba611785cd2ff95ca1923dfa47d5923f89e4eadb612002caceaebbe779c4e3a3833455752eae63689ab8dc03db63d82feeab7f1162eed5909b69ccd5abeb9c071da82cfc76cc692a51d99e0c4bdfa6c81c9878e893a77e1e7105e7910827ddb3353612fa8d5e547b43b5abfe50829c1eb7bfda1731db2a9a1e8f0fc298dfa7009679489f9d9323338b7e59f1e48419ca531d88170a5a1995f576aa125edae9e9ea26f6e9c4bc26323b7db0998c528a7b343ccd87ff44c77e6cfc0a324cc1d4ea79c30015f0caaeccd46e5db580aa5ce8030c2b13b37494557da58abbdc7ce9fc9afa49ce0e8a7a6fa058db210ed654203e7879cf5004ebec57522ed34481b749554b36cd7171209b0763e1100d6704604f2d3f28c5ddc66c877e3ab63f36137d5a67cbf872aa6af79cb3a66c9040009b5e1c7b718c1b8788156b82d6d800dbe9fc3d16c812a963c73599b79efb89aa74bdbd9b1a2dc0b8ad853f79c0867a3a45d7a1645059171877687a72dd5ed4213c0ab84ef6185e7935346a84450887bdb2b216883e907b13b03c133adc04ab3c5f60209bd90aad3d94443105f08f0ee1b2231e1a1f8cce71de74d5308b78b5d99ce4ad4573faba9fab48bc1615f14d453c67714b99f274de041512b07b885679e6f89f481c28b082084b853c9afcda31def2898284d6ca28fb124df67142821c9705e28093ded60992d9587fb466df839aa2a4973dd48f9372a55da6592646fc918e533955566a2d8dc59277308223aea4dbe0daf839f95516b8995e9eec87df1df9d38693e0824dca7423b08d553b0ae1c5c44533b918eaa02dd17b4c8ce515ae7de410970f670e17b5e3c0a207fb8464d5d442694a271d593fc23ac19619bac32ac17cc6705ce2e6262361eba24277a471602e7ca57cc614ee116e60a9e0b6ac5e3228ea2c650baf1a09e9e5c7a1b25a078d1d11a673d88f6ee33e50d036d7fe4b9c06adc70aede2e35c6738b255690ed3f7a8d2d14e36e360f3bb66978d6cfcfc41887c751c0efc9325d4485a2f561060413fe6af4ce40d87a476201f15a584fc7ba18ddfef5f1d729d5f544c2c6b06befccb444f0408451089f20b06f05ab7d6702b97819b0eff6fb090f21afb3076558e692920053702fc2348f8dade0cb2b007f38d6dcd4ed3bb42553b1bd684791743a1941e5bf2ed234f44be64a95b485a3e949538a40542f25ca4bfce44e291037ab282082f02157a96f4ca0a0c5cd39215fd07461093a4d87a7979f7aa97142bf5b9ef71db537f9acc90f22ca2ded5c1ecd1ba972d05db7f71e8466085c9b3e975fa3a948f2c4049d1a8e46f71157017a3a74ad25e215dcfe7a4c5cb0a7baea0b0ec60c5df82555c553ac60dd39174c721edc0304b836a4de539c3ee55401e13848018f889cc4a0fcd01d9f4978eb730fb1b4a94ede0283f8c95062f01c8c8a3169b2d5c50cdd4f3a248d80a26c950b4036fc6ffefaf5101269fe3594c2cc128220a1d0b5f9f23121f2b184894e129159eaa92d9a30e878839be44d20cbdff3c338cc95795c86121b2b498bd376e895c98d67f6a27eecb46a203aa9de744feedf27b6825cc17aaa098b5ca05cad6bdbe320908ed36bdc8a8f2c777eeb9b037b36c0e36019c264b3e36196501d6ccb0e7b1899a72bea5c8a24a5ae62e3684a39a06208bd382cd32acfabd742c76334797fa0c09a2a2a7e1240974afe0f3d6eb44590cf171efb7602009a93bde85cea6701c765dbca7c6a879be41dd08847802d4f59e933df65f727cbb45e3a4a5019f503b6fad7e0338e653f8b2c87aa7f196444e0dc1be6d7c4f0c7ddd663d06ff1365a9c362384a33b0315adbfb2d73359c485cd5410d36d21044bd8d3771c5492803b19f7f3a1a5c3248e66786479fa4416a55855adebeb09528ff5add597790b97bddc16bb9b7b33a1f800701c4293e2c8428dc2684726cfe5539ae0a9bf89e1b6f1989fd0433cc865b308bd0c636402b4b285c290e2439b9ecf0eba156fb6b613ea7f97b04506fe28e9471343c854fdfd48945a7f564acc817e609be8f8a7fdee12e9b592fd8c5c08f51ba8cb95be12cfa497d1539a4b8217818d47ebb3cc669014261530205948fdb9983a0e5759afa9b290ce838102661750ab06d7fe65a39efa6af36c042d2dee36402a6686d58eb144b76033cab4482b8fbdd213a90170939ec98df1fdfca4b37b143a971b9b59fc351098942bba090056c20e8cfbfe8fcbe361d068c98a020f67e807b8db2e45cad83c9970907646c0049c05c1ed657d53d859f1a47bfe6f022be0689de224034d0160b1dbc878ba6dd685911288d7af22ff5eedc1634c36e25f51d0757c7b9c73d7937955da356dea68749d464a75f41c9f6ba36cc1ca8c2f3aa34beae14fba894ca705111cdb19094432c2f6caa0eac78ab09b0cee330f36b1b91a6a5d4896cd15d96c12547826559441cbf578f189f5f04526a4cf76d60144090c2386b747ad50f7962ef2950d2c6f4ff8477ad0681ab24c47ea7ded8c9accff0dfa30489f43f0f3182b88e757fd9a1d82e1c9bb4efe5215518a6e48c688b2dabbd15107c5c6245de0acfd740ea54e0ec212f405f25bc3aafc63009631a4e4749296d47c2bcf25cc95afceb0a1ddb3c6124208f5134981c30489b42eeb864b3123b03106c9b234a465d87c30ef36e00244390de36a5dd93794467ef37bd01b86387855d2ac24e05370212e845082bb22c8fcda0f0bc78ddf971b0b9d69fc50e0d907408e9c9ac4e5099f47db2d0c14d888e363ece768555362a08c408d0119c45f158aad695d455d28e223be2862c19262c9f43eff8855b5a9af4f2cede95e415e2f597bb64c8bb2d608f86b15950ffe2e6bea3cdb221cf8b7eb35e0bdf6638283b09c68cda0bf1ccb9e353a7f0afb58d806923e36b22db68615a7e4e04d0932d928afdc8af3963378ebd5e05058160ac67fadb7a7d9ec498e00f63671b84d880d196c93afb4fc823e7d6576ad824ffb4c90fc780b163a292899ccfcaed81dee2c992787a66800e206df3dfc4a6b441d54ccb1a19a587402a663d510e45a5b1aa96fc467efaf7e71cbbff087f3d2922a133466d5ae9f86b0bc39bb3093b87ac2db941b1fd9e40427402781425d6e8856a2c66cbdd274f4c689758db6dd58ec7d766b177739e8c9173f2b1946be5396aad6d7ed29d058ac231e8c2e6a9077b4a217df4580a2d72bcf0b73e4bd07465deb8798a55ee855b82f1fa7d3748a40485bd90fab94b617d92219c4b65efa022936895e51873058615a19b9d1347120c405c3254f290b4c8b99c8ea9dde3a749ec538421a29d27b48ccd83852abe1a461123e4d36e56508d1827880960362d10835df77f9d4be51f1447cac5ae2017a814de58cd99bcc0c194254b17114ea48f5a0cfe6547686088d527c65180474fd460ffea5d48767ceb65c6fa3d7d3c632591d2d9d65c6c3a35a6ae4dc56322cd84734b0e7a092a4c46c1c607afa6d0e477e8d04e4993e595ba708a0f4466cd8a89fbc06d3cd366007296a9f05b66cfdcd5b30b6745e71d513205d5dbe1e8516d9e9cf133caa994ec0ac2c543d107efd4b9a7d9ee1ee415830a6c2ea17114ea9683726f2c82741f9ad4ac1be6772f0809f18c13f4cfc82fd1b7b3bd29615336003c6784c03fbcae475a58a3c4d68099732c326dfb7643eb150f2354918077bb798b5ecf491cdd0765e3e1ed5d0a37840f1a28f7e188a021781f1896dae7153f9d6639bf66be0c7857d7eccd2a1e6c9fd0cc3594477bb005df9b29f680c966161e37bcec97fc2ef7a2c3bf64e4df5785c9b080c7f9c6d7c515408445d55da499c03ba66369a31157bb03588e84a5303c46cd393c5bd6fbbb8deed94b62d67a9351c259b263c6c4fa65a4dbdd7eee080d82cc5e478c885678edbc9cfce74169ab748d7f4a08aec3e114394fc1d5e361267b8f3fcf38a024928d58158560f7da427680e7611a9f1b8255c67e6ea6b597ebd31bed9fd6f85f9b6ee63d4374c1e50597d1c9f3c56b4266bc632ba66ebecc396f6bead40392dcc138098b4166ab7f8714bd4db0615480705dd200da92dc51ec215844d7599e0a6262e8d5dc6a9452db8994d8b8f19ad4029e0b41b5e13fd6b56230cecea57f3111ff6c78876b3e657fab112968e83a0b64ce9837b89f5dad0d5f0b8b410e3a9a56ab2e9143e90fe371a944989ee206eef777cf4a235333c647e45aab910af492bc7c2213246374251e23accf5818aa2f24823bcba12efe3658e1e2cb49a5d4ffd26453829739647eccd106605921641afe16bbe79c8739062eabeeda4d4a42cb70d84e1e1d3506c7bfba5f5135aaae85b03dc6518eb30d832175cedc5bdca95e600e04902d9eda90c1da4bdd3138ac889398c239068857103ad70b5d1d9fac27c8ccfbcfcf126d9a5441bc963bce4669047ac901a14ca7c7e76f94c77159cdbda5360e04bb539a9d5ccd16a8cc88bacaa5b952c86b163575d7f1cab58f0d612d796b570f3c5debd7d9abde7e24de2c252173f1edc93817192699bddad45eeb41ff398c1bee4d2194f38bf4d2b4ed3a8895476bc441f464753139e204ff5dee7f45ce639d7541c0d396141aeff30cbbfa7157a61993eec98a4356df98665546a1d1e8429fb0c78684000862aac50f7d9a1413e89958f4defd3f087769cafc32bcd6016e496b41b7754cfbe42b352346fd585fb19a80f4af9a19811311b5fc6ea8eb5519a3cf7dbc1a06eed41668e332224c1daa01776e0886044f5a95e5dffc8d9ccce7840eeae97e8cc916db95bdc33fb420e28030c6edb011d5281db1dbeac9bfcaf938a757e3939b025d339e69b9692c8c7352787d399f342e96096e37ca208609e5f93629e36ee442db9fb822ea236683f79875e7dc73ec97f98fe0795f9d83f473cc80a589043a7edd953473684ea4e80f698683a0fc1d8863adc44fc13c27a08921a681ca1ad76207b1a97f8fff7db247ea09b3a6407ea83d82d82d171fc80a8f5fb9f19cd7e94fe121a6a0ef9c4cff7a8689c0abf750dadcc7442c2ca5ed437af5e88e89b0a783a1164cd1eb2a33a64c919d9f08fe5aa7a775352ab6027a7b73d6fef51acebec5516c2a5f2b932b2621bbd2cdb415fce9ba1dbc3de205869fa0423adcedd5570ab0b4b64afafaa458b3840b48f018297aa46426d7893418033f00b5378eac6a70275ec860609b07851b88ecb5da05086adfb80f47c71a77301ca0f1520dfb7a800bc8421abf5eb94942ec818e3a1d45f09ff93e6549b3ef6152c6abe38231b4a82e355e27e363184df51418286d7073cf464eee02310e84b3eccabd2120fcca333130357e1967f67a69f437dcf6a20ca21797230aad086bd4c28348f58b80ec5d27626004533993b9f85897d00bc271a62ab67f92e2eed6d900000000549e8344ad90b47fb5c1ed5908bce94d03bbe98a87a1733b5031f89644c2d35d729e1375969a82f0252859219407c5c87f5d249d5eb8c17001fc7c6dc5d1825851b41e5e937f2c39d7f7196f38f83619da2cddce747bb0e906d0fc13a11fc6c2be3d140ea6da886cd5e194ca9dbff565d2a82e7e82dc5a36084bf02029ea05a9cfe1f3dc80489b426a14372232940ffad8124bd515f0a73fa85c2aa0cd51d76a0cc6e75ccc35b702a4fed4d2e2828d98939406ddc6df1048f0a22611859d6bfcbb0873d102e4b8a86b5d9af8056447f6c1552a603d9f67009fa070db73a01e1b4adbe4e841d0b9a92d148b626c386b25687817e5ec07dbbfa1d62d078578fe21d546414e3c5e29e8e086d7e542a2eb74a67127e7f171e076bbdd62767aae3db467db1df13b3121023bcee33f814d767a9ef14651f76ec89910ed33e9804df8619f69ad06bf0559b00d4efbf6f44e922d50a18ffa25d8ac58dec53a93642186c0ca81b07fe5c14c9c13397649a53ebfcec118e5bb84db053e6e505d07a09bb50f33906e7febac3c85ca337111dbfcb7b9becccaaefa3d857d48f0b3d8646d70fdcf2f1dfb89cc3ba1394cb5de24d999c88235418bc0f20d4036bd0113d298b91c44fe042d3b8e4070e3f828499972524601c4725389122c7fc3e38eb799f7b755f23bd5362880b9275e58eab2c8f42e583890cb84e17f35025d1d76dd28171bee561d21451b4b2ebf23b923221c9ea06b924815889d2b605af66539c3b0ffc30c7170a5581727f0faddb257cb6ab28b3456737d3588fa3bce0ba6a2a5c3c94301fa8a4e6db358731bd3a4a62b42181e04241010d7bc3e973b9fe428175ec8f8e6cbd4e53c8bd957621acb1e42504e6f8a7bb30c382058fc9dcd0cd0ba0b789c316cd58d7b5606cc2a66c872f10e6663346d572ecc37ad1c3d8146a137e35e54096ddc2a5e2d26765d75615fecd09b864b29adfe92763ab54272365f56feeb9b57059744e765485ee322cb879fd3c8fd8bc4727d860995c548bcd41852349f1b2227f5a1f39b24549693fb05c04ba8f190673d11eb27d0bf628489f9b8049f5f3a1e1fed97ba9881da0031ef5960b6b0af825cfae8252b931f6151cba9bf889a5c74051a176c56d3cbb8915d3f28f8f684629bd1e3f87f27909b4e8eca6b88cdd60f3b5bbe0641a469e396080fdd2feeac7a11703b758f1815f100ab2ca4403af34a655f4c35e62778c276c96bb94a3d9f58f3bbd7ae6c4f133f7c4199f18d02d66598a54769415b376bb04b520881f23b22b32685ea1ea0dc179ab2f33f07c7039d1a5eedd1905d2a8c7d3c9686758ba5aafdd74f36da7f5522aff5c40e565b50cdd92ce353c3d6c97ce87f0495bdb95d70ea52c8c26b87cd337fd2283b88d7301c32f26833451b8f7c2ee5f44eec58d9eef2a39b3021a29c8747d36a2dbca6c0c085399bb720000000000000009d67e17060abad89c7d8b8970244c2f11ad2f4ae878a3676659b77178a9b651b12cf9c21e658a32999d596af4648f636df4de8c037d1fa63b1a685e8850156bf99e00666dbc03d3e3b44018659743127f91d44c99b578b86a44f3bcf1523c8cb45accc3c5fedfd7796411eddfc3a7a6b7c57ae10fd4bd3fe9f662dc59747ac4b7cc2584ae3ce2e42a41066dd0d560f1b4c83edc57121dade5e397380bec5f40b5d0beb14aef21b2c68ccfd0eb4959b5e7f5b5779903963298e3c9a2141f145137de1d604d9124c3c4f60a4d54da38a7c32ef2632fe66a8ce8e95ee95a570e18e9fbd44884afe291550839dd61e65c952a3f5c6b61850d1c2a77e18fde734a305b407cf6dbf17afd66da6e42f0e8f66092df46c79b44711f6e8aafa831fa1188beea696672b0e94cc3cae584b30dccf053634f792c2d9f4c87e306991b407949f2870b525d123f9ca23142a0ee13d05f51ed4ff2653727ad5bf16453276b2d5e7d7a8a0a1c4847cb61ac4b08d9abee25165a120d156775a534a62f9af3a3b62726101b94ae1e14352262f017c5361b3341952d194a6a2d470e60df3fde61d343e0af8fdff36ad976af6732b732ceb69344550555174fa280153e08f74d81f4ee69c1eb44a3468e8cf78bf7c1663dae3d31553466faa207b8e9887cb54209fac0b6f6d12d9588351c76e6bad884799afe856a25b5fe737d0ba737a0f1a12b4eb3ede48a0c38e6787ab42fca1c7f2ab43fa6104d5a99aa36b73ac3622ccae12252457cb7d0a7c7eb5de795647dca0621fc2c9599441dae7cc2a8631252abb5e0f22e9355e0a156a1ab7b1641e345045e8303b5f6dda5c3c1cc2637700cea25c004460d101fc42ad78ae477739a4efbacc57272cfafae15292dc3b2800d9f42002c2062af9a1f329e11140f8317242c04ac1f11cdb45f5f9ab18877daa214c151fb9ac54e3e010b5e7944d7217442d5c4fc29956c1333cb932424096f5b6afe1128db53f7171be4372be8bae538bcb3e4a2eb29608678735a667135e0f2660956e9e2a3ed862209efe65d9ab2fbbf88e5d3384fb3362af00e1ec6b4d3ca40df442b70951026438877189c4b0ae136a9a35c131fdf19115e8dc1ee2b938bfbfdb3808aebbe7dfbbd3510c7070388f5813e8bc63be744b99116c4b84ea37d57c5da7a80cc883aa915d84a249ebfa78ceb124c63b3a0720b19483189ee50824e8581556f0520e434803204cd0f3dd09fc97c979f9a7e3f8e5eca8fccde98fc4939551338235c0c6378faade0d18f7050f29189485e01ec120239373c5478cd19ab27570921415a6680924baf9c5829f3f2115460d1fceb8a026fa1a0a0047fe1cd6fcf1861dd3784e006abfddfe79461c5001e4e32d99c5bc203c21f8c711c5ecccf8941093d95a8db73722bb7511443fb2670244cc1249492e92fc4bf7e06ec6f08c5c6931929d58232b551957b771ea5e4a932b037904b81916e662e3fe95af894e80f699e5c00ab664f381bd9c0bd4132290b3cf367577429fa52c0f1c44ffc626c215e7103cba05bff4931d9a202c1eb9068f44983d1e0c6d9fb5fed738561651e854a3c1b362ae354a0b4a270386ed2dbef093bd82f07f25edfae31901cb86fd214576b25f769bcb215214c63026b2581a8d17779aae03ba310f3243b3631f4b01c9e3eb342c3bdb44d8e47cdc1683e3b1cfffef72e385cc8831f99425fc406575170e1c106618d5429144a436b9e92d241d8118b5cbe0dca5e8ddd86e671e13080eddcf8dee9e317d192a3a5386378de9b1ecd8cf5439cfbe9f65965e5a5f6c145627ac23fe30c2e06e623b0eca15b225b32b65ce568b656cec0e0d6752fdebffd39c7538472ad7a195b56fcad3fab80016ff006df6b01d785191e4fca143b14ce68b32571476a779515ccb14d35cf9aabd4849c03c9bf12a42cfc2a7146ed6c25892a9d1c48f95314f641142d38cd882e54534d69b3fcc18044309e6debef6dc79d7737956418b955d33737115b44360e0bac14b71e2e64f0c8aea428dce5b65e210c108f832a6041c0aab116488e5863cd1039dc8af537908be3541352bdad303de43387503d19d7c0f0390bdc5b95f1dfb0701fd0e14a22c210837cc0a1cb059de474f4476bfe9bddfe3e7977fb299e82d9eefb18111f7c4a5fbd406fca720fec69340d978f4c9832204d67f6fa5793325e04d4af84acde0b56158e4c606394286a4b3cfc04a426a665529b753e1ce2d6c613159844bd069a67b5b96cb8ec993f05a8e252ed3d8ed63d524af0845f519f9d47b85a773f37031cb91055fb963db50e6a1e368f10a82fa40ac055e0201c6d29661eadb76f8154ef9c1cc210ccf1ccb063e8c00324ed6a14fdefa0167a9abb04debbbf5e7b8a57a7772373c765947f0f67b5130d77a6ca6ab166147d4eba97b4ddf1465d25b02f4430227b5713a29fd84664bfdfa5fc450e48f5263eaca67c16033b79bf1cb819511cf16bae6ffd5d05a7d9cc93067b6f2512fea2424a9c7d178f653ffa7ce1c00924707e3817c7cd461cb2a8cc5eadc408a1258eaad7720ee3976c5a60025c317480016e5e5bd884f3646651f3bdc1185ec1a4112eb24ba5b3b6f94ac66322042d4bc48cb5befabfcf950cf8a0165fba3fa019324b53fb56bbfaec7f4ec733e84c22f841c1c9c1dc51dd3ac4887e155ac4095a6b8846c8f401f3c2d48d4de18906193a9f05ed59e3b0add8bc27c0bad8418ccbb842123ce1d39fdeeaa7984dfba9ef121ab4d4d35de076262636f3815708e4bcf31e634a290b13317425b1a4a2e4ebf8537092c7e524c126faa9622bf1337168e003857805dd420a51816fea3cd37c34e483f64a2da3ab67442314ffff40727835a1bc7b9971ccb5f83183cf1a135defd468907b988d97028f904c4d9c712f7d0ed6abe4d80712a7b7e06efcbe6a5b83e32beb1556326af7a97437c35c6a706c6cf4403b98f5134547ac167fd1abcb9245ec3450202ab80e553952412032a6c3cfa64441d4aecabd1e182c50bf67801fd3b44b40648ac9926bbbd7095425a429f2a9550c2fd1267cbf6156897b705255cadf1c7f233f4effd788b3f446dba19e68bbf8b42ff6caf984a4eb51328ab5e2bc28366e8b4df4df967a16d470a00", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="50010000000000000000000000000000060000000000000002000000000000000600000000000000060000000000000005000000ffffffff090000000000000003000000000000000e010000000000000400000000000000000000000000000008000000000000000001000003000000040000000020000005000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0300000007000000000000000400000000000000000003000000000008"], 0x0, 0x0, 0x0}) 5m35.34975831s ago: executing program 1 (id=1445): r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) listen(r1, 0xfffffffd) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmmsg$sock(r1, &(0x7f0000000280), 0x0, 0x0) ioctl$int_in(r1, 0x5452, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0) keyctl$reject(0x13, 0x0, 0x80000000, 0x1856, 0x0) syz_create_resource$binfmt(0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x10, 0x2, 0xff, 0x5a, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x32, 0x22, 0x20}, 0xe) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000001300)={0x80000000, &(0x7f0000001540), 0x0}) r6 = socket$inet6(0xa, 0x80001, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) getsockopt$bt_hci(r6, 0x0, 0x60, 0x0, &(0x7f0000d23000)) 5m19.905243729s ago: executing program 33 (id=1445): r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) listen(r1, 0xfffffffd) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmmsg$sock(r1, &(0x7f0000000280), 0x0, 0x0) ioctl$int_in(r1, 0x5452, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0) keyctl$reject(0x13, 0x0, 0x80000000, 0x1856, 0x0) syz_create_resource$binfmt(0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x10, 0x2, 0xff, 0x5a, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x32, 0x22, 0x20}, 0xe) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000001300)={0x80000000, &(0x7f0000001540), 0x0}) r6 = socket$inet6(0xa, 0x80001, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) getsockopt$bt_hci(r6, 0x0, 0x60, 0x0, &(0x7f0000d23000)) 3m7.847248155s ago: executing program 2 (id=1797): mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$uid(0x3, 0x0, 0x6007) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0xc102, 0x0) sendfile(r1, r1, 0x0, 0x40008) 3m6.899488386s ago: executing program 2 (id=1800): bind$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0xff17) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x40}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2c}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x4c}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000049c7d958aec852291f8d579d42e00dd17ef2eb4391d549352765a17a009b924eb925"], 0x14}}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000006c0)="6d0b1f4f38bdfad50659e830c28f177bb7f0eca4ece2d735069dc3d8310a66388073fdecd0c184c4fb25e7a64bdca2cc1e7b117a41fb1a7541723762a4d65d1e", 0x40}], 0x1, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES64, @ANYRES16], 0x4c}}, 0x4000804) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x95}, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3m6.103535313s ago: executing program 2 (id=1802): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x5, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000380)="10f16ae0e49e205aa9e8b47a104e02e3e7a1703106cc936c9c906d296c53ef5e2c209a87103be991662087090b5e2ff8bb803454262e68a4f88c00b2c01f9d343cacbdb9c2c0beee8fe6827b5f04739c8b1093a572", 0x55, 0x8001, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0xffffffffffffffb6) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={r2, 0x8}, &(0x7f00000000c0)=0x8) ioprio_set$uid(0x3, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x275a, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x18, 0x8, 0x0) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x458, 0x138, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff}}}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[@ANYRESDEC=r6], 0x0, 0x0, 0x0, 0x0}, 0x0) 3m0.173820535s ago: executing program 2 (id=1823): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r2, 0xc1004110, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) 2m59.835485s ago: executing program 2 (id=1825): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x7fffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1) syz_mount_image$bcachefs(&(0x7f0000000100), &(0x7f0000000180)='./file0\x00', 0x10112, &(0x7f0000000040)=ANY=[@ANYRES8], 0x1, 0x5a12, &(0x7f00000079c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x3af4701e) 2m55.17060916s ago: executing program 2 (id=1840): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x618e, 0x0) 2m40.051227785s ago: executing program 34 (id=1840): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x618e, 0x0) 9.379915401s ago: executing program 8 (id=2312): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000200)=[@init={0x18, 0x84, 0x0, {0xc71f, 0xfff, 0x8, 0xc4}}], 0x18, 0x48060}], 0x1, 0x200000d0) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, 0x0, 0x0) 8.781561613s ago: executing program 3 (id=2314): openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000340), 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='scalable\x00', 0x9) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) shutdown(r0, 0x1) 8.497096027s ago: executing program 8 (id=2315): r0 = syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa, 0x80010, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r3, 0x0, 0x10008840) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) connect$rose(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) pselect6(0x2a, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) poll(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f000060c000/0x4000)=nil, 