994808a96b8b10cf567c9ddb515e03a0519e57454dbc22cc5b66db35a817f95d242817f241fd3062d4637cedef265a1691ed0dfecea36abfcb9a74d316c16a2d7bb0b413e2bedfe03860b55f6aaa6f238c2f0eb107245cca3f981df8d6a645771c87c88921207fc330587437ad4a1819ffe934aa0fb60f227f0060fa1c501b4062d9042bca43d1170556c1cb527dc61743924b6d44a15773b9b7d87287a4049f0a18bf068e8536bf08ce2fa98dbe8072a9b8ea35e844050765f0229cab884de28c381b3b10b3c8822243c3e74a34488ab7b6a15a2a07df25a46158749db8aa39db80fb74fd025e96cdb8d67a3b66aadfca47ddbf0ce9c0e0564a77cd054f70ffa856908df78e3a4c58fea820fcd01d87a301dcb10ec1529fc2024711d66e21c7c44f492171541a9a9553d017d6f9497b8f9d05e645801504ecda20e09404d4a69ee14d4309740368b9c9c1f900ca6dfa32557392b506c2d0eedd83963334fb59fcd2d9baec4f97293ba5e4d6201d23afe53c306af163423487c6f2f0964c3c909a1657d11716311c69da0a8b753e25e6dadacb4041df4163d3950409f1fad6d671a43ea762b05db2978b1d493d689a85582529550960bea2fcd394467b4e9dd4a6ee0a3587d3ddf15615503d0c60479626604643a8b0431be766540fb29daba041f03bc1ba7520d52b014d0f2fc2db63c3196a781fdb5c5a895189bebadd17edc2ef4f80bcd1d0011eeee83b29d432404d03e32d33d9a7e0857e00f247c94eb57f9afc61898680374a8de8fcc3a13a176733682cfb549418e88075550828667f84c143efd8d794050c03607ca7b3d76f793858dc1852396765993795de1ab6f7324b0eef1dd5c6294d7ca8e4f446d54ce8541827670f1bf28016db8cfe296a57c7fd2e825821d626a804a4d226e062de8da805168481c60cb6dead215cef5b91979efebdff11bf89d498e46ea4511e5305705545dbcf7a8d4aa573e3ef82efa70d10be4a757933ff0b710b419083588dbddb8809fb87065d01c71f6c9d17b0aa6f3a8c109789c75862a921a67d88a4ff328d5d707301f8ea8cf383d4a33451e57c722ff8fd569a6518b8fb176d3b5fc1a6bd1527c4c1e94601418b83c377b6be78584f03d10c6bda2449554b268043f67c20e5267968bc34a892f286a56deb159862b8553f59eb51d1cf0aa0cba30830c7528040c999c7ea5f73d075bc18a37fb619c6405a429e82560dba2465fba26a091efc0da07065982b949e7f43160e999c2175897b71a9b146602ea2864794e9e4ddd374027d36c2f0c8f538e6fb8701bfcafb1e9a87ea8fd688c7bdfbcad98df71b21b3b4c1f29e57682f27a39fab1b25df2b319572e8b6232f8ba3f11322c4d34d8bafbdb7bdbbb5fe71a19dcd23f29405acaf202ca360271c5294aac30e9b852a8addefe8edaaed76b31391545f26937134c030d0b490659a3cb14d3dc9ba0a95c72959bc098738bd0f66560b1ff6afa0f29d0ba2c33f5b518e97f40b0ded1ece9be7b424284330885917e8c23095f6b7f29fabaa3dd735f5a2224980d1ae3f02dad8309bb474b36b7dc58dd380cb1006e34d22a9aae6d937befa49ee58e0839936fa2a02331400570001fda4b121f50580859430b7b016149152208d2d65dcf45e70de1f9a9231bbc536daecc719bb28bdbc5ba68232d661359cfcbe5b003a08a71370c3ff40290e1ea5d8a2c21bc8f5fa4f997aeb401af04d136e88ec936f4e069240a16578cd0ebc89cd6b6aeac201cfd3d183ee55c05ad09891f09bb19aa92c3130f6396a4ed43daf73f654a62a83e889ffaf62c243d1e55774bfa764a6f8c7009fbb6e0f45e98e2c342ce4d6dab8e04ca28dab150843fe9ff9ae88cdd237baee2411ffc4f67ace1bbfa4b56d17aadf23618b7c8afc522ed6a09db1731344386591a484cadab9ca4566ab664e206efbd82ecaf0cd2dbe72eb00dd953788253ea80f0bffac3864cb727200acd148c2ad180685dc676d65a2368231ab3d42da2bf9fe50655053189b46c00ba2c5c895598ddac9616c514c6c80d9d32d8e7c4b6987461380d1b6a6d6f1b5903e0119f058f1660f56555de33274917b1ccb3ac5039abfff1316d4b97f90397d1288b4d4c77203ea52abe8fba132c162554fc8a575d2511846df1eb593c79418f25b7c95c7c6c92b760fe30682297a5d845bb14c379d4be24dba2a72f988f72fcadd33d22a5c738861913ed19d7f4f56f1c8145668adf45049610379e58c5d1da12cd38ee6db1ad78226d1490f68dece403a97a278bf1c5f266a01af75c02b0fc454f4581479465634fa65176b0783206570e3f79855842852298a2d14c8f610d434d87ac24a5ac24b4b0db6fcbf8d7fedbb9fd4aa514c2ec90cefb68d9af8c2d7a1e53579c7a42c379b46054ae4c791b9e1c8a36d9a198f3e24c7df01fa546aae3d855f889c30f0fa6a0965a120e01e80c1aa50fa82f3992366bc6de52029429d11c0bb5aa7cb67bf293b761ba02d66d2ff8d0355a5819e8c9467ae228c2f887c00788651c178d35b2d3054528085ef292c6413a9389ab86baf0df1ac5adc3c794d51ab8bc118372258ba67966801e3b33a2b3a647afdd8f13e9feb5b6adaaa41b3c9d43a4a21d2b619cbe412778cf8cf4bd5ffb017d14431c0fb1ef8736f33646abe702c685e7f117a3be6f6fa8fd2647b4dbb68a424a4557ae3e3339f3467f73039d4343ae33f3d6a6d88cd1e778eeeb67c8358e66c4a8741b5dbd2bc6432ed05667f081becc8b9c56f1e8d2e38ba35eaf62dab1b7c38f70245104aa1902defda40c47b9c550a5c6bd33aba02d7f9922662c4078798209d22cec4e813218cefc9944778f108dff080cc6e947761d47fdffbfcb548f820c81241c6bcdbbbc02cab84d691206ef2faddd0c42f0c6f4d06f84bd21da7d509a501c417460820c3f0432ccd150f47e10dc98230763dd5f907a41265