0x4000, 0x16) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, 0x0) 8.073592262s ago: executing program 0 (id=2318): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100fffe08000a40000000000900020073797a32000000000900010073797a300000000008000540"], 0x108}}, 0x0) 6.844263498s ago: executing program 0 (id=2322): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x34}, {[@ssrr={0x89, 0xf, 0xce, [@broadcast, @multicast1, @empty]}, @generic={0x83, 0x2}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x1}}}}}}, 0x0) mkdir(&(0x7f0000001c00)='./file0\x00', 0x8) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mkdirat(0xffffffffffffff9c, 0x0, 0x0) link(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00') 6.713746373s ago: executing program 7 (id=2324): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRES32=r4], 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0xf8, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0xa4, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x44, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_DESC_CONCAT={0x5c, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8}]}]}]}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @cmp={{0x8}, @void}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x120}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000500)=""/64}, 0x20) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5.694126991s ago: executing program 0 (id=2326): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0xa, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x488c4}, 0x0) 5.632389636s ago: executing program 3 (id=2327): syz_mount_image$jfs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0x1, 0x5ee7, &(0x7f0000006580)="$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") ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x8000) set_mempolicy(0x2, &(0x7f0000000140)=0x8001, 0x2) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28811, r2, 0x2f126000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @auto='\x00\x00&\x00'}}) r4 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x1, 0x3) 5.524730972s ago: executing program 7 (id=2328): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) 5.409151033s ago: executing program 0 (id=2330): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "17321748"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3445}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x17, @string={0x17, 0x3, "00f5dd9b8af4f9e13b61ba7606c86330d200e59ad8"}}, 0x0, 0x0}, &(0x7f0000000640)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) 5.288496097s ago: executing program 7 (id=2331): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getegid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) 4.733782369s ago: executing program 6 (id=2332): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) fsetxattr$trusted_overlay_origin(r3, &(0x7f00000000c0), &(0x7f0000000300), 0x2, 0x3) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000053"], 0x14}}, 0x0) 3.56171186s ago: executing program 6 (id=2333): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYBLOB], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x8, 0x2, 0x0, 0x40}}}}}}, 0x0) 3.001310431s ago: executing program 4 (id=2335): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) 2.942149104s ago: executing program 8 (id=2336): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 2.782581395s ago: executing program 4 (id=2337): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x50, r1, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7f, 0x20}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'ip6gretap0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x50}, 0x1, 0x0, 0x0, 0x8c0}, 0x44024) 2.756634925s ago: executing program 0 (id=2338): prlimit64(0x0, 0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}, 0x80) r4 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0x0) socket$netlink(0x10, 0x3, 0x0) io_uring_enter(0xffffffffffffffff, 0x100847c0, 0x0, 0x1, 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0xffffffffffffffff) 2.6895441s ago: executing program 8 (id=2339): openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000340), 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='scalable\x00', 0x9) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) shutdown(r0, 0x1) 2.563201762s ago: executing program 4 (id=2340): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r4 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000280)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) 2.260026019s ago: executing program 6 (id=2341): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96d", 0x30}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0xa5}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0x53}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140)}, {&(0x7f0000000340)="e4", 0x1}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 2.207836638s ago: executing program 3 (id=2342): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0xa, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x488c4}, 0x0) 2.142754802s ago: executing program 4 (id=2343): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8081}, 0x240088d0) 2.014249234s ago: executing program 3 (id=2344): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = getpid() socket$packet(0x11, 0x3, 0x300) sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x725e65a6, 0x0) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f00000005c0)="23000000220021bb00b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0) recvfrom$inet6(r6, &(0x7f0000000000)=""/203, 0xcb, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="900000a45300", 0x6, 0x20000080, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\'\x00\x00\x00!', 0x5, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) quotactl_fd$Q_SETQUOTA(r0, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x1f8, 0x940c, 0x3002, 0x1f8, 0x2c0, 0x2e8, 0x3d8, 0x3d8, 0x2e8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x1f8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@inet=@recent0={{0xf8}, {0x0, 0xc58, 0x2, 0x0, 'syz0\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x2800000, 0xffffff05, 0x1}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x20}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 1.952265759s ago: executing program 7 (id=2345): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) fsetxattr$trusted_overlay_origin(r3, &(0x7f00000000c0), &(0x7f0000000300), 0x2, 0x3) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000053"], 0x14}}, 0x0) 1.890951089s ago: executing program 6 (id=2346): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40084}, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) r1 = syz_open_pts(r0, 0x100) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x541b, &(0x7f0000000ec0)) 1.883052553s ago: executing program 4 (id=2347): io_setup(0xc, &(0x7f0000000180)=0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) write$FUSE_NOTIFY_RESEND(0xffffffffffffffff, &(0x7f0000000080)={0x14}, 0x14) 1.630961668s ago: executing program 0 (id=2348): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x78}}, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @multicast}, 0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}}) syslog(0x3, &(0x7f0000000700)=""/231, 0xe7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x2, 0x4f, &(0x7f00000000c0)=""/79}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 841.056445ms ago: executing program 6 (id=2349): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) 840.45128ms ago: executing program 7 (id=2350): shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={r0}, &(0x7f0000000080)=0x8) 796.650614ms ago: executing program 3 (id=2351): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1, 0x5}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) sendmmsg$inet6(r0, &(0x7f0000003cc0), 0x0, 0x4000000) 784.754963ms ago: executing program 8 (id=2352): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 604.212744ms ago: executing program 7 (id=2353): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYBLOB], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x8, 0x2, 0x0, 0x40}}}}}}, 0x0) 537.403799ms ago: executing program 6 (id=2354): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) set_mempolicy(0x2, &(0x7f0000000140)=0x8001, 0x2) socket$inet6(0xa, 0x80002, 0x0) syz_mount_image$bcachefs(&(0x7f000000fec0), &(0x7f000000ff00)='./file0\x00', 0x0, &(0x7f000000ff40)=ANY=[@ANYBLOB="13"], 0x1, 0xfe88, &(0x7f000000ff80)="$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") 157.551763ms ago: executing program 4 (id=2355): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r4 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000280)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) 261.146µs ago: executing program 8 (id=2356): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0xa, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x488c4}, 0x0) 0s ago: executing program 3 (id=2357): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002600), 0x101840, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x20000014) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad3125", 0x26}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42a4292e2fbaa86875a5", 0xed}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc9995189ead7bf00148d091675fa045479985e4f644d258d0aa4a69618eb08ba", 0x42}], 0x5}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000000000200000088e0e022b04dbd50d36f3c028c27ba00"/84, 0x54}, {&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab7691", 0xab}], 0x2}}], 0x2, 0xc0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) kernel console output (not intermixed with test programs): 687492][ T5833] ? exit_to_user_mode_loop+0x40/0x110 [ 833.687532][ T5833] exit_to_user_mode_loop+0xec/0x110 [ 833.687572][ T5833] do_syscall_64+0x2bd/0x3b0 [ 833.687595][ T5833] ? lockdep_hardirqs_on+0x9c/0x150 [ 833.687631][ T5833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.687654][ T5833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 833.687683][ T5833] ? exc_page_fault+0x9f/0xf0 [ 833.687717][ T5833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.687741][ T5833] RIP: 0033:0x7f7f9238fc57 [ 833.687759][ T5833] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 833.687776][ T5833] RSP: 002b:00007ffe0acf9348 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 833.687798][ T5833] RAX: 0000000000000000 RBX: 00007f7f92410925 RCX: 00007f7f9238fc57 [ 833.687813][ T5833] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe0acf9400 [ 833.687826][ T5833] RBP: 00007ffe0acf9400 R08: 0000000000000000 R09: 0000000000000000 [ 833.687839][ T5833] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe0acfa490 [ 833.687853][ T5833] R13: 00007f7f92410925 R14: 00000000000cb293 R15: 00007ffe0acfa4d0 [ 833.687889][ T5833] [ 833.688250][ T5833] getblk(): invalid block size 4096 requested [ 833.931453][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 834.021645][ T5833] logical block size: 32768 [ 834.026683][ T5833] CPU: 0 UID: 0 PID: 5833 Comm: syz-executor Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(full) [ 834.026717][ T5833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 834.026735][ T5833] Call Trace: [ 834.026743][ T5833] [ 834.026754][ T5833] dump_stack_lvl+0x189/0x250 [ 834.026800][ T5833] ? __pfx_dump_stack_lvl+0x10/0x10 [ 834.026839][ T5833] ? __pfx__printk+0x10/0x10 [ 834.026868][ T5833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 834.026899][ T5833] ? fs_reclaim_acquire+0x7d/0x100 [ 834.026934][ T5833] bdev_getblk+0x5b0/0x690 [ 834.026978][ T5833] __bread_gfp+0x89/0x3c0 [ 834.027010][ T5833] readSuper+0x1ac/0x270 [ 834.027053][ T5833] updateSuper+0x1cf/0x5d0 [ 834.027094][ T5833] jfs_umount+0x2e7/0x3c0 [ 834.027134][ T5833] jfs_put_super+0x8c/0x190 [ 834.027163][ T5833] ? __pfx_jfs_put_super+0x10/0x10 [ 834.027192][ T5833] generic_shutdown_super+0x135/0x2c0 [ 834.027231][ T5833] kill_block_super+0x44/0x90 [ 834.027255][ T5833] deactivate_locked_super+0xbc/0x130 [ 834.027291][ T5833] cleanup_mnt+0x425/0x4c0 [ 834.027330][ T5833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 834.027358][ T5833] ? lockdep_hardirqs_on+0x9c/0x150 [ 834.027399][ T5833] task_work_run+0x1d4/0x260 [ 834.027433][ T5833] ? __pfx_task_work_run+0x10/0x10 [ 834.027460][ T5833] ? __x64_sys_umount+0x122/0x160 [ 834.027489][ T5833] ? exit_to_user_mode_loop+0x40/0x110 [ 834.027529][ T5833] exit_to_user_mode_loop+0xec/0x110 [ 834.027564][ T5833] do_syscall_64+0x2bd/0x3b0 [ 834.027585][ T5833] ? lockdep_hardirqs_on+0x9c/0x150 [ 834.027621][ T5833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.027644][ T5833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 834.027670][ T5833] ? exc_page_fault+0x9f/0xf0 [ 834.027708][ T5833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.027731][ T5833] RIP: 0033:0x7f7f9238fc57 [ 834.027752][ T5833] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 834.027772][ T5833] RSP: 002b:00007ffe0acf9348 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 834.027796][ T5833] RAX: 0000000000000000 RBX: 00007f7f92410925 RCX: 00007f7f9238fc57 [ 834.027812][ T5833] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe0acf9400 [ 834.027828][ T5833] RBP: 00007ffe0acf9400 R08: 0000000000000000 R09: 0000000000000000 [ 834.027843][ T5833] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe0acfa490 [ 834.027860][ T5833] R13: 00007f7f92410925 R14: 00000000000cb293 R15: 00007ffe0acfa4d0 [ 834.027897][ T5833] [ 834.028235][ T5833] lbmIODone: I/O error in JFS log [ 834.281682][ C0] vkms_vblank_simulate: vblank timer overrun [ 834.392545][ T5833] lbmIODone: I/O error in JFS log [ 834.409868][ T5833] lbmIODone: I/O error in JFS log [ 834.416311][ T5833] lmLogShutdown: exit(-5) [ 834.429797][ T5833] jfs_umount failed with return code -5 [ 834.470921][ T5968] usb 9-1: unable to get BOS descriptor or descriptor too short [ 834.477922][ T5845] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 834.478667][ T5968] usb 9-1: no configurations [ 834.503162][ T5968] usb 9-1: can't read configurations, error -22 [ 834.846805][ T30] audit: type=1800 audit(2000000404.010:459): pid=12585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1951" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 834.951910][ T6356] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 834.977150][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 835.137481][ T5968] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 835.276505][ T5834] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 835.323400][ T5968] usb 9-1: device descriptor read/64, error -71 [ 835.453163][ T5968] usb usb9-port1: attempt power cycle [ 835.870913][ T5968] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 835.911665][ T5968] usb 9-1: device descriptor read/8, error -71 [ 836.010897][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 836.761292][ T5968] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 837.050856][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 837.081564][ T5968] usb 9-1: device descriptor read/8, error -71 [ 837.208693][ T5968] usb usb9-port1: unable to enumerate USB device [ 837.441000][ T5915] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 838.090903][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 839.130871][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 839.774225][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 839.987666][ T5915] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 840.001419][ T5915] usb 4-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 840.010585][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.047312][ T5915] usb 4-1: config 0 descriptor?? [ 840.102458][ T5915] usbhid 4-1:0.0: can't add hid device: -71 [ 840.108546][ T5915] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 840.170851][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 840.872078][ T5915] usb 4-1: USB disconnect, device number 34 [ 841.210832][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 841.679064][T12623] loop3: detected capacity change from 0 to 8192 [ 841.785307][T12623] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 841.805873][T12635] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1971'. [ 841.857706][T12635] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 841.866991][T12635] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 841.876164][T12635] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 841.885453][T12635] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 841.912447][ T30] audit: type=1800 audit(2000000411.020:460): pid=12623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1966" name="file1" dev="loop3" ino=1048705 res=0 errno=0 [ 841.944719][T12635] vxlan0: entered promiscuous mode [ 842.021078][T12619] loop4: detected capacity change from 0 to 32768 [ 842.250840][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 842.419183][T12619] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 842.694560][ T30] audit: type=1804 audit(2000000411.850:461): pid=12619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1967" name="/newroot/345/file1/bus" dev="loop4" ino=17059 res=1 errno=0 [ 842.774482][ T30] audit: type=1804 audit(2000000411.860:462): pid=12619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1967" name="/newroot/345/file1/bus" dev="loop4" ino=17059 res=1 errno=0 [ 842.827868][T12632] loop0: detected capacity change from 0 to 32768 [ 842.877861][T12632] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1970 (12632) [ 842.927572][T12632] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 842.991859][T12632] BTRFS info (device loop0): using sha256 (sha256-x86_64) checksum algorithm [ 843.137000][ T5845] ocfs2: Unmounting device (7,4) on (node local) [ 843.166434][T12632] BTRFS info (device loop0): using free-space-tree [ 843.290889][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 843.618291][ T30] audit: type=1800 audit(2000000412.780:463): pid=12632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1970" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 843.746033][ T6387] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 844.011334][ T5833] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 844.030992][T12195] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 844.127251][T12676] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1975'. [ 844.219504][T12195] usb 7-1: device descriptor read/64, error -71 [ 844.330837][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 845.370851][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 846.332908][ T7612] Allocator stuck? Waited for 30 seconds [ 846.332975][ T7612] Allocator debug: [ 846.332987][ T7612] capacity26112 [ 846.332999][ T7612] reserved 6656 [ 846.333011][ T7612] hidden 0 [ 846.333022][ T7612] btree 512 [ 846.333034][ T7612] data 1192 [ 846.333046][ T7612] cached 0 [ 846.333058][ T7612] reserved 0 [ 846.333071][ T7612] online_reserved 288 [ 846.333082][ T7612] nr_inodes 0 [ 846.333094][ T7612] [ 846.333104][ T7612] freelist_wait waiting [ 846.333117][ T7612] open buckets allocated4 [ 846.333128][ T7612] open buckets total 1024 [ 846.333141][ T7612] open_buckets_wait empty [ 846.333153][ T7612] open_buckets_btree 1 [ 846.333165][ T7612] open_buckets_user 2 [ 846.333177][ T7612] btree reserve cache 0 [ 846.333188][ T7612] [ 846.333199][ T7612] Dev 0: [ 846.333209][ T7612] buckets sectors fragmented [ 846.333224][ T7612] free 3 0 0 [ 846.333238][ T7612] sb 25 6152 248 [ 846.333252][ T7612] journal 8 2048 0 [ 846.333267][ T7612] btree 8 512 1536 [ 846.333281][ T7612] user 6 1192 344 [ 846.333296][ T7612] cached 0 0 0 [ 846.333310][ T7612] parity 0 0 0 [ 846.333324][ T7612] stripe 0 0 0 [ 846.333339][ T7612] need_gc_gens 0 0 0 [ 846.333353][ T7612] need_discard 78 0 0 [ 846.333367][ T7612] unstriped 0 0 0 [ 846.333382][ T7612] capacity 128 [ 846.333394][ T7612] [ 846.333404][ T7612] reserves: [ 846.333415][ T7612] stripe 12 [ 846.333427][ T7612] normal 10 [ 846.333438][ T7612] copygc 8 [ 846.333451][ T7612] btree 4 [ 846.333463][ T7612] btree_copygc 0 [ 846.333475][ T7612] reclaim 0 [ 846.333486][ T7612] interior_updates 0 [ 846.333498][ T7612] [ 846.333508][ T7612] open buckets 3 [ 846.333521][ T7612] buckets to invalidate 0 [ 846.333532][ T7612] [ 846.333543][ T7612] Copygc debug: [ 846.333553][ T7612] running: 0 [ 846.333564][ T7612] copygc_wait:42400 [ 846.333576][ T7612] copygc_wait_at:35792 [ 846.333591][ T7612] Currently waiting for:0 B [ 846.333604][ T7612] Currently waiting since:9.72 MiB [ 846.333616][ T7612] Currently calculated wait: [ 846.333628][ T7612] loop2: 6.41 KiB [ 846.333639][ T7612] [ 846.333650][ T7612] Journal debug: [ 846.333660][ T7612] flags: replay_done,running,may_skip_flush [ 846.333675][ T7612] dirty journal entries: 1/32768 [ 846.333688][ T7612] seq: 204 [ 846.333700][ T7612] seq_ondisk: 204 [ 846.333711][ T7612] last_seq: 204 [ 846.333724][ T7612] last_seq_ondisk: 204 [ 846.333736][ T7612] flushed_seq_ondisk: 204 [ 846.333748][ T7612] watermark: stripe [ 846.333760][ T7612] each entry reserved: 321 [ 846.333773][ T7612] nr flush writes: 26 [ 846.333785][ T7612] nr noflush writes: 178 [ 846.333797][ T7612] average write size: 5.53 KiB [ 846.333809][ T7612] free buf: 131072 [ 846.333822][ T7612] nr direct reclaim: 0 [ 846.333834][ T7612] nr background reclaim: 62 [ 846.333846][ T7612] reclaim kicked: 0 [ 846.333858][ T7612] reclaim runs in: 0 ms [ 846.333870][ T7612] blocked: 0 [ 846.333882][ T7612] current entry sectors: 256 [ 846.333895][ T7612] current entry error: (No error) [ 846.333908][ T7612] current entry: closed [ 846.333920][ T7612] unwritten entries: [ 846.333931][ T7612] last buf closed [ 846.333943][ T7612] space: [ 846.333954][ T7612] discarded 256:1024 [ 846.333967][ T7612] clean ondisk 256:1536 [ 846.333980][ T7612] clean 256:1536 [ 846.333992][ T7612] total 256:2048 [ 846.334004][ T7612] dev 0: [ 846.334015][ T7612] durability 1: [ 846.334026][ T7612] nr 8 [ 846.334038][ T7612] bucket size 256 [ 846.334051][ T7612] available 4:96 [ 846.334063][ T7612] discard_idx 3 [ 846.334076][ T7612] dirty_ondisk 5 (seq 204) [ 846.334088][ T7612] dirty_idx 5 (seq 204) [ 846.334101][ T7612] cur_idx 5 (seq 204) [ 846.334114][ T7612] replicas want 1 need 1 [ 846.360857][ T5836] Allocator stuck? Waited for 30 seconds [ 846.360913][ T5836] Allocator debug: [ 846.360925][ T5836] capacity26112 [ 846.360936][ T5836] reserved 6656 [ 846.360948][ T5836] hidden 0 [ 846.360961][ T5836] btree 512 [ 846.360973][ T5836] data 1192 [ 846.360985][ T5836] cached 0 [ 846.360997][ T5836] reserved 0 [ 846.361009][ T5836] online_reserved 288 [ 846.361021][ T5836] nr_inodes 0 [ 846.361033][ T5836] [ 846.361043][ T5836] freelist_wait waiting [ 846.361056][ T5836] open buckets allocated4 [ 846.361068][ T5836] open buckets total 1024 [ 846.361080][ T5836] open_buckets_wait empty [ 846.361092][ T5836] open_buckets_btree 1 [ 846.361104][ T5836] open_buckets_user 2 [ 846.361117][ T5836] btree reserve cache 0 [ 846.361128][ T5836] [ 846.361138][ T5836] Dev 0: [ 846.361149][ T5836] buckets sectors fragmented [ 846.361164][ T5836] free 3 0 0 [ 846.361178][ T5836] sb 25 6152 248 [ 846.361192][ T5836] journal 8 2048 0 [ 846.372443][ T5836] btree 8 512 1536 [ 846.372464][ T5836] user 6 1192 344 [ 846.372479][ T5836] cached 0 0 0 [ 846.372494][ T5836] parity 0 0 0 [ 846.372508][ T5836] stripe 0 0 0 [ 846.372523][ T5836] need_gc_gens 0 0 0 [ 846.372537][ T5836] need_discard 78 0 0 [ 846.372551][ T5836] unstriped 0 0 0 [ 846.372565][ T5836] capacity 128 [ 846.372577][ T5836] [ 846.372597][ T5836] reserves: [ 846.372607][ T5836] stripe 12 [ 846.372620][ T5836] normal 10 [ 846.372632][ T5836] copygc 8 [ 846.372643][ T5836] btree 4 [ 846.372653][ T5836] btree_copygc 0 [ 846.372665][ T5836] reclaim 0 [ 846.372678][ T5836] interior_updates 0 [ 846.372690][ T5836] [ 846.372700][ T5836] open buckets 3 [ 846.372712][ T5836] buckets to invalidate 0 [ 846.372724][ T5836] [ 846.372735][ T5836] Copygc debug: [ 846.372746][ T5836] running: 0 [ 846.372757][ T5836] copygc_wait:42400 [ 846.372768][ T5836] copygc_wait_at:35792 [ 846.372780][ T5836] Currently waiting for:0 B [ 846.372791][ T5836] Currently waiting since:9.72 MiB [ 846.372804][ T5836] Currently calculated wait: [ 846.372816][ T5836] loop2: 6.41 KiB [ 846.372827][ T5836] [ 846.372838][ T5836] Journal debug: [ 846.372849][ T5836] flags: replay_done,running,may_skip_flush [ 846.372863][ T5836] dirty journal entries: 1/32768 [ 846.372876][ T5836] seq: 204 [ 846.372888][ T5836] seq_ondisk: 204 [ 846.372901][ T5836] last_seq: 204 [ 846.372913][ T5836] last_seq_ondisk: 204 [ 846.372925][ T5836] flushed_seq_ondisk: 204 [ 846.372937][ T5836] watermark: stripe [ 846.372950][ T5836] each entry reserved: 321 [ 846.372963][ T5836] nr flush writes: 26 [ 846.372975][ T5836] nr noflush writes: 178 [ 846.372987][ T5836] average write size: 5.53 KiB [ 846.373000][ T5836] free buf: 131072 [ 846.373013][ T5836] nr direct reclaim: 0 [ 846.373025][ T5836] nr background reclaim: 62 [ 846.373038][ T5836] reclaim kicked: 0 [ 846.373050][ T5836] reclaim runs in: 0 ms [ 846.373062][ T5836] blocked: 0 [ 846.373075][ T5836] current entry sectors: 256 [ 846.373087][ T5836] current entry error: (No error) [ 846.373100][ T5836] current entry: closed [ 846.373113][ T5836] unwritten entries: [ 846.373124][ T5836] last buf closed [ 846.373136][ T5836] space: [ 846.373146][ T5836] discarded 256:1024 [ 846.373159][ T5836] clean ondisk 256:1536 [ 846.373172][ T5836] clean 256:1536 [ 846.373184][ T5836] total 256:2048 [ 846.373197][ T5836] dev 0: [ 846.373207][ T5836] durability 1: [ 846.373219][ T5836] nr 8 [ 846.373231][ T5836] bucket size 256 [ 846.373243][ T5836] available 4:96 [ 846.373256][ T5836] discard_idx 3 [ 846.373267][ T5836] dirty_ondisk 5 (seq 204) [ 846.373280][ T5836] dirty_idx 5 (seq 204) [ 846.373293][ T5836] cur_idx 5 (seq 204) [ 846.373306][ T5836] replicas want 1 need 1 [ 846.410854][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 846.610984][T12195] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 846.971871][ T5837] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 847.129423][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 847.129464][ T5837] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 847.129512][ T5837] usb 4-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 847.129540][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.142795][ T5837] usb 4-1: config 0 descriptor?? [ 847.432928][T12693] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1982'. [ 847.436405][T12691] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1982'. [ 847.450873][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 848.488749][ T5837] usbhid 4-1:0.0: can't add hid device: -71 [ 848.488866][ T5837] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 848.491235][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 848.523439][ T5837] usb 4-1: USB disconnect, device number 35 [ 849.044715][T12705] loop0: detected capacity change from 0 to 512 [ 849.151112][ T5837] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 849.386512][T12705] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 849.531141][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 849.959688][T12705] ext4 filesystem being mounted at /331/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 850.138165][ T5837] usb 7-1: unable to get BOS descriptor or descriptor too short [ 850.254805][ T5837] usb 7-1: not running at top speed; connect to a high speed hub [ 850.410307][ T5837] usb 7-1: config 129 has an invalid interface number: 135 but max is 0 [ 850.501997][ T5837] usb 7-1: config 129 has an invalid descriptor of length 100, skipping remainder of the config [ 850.533218][ T5837] usb 7-1: config 129 has no interface number 0 [ 850.540275][ T5837] usb 7-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 850.570853][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 850.605505][ T30] audit: type=1800 audit(2000000419.770:464): pid=12705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1987" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 850.714270][ T5837] usb 7-1: config 129 interface 135 has no altsetting 0 [ 850.724816][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 850.854868][ T5837] usb 7-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 850.897724][ T5837] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.902276][T12722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1992'. [ 850.969363][ T5837] usb 7-1: Product: syz [ 851.004401][ T5837] usb 7-1: Manufacturer: syz [ 851.009108][ T5837] usb 7-1: SerialNumber: syz [ 851.610903][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 851.747972][ T5837] usb 7-1: USB disconnect, device number 20 [ 852.397453][T12733] sd 0:0:1:0: PR command failed: 1026 [ 852.403925][T12733] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 852.444024][T12733] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 852.585736][T12741] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1998'. [ 852.596681][T12740] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1998'. [ 852.660846][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 853.172038][T12720] loop3: detected capacity change from 0 to 32768 [ 853.216160][T12720] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1991 (12720) [ 853.277883][T12720] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 853.298418][T12720] BTRFS info (device loop3): using sha256 (sha256-x86_64) checksum algorithm [ 853.328610][T12720] BTRFS info (device loop3): using free-space-tree [ 853.690855][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 854.020645][T12763] binder: BINDER_SET_CONTEXT_MGR already set [ 854.029547][T12763] binder: 12759:12763 ioctl 4018620d 200000000040 returned -16 [ 854.243548][T12720] BTRFS error (device loop3): open_ctree failed: -4 [ 854.730830][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 855.341243][ T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 855.362029][T12784] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2009'. [ 855.469000][T12785] bridge0: port 3(syz_tun) entered blocking state [ 855.522055][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 855.538810][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 855.562868][T12785] bridge0: port 3(syz_tun) entered disabled state [ 855.590201][T12785] syz_tun: entered allmulticast mode [ 855.632848][T12785] syz_tun: entered promiscuous mode [ 855.660616][T12785] bridge0: port 3(syz_tun) entered blocking state [ 855.667447][T12785] bridge0: port 3(syz_tun) entered forwarding state [ 855.741019][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 855.780852][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 855.852259][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.341928][ T9] usb 1-1: config 0 descriptor?? [ 856.810835][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 856.984198][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 856.990337][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 857.022615][ T9] usb 1-1: USB disconnect, device number 27 [ 857.136775][T12808] sd 0:0:1:0: PR command failed: 1026 [ 857.151140][T12808] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 857.181658][T12808] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 857.860921][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 858.263616][T12824] binder: 12823:12824 ioctl c0306201 200000000240 returned -11 [ 858.890841][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 859.930990][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 860.149035][ T7275] bond0: (slave bond_slave_0): interface is now down [ 860.167288][T12846] netlink: 'syz.8.2025': attribute type 10 has an invalid length. [ 860.183969][ T7275] bond0: (slave bond_slave_1): interface is now down [ 860.204731][T12846] syz_tun: entered promiscuous mode [ 860.243012][ T7275] bond0: (slave bond_slave_0): interface is now down [ 860.295921][ T7275] bond0: (slave bond_slave_1): interface is now down [ 860.361099][T12846] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 860.372017][ T9252] bond0: (slave bond_slave_0): interface is now down [ 860.404336][ T9252] bond0: (slave bond_slave_1): interface is now down [ 860.446477][ T9252] bond0: (slave syz_tun): interface is now down [ 860.676594][ T9252] bond0: now running without any active interface! [ 860.887133][T12828] loop3: detected capacity change from 0 to 32768 [ 860.954020][T12828] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2019 (12828) [ 860.970936][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 861.067991][T12855] sd 0:0:1:0: PR command failed: 1026 [ 861.098623][T12828] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 861.109057][T12855] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 861.141480][T12855] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 861.159464][T12828] BTRFS info (device loop3): using sha256 (sha256-x86_64) checksum algorithm [ 861.203388][T12828] BTRFS info (device loop3): using free-space-tree [ 861.346922][T12828] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 861.347449][T12828] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 861.467654][T12828] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 861.601326][T12828] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 861.634879][T12828] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 861.685494][T12828] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 861.919288][T12828] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 862.010822][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 862.259811][T12828] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 862.326174][T12879] Device name cannot be null; rc = [-22] [ 862.921876][T12828] BTRFS error (device loop3): open_ctree failed: -12 [ 862.956257][T12881] binder: BINDER_SET_CONTEXT_MGR already set [ 863.020672][T12881] binder: 12880:12881 ioctl 4018620d 200000000040 returned -16 [ 863.050830][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 863.075007][T12881] binder: 12880:12881 ioctl c0306201 200000000240 returned -11 [ 863.115765][T12888] binder: 12887:12888 ioctl c0306201 200000000240 returned -11 [ 864.080959][ T9614] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 864.090841][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 864.186725][T12895] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input23 [ 864.201562][T12897] 9pnet_fd: Insufficient options for proto=fd [ 864.293195][ T9614] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 864.672981][ T9614] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 865.130825][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 865.507317][ T9614] usb 7-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 865.549047][ T9614] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.575651][ T9614] usb 7-1: config 0 descriptor?? [ 865.696340][ T9614] usb 7-1: can't set config #0, error -71 [ 865.752170][ T9614] usb 7-1: USB disconnect, device number 21 [ 866.170848][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 866.305146][T12930] Device name cannot be null; rc = [-22] [ 867.192787][T12939] binder: 12933:12939 ioctl c0306201 200000000240 returned -11 [ 867.211130][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 868.114384][T12948] 9pnet_fd: Insufficient options for proto=fd [ 868.199538][T12932] loop4: detected capacity change from 0 to 32768 [ 868.262002][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 868.278396][T12932] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2048 (12932) [ 868.376532][T12932] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 868.417710][T12932] BTRFS info (device loop4): using sha256 (sha256-x86_64) checksum algorithm [ 868.461179][T12932] BTRFS info (device loop4): using free-space-tree [ 868.717531][T12940] loop3: detected capacity change from 0 to 32768 [ 868.734525][T12940] BTRFS: device /dev/loop3 (7:3) using temp-fsid 7e6d9387-7e2e-41b3-9cc4-a31092128c3b [ 868.750651][T12940] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2050 (12940) [ 869.301166][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 869.376011][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.383418][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.427451][T12940] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 869.497902][T12940] BTRFS info (device loop3): using sha256 (sha256-x86_64) checksum algorithm [ 869.507294][T12940] BTRFS error (device loop3): superblock checksum mismatch [ 869.521513][T12940] BTRFS error (device loop3): open_ctree failed: -22 [ 869.601859][ T30] audit: type=1800 audit(2000000438.760:465): pid=12975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2048" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 869.935296][ T9252] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 870.221730][ T5922] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 870.247784][ T5845] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 870.333669][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 870.403288][ T5922] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 870.445664][ T5922] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 870.507324][ T5922] usb 8-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 870.551343][ T5922] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.587841][ T5922] usb 8-1: config 0 descriptor?? [ 870.750651][T12959] loop8: detected capacity change from 0 to 32768 [ 870.946462][T12959] bcachefs (loop8): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 870.946488][T12959] allowing incompatible features above 0.0: (unknown version) [ 870.946502][T12959] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 871.166008][T12959] bcachefs (loop8): Using encoding defined by superblock: utf8-12.1.0 [ 871.370831][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 871.422440][ T5922] usbhid 8-1:0.0: can't add hid device: -71 [ 871.428956][ T5922] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 871.437393][T12959] bcachefs (loop8): recovering from clean shutdown, journal seq 10 [ 871.514226][T12997] Device name cannot be null; rc = [-22] [ 871.636010][T12959] bcachefs (loop8): Version upgrade required: [ 871.636010][T12959] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 871.636010][T12959] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 871.636010][T12959] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 872.120658][T12959] syz.8.2055: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 872.133911][ T5922] usb 8-1: USB disconnect, device number 8 [ 872.159295][T12959] CPU: 0 UID: 0 PID: 12959 Comm: syz.8.2055 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(full) [ 872.159323][T12959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 872.159337][T12959] Call Trace: [ 872.159346][T12959] [ 872.159355][T12959] dump_stack_lvl+0x189/0x250 [ 872.159394][T12959] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 872.159426][T12959] ? __pfx_dump_stack_lvl+0x10/0x10 [ 872.159462][T12959] ? __pfx__printk+0x10/0x10 [ 872.159486][T12959] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 