464bc02b4e07123a07cfd5246c781ee2bc78655084ea3a412e2ccd2ffa0a593fa68b5278b1c4cf5fbba6907f544bd19dc67933574424d78d4862d0f39f15b6f61d684a9c393bed257fee1a5abfa84d7807dc2c8635844c716272f626300b869272389b3c9040d453151a3c18bbb235636e63bdee61689ab544b17aa46d74a7df3e146b1322bb64e4eeb83dfd1f3a430aa6e161a1235c19b017ddd1f5aec3d1e919ffc4b733d698f803b013bc3e7aa1350e5259e37baae9cb8465930f488fae4ea8b51fd1ecd04749f99d3a3976651565c459752fcc1e178cbb747d65a1f55ef260aabfad17c2acd2ce83770d8a9c57d47e4e98df63be7775482616b185aa94174008986b57ca276760af80630ad86f6d0d01b38f54897d2dda2526b823e97b64884e06e1e4ec886ccd4da549306290bb012f5ead95f22921e03195b9abb86f7ad65131aef6422673e814af4a40e0c142c725af7cf4f3a3739d71c1dd84dad2b1f305b52dc4d57fa7ec4d2d47e9f9efb0dc941b41465c34e6ca9212fb5481b1f57b3fa7ffbf6c778338a3f4df0f2bf4c4478c938c8d5e926bef6e8a92685ce5abaecb95b72c174f5d5f5c45d925d8980613fd3ef211a16f56067b3ef262ab0dfa1b6aacd1253176bc77e8987004aefeb65a858dc9974bfec478225770246c92c07130826c32113e623e4ba25d4ff2c9ca9ec5b50c18fb0d66d5967d1933ed605f6c167f360232835f8869b2f67b19e20d0848e898fc1428bbdec273f042f6c524b5f5328b91a6502a0995f55363b8c00c94f74101cfb5b0b7692c9abc318c44ae52e628f3bf6a096f2a00f585fcc875747a1e423f787882acb1be0da6ee5346078e8750fd74072dbb4372a63e4593cd9f2a58563a17ff169dc4a97d17523339963c3f1ccd1615bbe09d5", 0x1000, 0x5}, {&(0x7f00000011c0)="ebe86fc1486e9bff6099783f4c612023c9228ccb86a84024a09c94a3ab5d4ed87db51cb4b6888a1d0557275e4ac6b0a3ebf29cf42f5f474703283eab4980e6c6dd9591e49bfe6bb7de29d05f4bc8e2ccac598a0850c30dd8ca62f66aa677739b1e2e1b5c84bc156301031412111dbd3ca538ce8e2a1e30116f942ab83d5127eb1b5f9ead0fbf", 0x86, 0x3f}], 0x1001, &(0x7f0000001280)={[{@prjjquota={'prjjquota', 0x3d, '(('}}, {@usrjquota={'usrjquota', 0x3d, '\\^'}}, {@six_active_logs='active_logs=6'}, {@background_gc_on='background_gc=on'}, {@grpjquota={'grpjquota', 0x3d, '}:[#/.'}}, {@quota='quota'}, {@user_xattr='user_xattr'}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsroot={'smackfsroot'}}, {@uid_gt={'uid>', 0xee01}}, {@appraise='appraise'}]}) splice(r1, &(0x7f0000001340)=0x8, r0, &(0x7f0000001380)=0x9, 0xec, 0xe) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) 05:21:36 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 454.533681][T12647] loop3: detected capacity change from 65551 to 0 05:21:37 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x10c4, 0xea90, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x18, &(0x7f0000000400)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x73, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x2, 0x1, 0x80, 0x80, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xffff8001, 0x6, 0x6, 0x2}, {0x6, 0x24, 0x1a, 0xffff, 0x25}, [@obex={0x5, 0x24, 0x15, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x4, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x81, 0x0, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x2, 0x76, 0x1}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x200, 0x61, 0x80, 0x3, 0x40, 0x2}, 0x76, &(0x7f0000000340)={0x5, 0xf, 0x76, 0x5, [@ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0xffff, 0x0, 0xd7, [0xffc000, 0xc000, 0xff00f0, 0x3ff0]}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "bea475ca5bac7595a76f588745cc9d28"}, @generic={0x1a, 0x10, 0xb, "8f0eb9588c0a54df7c8cf1b58b61a943292a5f0c9f7681"}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x3f, 0x6, 0x9, 0xf00, 0xffff, [0x3f0f, 0x3f30, 0xff00c0, 0xc0, 0xff00ff, 0x1fe3ff0]}]}, 0x9, [{0x13, &(0x7f00000003c0)=@string={0x13, 0x3, "cf2e12763813791b1ac7b266eed7edf79e"}}, {0xd4, &(0x7f0000000680)=@string={0xd4, 0x3, "22d623c2a13f4d64e56fe83f83f72527005df96babc9d87959c3401d090fd49acec81a1d5eb482c396047c557d94d0fbf371e7e3f9382ec0806741c090449c0d61251ffadd8812c618bd4668e06f4f03d4a503c414f86f55d33104a5443e16c897e9018a22fba926514140ff809956292b718f95ec5fb75c7a1c61615fbfd4a459f7f4150c4c076c7dff994c0f4460853011ed59ce1a14a738e88d17536b1cacd6b561ad7b405668aee6472a967de5cb2c6fcd2e3200292edbcb723f66ca83db2f19f1fe5eff9ef778f02d878dbf2777c6e7"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xc0c}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x3412}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1404}}, {0x78, &(0x7f0000000780)=@string={0x78, 