872.159512][T12959] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 872.159538][T12959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 872.159569][T12959] warn_alloc+0x214/0x310 [ 872.159603][T12959] ? __pfx_warn_alloc+0x10/0x10 [ 872.159643][T12959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 872.159670][T12959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 872.159695][T12959] ? __get_vm_area_node+0x28f/0x300 [ 872.159720][T12959] ? bch2_fs_journal_start+0x480/0x1510 [ 872.159753][T12959] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 872.159809][T12959] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 872.159838][T12959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 872.159863][T12959] ? rcu_is_watching+0x15/0xb0 [ 872.159900][T12959] ? bch2_fs_journal_start+0x480/0x1510 [ 872.159929][T12959] ? bch2_fs_journal_start+0x480/0x1510 [ 872.159957][T12959] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 872.159980][T12959] ? bch2_fs_journal_start+0x480/0x1510 [ 872.160017][T12959] bch2_fs_journal_start+0x480/0x1510 [ 872.160064][T12959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 872.160090][T12959] ? bch2_journal_log_msg+0xd9/0x120 [ 872.160124][T12959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 872.160151][T12959] ? __pfx_bch2_fs_journal_start+0x10/0x10 [ 872.160181][T12959] ? __pfx_bch2_journal_log_msg+0x10/0x10 [ 872.160229][T12959] bch2_fs_recovery+0x2237/0x3950 [ 872.160282][T12959] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 872.160317][T12959] ? __pfx___console_unlock+0x10/0x10 [ 872.160352][T12959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 872.160382][T12959] ? __lock_acquire+0xab9/0xd20 [ 872.160428][T12959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 872.160453][T12959] ? __lock_acquire+0xab9/0xd20 [ 872.160494][T12959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 872.160519][T12959] ? __lock_acquire+0xab9/0xd20 [ 872.160573][T12959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 872.160603][T12959] ? bch2_fs_start+0x9fe/0xd90 [ 872.160636][T12959] ? up_write+0x1c4/0x420 [ 872.160657][T12959] ? bch2_fs_start+0x5c4/0xd90 [ 872.160683][T12959] bch2_fs_start+0xa99/0xd90 [ 872.160707][T12959] ? bch2_fs_start+0x5c4/0xd90 [ 872.160734][T12959] ? __pfx_bch2_fs_start+0x10/0x10 [ 872.160784][T12959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 872.160810][T12959] ? sget+0x267/0x620 [ 872.160857][T12959] bch2_fs_get_tree+0xb02/0x14f0 [ 872.160943][T12959] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 872.161013][T12959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 872.161041][T12959] ? aa_get_newest_label+0xf7/0x5d0 [ 872.161073][T12959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 872.161101][T12959] ? vfs_parse_monolithic_sep+0x2df/0x310 [ 872.161145][T12959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 872.161172][T12959] ? apparmor_capable+0x137/0x1b0 [ 872.161196][T12959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 872.161229][T12959] vfs_get_tree+0x92/0x2b0 [ 872.161256][T12959] do_new_mount+0x24a/0xa40 [ 872.161294][T12959] __se_sys_mount+0x317/0x410 [ 872.161329][T12959] ? __pfx___se_sys_mount+0x10/0x10 [ 872.161354][T12959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 872.161390][T12959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 872.161417][T12959] ? __x64_sys_mount+0x20/0xc0 [ 872.161447][T12959] do_syscall_64+0xfa/0x3b0 [ 872.161470][T12959] ? lockdep_hardirqs_on+0x9c/0x150 [ 872.161506][T12959] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.161528][T12959] ? srso_alias_return_thunk+0x5/0xfbef5 [ 872.161556][T12959] ? exc_page_fault+0x9f/0xf0 [ 872.161594][T12959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.161622][T12959] RIP: 0033:0x7f6b015900ca [ 872.161643][T12959] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 872.161663][T12959] RSP: 002b:00007f6b023bae68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 872.161687][T12959] RAX: ffffffffffffffda RBX: 00007f6b023baef0 RCX: 00007f6b015900ca [ 872.161705][T12959] RDX: 00002000000000c0 RSI: 0000200000000000 RDI: 00007f6b023baeb0 [ 872.161723][T12959] RBP: 00002000000000c0 R08: 00007f6b023baef0 R09: 0000000001a10000 [ 872.161740][T12959] R10: 0000000001a10000 R11: 0000000000000246 R12: 0000200000000000 [ 872.161756][T12959] R13: 00007f6b023baeb0 R14: 00000000000059b2 R15: 0000200000000b80 [ 872.161793][T12959] [ 872.420844][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 872.627862][T12959] Mem-Info: [ 872.631026][T12959] active_anon:19287 inactive_anon:0 isolated_anon:0 [ 872.631026][T12959] active_file:21947 inactive_file:40136 isolated_file:0 [ 872.631026][T12959] unevictable:768 dirty:128 writeback:0 [ 872.631026][T12959] slab_reclaimable:11723 slab_unreclaimable:111603 [ 872.631026][T12959] mapped:42688 shmem:15312 pagetables:1378 [ 872.631026][T12959] sec_pagetables:0 bounce:0 [ 872.631026][T12959] kernel_misc_reclaimable:0 [ 872.631026][T12959] free:1244011 free_pcp:15604 free_cma:0 [ 872.676567][ C1] vkms_vblank_simulate: vblank timer overrun [ 872.711171][T12959] Node 0 active_anon:77136kB inactive_anon:0kB active_file:87788kB inactive_file:160340kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:170728kB dirty:512kB writeback:0kB shmem:59684kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13880kB pagetables:5388kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 872.795812][T12959] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 872.827329][ C1] vkms_vblank_simulate: vblank timer overrun [ 872.852564][T13003] binder: BINDER_SET_CONTEXT_MGR already set [ 872.858594][T13003] binder: 13002:13003 ioctl 4018620d 200000000040 returned -16 [ 872.887891][T13003] binder: 13002:13003 ioctl c0306201 200000000240 returned -11 [ 872.900937][T12959] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 872.929739][ C1] vkms_vblank_simulate: vblank timer overrun [ 872.981922][T12959] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 873.005812][T12959] Node 0 DMA32 free:1055804kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:79120kB inactive_anon:0kB active_file:87788kB inactive_file:158500kB unevictable:1536kB writepending:512kB present:3129332kB managed:2561020kB mlocked:0kB bounce:0kB free_pcp:41520kB local_pcp:28080kB free_cma:0kB [ 873.038134][ C1] vkms_vblank_simulate: vblank timer overrun [ 873.086325][T12959] lowmem_reserve[]: 0 0 1 1 1 [ 873.092621][T12959] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1840kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 873.121549][ C1] vkms_vblank_simulate: vblank timer overrun [ 873.131436][T12195] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 873.160974][T12959] lowmem_reserve[]: 0 0 0 0 0 [ 873.166776][T12959] Node 1 Normal free:3903792kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:18980kB local_pcp:11328kB free_cma:0kB [ 873.271807][T12959] lowmem_reserve[]: 0 0 0 0 0 [ 873.286078][T12959] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 873.328011][T12959] Node 0 DMA32: 1409*4kB (UME) 1080*8kB (ME) 221*16kB (UME) 207*32kB (UM) 177*64kB (UME) 128*128kB (UME) 109*256kB (M) 32*512kB (ME) 23*1024kB (M) 7*2048kB (M) 225*4096kB (UM) = 1055924kB [ 873.352484][T12195] usb 1-1: unable to get BOS descriptor or descriptor too short [ 873.400363][T12195] usb 1-1: not running at top speed; connect to a high speed hub [ 873.413127][T12959] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB [ 873.414385][T12195] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 873.433235][T12195] usb 1-1: config 129 has no interface number 0 [ 873.439629][T12959] 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 873.450820][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 873.464763][T12195] usb 1-1: config 129 interface 135 altsetting 6 has an invalid endpoint descriptor of length 3, skipping [ 873.468856][T13018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 873.481135][T12959] Node 1 [ 873.485998][T12195] usb 1-1: config 129 interface 135 altsetting 6 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 873.509487][T12959] Normal: 0*4kB 6*8kB (UME) 8*16kB (ME) 150*32kB (UME) 41*64kB (UME) 13*128kB (UME) 3*256kB (ME) 3*512kB (ME) 3*1024kB (UME) 1*2048kB (E) 949*4096kB (M) = 3903792kB [ 873.535202][T12195] usb 1-1: config 129 interface 135 altsetting 6 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 873.555201][T13018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 873.566902][T13018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 873.582434][T12959] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 873.596657][T12195] usb 1-1: config 129 interface 135 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 873.618423][T12959] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 873.649700][T12959] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 873.652125][T12195] usb 1-1: config 129 interface 135 altsetting 6 has 6 endpoint descriptors, different from the interface descriptor's value: 7 [ 873.676965][T12959] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 873.694177][T12959] 74498 total pagecache pages [ 873.729040][T12959] 0 pages in swap cache [ 873.765181][T12959] Free swap = 124996kB [ 873.777467][T12959] Total swap = 124996kB [ 873.783818][T12959] 2097051 pages RAM [ 873.790560][T12959] 0 pages HighMem/MovableOnly [ 873.799355][T12195] usb 1-1: config 129 interface 135 has no altsetting 0 [ 873.814592][T12959] 424690 pages reserved [ 873.822109][T12959] 0 pages cma reserved [ 873.861196][T12959] bcachefs (loop8): error reallocating journal fifo (32768 open entries) [ 873.880290][T12195] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 874.069330][T12959] bcachefs (loop8): error in recovery: ENOMEM_journal_pin_fifoemergency read only at seq 0 [ 874.108996][T12195] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.109128][T12195] usb 1-1: Product: syz [ 874.109244][T12195] usb 1-1: Manufacturer: syz [ 874.109360][T12195] usb 1-1: SerialNumber: syz [ 874.208918][T13006] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 874.491190][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 874.498937][T12195] usb 1-1: USB disconnect, device number 28 [ 874.577249][T12959] bcachefs (loop8): bch2_fs_start(): error starting filesystem ENOMEM_journal_pin_fifo [ 874.621348][T12959] bcachefs (loop8): shutting down [ 874.743283][T12959] bcachefs (loop8): shutdown complete [ 874.845201][T12959] bcachefs: bch2_fs_get_tree() error: ENOMEM_journal_pin_fifo [ 875.530826][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 875.669508][T13039] Device name cannot be null; rc = [-22] [ 876.570825][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 876.641912][T13045] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.2079'. [ 876.659222][T13044] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.2079'. [ 877.610821][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 877.753307][T13054] syz_tun: Device is already in use. [ 877.929142][T13058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 877.946934][T13043] loop3: detected capacity change from 0 to 32768 [ 878.034591][T13058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 878.044348][T13043] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=xxhash,data_checksum=none,compression=lz4,str_hash=crc32c,fsck,recovery_pass_last=reconstruct_snapshots,nojournal_transaction_names [ 878.044388][T13043] allowing incompatible features above 0.0: (unknown version) [ 878.044403][T13043] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 878.044437][T13043] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 878.046149][T13043] bcachefs (loop3): invalid journal entry, version=1.7: mi_btree_bitmap type=data_usage in superblock: invalid journal entry usage: bad size, fixing [ 878.115580][T13043] bcachefs (loop3): invalid bkey in superblock btree=extents level=0: u64s 4 type whiteout POS_MIN len 0 ver 141733920768: [ 878.115639][T13043] u64s too small (4 < 5), deleting [ 878.138605][T13043] bcachefs (loop3): invalid journal entry, version=1.7: mi_btree_bitmap type=btree_keys in superblock: k->u64s 0, fixing [ 878.152552][T13043] bcachefs (loop3): invalid journal entry, version=1.7: mi_btree_bitmap type=btree_keys in superblock: extends past end of journal entry, fixing [ 878.160062][T13062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 878.650816][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 878.811185][T13043] bcachefs (loop3): recovering from clean shutdown, journal seq 13 [ 878.819337][T13043] bcachefs (loop3): Version upgrade from 1.13: inode_has_child_snapshots to 1.7: mi_btree_bitmap incomplete [ 878.819337][T13043] Doing compatible version upgrade from 1.13: inode_has_child_snapshots to 1.28: inode_has_case_insensitive [ 878.819337][T13043] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 878.851819][ C1] vkms_vblank_simulate: vblank timer overrun [ 878.951415][T13043] bcachefs (loop3): btree node read error at btree extents level 0/0 [ 878.951457][T13043] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4e0410879b0c2f04 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 878.951477][T13043] loop3 node offset 8/16 bset u64s 51: checksum error, type chacha20_poly1305_128: got 66cec9b495be4cd96f1507bc9c29d09f should be 37f1d6087d67d21bebd469bc807a31f8 [ 878.951499][T13043] flagging btree extents lost data [ 878.951511][T13043] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 878.951527][T13043] running recovery pass check_lrus (14), currently at recovery_pass_empty (0) [ 878.951542][T13043] running recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0) [ 878.951559][T13043] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 878.951575][T13043] running recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 878.951591][T13043] ret fsck_errors_not_fixed [ 879.234756][T13043] bcachefs (loop3): error reading btree root btree=extents level=0: btree_node_read_error, fixing [ 879.286025][T13043] bcachefs (loop3): btree node read error at btree inodes level 0/0 [ 879.286047][T13043] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2a20405ac3f40602 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0 [ 879.286067][T13043] loop3 node offset 16/24 bset u64s 110: checksum error, type chacha20_poly1305_128: got 942b33a01557211bfb8149198a26871f should be d1e256903dc89dd6436b0db8b45d2093 [ 879.286088][T13043] flagging btree inodes lost data [ 879.286101][T13043] ret fsck_errors_not_fixed [ 879.465120][T13043] bcachefs (loop3): error reading btree root btree=inodes level=0: btree_node_read_error, fixing [ 879.506704][T13043] bcachefs (loop3): btree node read error at btree dirents level 0/0 [ 879.506727][T13043] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 267fcf747c875937 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0 [ 879.506747][T13043] loop3 node offset 8/24 bset u64s 6: checksum error, type chacha20_poly1305_128: got abbf307d6f4195551a4398bf111cbb27 should be abbf307d6f4195801a4398bf111cbb27 [ 879.506769][T13043] flagging btree dirents lost data [ 879.506781][T13043] ret fsck_errors_not_fixed [ 879.690820][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 879.776927][T13043] bcachefs (loop3): error reading btree root btree=dirents level=0: btree_node_read_error, fixing [ 879.871828][T13043] bcachefs (loop3): btree node read error at btree alloc level 0/0 [ 879.871851][T13043] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1818ce08861e3527 written 40 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 879.871871][T13043] loop3 node offset 8/40 bset u64s 375: checksum error, type chacha20_poly1305_128: got 3fab44bbc7c61801d72211bb0a1d3399 should be 61ec379a8789477e76ff1a5280fd6dbd [ 879.871892][T13043] flagging btree alloc lost data [ 879.871905][T13043] running recovery pass check_alloc_info (13), currently at recovery_pass_empty (0) [ 879.871921][T13043] ret fsck_errors_not_fixed [ 880.168316][T13043] bcachefs (loop3): error reading btree root btree=alloc level=0: btree_node_read_error, fixing [ 880.237141][T13095] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.2092'. [ 880.239936][T13093] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.2092'. [ 880.595083][T13043] bcachefs (loop3): btree node read error at btree subvolumes level 0/0 [ 880.595102][T13043] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq d682cebdf2a7eb26 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0 [ 880.595117][T13043] loop3 node offset 0/16 bset u64s 0: checksum error, type chacha20_poly1305_128: got d724dbc049a39faf52c3e9104b7620a7 should be bff45ac871db9bfa3686500c30b7d82f [ 880.595134][T13043] flagging btree subvolumes lost data [ 880.595144][T13043] ret fsck_errors_not_fixed [ 880.730826][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 880.801077][T13043] bcachefs (loop3): error reading btree root btree=subvolumes level=0: btree_node_read_error, fixing [ 880.869356][T13043] bcachefs (loop3): btree node read error at btree lru level 0/0 [ 880.869379][T13043] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 93dda84068e88b3f written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0 [ 880.869400][T13043] loop3 node offset 0/16 bset u64s 0: checksum error, type chacha20_poly1305_128: got 1f829eb714677b6cbdea0303dbb1279c should be 843f3fe64c82c51ff33e2c2018209523 [ 880.869422][T13043] flagging btree lru lost data [ 880.869435][T13043] ret fsck_errors_not_fixed [ 881.075699][T13043] bcachefs (loop3): error reading btree root btree=lru level=0: btree_node_read_error, fixing [ 881.142111][T13043] bcachefs (loop3): btree node read error at btree freespace level 0/0 [ 881.142130][T13043] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq b6c44d07df4e9bb7 written 48 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0 [ 881.142145][T13043] loop3 node offset 32/48 bset u64s 3: found blacklisted bset (journal seq 8) in btree node at offset 32-40/48 [ 881.142158][T13043] flagging btree freespace lost data [ 881.142168][T13043] ret fsck_errors_not_fixed [ 881.310492][T13043] bcachefs (loop3): error reading btree root btree=freespace level=0: btree_node_read_error, fixing [ 881.352932][T13043] bcachefs (loop3): btree node read error at btree backpointers level 0/0 [ 881.352954][T13043] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 3b468546fb27822d written 24 min_key POS_MIN durability: 1 ptr: 0:36:0 gen 0 [ 881.352976][T13043] loop3 node offset 8/24 bset u64s 35: checksum error, type chacha20_poly1305_128: got 6fe3961cebdf38089ea19c4dd389ff2a should be 230eae69ad0f1e91715326573b3e405a [ 881.352998][T13043] flagging btree backpointers lost data [ 881.353011][T13043] running recovery pass check_btree_backpointers (15), currently at recovery_pass_empty (0) [ 881.353028][T13043] ret fsck_errors_not_fixed [ 881.459396][T13043] bcachefs (loop3): error reading btree root btree=backpointers level=0: btree_node_read_error, fixing [ 881.564041][T13043] bcachefs (loop3): btree node read error at btree deleted_inodes level 0/0 [ 881.564065][T13043] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 82036bda63714c10 written 8 min_key 157:9223372036854775808:0 durability: 1 ptr: 0:40:0 gen 0 [ 881.564086][T13043] loop3 node offset 0/8: incorrect min_key: got POS_MIN should be 157:9223372036854775808:0 [ 881.564105][T13043] flagging btree deleted_inodes lost data [ 881.564119][T13043] ret btree_node_read_validate_error [ 881.764737][T13104] loop7: detected capacity change from 0 to 128 [ 881.770836][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 881.787678][T13043] bcachefs (loop3): error reading btree root btree=deleted_inodes level=0: btree_node_read_error, fixing [ 881.833442][T13104] netlink: 'syz.7.2097': attribute type 17 has an invalid length. [ 881.902191][T13043] bcachefs (loop3): error in recovery: btree_node_read_erroremergency read only at seq 13 [ 881.958185][T13043] bcachefs (loop3): bch2_fs_start(): error starting filesystem btree_node_read_error [ 882.011972][T13043] bcachefs (loop3): shutting down [ 882.136952][T13043] bcachefs (loop3): shutdown complete [ 882.356060][T13097] loop6: detected capacity change from 0 to 32768 [ 882.383264][T13043] bcachefs: bch2_fs_get_tree() error: btree_node_read_error [ 882.391089][T13097] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2094 (13097) [ 882.461990][T13097] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 882.497588][T13097] BTRFS info (device loop6): using crc32c (crc32c-x86_64) checksum algorithm [ 882.516895][T13097] BTRFS info (device loop6): using free-space-tree [ 882.672853][T13112] bridge0: port 3(syz_tun) entered blocking state [ 882.681489][T13112] bridge0: port 3(syz_tun) entered disabled state [ 882.703349][T13112] syz_tun: entered allmulticast mode [ 882.719106][T13112] syz_tun: entered promiscuous mode [ 882.787305][ T30] audit: type=1800 audit(2000000451.940:466): pid=13097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2094" name="file0" dev="loop6" ino=258 res=0 errno=0 [ 882.811182][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 882.813044][T13097] fs-verity: sha256 using implementation "sha256-x86_64" [ 882.904170][ T30] audit: type=1800 audit(2000000452.060:467): pid=13127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2094" name="file0" dev="loop6" ino=258 res=0 errno=0 [ 882.934182][T13097] BTRFS info (device loop6): setting compat-ro feature flag for VERITY (0x4) [ 883.608592][ T7085] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 883.645197][T13102] loop0: detected capacity change from 0 to 32768 [ 883.667061][T13136] loop4: detected capacity change from 0 to 2048 [ 883.668933][T13102] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2096 (13102) [ 883.733804][T13102] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 883.755723][T13102] BTRFS info (device loop0): using sha256 (sha256-x86_64) checksum algorithm [ 883.768488][T13102] BTRFS info (device loop0): using free-space-tree [ 883.820416][T13136] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 883.860820][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 883.960927][ T9614] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 884.095480][ T7275] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 884.248900][T13160] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2106'. [ 884.257283][ T9614] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 884.310189][T13159] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2106'. [ 884.348003][ T9614] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.380928][ T9614] usb 8-1: Product: syz [ 884.428789][ T9614] usb 8-1: Manufacturer: syz [ 884.453049][ T9614] usb 8-1: SerialNumber: syz [ 884.667645][ T9614] usb 8-1: config 0 descriptor?? [ 884.900848][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 885.585521][ T9614] usb 8-1: Firmware version (0.0) predates our first public release. [ 885.848850][ T5833] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 885.879639][ T9614] usb 8-1: Please update to version 0.2 or newer [ 885.930815][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 886.013417][ T9614] usb 8-1: USB disconnect, device number 9 [ 886.760305][T13179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 886.838730][T13179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 886.888002][T13179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 886.980807][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 887.250670][T13186] loop0: detected capacity change from 0 to 128 [ 888.010817][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 888.097372][T13198] loop0: detected capacity change from 0 to 512 [ 888.136124][T13198] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 889.048113][T13206] loop8: detected capacity change from 0 to 128 [ 889.050825][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 889.078925][T13191] loop3: detected capacity change from 0 to 32768 [ 889.197517][T13207] syz.8.2120: attempt to access beyond end of device [ 889.197517][T13207] loop8: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 889.302531][T13191] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,str_hash=crc32c,nochanges,recovery_pass_last=reconstruct_snapshots,nojournal_transaction_names,read_only,reconstruct_alloc,nocow [ 889.302569][T13191] allowing incompatible features above 0.0: (unknown version) [ 889.302584][T13191] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 889.327816][ C1] vkms_vblank_simulate: vblank timer overrun [ 889.329589][T13198] loop0: detected capacity change from 0 to 32768 [ 889.338407][T13207] syz.8.2120: attempt to access beyond end of device [ 889.338407][T13207] loop8: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 889.338573][T13207] syz.8.2120: attempt to access beyond end of device [ 889.338573][T13207] loop8: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 889.338698][T13207] syz.8.2120: attempt to access beyond end of device [ 889.338698][T13207] loop8: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 889.338810][T13207] syz.8.2120: attempt to access beyond end of device [ 889.338810][T13207] loop8: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 889.338918][T13207] syz.8.2120: attempt to access beyond end of device [ 889.338918][T13207] loop8: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 889.339034][T13207] syz.8.2120: attempt to access beyond end of device [ 889.339034][T13207] loop8: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 889.339163][T13207] syz.8.2120: attempt to access beyond end of device [ 889.339163][T13207] loop8: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 889.339300][T13207] syz.8.2120: attempt to access beyond end of device [ 889.339300][T13207] loop8: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 889.339447][T13207] syz.8.2120: attempt to access beyond end of device [ 889.339447][T13207] loop8: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 889.648112][T13198] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 889.648146][T13198] allowing incompatible features above 0.0: (unknown version) [ 889.648160][T13198] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 889.648193][T13198] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 889.648231][T13198] bcachefs (loop0): initializing new filesystem [ 889.701756][T13220] Bluetooth: hci7: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 889.709880][T13198] bcachefs (loop0): going read-write [ 890.009386][T13198] bcachefs (loop0): marking superblocks [ 890.084552][T13198] bcachefs (loop0): initializing freespace [ 890.091090][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 890.146597][T13198] bcachefs (loop0): done initializing freespace [ 890.162509][T13198] bcachefs (loop0): reading snapshots table [ 890.162566][T13198] bcachefs (loop0): reading snapshots done [ 890.307600][T13216] loop4: detected capacity change from 0 to 32768 [ 890.313048][T13216] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2123 (13216) [ 890.313072][T13198] bcachefs (loop0): done starting filesystem [ 890.346733][T13216] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 890.346848][T13216] BTRFS info (device loop4): using sha256 (sha256-x86_64) checksum algorithm [ 890.346886][T13216] BTRFS info (device loop4): using free-space-tree [ 890.475529][ T5833] bcachefs (loop0): shutting down [ 890.475566][ T5833] bcachefs (loop0): going read-only [ 890.475596][ T5833] bcachefs (loop0): finished waiting for writes to stop [ 890.500554][ T5833] bcachefs (loop0): flushing journal and stopping allocators, journal seq 2 [ 890.598787][ T5833] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3 [ 890.610258][ T5833] bcachefs (loop0): clean shutdown complete, journal seq 4 [ 890.611564][ T5833] bcachefs (loop0): marking filesystem clean [ 890.714737][ T6387] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 890.724437][ T5833] bcachefs (loop0): shutdown complete [ 890.968835][ T5845] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 891.118998][T13191] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 891.130820][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 891.171107][T13191] bcachefs (loop3): invalid journal entry, version=1.7: mi_btree_bitmap type=clock in superblock: bad rw, fixing [ 891.221410][T13191] bcachefs (loop3): invalid bkey in superblock btree=xattrs level=1: u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 0 crc: c_size 1 size 1 offset 0 nonce 0 csum none 12010b:10004000b compress none [ 891.221445][T13191] has non ptr field, deleting [ 891.306074][T13191] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 891.371382][T13191] bcachefs (loop3): Version upgrade required: [ 891.371382][T13191] Version upgrade from 0.11: inode_btree_change to 1.7: mi_btree_bitmap incomplete [ 891.371382][T13191] Doing incompatible version upgrade from 0.11: inode_btree_change to 1.28: inode_has_case_insensitive [ 891.371382][T13191] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 891.521249][T13191] bcachefs (loop3): dropping and reconstructing all alloc info [ 891.572379][T13191] warn_alloc: 1 callbacks suppressed [ 891.572398][T13191] syz.3.2114: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 891.675096][T13191] CPU: 0 UID: 0 PID: 13191 Comm: syz.3.2114 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(full) [ 891.675133][T13191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 891.675149][T13191] Call Trace: [ 891.675158][T13191] [ 891.675168][T13191] dump_stack_lvl+0x189/0x250 [ 891.675219][T13191] ? __pfx_dump_stack_lvl+0x10/0x10 [ 891.675260][T13191] ? __pfx__printk+0x10/0x10 [ 891.675289][T13191] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 891.675317][T13191] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 891.675347][T13191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 891.675376][T13191] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 891.675408][T13191] warn_alloc+0x214/0x310 [ 891.675445][T13191] ? __pfx_warn_alloc+0x10/0x10 [ 891.675483][T13191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 891.675514][T13191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 891.675543][T13191] ? __get_vm_area_node+0x28f/0x300 [ 891.675570][T13191] ? bch2_fs_journal_start+0x480/0x1510 [ 891.675608][T13191] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 891.675676][T13191] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 891.675711][T13191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 891.675740][T13191] ? rcu_is_watching+0x15/0xb0 [ 891.675788][T13191] ? bch2_fs_journal_start+0x480/0x1510 [ 891.675826][T13191] ? bch2_fs_journal_start+0x480/0x1510 [ 891.675863][T13191] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 891.675896][T13191] ? bch2_fs_journal_start+0x480/0x1510 [ 891.675946][T13191] bch2_fs_journal_start+0x480/0x1510 [ 891.676002][T13191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 891.676028][T13191] ? bch2_journal_log_msg+0xd9/0x120 [ 891.676066][T13191] ? __pfx_bch2_fs_journal_start+0x10/0x10 [ 891.676097][T13191] ? __pfx_bch2_journal_log_msg+0x10/0x10 [ 891.676132][T13191] ? bch2_reconstruct_alloc+0x32b/0x360 [ 891.676179][T13191] bch2_fs_recovery+0x2237/0x3950 [ 891.676234][T13191] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 891.676270][T13191] ? __pfx___console_unlock+0x10/0x10 [ 891.676306][T13191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 891.676339][T13191] ? __lock_acquire+0xab9/0xd20 [ 891.676385][T13191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 891.676412][T13191] ? __lock_acquire+0xab9/0xd20 [ 891.676454][T13191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 891.676481][T13191] ? __lock_acquire+0xab9/0xd20 [ 891.676536][T13191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 891.676566][T13191] ? bch2_fs_start+0x9fe/0xd90 [ 891.676593][T13191] ? up_write+0x1c4/0x420 [ 891.676615][T13191] ? bch2_fs_start+0x5c4/0xd90 [ 891.676650][T13191] bch2_fs_start+0xa99/0xd90 [ 891.676675][T13191] ? bch2_fs_start+0x5c4/0xd90 [ 891.676702][T13191] ? __pfx_bch2_fs_start+0x10/0x10 [ 891.676748][T13191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 891.676775][T13191] ? sget+0x267/0x620 [ 891.676816][T13191] bch2_fs_get_tree+0xb02/0x14f0 [ 891.676885][T13191] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 891.676947][T13191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 891.676973][T13191] ? aa_get_newest_label+0xf7/0x5d0 [ 891.677003][T13191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 891.677030][T13191] ? vfs_parse_monolithic_sep+0x2df/0x310 [ 891.677071][T13191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 891.677097][T13191] ? apparmor_capable+0x137/0x1b0 [ 891.677120][T13191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 891.677151][T13191] vfs_get_tree+0x92/0x2b0 [ 891.677178][T13191] do_new_mount+0x24a/0xa40 [ 891.677213][T13191] __se_sys_mount+0x317/0x410 [ 891.677246][T13191] ? __pfx___se_sys_mount+0x10/0x10 [ 891.677271][T13191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 891.677305][T13191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 891.677331][T13191] ? __x64_sys_mount+0x20/0xc0 [ 891.677360][T13191] do_syscall_64+0xfa/0x3b0 [ 891.677382][T13191] ? lockdep_hardirqs_on+0x9c/0x150 [ 891.677416][T13191] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.677438][T13191] ? srso_alias_return_thunk+0x5/0xfbef5 [ 891.677464][T13191] ? exc_page_fault+0x9f/0xf0 [ 891.677502][T13191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.677524][T13191] RIP: 0033:0x7fea8d9900ca [ 891.677544][T13191] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 891.677564][T13191] RSP: 002b:00007fea8e873e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 891.677588][T13191] RAX: ffffffffffffffda RBX: 00007fea8e873ef0 RCX: 00007fea8d9900ca [ 891.677605][T13191] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 00007fea8e873eb0 [ 891.677621][T13191] RBP: 00002000000000c0 R08: 00007fea8e873ef0 R09: 0000000000818001 [ 891.677642][T13191] R10: 0000000000818001 R11: 0000000000000246 R12: 0000200000000080 [ 891.677658][T13191] R13: 00007fea8e873eb0 R14: 0000000000005949 R15: 000020000000b680 [ 891.677693][T13191] [ 891.812402][ T5147] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 891.820538][T13191] Mem-Info: [ 892.172698][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 892.200313][T13191] active_anon:23335 inactive_anon:0 isolated_anon:0 [ 892.200313][T13191] active_file:21947 inactive_file:40144 isolated_file:0 [ 892.200313][T13191] unevictable:768 dirty:277 writeback:0 [ 892.200313][T13191] slab_reclaimable:12069 slab_unreclaimable:111315 [ 892.200313][T13191] mapped:42666 shmem:19055 pagetables:1458 [ 892.200313][T13191] sec_pagetables:0 bounce:0 [ 892.200313][T13191] kernel_misc_reclaimable:0 [ 892.200313][T13191] free:1236456 free_pcp:18299 free_cma:0 [ 892.491457][T13191] Node 0 active_anon:93440kB inactive_anon:0kB active_file:87788kB inactive_file:160372kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:170664kB dirty:1108kB writeback:0kB shmem:74784kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13980kB pagetables:5592kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 892.729652][T13249] loop6: detected capacity change from 0 to 32768 [ 892.782392][T13191] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 892.938318][T13191] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 893.015180][T13191] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 893.029454][ T30] audit: type=1800 audit(2000000462.190:468): pid=13249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2125" name="file2" dev="loop6" ino=5 res=0 errno=0 [ 893.060489][T13191] Node 0 DMA32 free:1036088kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:81892kB inactive_anon:0kB active_file:87788kB inactive_file:158632kB unevictable:1536kB writepending:1108kB present:3129332kB managed:2561020kB mlocked:0kB bounce:0kB free_pcp:56464kB local_pcp:25312kB free_cma:0kB [ 893.223342][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 893.231070][T13191] lowmem_reserve[]: 0 0 1 1 1 [ 893.248507][T13191] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1840kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 893.466511][T13279] loop0: detected capacity change from 0 to 32768 [ 893.474537][T13191] lowmem_reserve[]: 0 0 0 0 0 [ 893.490973][T13191] Node 1 Normal free:3905200kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17464kB local_pcp:5888kB free_cma:0kB [ 893.523736][T13191] lowmem_reserve[]: 0 0 0 0 0 [ 893.528609][T13191] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 893.582475][T13191] Node 0 DMA32: 150*4kB (UME) 180*8kB (UME) 59*16kB (UE) 74*32kB (UME) 84*64kB (UME) 182*128kB (UME) 116*256kB (UME) 36*512kB (UM) 33*1024kB (UME) 9*2048kB (UME) 215*4096kB (M) = 1015016kB [ 893.664260][T13282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 893.664534][T13279] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 893.680982][T13191] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 893.682656][T13279] allowing incompatible features above 0.0: (unknown version) [ 893.702367][T13279] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 893.716978][T13279] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 893.725218][T13279] bcachefs (loop0): recovering from clean shutdown, journal seq 15 [ 893.733246][T13279] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive [ 893.733246][T13279] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 893.769137][T13282] bond0: (slave rose0): Enslaving as an active interface with an up link [ 893.836763][T13191] Node 1 Normal: 116*4kB (U) 43*8kB (UME) 47*16kB (UME) 154*32kB (UME) 41*64kB (UME) 13*128kB (UME) 3*256kB (ME) 3*512kB (ME) 3*1024kB (UME) 1*2048kB (E) 949*4096kB (M) = 3905304kB [ 893.856326][T13279] bcachefs (loop0): btree node read error at btree alloc level 0/0 [ 893.856345][T13279] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq a64f6cc698df3452 written 48 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 893.856363][T13279] loop0 node offset 0/48 bset u64s 0: checksum error, type chacha20_poly1305_80: got a27f119bba62858d23a6 should be 9948119f4b23e09f462b [ 893.856383][T13279] flagging btree alloc lost data [ 893.856393][T13279] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 893.856409][T13279] running recovery pass check_lrus (14), currently at recovery_pass_empty (0) [ 893.856424][T13279] running recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0) [ 893.856440][T13279] running recovery pass check_alloc_info (13), currently at recovery_pass_empty (0) [ 893.856455][T13279] ret fsck_errors_not_fixed [ 893.941948][T13279] bcachefs (loop0): error reading btree root btree=alloc level=0: btree_node_read_error, fixing [ 894.018310][T13279] bcachefs (loop0): check_topology... done [ 894.032831][T13279] bcachefs (loop0): accounting_read... done [ 894.082606][T13279] bcachefs (loop0): alloc_read... done [ 894.090941][T13279] bcachefs (loop0): snapshots_read... done [ 894.098233][T13279] bcachefs (loop0): check_allocations... [ 894.102787][T13279] bcachefs (loop0): bucket 0:34 data type user ptr gen 0 missing in alloc btree [ 894.102818][T13279] while marking u64s 8 type extent 4099:8:U32_MAX len 8 ver 1: durability: 1 crc: c_size 8 size 8 offset 0 nonce 0 csum chacha20_poly1305_80 77fa:f532966a693125aa compress incompressible ptr: 0:34:0 gen 0, fixing [ 894.139424][T13279] bcachefs (loop0): bucket 0:27 data type btree ptr gen 0 missing in alloc btree [ 894.139440][T13279] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq f5560e09620e825a written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0, fixing [ 894.164846][T13279] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 894.164862][T13279] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq a4a08c15958b7fc8 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 894.231782][T13279] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 894.231805][T13279] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq a4a08c15958b7fc8 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 894.256576][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 894.265790][T13279] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 894.265804][T13279] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 68ba4c6599367 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 894.290106][T13279] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 894.290121][T13279] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 68ba4c6599367 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 894.315253][T13279] bcachefs (loop0): bucket 0:31 data type btree ptr gen 0 missing in alloc btree [ 894.315270][T13279] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 31ed7f7a6a187f69 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0, fixing [ 894.340346][T13279] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 894.340361][T13279] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq a6f3a05050194d82 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 894.376676][T13191] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 894.420101][T13279] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 894.420121][T13279] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq a6f3a05050194d82 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 894.445615][T13279] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 894.445636][T13279] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq b2fb6fcebb2a2f51 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 894.471060][T13191] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 894.490406][T13191] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 894.500479][T13279] bcachefs (loop0): bucket 0:32 data type btree ptr gen 0 missing in alloc btree [ 894.500496][T13279] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq b2fb6fcebb2a2f51 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 894.525679][T13279] bcachefs (loop0): bucket 0:28 data type btree ptr gen 0 missing in alloc btree [ 894.525693][T13279] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7f39628faed02285 written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing [ 894.550618][T13279] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 894.550632][T13279] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7fd83409d5b7165 written 48 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 894.591154][T13191] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 894.610891][T13279] bcachefs (loop0): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 894.610912][T13279] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7fd83409d5b7165 written 48 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 894.636016][T13279] bcachefs (loop0): bucket 0:36 data type btree ptr gen 0 missing in alloc btree [ 894.636034][T13279] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq bbca91b628560366 written 32 min_key POS_MIN durability: 1 ptr: 0:36:0 gen 0, fixing [ 894.661396][T13279] bcachefs (loop0): bucket 0:40 data type btree ptr gen 0 missing in alloc btree [ 894.661411][T13279] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 85370abb7fc040b3 written 8 min_key POS_MIN durability: 1 ptr: 0:40:0 gen 0, fixing [ 894.661427][T13279] Ratelimiting new instances of previous error [ 894.699716][T13279] done [ 894.702992][T13279] bcachefs (loop0): going read-write [ 894.728374][T13191] 82743 total pagecache pages [ 894.733620][T13191] 0 pages in swap cache [ 894.741217][T13191] Free swap = 124996kB [ 894.745482][T13191] Total swap = 124996kB [ 894.749634][T13191] 2097051 pages RAM [ 894.755444][T13191] 0 pages HighMem/MovableOnly [ 894.761183][T13191] 424690 pages reserved [ 894.765346][T13191] 0 pages cma reserved [ 894.817540][T13191] bcachefs (loop3): error reallocating journal fifo (32768 open entries) [ 894.851518][T13191] bcachefs (loop3): error in recovery: ENOMEM_journal_pin_fifoemergency read only at seq 0 [ 894.877552][T13279] bcachefs (loop0): journal_replay... [ 894.903817][T13191] bcachefs (loop3): bch2_fs_start(): error starting filesystem ENOMEM_journal_pin_fifo [ 894.985110][T13191] bcachefs (loop3): shutting down [ 895.066792][T13279] done [ 895.070121][T13279] bcachefs (loop0): check_alloc_info... [ 895.075366][T13279] bcachefs (loop0): hole in alloc btree missing in freespace btree [ 895.075407][T13279] device 0 buckets 26-27, fixing [ 895.109324][T13279] done [ 895.112612][ T5915] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 895.123950][T13191] bcachefs (loop3): shutdown complete [ 895.152789][T13279] bcachefs (loop0): check_lrus... done [ 895.158541][T13279] bcachefs (loop0): check_backpointers_to_extents... done [ 895.175998][T13279] bcachefs (loop0): check_extents_to_backpointers... [ 895.177245][T13279] bcachefs (loop0): scanning for missing backpointers in 5/128 buckets [ 895.193300][T13279] done [ 895.198206][T13279] bcachefs (loop0): check_inodes... done [ 895.206375][T13279] bcachefs (loop0): resume_logged_ops... done [ 895.212998][T13279] bcachefs (loop0): delete_dead_inodes... done [ 895.227939][T13279] bcachefs (loop0): done starting filesystem [ 895.281111][ T5915] usb 5-1: device descriptor read/64, error -71 [ 895.290822][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 895.339891][T13279] syz.0.2132 (13279) used greatest stack depth: 14120 bytes left [ 895.531829][ T5915] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 896.031427][T13191] bcachefs: bch2_fs_get_tree() error: ENOMEM_journal_pin_fifo [ 896.093135][ T5833] bcachefs (loop0): shutting down [ 896.179713][ T5833] bcachefs (loop0): going read-only [ 896.230837][ T5915] usb 5-1: device descriptor read/64, error -71 [ 896.257586][ T5833] bcachefs (loop0): finished waiting for writes to stop [ 896.296812][T13319] loop8: detected capacity change from 0 to 128 [ 896.330816][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 896.388473][ T5833] bcachefs (loop0): flushing journal and stopping allocators, journal seq 27 [ 896.406937][ T5915] usb usb5-port1: attempt power cycle [ 896.500484][ T5833] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 27 [ 896.574365][ T5833] bcachefs (loop0): clean shutdown complete, journal seq 28 [ 896.622861][ T5833] bcachefs (loop0): done going read-only, filesystem not clean [ 896.753287][ T5833] bcachefs (loop0): shutdown complete [ 896.831605][ T5915] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 896.894790][ T5915] usb 5-1: device descriptor read/8, error -71 [ 897.181580][ T5915] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 897.231380][ T5915] usb 5-1: device descriptor read/8, error -71 [ 897.341032][ T9614] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 897.370858][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 897.391900][ T5915] usb usb5-port1: unable to enumerate USB device [ 897.454168][T13339] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 897.560175][T13342] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input24 [ 897.582780][ T9614] usb 4-1: config 2 has an invalid interface number: 108 but max is 0 [ 897.601023][ T9614] usb 4-1: config 2 has no interface number 0 [ 897.611603][ T9614] usb 4-1: config 2 interface 108 has no altsetting 0 [ 897.631123][ T9614] usb 4-1: New USB device found, idVendor=129b, idProduct=160c, bcdDevice=1b.d8 [ 897.650849][ T9614] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.658952][ T9614] usb 4-1: Product: syz [ 897.675959][ T9614] usb 4-1: Manufacturer: syz [ 897.680571][ T9614] usb 4-1: SerialNumber: syz [ 897.949708][ T9614] usb 4-1: Could not find all expected endpoints [ 898.018954][ T9614] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 898.043386][ T9614] usb 4-1: MIDIStreaming interface descriptor not found [ 898.160096][T13329] loop6: detected capacity change from 0 to 32768 [ 898.371496][T13329] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2138 (13329) [ 898.419235][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 898.510227][ T9614] usb 4-1: USB disconnect, device number 36 [ 898.867936][T13329] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 898.990890][T13329] BTRFS info (device loop6): using sha256 (sha256-x86_64) checksum algorithm [ 899.000665][T13329] BTRFS info (device loop6): using free-space-tree [ 899.450966][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 900.012085][T13329] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 900.046090][T13329] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 900.169488][T13329] BTRFS error (device loop6): open_ctree failed: -12 [ 900.490823][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 900.497978][T12195] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 900.667703][T12195] usb 9-1: unable to get BOS descriptor or descriptor too short [ 900.782682][T12195] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 900.853576][T12195] usb 9-1: can't read configurations, error -71 [ 901.436860][T13374] loop0: detected capacity change from 0 to 32768 [ 901.530833][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 901.760687][T13374] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 901.760707][T13374] allowing incompatible features above 0.0: (unknown version) [ 901.760719][T13374] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 901.868464][T13374] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 901.876903][T13374] bcachefs (loop0): recovering from clean shutdown, journal seq 15 [ 901.885540][T13374] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive [ 901.885540][T13374] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 902.082481][T13374] bcachefs (loop0): btree node read error at btree alloc level 0/0 [ 902.082504][T13374] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq a64f6cc698df3452 written 48 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 902.082523][T13374] loop0 node offset 0/48 bset u64s 0: checksum error, type chacha20_poly1305_80: got a27f119bba62858d23a6 should be 9948119f4b23e09f462b [ 902.082542][T13374] flagging btree alloc lost data [ 902.082553][T13374] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 902.082568][T13374] running recovery pass check_lrus (14), currently at recovery_pass_empty (0) [ 902.082583][T13374] running recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0) [ 902.082598][T13374] running recovery pass check_alloc_info (13), currently at recovery_pass_empty (0) [ 902.082613][T13374] ret fsck_errors_not_fixed [ 902.570865][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 903.351277][T13374] bcachefs (loop0): error reading btree root btree=alloc level=0: btree_node_read_error, fixing [ 903.483887][T13374] bcachefs (loop0): check_topology... done [ 903.546701][T13374] bcachefs (loop0): accounting_read... done [ 903.610837][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 903.619335][T13374] bcachefs (loop0): alloc_read... done [ 903.650795][T13374] bcachefs (loop0): snapshots_read... done [ 903.679334][T13374] bcachefs (loop0): check_allocations... [ 903.831214][T13374] bcachefs (loop0): bucket 0:34 data type user ptr gen 0 missing in alloc btree [ 903.831235][T13374] while marking u64s 8 type extent 4099:8:U32_MAX len 8 ver 1: durability: 1 crc: c_size 8 size 8 offset 0 nonce 0 csum chacha20_poly1305_80 77fa:f532966a693125aa compress incompressible ptr: 0:34:0 gen 0, fixing [ 904.613891][T13374] bcachefs (loop0): bucket 0:27 data type btree ptr gen 0 missing in alloc btree [ 904.613917][T13374] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq f5560e09620e825a written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0, fixing [ 904.650843][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 905.690812][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 905.823069][T13374] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 905.823094][T13374] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq a4a08c15958b7fc8 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 906.010448][T13374] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 906.010466][T13374] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq a4a08c15958b7fc8 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 906.222177][T13374] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 906.222201][T13374] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 68ba4c6599367 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 906.343856][T13374] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 906.343875][T13374] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 68ba4c6599367 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 906.643858][T13374] bcachefs (loop0): bucket 0:31 data type btree ptr gen 0 missing in alloc btree [ 906.643877][T13374] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 31ed7f7a6a187f69 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0, fixing [ 906.710211][T13468] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 906.710251][T13468] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 906.710491][T13468] vhci_hcd vhci_hcd.0: Device attached [ 906.719855][T13470] vhci_hcd: connection closed [ 906.720653][ T12] vhci_hcd: stop threads [ 906.720669][ T12] vhci_hcd: release socket [ 906.720687][ T12] vhci_hcd: disconnect device [ 906.730835][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 907.143783][T13374] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 907.143806][T13374] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq a6f3a05050194d82 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 907.188715][T13476] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2175'. [ 907.770802][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 908.344345][T13374] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 908.344368][T13374] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq a6f3a05050194d82 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 908.467247][T13374] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 908.467266][T13374] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq b2fb6fcebb2a2f51 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 908.591425][T13374] bcachefs (loop0): bucket 0:32 data type btree ptr gen 0 missing in alloc btree [ 908.591453][T13374] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq b2fb6fcebb2a2f51 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 908.715989][T13374] bcachefs (loop0): bucket 0:28 data type btree ptr gen 0 missing in alloc btree [ 908.716013][T13374] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7f39628faed02285 written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing [ 908.760971][ T9] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 908.810850][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 909.850811][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 909.911499][ T9] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 910.083826][T13374] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 910.084005][T13374] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7fd83409d5b7165 written 48 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 910.362374][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.362406][ T9] usb 4-1: Product: syz [ 910.362425][ T9] usb 4-1: Manufacturer: syz [ 910.362444][ T9] usb 4-1: SerialNumber: syz [ 910.382818][ T9] usb 4-1: config 0 descriptor?? [ 910.604155][T13500] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.2183'. [ 910.610194][T13499] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.2183'. [ 910.890802][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 910.921001][ T9] usb 4-1: Firmware version (0.0) predates our first public release. [ 910.921023][ T9] usb 4-1: Please update to version 0.2 or newer [ 911.063179][T13374] bcachefs (loop0): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 911.063276][T13374] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7fd83409d5b7165 written 48 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 911.112195][T13374] bcachefs (loop0): bucket 0:36 data type btree ptr gen 0 missing in alloc btree [ 911.112288][T13374] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq bbca91b628560366 written 32 min_key POS_MIN durability: 1 ptr: 0:36:0 gen 0, fixing [ 911.568588][T13374] bcachefs (loop0): bucket 0:40 data type btree ptr gen 0 missing in alloc btree [ 911.568612][T13374] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 85370abb7fc040b3 written 8 min_key POS_MIN durability: 1 ptr: 0:40:0 gen 0, fixing [ 911.568634][T13374] Ratelimiting new instances of previous error [ 911.581607][ T9] usb 4-1: USB disconnect, device number 37 [ 911.785648][T13374] done [ 911.794041][T13374] bcachefs (loop0): going read-write [ 911.830429][T13374] workqueue: Failed to create a rescuer kthread for wq "bcachefs": -EINTR [ 911.841681][T13374] bcachefs (loop0): flushing journal and stopping allocators, journal seq 15 [ 911.913200][T13374] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 15 [ 911.925065][T13374] bcachefs (loop0): unclean shutdown complete, journal seq 15 [ 911.930870][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 911.948834][T13374] bcachefs (loop0): error in recovery: ENOMEM_fs_other_allocemergency read only at seq 15 [ 911.960397][T13374] bcachefs (loop0): bch2_fs_start(): error starting filesystem ENOMEM_fs_other_alloc [ 912.043618][T13374] bcachefs (loop0): shutting down [ 912.072676][T13374] bcachefs (loop0): shutdown complete [ 912.399766][T13519] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2188'. [ 912.822252][T13374] bcachefs: bch2_fs_get_tree() error: ENOMEM_fs_other_alloc [ 912.970822][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 913.102036][T13529] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 913.108611][T13529] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 913.189633][T13529] vhci_hcd vhci_hcd.0: Device attached [ 913.227655][T13530] vhci_hcd: connection closed [ 913.227999][ T59] vhci_hcd: stop threads [ 913.269556][ T59] vhci_hcd: release socket [ 913.279679][ T59] vhci_hcd: disconnect device [ 914.010857][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 915.050881][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 915.476068][T13555] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2190'. [ 916.090891][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 917.130824][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 918.170827][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 918.375349][T13563] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2197'. [ 918.391871][T13562] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2197'. [ 918.994263][T13572] netlink: 'syz.8.2201': attribute type 10 has an invalid length. [ 919.210829][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 919.315087][T13584] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2203'. [ 919.325906][T13583] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2203'. [ 919.687686][T13578] syz.6.2204 uses obsolete (PF_INET,SOCK_PACKET) [ 