0x3, "461c76a739a42928ebf472a4774b4c6490ba63d790439a77bc4ce05486dc432d7329f635788235e445baeed3459509571bca67be2920ffe9c1247b6f5305c71b1c17880415583d9b7923fc6ec0b8adf05f8f1bf323effac7f2dfd48105477a512dd524aaf2dd60cae48724fe1ae31fd600bfb70a61bd"}}, {0x54, &(0x7f0000000800)=@string={0x54, 0x3, "0b9446f9f04160ba2285f498d0bcebe95d8dcd67a7c2404cd0944e8080faf46ada61cda1a4838e2c621f29a6dc490644b0bc169170d2e3f093b932bd1fdee88c0ae676683ed334eb5c61571e25588fdb4452"}}]}) 05:21:37 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000340)=""/199, 0x26, 0xc7, 0x8}, 0x20) [ 454.654239][T12647] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 454.662386][T12647] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 454.694378][T12647] F2FS-fs (loop3): invalid crc_offset: 0 [ 454.736859][T12654] loop1: detected capacity change from 264192 to 0 [ 454.767304][T12647] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 454.776487][T12647] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 05:21:37 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) recvmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/251, 0xfb}, {&(0x7f0000000000)=""/93, 0x5d}, {&(0x7f00000002c0)=""/215, 0xd7}], 0x3, &(0x7f00000003c0)=""/172, 0xac}, 0x10001) [ 455.225837][ T7] Bluetooth: hci4: command 0x0406 tx timeout [ 455.232421][T12666] loop2: detected capacity change from 65551 to 0 [ 455.253880][T12666] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 455.264222][T12666] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 455.285562][T12666] F2FS-fs (loop2): invalid crc_offset: 0 [ 455.355050][ T8467] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 455.374272][T12666] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 455.383680][T12666] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 05:21:37 executing program 4: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:21:37 executing program 5: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf0ffffff7f0000) [ 455.795773][ T8467] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.807003][ T8467] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.817119][ T8467] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 455.826922][ T8467] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.095436][ T8467] usb 1-1: config 0 descriptor?? 05:21:38 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x106, 0x1c}}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x0) utimensat(r1, 0x0, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x0) readlinkat(r0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000340)=""/4096, 0x1000) utimensat(r3, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000002c0)=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {0x0, r5}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x5, @private2, 0x2}, {0xa, 0x4e22, 0x80000000, @private2={0xfc, 0x2, [], 0x1}, 0xfff}, r5, 0x9}}, 0x48) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) [ 456.246635][T12684] loop4: detected capacity change from 65551 to 0 05:21:38 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01002e000000000000001400000014000000020000000000893bcce700000100000d00"/50], &(0x7f0000000340)=""/199, 0x2e, 0xc7, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0xa, 0x5, 0x5, 0x1, 0x0, 0xffffffffffffffff, 0x7, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x40) [ 456.351114][T12684] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 456.359723][T12684] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 05:21:38 executing program 3: timer_gettime(0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xad3) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) r4 = getpgrp(0x0) kcmp(r4, r3, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r4}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 456.512364][T12684] F2FS-fs (loop4): invalid crc_offset: 0 [ 456.598890][ T8467] cp2112 0003:10C4:EA90.0010: item fetching failed at offset 0/1 [ 456.640779][T12684] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 456.651168][T12684] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 456.661172][ T8467] cp2112 0003:10C4:EA90.0010: parse failed [ 456.667814][ T8467] cp2112: probe of 0003:10C4:EA90.0010 failed with error -22 [ 456.914393][T12663] udc-core: couldn't find an available UDC or it's busy [ 456.921531][T12663] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 457.020842][ T7] usb 1-1: USB disconnect, device number 79 05:21:39 executing program 5: syz_mount_image$nfs(&(0x7f0000000240)='nfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x2050012, &(0x7f0000000380)) 05:21:39 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:21:39 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) [ 457.432040][T12711] loop3: detected capacity change from 65551 to 0 [ 457.487190][T12711] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 457.495389][T12711] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 457.811296][T12711] F2FS-fs (loop3): invalid crc_offset: 0 [ 457.978052][T12711] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 457.987411][T12711] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 05:21:40 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x10c4, 0xea90, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x18, &(0x7f0000000400)={0x0, 0x0, 0x3, {0x3, 0x0, '\f'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x73, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x2, 0x1, 0x80, 0x80, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xffff8001, 0x6, 0x6, 0x2}, {0x6, 0x24, 0x1a, 0xffff, 0x25}, [@obex={0x5, 0x24, 0x15, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x4, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x81, 0x0, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x2, 0x76, 0x1}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x200, 0x61, 0x80, 0x3, 0x40, 0x2}, 0x76, &(0x7f0000000340)={0x5, 0xf, 0x76, 0x5, [@ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0xffff, 0x0, 0xd7, [0xffc000, 0xc000, 0xff00f0, 0x3ff0]}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "bea475ca5bac7595a76f588745cc9d28"}, @generic={0x1a, 0x10, 0xb, "8f0eb9588c0a54df7c8cf1b58b61a943292a5f0c9f7681"}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x3f, 0x6, 0x9, 0xf00, 0xffff, [0x3f0f, 0x3f30, 0xff00c0, 0xc0, 0xff00ff, 0x1fe3ff0]}]}, 0x9, [{0x13, &(0x7f00000003c0)=@string={0x13, 0x3, "cf2e12763813791b1ac7b266eed7edf79e"}}, {0xd4, &(0x7f0000000680)=@string={0xd4, 0x3, "22d623c2a13f4d64e56fe83f83f72527005df96babc9d87959c3401d090fd49acec81a1d5eb482c396047c557d94d0fbf371e7e3f9382ec0806741c090449c0d61251ffadd8812c618bd4668e06f4f03d4a503c414f86f55d33104a5443e16c897e9018a22fba926514140ff809956292b718f95ec5fb75c7a1c61615fbfd4a459f7f4150c4c076c7dff994c0f4460853011ed59ce1a14a738e88d17536b1cacd6b561ad7b405668aee6472a967de5cb2c6fcd2e3200292edbcb723f66ca83db2f19f1fe5eff9ef778f02d878dbf2777c6e7"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xc0c}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x3412}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1404}}, {0x78, &(0x7f0000000780)=@string={0x78, 0x3, "461c76a739a42928ebf472a4774b4c6490ba63d790439a77bc4ce05486dc432d7329f635788235e445baeed3459509571bca67be2920ffe9c1247b6f5305c71b1c17880415583d9b7923fc6ec0b8adf05f8f1bf323effac7f2dfd48105477a512dd524aaf2dd60cae48724fe1ae31fd600bfb70a61bd"}}, {0x54, &(0x7f0000000800)=@string={0x54, 0x3, "0b9446f9f04160ba2285f498d0bcebe95d8dcd67a7c2404cd0944e8080faf46ada61cda1a4838e2c621f29a6dc490644b0bc169170d2e3f093b932bd1fdee88c0ae676683ed334eb5c61571e25588fdb4452"}}]}) [ 458.157430][T12725] loop2: detected capacity change from 65551 to 0 [ 458.172864][T12725] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 458.180896][T12725] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 458.193119][T12725] F2FS-fs (loop2): invalid crc_offset: 0 [ 458.239895][T12725] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 458.249207][T12725] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 458.348915][T12725] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 458.356640][T12725] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b 05:21:40 executing program 5: bpf$BPF_BTF_LOAD(0x1e, 0x0, 0x0) 05:21:40 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$inet6_group_source_req(r1, 0x29, 0x2, &(0x7f00000000c0)={0x5, {{0xa, 0x0, 