920.251059][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 921.187130][T13606] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 921.193693][T13606] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 921.256659][T13606] vhci_hcd vhci_hcd.0: Device attached [ 921.290817][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 921.580879][ T5922] usb 42-1: SetAddress Request (6) to port 0 [ 921.587109][ T5922] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 921.594639][T13607] vhci_hcd: connection closed [ 921.595106][ T59] vhci_hcd: stop threads [ 921.775751][ T59] vhci_hcd: release socket [ 921.780985][ T59] vhci_hcd: disconnect device [ 922.300245][T13624] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2214'. [ 922.330823][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 923.370855][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 924.410920][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 925.450820][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 926.000532][T13649] netlink: 'syz.0.2224': attribute type 10 has an invalid length. [ 926.490882][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 926.768668][ T5922] usb 42-1: device descriptor read/8, error -110 [ 926.781359][T13649] syz_tun: entered promiscuous mode [ 926.871733][T13649] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 927.202314][ T5922] usb usb42-port1: attempt power cycle [ 927.394956][T13667] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 927.401533][T13667] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 927.470953][T13667] vhci_hcd vhci_hcd.0: Device attached [ 927.530828][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 928.065405][T12195] usb 34-1: SetAddress Request (10) to port 0 [ 928.080850][T12195] usb 34-1: new SuperSpeed USB device number 10 using vhci_hcd [ 928.094324][ T5922] usb usb42-port1: unable to enumerate USB device [ 928.570813][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 928.998081][T13668] vhci_hcd: connection reset by peer [ 929.014357][ T9252] vhci_hcd: stop threads [ 929.018639][ T9252] vhci_hcd: release socket [ 929.036790][ T9252] vhci_hcd: disconnect device [ 929.056575][T13680] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 929.370873][T13682] loop3: detected capacity change from 0 to 32768 [ 929.504115][T13682] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 929.504135][T13682] allowing incompatible features above 0.0: (unknown version) [ 929.504147][T13682] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 929.537792][T13682] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 929.546093][T13682] bcachefs (loop3): recovering from clean shutdown, journal seq 15 [ 929.554106][T13682] bcachefs (loop3): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive [ 929.554106][T13682] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 929.610837][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 929.685897][T13682] bcachefs (loop3): btree node read error at btree alloc level 0/0 [ 929.685916][T13682] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq a64f6cc698df3452 written 48 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 929.685932][T13682] loop3 node offset 0/48 bset u64s 0: checksum error, type chacha20_poly1305_80: got a27f119bba62858d23a6 should be 9948119f4b23e09f462b [ 929.685947][T13682] flagging btree alloc lost data [ 929.685956][T13682] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 929.685968][T13682] running recovery pass check_lrus (14), currently at recovery_pass_empty (0) [ 929.685980][T13682] running recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0) [ 929.685993][T13682] running recovery pass check_alloc_info (13), currently at recovery_pass_empty (0) [ 929.686005][T13682] ret fsck_errors_not_fixed [ 929.784942][T13682] bcachefs (loop3): error reading btree root btree=alloc level=0: btree_node_read_error, fixing [ 929.818123][T13682] bcachefs (loop3): check_topology... done [ 929.907017][T13682] bcachefs (loop3): accounting_read... done [ 929.985343][T13682] bcachefs (loop3): alloc_read... done [ 930.008298][T13687] binder: 13686:13687 ioctl c0306201 200000000240 returned -11 [ 930.009151][T13682] bcachefs (loop3): snapshots_read... done [ 930.115260][T13682] bcachefs (loop3): check_allocations... [ 930.116908][T13682] bcachefs (loop3): bucket 0:34 data type user ptr gen 0 missing in alloc btree [ 930.116929][T13682] while marking u64s 8 type extent 4099:8:U32_MAX len 8 ver 1: durability: 1 crc: c_size 8 size 8 offset 0 nonce 0 csum chacha20_poly1305_80 77fa:f532966a693125aa compress incompressible ptr: 0:34:0 gen 0, fixing [ 930.153747][T13682] bcachefs (loop3): bucket 0:27 data type btree ptr gen 0 missing in alloc btree [ 930.153769][T13682] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq f5560e09620e825a written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0, fixing [ 930.179288][T13682] bcachefs (loop3): btree ptr not marked in member info btree allocated bitmap [ 930.179304][T13682] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq a4a08c15958b7fc8 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 930.244954][T13682] bcachefs (loop3): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 930.244974][T13682] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq a4a08c15958b7fc8 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 930.270425][T13682] bcachefs (loop3): btree ptr not marked in member info btree allocated bitmap [ 930.270450][T13682] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 68ba4c6599367 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 930.295857][T13682] bcachefs (loop3): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 930.295873][T13682] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 68ba4c6599367 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 930.320981][T13682] bcachefs (loop3): bucket 0:31 data type btree ptr gen 0 missing in alloc btree [ 930.320998][T13682] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 31ed7f7a6a187f69 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0, fixing [ 930.346436][T13682] bcachefs (loop3): btree ptr not marked in member info btree allocated bitmap [ 930.346462][T13682] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq a6f3a05050194d82 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 930.370182][ T5928] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 930.450231][T13682] bcachefs (loop3): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 930.450250][T13682] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq a6f3a05050194d82 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 930.475482][T13682] bcachefs (loop3): btree ptr not marked in member info btree allocated bitmap [ 930.475499][T13682] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq b2fb6fcebb2a2f51 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 930.511334][T13682] bcachefs (loop3): bucket 0:32 data type btree ptr gen 0 missing in alloc btree [ 930.511359][T13682] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq b2fb6fcebb2a2f51 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 930.537080][T13682] bcachefs (loop3): bucket 0:28 data type btree ptr gen 0 missing in alloc btree [ 930.537098][T13682] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7f39628faed02285 written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing [ 930.562376][T13682] bcachefs (loop3): btree ptr not marked in member info btree allocated bitmap [ 930.562393][T13682] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7fd83409d5b7165 written 48 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 930.611086][T13682] bcachefs (loop3): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 930.611112][T13682] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7fd83409d5b7165 written 48 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 930.636256][T13682] bcachefs (loop3): bucket 0:36 data type btree ptr gen 0 missing in alloc btree [ 930.636272][T13682] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq bbca91b628560366 written 32 min_key POS_MIN durability: 1 ptr: 0:36:0 gen 0, fixing [ 930.661200][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 930.668673][T13682] bcachefs (loop3): bucket 0:40 data type btree ptr gen 0 missing in alloc btree [ 930.668688][T13682] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 85370abb7fc040b3 written 8 min_key POS_MIN durability: 1 ptr: 0:40:0 gen 0, fixing [ 930.668713][T13682] Ratelimiting new instances of previous error [ 930.706344][T13682] done [ 930.709429][T13682] bcachefs (loop3): going read-write [ 930.750529][ T5928] usb 9-1: config 0 has no interfaces? [ 930.767038][ T5928] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 930.776880][ T5928] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.830074][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 930.836488][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 930.863182][ T5928] usb 9-1: Product: syz [ 930.867378][ T5928] usb 9-1: Manufacturer: syz [ 930.916187][T13682] bcachefs (loop3): journal_replay... [ 930.937959][ T5928] usb 9-1: SerialNumber: syz [ 930.964266][ T5928] usb 9-1: config 0 descriptor?? [ 931.100996][T13682] done [ 931.105065][T13682] bcachefs (loop3): check_alloc_info... [ 931.107584][T13682] bcachefs (loop3): hole in alloc btree missing in freespace btree [ 931.107606][T13682] device 0 buckets 26-27, fixing [ 931.133825][T13682] done [ 931.144093][T13682] bcachefs (loop3): check_lrus... done [ 931.149879][T13682] bcachefs (loop3): check_backpointers_to_extents... done [ 931.167648][T13682] bcachefs (loop3): check_extents_to_backpointers... [ 931.168903][T13682] bcachefs (loop3): scanning for missing backpointers in 5/128 buckets [ 931.185589][T13682] done [ 931.247580][T13682] bcachefs (loop3): check_inodes... done [ 931.255162][T13682] bcachefs (loop3): resume_logged_ops... done [ 931.261370][T13682] bcachefs (loop3): delete_dead_inodes... done [ 931.690847][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 932.017520][T13682] bcachefs (loop3): done starting filesystem [ 932.154050][T13691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 932.177733][T13691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 932.240629][ T5834] bcachefs (loop3): shutting down [ 932.280659][ T5834] bcachefs (loop3): going read-only [ 932.303081][ T5834] bcachefs (loop3): finished waiting for writes to stop [ 932.360206][ T5834] bcachefs (loop3): flushing journal and stopping allocators, journal seq 28 [ 932.415779][ T5834] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 28 [ 932.569450][ T5834] bcachefs (loop3): clean shutdown complete, journal seq 29 [ 932.641701][ T5834] bcachefs (loop3): done going read-only, filesystem not clean [ 932.730858][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 932.826831][ T5834] bcachefs (loop3): shutdown complete [ 933.050967][ T9614] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 933.365354][T12195] usb 34-1: device descriptor read/8, error -110 [ 933.770811][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 933.894997][ T5915] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 934.211117][T12195] usb usb34-port1: attempt power cycle [ 934.228764][ T9614] usb 7-1: Using ep0 maxpacket: 32 [ 934.255598][ T9614] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 934.280890][ T9614] usb 7-1: config 0 has no interfaces? [ 934.297429][ T9614] usb 7-1: New USB device found, idVendor=0856, idProduct=bc00, bcdDevice=b2.7f [ 934.334729][ T9614] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.345640][ T9614] usb 7-1: Product: syz [ 934.349892][ T9614] usb 7-1: Manufacturer: syz [ 934.384632][ T9614] usb 7-1: SerialNumber: syz [ 934.432104][ T5915] usb 5-1: unable to get BOS descriptor or descriptor too short [ 934.452879][ T9614] usb 7-1: config 0 descriptor?? [ 934.458875][ T5915] usb 5-1: not running at top speed; connect to a high speed hub [ 934.493033][ T5915] usb 5-1: config 129 has an invalid interface number: 135 but max is 0 [ 934.540204][ T5915] usb 5-1: config 129 has an invalid descriptor of length 100, skipping remainder of the config [ 934.567867][ T5915] usb 5-1: config 129 has no interface number 0 [ 934.611125][ T5915] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 934.644184][ T5915] usb 5-1: config 129 interface 135 has no altsetting 0 [ 934.691094][ T5915] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 934.733960][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.810825][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 934.819452][T12195] usb usb34-port1: unable to enumerate USB device [ 934.859506][ T5915] usb 5-1: Product: syz [ 934.891264][ T5922] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 934.919233][ T5915] usb 5-1: Manufacturer: syz [ 934.947880][ T5915] usb 5-1: SerialNumber: syz [ 935.135229][ T5922] usb 1-1: config 0 has no interfaces? [ 935.151285][ T5922] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 935.160545][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.183230][ T5922] usb 1-1: Product: syz [ 935.187468][ T5922] usb 1-1: Manufacturer: syz [ 935.245252][ T5922] usb 1-1: SerialNumber: syz [ 935.263207][ T5922] usb 1-1: config 0 descriptor?? [ 935.309715][ T5915] usb 5-1: USB disconnect, device number 18 [ 935.671095][ T5922] usb 9-1: USB disconnect, device number 8 [ 935.850853][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 936.456520][T13743] binder: 13742:13743 ioctl c0306201 200000000240 returned -11 [ 936.890800][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 937.280267][T13748] netlink: 'syz.4.2251': attribute type 10 has an invalid length. [ 937.621800][T13748] syz_tun: entered promiscuous mode [ 937.672147][ T5915] usb 7-1: USB disconnect, device number 22 [ 937.714715][T13748] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 937.940804][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 938.980835][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 939.344782][ T5922] usb 1-1: USB disconnect, device number 29 [ 940.010818][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 940.945935][T13784] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.2263'. [ 940.966217][T13783] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.2263'. [ 941.052210][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 942.090830][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 943.130805][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 943.980031][T13795] binder: 13794:13795 ioctl c0306201 200000000240 returned -11 [ 944.180796][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 944.411463][T13802] netlink: 'syz.0.2268': attribute type 10 has an invalid length. [ 945.210835][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 946.159533][T13838] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.2282'. [ 946.222947][T13836] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.2282'. [ 946.250857][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 946.275006][T13842] random: crng reseeded on system resumption [ 946.400367][T13847] binder: 13846:13847 ioctl 4018620d 0 returned -22 [ 946.534170][T13847] binder: 13846:13847 ioctl c0306201 200000000240 returned -11 [ 946.559571][T13849] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2287'. [ 947.300810][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 948.148082][T13857] @: renamed from vlan0 (while UP) [ 948.340828][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 949.370985][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 950.410841][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 951.450804][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 951.835220][T13899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2295'. [ 951.849322][T13896] binder: 13893:13896 ioctl 4018620d 0 returned -22 [ 952.490801][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 952.831944][T13896] binder: 13893:13896 ioctl c0306201 200000000240 returned -11 [ 953.087095][T13909] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2296'. [ 953.212476][T13909] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2296'. [ 953.370875][ T5968] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 953.530804][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 954.352813][ T5968] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 954.542967][ T5968] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 954.570828][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 954.636978][ T5968] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 954.710881][ T5968] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.220992][ T5968] usb 8-1: config 0 descriptor?? [ 955.620792][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 955.986976][ T5968] usbhid 8-1:0.0: can't add hid device: -32 [ 955.995366][ T5968] usbhid 8-1:0.0: probe with driver usbhid failed with error -32 [ 956.132193][ T5968] usb 8-1: USB disconnect, device number 10 [ 956.271103][ T9] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 956.444380][ T9] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 956.478884][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.499121][ T9] usb 4-1: Product: syz [ 956.506776][ T9] usb 4-1: Manufacturer: syz [ 956.524770][T13944] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.2315'. [ 956.540891][ T9] usb 4-1: SerialNumber: syz [ 956.568400][ T9] usb 4-1: config 0 descriptor?? [ 956.595588][T13943] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.2315'. [ 956.650801][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 956.928730][ T9] usb 4-1: Firmware version (0.0) predates our first public release. [ 956.937577][ T9] usb 4-1: Please update to version 0.2 or newer [ 956.971657][T13954] binder: 13953:13954 ioctl 4018620d 0 returned -22 [ 957.034379][ T9] usb 4-1: USB disconnect, device number 38 [ 957.690809][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 957.736725][T13954] binder: 13953:13954 ioctl c0306201 200000000240 returned -11 [ 958.730993][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 959.257596][T13977] tipc: Enabling of bearer rejected, already enabled [ 959.606687][ T30] audit: type=1326 audit(2000000528.770:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13982 comm="syz.7.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc451b2ab19 code=0x7ffc0000 [ 959.678497][ T30] audit: type=1326 audit(2000000528.770:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13982 comm="syz.7.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc451b2ab19 code=0x7ffc0000 [ 959.711858][ T5915] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 959.721310][ T30] audit: type=1326 audit(2000000528.770:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13982 comm="syz.7.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc451b2ab19 code=0x7ffc0000 [ 959.762771][ T30] audit: type=1326 audit(2000000528.770:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13982 comm="syz.7.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc451b2ab19 code=0x7ffc0000 [ 959.790793][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 959.802617][ T30] audit: type=1326 audit(2000000528.770:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13982 comm="syz.7.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc451b2ab19 code=0x7ffc0000 [ 959.901047][ T30] audit: type=1326 audit(2000000528.770:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13982 comm="syz.7.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc451b2ab19 code=0x7ffc0000 [ 959.978334][ T30] audit: type=1326 audit(2000000528.770:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13982 comm="syz.7.