0x0, @private0}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x2c}}}}, 0x104) read(r1, &(0x7f0000000680)=""/156, 0xfdef) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x0) utimensat(r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x20, 0x101083) utimensat(r3, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00', r0) r4 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x0) utimensat(r4, 0x0, 0x0, 0x0) ioctl$TCSETAW(r4, 0x5407, &(0x7f00000000c0)={0x4, 0x5, 0x9, 0x3, 0x1b, "d0fe88c326bcfe3d"}) openat$vcsa(0xffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x44000, 0x0) 05:21:41 executing program 4: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:21:41 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 458.904799][ T9277] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 459.265986][ T9277] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.277521][ T9277] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.287605][ T9277] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 459.296956][ T9277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.308795][ T9277] usb 1-1: config 0 descriptor?? 05:21:41 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$inet6_group_source_req(r1, 0x29, 0x2, &(0x7f00000000c0)={0x5, {{0xa, 0x0, 0x0, @private0}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x104) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$inet6_group_source_req(r2, 0x29, 0x2, &(0x7f00000000c0)={0x5, {{0xa, 0x0, 0x0, @private0}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x104) read(r2, &(0x7f0000000680)=""/156, 0xfdef) read(r0, &(0x7f00000002c0)=""/133, 0x85) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) 05:21:41 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x0, 0x1, &(0x7f0000000000)=@raw=[@exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x78) 05:21:41 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = getpgrp(0x0) kcmp(r5, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r5}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 459.502403][T12748] loop4: detected capacity change from 65551 to 0 [ 459.692326][T12748] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 459.700534][T12748] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 459.788069][ T9277] cp2112 0003:10C4:EA90.0011: item fetching failed at offset 0/1 [ 459.829889][ T9277] cp2112 0003:10C4:EA90.0011: parse failed [ 459.836382][ T9277] cp2112: probe of 0003:10C4:EA90.0011 failed with error -22 [ 459.861959][ C0] not chained 60000 origins [ 459.866473][ C0] CPU: 0 PID: 184 Comm: kworker/u4:5 Not tainted 5.11.0-rc7-syzkaller #0 [ 459.874880][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 459.884947][ C0] Workqueue: krdsd rds_connect_worker [ 459.890329][ C0] Call Trace: [ 459.893601][ C0] [ 459.896436][ C0] dump_stack+0x21c/0x280 [ 459.900769][ C0] kmsan_internal_chain_origin+0x6f/0x130 [ 459.906494][ C0] ? kmsan_get_metadata+0x116/0x180 [ 459.911699][ C0] ? kmsan_get_metadata+0x116/0x180 [ 459.916903][ C0] ? kmsan_get_metadata+0x116/0x180 [ 459.922105][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 459.927921][ C0] ? __msan_metadata_ptr_for_store_n+0xe/0x10 [ 459.933993][ C0] ? tcp_parse_options+0x225e/0x22f0 [ 459.939293][ C0] ? kmsan_get_metadata+0x116/0x180 [ 459.944498][ C0] __msan_chain_origin+0x57/0xa0 [ 459.949446][ C0] tcp_conn_request+0x1b17/0x4db0 [ 459.954478][ C0] ? memcg_slab_free_hook+0x3a/0xb00 [ 459.959774][ C0] ? kmsan_get_metadata+0x116/0x180 [ 459.964981][ C0] ? kmsan_get_metadata+0x116/0x180 [ 459.970183][ C0] tcp_v4_conn_request+0x201/0x290 [ 459.975293][ C0] tcp_v6_conn_request+0xeb/0x330 [ 459.980322][ C0] ? inet6_sk_rx_dst_set+0x4d0/0x4d0 [ 459.988128][ C0] tcp_rcv_state_process+0x2f4/0x45a0 [ 459.993502][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 459.999313][ C0] ? kmsan_get_metadata+0x116/0x180 [ 460.004521][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 460.010336][ C0] ? kmsan_get_metadata+0x116/0x180 [ 460.015555][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 460.020227][ C0] ? tcp_v4_fill_cb+0x562/0x5e0 [ 460.025075][ C0] tcp_v4_rcv+0x4b0a/0x5c80 [ 460.029574][ C0] ? rcu_read_unlock_strict+0x9/0x10 [ 460.034868][ C0] ? tcp_filter+0xf0/0xf0 [ 460.039196][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 460.044660][ C0] ip_local_deliver+0x585/0x8d0 [ 460.049514][ C0] ? ip_local_deliver+0x8d0/0x8d0 [ 460.054537][ C0] ? ip_protocol_deliver_rcu+0xc50/0xc50 [ 460.060174][ C0] ip_rcv+0x599/0x820 [ 460.064156][ C0] ? ip_rcv_core+0x1480/0x1480 [ 460.068918][ C0] __netif_receive_skb+0x1ec/0x640 [ 460.074032][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 460.079754][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 460.085393][ C0] process_backlog+0x517/0xbd0 [ 460.090162][ C0] ? native_apic_mem_write+0x45/0x90 [ 460.095454][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 460.100755][ C0] napi_poll+0x428/0x15c0 [ 460.105090][ C0] net_rx_action+0x34c/0xd30 [ 460.109686][ C0] ? net_tx_action+0xd30/0xd30 [ 460.114450][ C0] __do_softirq+0x1b9/0x715 [ 460.118964][ C0] asm_call_irq_on_stack+0xf/0x20 [ 460.123987][ C0] [ 460.126910][ C0] do_softirq_own_stack+0x6e/0x90 [ 460.131936][ C0] __local_bh_enable_ip+0x184/0x1d0 [ 460.137141][ C0] local_bh_enable+0x36/0x40 [ 460.141743][ C0] ip_finish_output2+0x2454/0x2940 [ 460.146858][ C0] ? __msan_get_context_state+0x9/0x20 [ 460.152328][ C0] ? rcu_read_unlock_strict+0x9/0x10 [ 460.157613][ C0] ? nf_ct_deliver_cached_events+0x610/0x7e0 [ 460.163598][ C0] __ip_finish_output+0x9fd/0x1050 [ 460.168717][ C0] ip_finish_output+0x329/0x480 [ 460.173574][ C0] ip_output+0x32e/0x6d0 [ 460.177823][ C0] ? ip_mc_finish_output+0x770/0x770 [ 460.183110][ C0] ? ip_finish_output+0x480/0x480 [ 460.188137][ C0] __ip_queue_xmit+0x1e3d/0x23b0 [ 460.193078][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 460.198713][ C0] ? __msan_poison_alloca+0xe9/0x110 [ 460.204022][ C0] ip_queue_xmit+0xcc/0xf0 [ 460.208443][ C0] ? __ip_queue_xmit+0x23b0/0x23b0 [ 460.213559][ C0] __tcp_transmit_skb+0x4d3f/0x5ea0 [ 460.218770][ C0] tcp_connect+0x104d/0x3cf0 [ 460.223374][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 460.229018][ C0] tcp_v4_connect+0x255c/0x26f0 [ 460.233881][ C0] ? tcp_twsk_unique+0xd40/0xd40 [ 460.238824][ C0] __inet_stream_connect+0x8d8/0x17d0 [ 460.244195][ C0] ? __local_bh_enable_ip+0x97/0x1d0 [ 460.249480][ C0] ? kmsan_get_metadata+0x116/0x180 [ 460.254688][ C0] inet_stream_connect+0x101/0x180 [ 460.259798][ C0] ? __inet_stream_connect+0x17d0/0x17d0 [ 460.265430][ C0] rds_tcp_conn_path_connect+0x9e1/0xd30 [ 460.271071][ C0] ? kmsan_get_metadata+0x116/0x180 [ 460.276273][ C0] ? rds_tcp_state_change+0x400/0x400 [ 460.281646][ C0] rds_connect_worker+0x368/0x550 [ 460.286667][ C0] ? rds_addr_cmp+0x290/0x290 [ 460.291339][ C0] process_one_work+0x1219/0x1fe0 [ 460.296374][ C0] worker_thread+0x10ec/0x2340 [ 460.301143][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 460.306954][ C0] ? kmsan_get_metadata+0x116/0x180 [ 460.312160][ C0] kthread+0x521/0x560 [ 460.316228][ C0] ? process_one_work+0x1fe0/0x1fe0 [ 460.321430][ C0] ? kthread_blkcg+0x110/0x110 [ 460.326194][ C0] ret_from_fork+0x1f/0x30 [ 460.330614][ C0] Uninit was stored to memory at: [ 460.335618][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 460.341339][ C0] __msan_chain_origin+0x57/0xa0 [ 460.346276][ C0] tcp_conn_request+0x1b4d/0x4db0 [ 460.351296][ C0] tcp_v4_conn_request+0x201/0x290 [ 460.356402][ C0] tcp_v6_conn_request+0xeb/0x330 [ 460.361429][ C0] tcp_rcv_state_process+0x2f4/0x45a0 [ 460.366798][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 460.371468][ C0] tcp_v4_rcv+0x4b0a/0x5c80 [ 460.375963][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 460.381422][ C0] ip_local_deliver+0x585/0x8d0 [ 460.386270][ C0] ip_rcv+0x599/0x820 [ 460.390252][ C0] __netif_receive_skb+0x1ec/0x640 [ 460.395364][ C0] process_backlog+0x517/0xbd0 [ 460.400128][ C0] napi_poll+0x428/0x15c0 [ 460.404457][ C0] net_rx_action+0x34c/0xd30 [ 460.409053][ C0] __do_softirq+0x1b9/0x715 [ 460.413551][ C0] [ 460.415857][ C0] Uninit was stored to memory at: [ 460.420861][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 460.426594][ C0] __msan_chain_origin+0x57/0xa0 [ 460.431633][ C0] tcp_openreq_init_rwin+0xcc6/0x1010 [ 460.437000][ C0] tcp_conn_request+0x2bd7/0x4db0 [ 460.442026][ C0] tcp_v4_conn_request+0x201/0x290 [ 