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc451b2ab19 code=0x7ffc0000 [ 960.003249][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 960.046230][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 960.061088][ T30] audit: type=1326 audit(2000000528.770:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13982 comm="syz.7.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc451b2ab19 code=0x7ffc0000 [ 960.081571][ T5915] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 960.109635][ T30] audit: type=1326 audit(2000000528.770:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13982 comm="syz.7.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc451b2ab19 code=0x7ffc0000 [ 960.181059][ T30] audit: type=1326 audit(2000000528.770:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13982 comm="syz.7.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc451b2ab19 code=0x7ffc0000 [ 960.321708][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.342388][ T5915] usb 1-1: config 0 descriptor?? [ 960.820801][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 961.246985][T13971] loop3: detected capacity change from 0 to 32768 [ 961.342546][ T5915] usbhid 1-1:0.0: can't add hid device: -32 [ 961.348594][ T5915] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 961.361614][T13992] ERROR: (device loop3): dbAdjCtl: the maximum free buddy is not the old root [ 961.361614][T13992] [ 961.434133][ T5915] usb 1-1: USB disconnect, device number 30 [ 961.461966][T13992] ERROR: (device loop3): remounting filesystem as read-only [ 961.819680][T13998] binder: BINDER_SET_CONTEXT_MGR already set [ 961.826220][T13998] binder: 13997:13998 ioctl 4018620d 200000000040 returned -16 [ 961.839396][T13998] binder: 13997:13998 ioctl c0306201 200000000240 returned -11 [ 961.850812][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 962.312634][T14010] binder: 14009:14010 ioctl 4018620d 0 returned -22 [ 962.386222][T14010] binder: 14009:14010 ioctl c0306201 200000000240 returned -11 [ 962.394075][ T5928] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 962.575015][ T5928] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 962.605162][ T5928] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.648996][T14018] tipc: Enabling of bearer rejected, already enabled [ 962.682686][ T5928] usb 9-1: Product: syz [ 962.701027][ T5928] usb 9-1: Manufacturer: syz [ 962.705652][ T5928] usb 9-1: SerialNumber: syz [ 962.732095][ T5928] usb 9-1: config 0 descriptor?? [ 962.890796][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 963.038358][ T5928] usb 9-1: Firmware version (0.0) predates our first public release. [ 963.059967][ T5928] usb 9-1: Please update to version 0.2 or newer [ 963.106512][ T5928] usb 9-1: USB disconnect, device number 9 [ 963.930796][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 963.959816][T14040] binder: BINDER_SET_CONTEXT_MGR already set [ 963.997019][T14040] binder: 14038:14040 ioctl 4018620d 200000000040 returned -16 [ 964.025481][T14040] binder: 14038:14040 ioctl c0306201 200000000240 returned -11 [ 964.714267][T14052] binder: 14050:14052 ioctl 4018620d 0 returned -22 [ 964.731148][ T31] INFO: task bch-reclaim/loo:12094 blocked for more than 143 seconds. [ 964.761163][ T31] Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 [ 964.893973][T14052] binder: 14050:14052 ioctl c0306201 200000000240 returned -11 [ 964.966263][T14049] loop6: detected capacity change from 0 to 32768 [ 964.972789][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 964.986341][T14054] tipc: Started in network mode [ 964.991287][T14054] tipc: Node identity ac1414aa, cluster identity 4711 [ 964.998618][T14054] tipc: Enabled bearer , priority 10 [ 965.039929][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 965.111451][ T31] task:bch-reclaim/loo state:D stack:18520 pid:12094 tgid:12094 ppid:2 task_flags:0x200040 flags:0x00004000 [ 965.126598][ T31] Call Trace: [ 965.129965][ T31] [ 965.133822][ T31] __schedule+0x16f5/0x4d00 [ 965.138543][ T31] ? __lock_acquire+0xa91/0xd20 [ 965.144646][ T31] ? schedule+0x165/0x360 [ 965.150157][ T31] ? __pfx___schedule+0x10/0x10 [ 965.155573][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 965.161694][ T31] ? schedule+0x91/0x360 [ 965.166136][ T31] schedule+0x165/0x360 [ 965.170389][ T31] schedule_preempt_disabled+0x13/0x30 [ 965.187078][ T31] __mutex_lock+0x724/0xe80 [ 965.192215][ T31] ? __mutex_lock+0x51b/0xe80 [ 965.197042][ T31] ? bch2_journal_reclaim_thread+0x16b/0x4f0 [ 965.203633][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 965.208812][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 965.215393][ T31] ? do_raw_spin_lock+0x121/0x290 [ 965.220601][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 965.226981][ T31] bch2_journal_reclaim_thread+0x16b/0x4f0 [ 965.240825][ T31] ? bch2_journal_reclaim_thread+0x223/0x4f0 [ 965.256000][ T31] kthread+0x711/0x8a0 [ 965.263569][ T31] ? __pfx_bch2_journal_reclaim_thread+0x10/0x10 [ 965.277879][ T31] ? __pfx_kthread+0x10/0x10 [ 965.285202][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 965.296954][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 965.306959][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 965.317426][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 965.327337][ T31] ? __pfx_kthread+0x10/0x10 [ 965.335667][ T31] ret_from_fork+0x3fc/0x770 [ 965.346002][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 965.359860][ T31] ? __switch_to_asm+0x39/0x70 [ 966.010945][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 966.087894][ T31] ? __switch_to_asm+0x33/0x70 [ 966.093691][ T31] ? __pfx_kthread+0x10/0x10 [ 966.099592][ T31] ret_from_fork_asm+0x1a/0x30 [ 966.104787][ T31] [ 966.107869][ T31] [ 966.107869][ T31] Showing all locks held in the system: [ 966.111446][T12195] tipc: Node number set to 2886997162 [ 966.139186][T14049] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 966.139202][T14049] allowing incompatible features above 0.0: (unknown version) [ 966.139213][T14049] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 966.172828][T14049] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0 [ 966.181159][T14049] bcachefs (loop6): recovering from clean shutdown, journal seq 15 [ 966.189135][T14049] bcachefs (loop6): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive [ 966.189135][T14049] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 966.254367][T14049] bcachefs (loop6): btree node read error at btree alloc level 0/0 [ 966.254388][T14049] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq a64f6cc698df3452 written 48 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 966.254407][T14049] loop6 node offset 0/48 bset u64s 0: checksum error, type chacha20_poly1305_80: got a27f119bba62858d23a6 should be 9948119f4b23e09f462b [ 966.254427][T14049] flagging btree alloc lost data [ 966.254439][T14049] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 966.254456][T14049] running recovery pass check_lrus (14), currently at recovery_pass_empty (0) [ 966.254486][T14049] running recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0) [ 966.254504][T14049] running recovery pass check_alloc_info (13), currently at recovery_pass_empty (0) [ 966.254520][T14049] ret fsck_errors_not_fixed [ 966.260849][ T31] 1 lock held by khungtaskd/31: [ 966.262751][T14049] bcachefs (loop6): error reading btree root btree=alloc level=0: btree_node_read_error, fixing [ 966.363264][T14049] bcachefs (loop6): check_topology... done [ 966.370922][T14049] bcachefs (loop6): accounting_read... [ 966.402187][ T31] #0: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 966.427834][ T31] 2 locks held by getty/5595: [ 966.439538][ T31] #0: ffff8880306cc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 966.449927][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 966.460807][ T31] 6 locks held by syz-executor/5836: [ 966.466163][ T31] #0: ffff88804128e0e0 (&type->s_umount_key#102){++++}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 966.488917][ T31] #1: ffff88805bd00278 (&c->state_lock){++++}-{4:4}, at: __bch2_fs_stop+0xf8/0x900 [ 966.515287][ T31] #2: ffff88805bd4af68 (&j->reclaim_lock){+.+.}-{4:4}, at: journal_flush_done+0x86/0x810 [ 966.535778][ T31] #3: ffff88805bd04390 (&c->btree_trans_barrier){.+.+}-{0:0}, at: __bch2_trans_get+0x7f4/0xd80 [ 966.559830][ T31] #4: ffff88805bd04738 (&wb->flushing.lock){+.+.}-{4:4}, at: btree_write_buffer_flush_seq+0x1829/0x19a0 [ 966.586420][ T31] #5: ffff88805bd26710 (&c->gc_lock){++++}-{4:4}, at: bch2_btree_update_start+0x542/0x1dc0 [ 966.606730][ T31] 4 locks held by kworker/u8:14/7612: [ 966.613804][ T31] #0: ffff88805324b948 ((wq_completion)btree_update){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 966.631890][ T31] #1: ffffc90003727bc0 ((work_completion)(&c->btree_interior_update_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 966.655747][ T31] #2: ffff88805bd04390 (&c->btree_trans_barrier){.+.+}-{0:0}, at: bch2_trans_srcu_lock+0xaf/0x220 [ 966.673433][ T31] #3: ffff88805bd26710 (&c->gc_lock){++++}-{4:4}, at: bch2_btree_update_start+0x542/0x1dc0 [ 966.684686][ T31] 1 lock held by bch-reclaim/loo/12094: [ 966.690326][ T31] #0: ffff88805bd4af68 (&j->reclaim_lock){+.+.}-{4:4}, at: bch2_journal_reclaim_thread+0x16b/0x4f0 [ 966.702511][ T31] 4 locks held by syz.6.2354/14049: [ 966.707718][ T31] #0: ffff88803f384390 (&c->btree_trans_barrier){.+.+}-{0:0}, at: __bch2_trans_get+0x7f4/0xd80 [ 966.719486][ T31] #1: ffff88802f8dc1b0 (bcachefs_btree){+.+.}-{0:0}, at: __bch2_trans_get+0x7f4/0xd80 [ 966.729304][ T31] #2: ffff88803f3849d0 (&c->mark_lock){++++}-{0:0}, at: bch2_accounting_read+0x152/0x57d0 [ 966.739477][ T31] #3: ffffffff8e1448b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 966.750577][ T31] [ 966.752296][T14049] done [ 966.755154][ T31] ============================================= [ 966.755154][ T31] [ 966.755652][T14049] bcachefs (loop6): alloc_read... [ 966.764050][ T31] NMI backtrace for cpu 0 [ 966.764067][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(full) [ 966.764093][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 966.764107][ T31] Call Trace: [ 966.764116][ T31] [ 966.764125][ T31] dump_stack_lvl+0x189/0x250 [ 966.764160][ T31] ? __wake_up_klogd+0xd9/0x110 [ 966.764186][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 966.764214][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 966.764249][ T31] ? __pfx__printk+0x10/0x10 [ 966.764286][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 966.764319][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 966.764345][ T31] ? _printk+0xcf/0x120 [ 966.764373][ T31] ? __pfx__printk+0x10/0x10 [ 966.764399][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 966.764432][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 966.764464][ T31] watchdog+0xfee/0x1030 [ 966.764496][ T31] ? watchdog+0x1de/0x1030 [ 966.764535][ T31] kthread+0x711/0x8a0 [ 966.764564][ T31] ? __pfx_watchdog+0x10/0x10 [ 966.764592][ T31] ? __pfx_kthread+0x10/0x10 [ 966.764614][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 966.764643][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 966.764674][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 966.764698][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 966.764733][ T31] ? __pfx_kthread+0x10/0x10 [ 966.764760][ T31] ret_from_fork+0x3fc/0x770 [ 966.764794][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 966.764832][ T31] ? __switch_to_asm+0x39/0x70 [ 966.764854][ T31] ? __switch_to_asm+0x33/0x70 [ 966.764875][ T31] ? __pfx_kthread+0x10/0x10 [ 966.764901][ T31] ret_from_fork_asm+0x1a/0x30 [ 966.764940][ T31] [ 966.764948][ T31] Sending NMI from CPU 0 to CPUs 1: [ 966.795972][T14049] done [ 966.799118][ C1] NMI backtrace for cpu 1 [ 966.799130][ C1] CPU: 1 UID: 0 PID: 14049 Comm: syz.6.2354 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(full) [ 966.799154][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 966.799166][ C1] RIP: 0010:native_apic_msr_eoi+0xf/0x20 [ 966.799191][ C1] Code: f8 e9 10 02 9f ff cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa b9 0b 08 00 00 31 c0 31 d2 0f 30 e7 01 9f ff cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 [ 966.799207][ C1] RSP: 0018:ffffc90000a08fc8 EFLAGS: 00000046 [ 966.799225][ C1] RAX: 0000000000000000 RBX: ffffc9000425efd8 RCX: 000000000000080b [ 966.799238][ C1] RDX: 0000000000000000 RSI: ffffffff8b87b100 RDI: ffffffff8be28b40 [ 966.799252][ C1] RBP: 0000000000000000 R08: ffffffff8fa10ff7 R09: 1ffffffff1f421fe [ 966.799266][ C1] R10: dffffc0000000000 R11: ffffc90000a08ff8 R12: dffffc0000000000 [ 966.799281][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 966.799295][ C1] FS: 00007f2cc7d736c0(0000) GS:ffff888125d51000(0000) knlGS:0000000000000000 [ 966.799312][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 966.799325][ C1] CR2: 0000001b2f01cff8 CR3: 00000000554fe000 CR4: 0000000000350ef0 [ 966.799341][ C1] Call Trace: [ 966.799348][ C1] [ 966.799355][ C1] __sysvec_apic_timer_interrupt+0x45/0x410 [ 966.799391][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 966.799421][ C1] [ 966.799428][ C1] [ 966.799435][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 966.799456][ C1] RIP: 0010:vprintk_emit+0x58f/0x7a0 [ 966.799480][ C1] Code: 85 32 01 00 00 e8 d1 61 1f 00 41 89 df 4d 85 f6 48 8b 1c 24 75 07 e8 c0 61 1f 00 eb 06 e8 b9 61 1f 00 fb 48 c7 c7 20 30 13 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 b9 36 [ 966.799496][ C1] RSP: 0018:ffffc9000425f080 EFLAGS: 00000246 [ 966.799512][ C1] RAX: ffffffff81a0fa97 RBX: ffffffff81a0f954 RCX: 0000000000080000 [ 966.799527][ C1] RDX: ffffc9001f30e000 RSI: 000000000007ffff RDI: ffffffff8e133020 [ 966.799541][ C1] RBP: ffffc9000425f190 R08: ffffffff8fa10ff7 R09: 1ffffffff1f421fe [ 966.799556][ C1] R10: dffffc0000000000 R11: fffffbfff1f421ff R12: dffffc0000000000 [ 966.799571][ C1] R13: 1ffff9200084be14 R14: 0000000000000200 R15: 0000000000000005 [ 966.799587][ C1] ? vprintk_emit+0x444/0x7a0 [ 966.799606][ C1] ? vprintk_emit+0x587/0x7a0 [ 966.799628][ C1] ? vprintk_emit+0x444/0x7a0 [ 966.799648][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 966.799671][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 966.799696][ C1] ? __bch2_run_recovery_passes+0x623/0x1010 [ 966.799722][ C1] __bch2_print+0x176/0x220 [ 966.799752][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 966.799773][ C1] ? __pfx___bch2_print+0x10/0x10 [ 966.799805][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 966.799828][ C1] ? bch2_sb_field_get_id+0xcc/0x110 [ 966.799853][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 966.799875][ C1] ? bch2_sb_recovery_pass_entry+0x123/0x220 [ 966.799909][ C1] __bch2_run_recovery_passes+0x640/0x1010 [ 966.799945][ C1] bch2_run_recovery_passes+0x184/0x210 [ 966.799967][ C1] bch2_fs_recovery+0x25fd/0x3950 [ 966.800007][ C1] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 966.800035][ C1] ? __console_unlock+0x14c/0x1a0 [ 966.800056][ C1] ? __pfx___console_unlock+0x10/0x10 [ 966.800083][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 966.800109][ C1] ? __lock_acquire+0xab9/0xd20 [ 966.800145][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 966.800168][ C1] ? __lock_acquire+0xab9/0xd20 [ 966.800200][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 966.800223][ C1] ? __lock_acquire+0xab9/0xd20 [ 966.800263][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 966.800287][ C1] ? bch2_fs_start+0x9fe/0xd90 [ 966.800309][ C1] ? up_write+0x1c4/0x420 [ 966.800327][ C1] ? bch2_fs_start+0x5c4/0xd90 [ 966.800348][ C1] bch2_fs_start+0xa99/0xd90 [ 966.800368][ C1] ? bch2_fs_start+0x5c4/0xd90 [ 966.800390][ C1] ? __pfx_bch2_fs_start+0x10/0x10 [ 966.800423][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 966.800445][ C1] ? sget+0x267/0x620 [ 966.800482][ C1] bch2_fs_get_tree+0xb02/0x14f0 [ 966.800531][ C1] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 966.800574][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 966.800597][ C1] ? aa_get_newest_label+0xf7/0x5d0 [ 966.800622][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 966.800644][ C1] ? vfs_parse_monolithic_sep+0x2df/0x310 [ 966.800680][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 966.800707][ C1] ? apparmor_capable+0x137/0x1b0 [ 966.800732][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 966.800765][ C1] vfs_get_tree+0x92/0x2b0 [ 966.800794][ C1] do_new_mount+0x24a/0xa40 [ 966.800831][ C1] __se_sys_mount+0x317/0x410 [ 966.800868][ C1] ? __pfx___se_sys_mount+0x10/0x10 [ 966.800897][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 966.800929][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 966.800955][ C1] ? __x64_sys_mount+0x20/0xc0 [ 966.800982][ C1] do_syscall_64+0xfa/0x3b0 [ 966.801003][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 966.801038][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.801060][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 966.801086][ C1] ? exc_page_fault+0x9f/0xf0 [ 966.801121][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.801142][ C1] RIP: 0033:0x7f2cc6f900ca [ 966.801160][ C1] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 966.801178][ C1] RSP: 002b:00007f2cc7d72e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 966.801199][ C1] RAX: ffffffffffffffda RBX: 00007f2cc7d72ef0 RCX: 00007f2cc6f900ca [ 966.801215][ C1] RDX: 000020000000fec0 RSI: 000020000000ff00 RDI: 00007f2cc7d72eb0 [ 966.801230][ C1] RBP: 000020000000fec0 R08: 00007f2cc7d72ef0 R09: 0000000000000000 [ 966.801244][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 000020000000ff00 [ 966.801258][ C1] R13: 00007f2cc7d72eb0 R14: 000000000000fe88 R15: 000020000000ff40 [ 966.801285][ C1] [ 966.803914][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 966.803931][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(full) [ 966.803958][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 966.803972][ T31] Call Trace: [ 966.803982][ T31] [ 966.803992][ T31] dump_stack_lvl+0x99/0x250 [ 966.804029][ T31] ? __asan_memcpy+0x40/0x70 [ 966.804062][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 966.804098][ T31] ? __pfx__printk+0x10/0x10 [ 966.804131][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 966.804162][ T31] panic+0x2db/0x790 [ 966.804196][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 966.804227][ T31] ? __pfx_panic+0x10/0x10 [ 966.804261][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 966.804286][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 966.804326][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 967.621871][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 967.627258][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 967.633413][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 967.639046][ T31] watchdog+0x102d/0x1030 [ 967.643381][ T31] ? watchdog+0x1de/0x1030 [ 967.647805][ T31] kthread+0x711/0x8a0 [ 967.651877][ T31] ? __pfx_watchdog+0x10/0x10 [ 967.656559][ T31] ? __pfx_kthread+0x10/0x10 [ 967.661147][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 967.666788][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 967.671989][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 967.677622][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 967.682824][ T31] ? __pfx_kthread+0x10/0x10 [ 967.687413][ T31] ret_from_fork+0x3fc/0x770 [ 967.692012][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 967.697138][ T31] ? __switch_to_asm+0x39/0x70 [ 967.701897][ T31] ? __switch_to_asm+0x33/0x70 [ 967.706659][ T31] ? __pfx_kthread+0x10/0x10 [ 967.711253][ T31] ret_from_fork_asm+0x1a/0x30 [ 967.716038][ T31] [ 967.719761][ T31] Kernel Offset: disabled [ 967.724082][ T31] Rebooting in 86400 seconds..