460.447130][ C0] tcp_v6_conn_request+0xeb/0x330 [ 460.452154][ C0] tcp_rcv_state_process+0x2f4/0x45a0 [ 460.457548][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 460.462219][ C0] tcp_v4_rcv+0x4b0a/0x5c80 [ 460.466714][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 460.472172][ C0] ip_local_deliver+0x585/0x8d0 [ 460.477020][ C0] ip_rcv+0x599/0x820 [ 460.481000][ C0] __netif_receive_skb+0x1ec/0x640 [ 460.486110][ C0] process_backlog+0x517/0xbd0 [ 460.490871][ C0] napi_poll+0x428/0x15c0 [ 460.495203][ C0] net_rx_action+0x34c/0xd30 [ 460.499810][ C0] __do_softirq+0x1b9/0x715 [ 460.504309][ C0] [ 460.506618][ C0] Uninit was stored to memory at: [ 460.511620][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 460.517341][ C0] __msan_chain_origin+0x57/0xa0 [ 460.522277][ C0] tcp_conn_request+0x1b4d/0x4db0 [ 460.527300][ C0] tcp_v4_conn_request+0x201/0x290 [ 460.532406][ C0] tcp_v6_conn_request+0xeb/0x330 [ 460.537451][ C0] tcp_rcv_state_process+0x2f4/0x45a0 [ 460.542837][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 460.547514][ C0] tcp_v4_rcv+0x4b0a/0x5c80 [ 460.552031][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 460.557497][ C0] ip_local_deliver+0x585/0x8d0 [ 460.562355][ C0] ip_rcv+0x599/0x820 [ 460.566339][ C0] __netif_receive_skb+0x1ec/0x640 [ 460.571454][ C0] process_backlog+0x517/0xbd0 [ 460.576219][ C0] napi_poll+0x428/0x15c0 [ 460.580549][ C0] net_rx_action+0x34c/0xd30 [ 460.585139][ C0] __do_softirq+0x1b9/0x715 [ 460.589642][ C0] [ 460.591955][ C0] Uninit was stored to memory at: [ 460.596961][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 460.602686][ C0] __msan_chain_origin+0x57/0xa0 [ 460.607625][ C0] tcp_openreq_init_rwin+0xcc6/0x1010 [ 460.612993][ C0] tcp_conn_request+0x2bd7/0x4db0 [ 460.618015][ C0] tcp_v4_conn_request+0x201/0x290 [ 460.623123][ C0] tcp_v6_conn_request+0xeb/0x330 [ 460.628147][ C0] tcp_rcv_state_process+0x2f4/0x45a0 [ 460.633779][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 460.638454][ C0] tcp_v4_rcv+0x4b0a/0x5c80 [ 460.642967][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 460.648431][ C0] ip_local_deliver+0x585/0x8d0 [ 460.653285][ C0] ip_rcv+0x599/0x820 [ 460.657268][ C0] __netif_receive_skb+0x1ec/0x640 [ 460.662382][ C0] process_backlog+0x517/0xbd0 [ 460.667148][ C0] napi_poll+0x428/0x15c0 [ 460.671481][ C0] net_rx_action+0x34c/0xd30 [ 460.676072][ C0] __do_softirq+0x1b9/0x715 [ 460.680580][ C0] [ 460.682893][ C0] Uninit was stored to memory at: [ 460.687901][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 460.693625][ C0] __msan_chain_origin+0x57/0xa0 [ 460.698566][ C0] tcp_conn_request+0x1b4d/0x4db0 [ 460.703593][ C0] tcp_v4_conn_request+0x201/0x290 [ 460.708703][ C0] tcp_v6_conn_request+0xeb/0x330 [ 460.713728][ C0] tcp_rcv_state_process+0x2f4/0x45a0 [ 460.719099][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 460.723772][ C0] tcp_v4_rcv+0x4b0a/0x5c80 [ 460.728266][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 460.734168][ C0] ip_local_deliver+0x585/0x8d0 [ 460.739016][ C0] ip_rcv+0x599/0x820 [ 460.743001][ C0] __netif_receive_skb+0x1ec/0x640 [ 460.748126][ C0] process_backlog+0x517/0xbd0 [ 460.752896][ C0] napi_poll+0x428/0x15c0 [ 460.757242][ C0] net_rx_action+0x34c/0xd30 [ 460.761845][ C0] __do_softirq+0x1b9/0x715 [ 460.766366][ C0] [ 460.768691][ C0] Uninit was stored to memory at: [ 460.773697][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 460.779433][ C0] __msan_chain_origin+0x57/0xa0 [ 460.784391][ C0] tcp_openreq_init_rwin+0xcc6/0x1010 [ 460.789797][ C0] tcp_conn_request+0x2bd7/0x4db0 [ 460.794949][ C0] tcp_v4_conn_request+0x201/0x290 [ 460.800071][ C0] tcp_v6_conn_request+0xeb/0x330 [ 460.805098][ C0] tcp_rcv_state_process+0x2f4/0x45a0 [ 460.810472][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 460.815147][ C0] tcp_v4_rcv+0x4b0a/0x5c80 [ 460.819649][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 460.825113][ C0] ip_local_deliver+0x585/0x8d0 [ 460.829969][ C0] ip_rcv+0x599/0x820 [ 460.833960][ C0] __netif_receive_skb+0x1ec/0x640 [ 460.839079][ C0] process_backlog+0x517/0xbd0 [ 460.843848][ C0] napi_poll+0x428/0x15c0 [ 460.848180][ C0] net_rx_action+0x34c/0xd30 [ 460.852770][ C0] __do_softirq+0x1b9/0x715 [ 460.857274][ C0] [ 460.859584][ C0] Uninit was stored to memory at: [ 460.864588][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 460.870321][ C0] __msan_chain_origin+0x57/0xa0 [ 460.875283][ C0] tcp_conn_request+0x1b4d/0x4db0 [ 460.880309][ C0] tcp_v4_conn_request+0x201/0x290 [ 460.885416][ C0] tcp_v6_conn_request+0xeb/0x330 [ 460.890457][ C0] tcp_rcv_state_process+0x2f4/0x45a0 [ 460.895930][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 460.900603][ C0] tcp_v4_rcv+0x4b0a/0x5c80 [ 460.905098][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 460.910555][ C0] ip_local_deliver+0x585/0x8d0 [ 460.915407][ C0] ip_rcv+0x599/0x820 [ 460.919402][ C0] __netif_receive_skb+0x1ec/0x640 [ 460.924513][ C0] process_backlog+0x517/0xbd0 [ 460.929275][ C0] napi_poll+0x428/0x15c0 [ 460.933602][ C0] net_rx_action+0x34c/0xd30 [ 460.938188][ C0] __do_softirq+0x1b9/0x715 [ 460.942686][ C0] [ 460.944997][ C0] Uninit was created at: [ 460.949217][ C0] kmsan_save_stack_with_flags+0x3c/0x90 [ 460.954851][ C0] kmsan_alloc_page+0xd3/0x1f0 [ 460.959617][ C0] __alloc_pages_nodemask+0x827/0xf90 [ 460.964987][ C0] alloc_pages_current+0x7b6/0xb60 [ 460.970099][ C0] allocate_slab+0x392/0x11e0 [ 460.974771][ C0] ___slab_alloc+0xd42/0x1930 [ 460.979448][ C0] kmem_cache_alloc+0xc36/0xff0 [ 460.984293][ C0] inet_reqsk_alloc+0xaf/0x8c0 [ 460.989053][ C0] tcp_conn_request+0x911/0x4db0 [ 460.993986][ C0] tcp_v4_conn_request+0x201/0x290 [ 460.999093][ C0] tcp_rcv_state_process+0x2f4/0x45a0 [ 461.004467][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 461.009157][ C0] tcp_v4_rcv+0x4b0a/0x5c80 [ 461.013670][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 461.019134][ C0] ip_local_deliver+0x585/0x8d0 [ 461.023989][ C0] ip_sublist_rcv+0x121b/0x1560 [ 461.029105][ C0] ip_list_rcv+0x8f1/0x960 [ 461.033547][ C0] __netif_receive_skb_list_core+0xe65/0x1250 [ 461.039623][ C0] __netif_receive_skb_list+0x7e2/0x930 [ 461.045174][ C0] netif_receive_skb_list_internal+0x837/0xdb0 [ 461.051329][ C0] napi_complete_done+0x552/0xf80 [ 461.056350][ C0] virtqueue_napi_complete+0xb9/0x1f0 [ 461.061724][ C0] virtnet_poll+0x170f/0x1d10 [ 461.066400][ C0] napi_poll+0x428/0x15c0 [ 461.070728][ C0] net_rx_action+0x34c/0xd30 [ 461.075317][ C0] __do_softirq+0x1b9/0x715 [ 461.106342][T12733] udc-core: couldn't find an available UDC or it's busy [ 461.113432][T12733] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 461.132528][T12748] F2FS-fs (loop4): invalid crc_offset: 0 [ 461.138649][T12748] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-4) [ 461.222062][ T917] usb 1-1: USB disconnect, device number 80 [ 461.302194][T12763] loop2: detected capacity change from 65551 to 0 [ 461.318945][T12763] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 461.327026][T12763] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 461.340194][T12763] F2FS-fs (loop2): invalid crc_offset: 0 [ 461.439075][T12763] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 461.451186][T12763] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 05:21:44 executing program 4: timer_gettime(0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:21:44 executing program 5: socketpair(0x2, 0x0, 0x19f, &(0x7f0000000000)) 05:21:44 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x10c4, 0xea90, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x18, &(0x7f0000000400)={0x0, 0x0, 0x3, {0x3, 0x0, '\f'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x73, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x2, 0x1, 0x80, 0x80, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xffff8001, 0x6, 0x6, 0x2}, {0x6, 0x24, 0x1a, 0xffff, 0x25}, [@obex={0x5, 0x24, 0x15, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x4, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x81, 0x0, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x2, 0x76, 0x1}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x200, 0x61, 0x80, 0x3, 0x40, 0x2}, 0x76, &(0x7f0000000340)={0x5, 0xf, 0x76, 0x5, [@ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0xffff, 0x0, 0xd7, [0xffc000, 0xc000, 0xff00f0, 0x3ff0]}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "bea475ca5bac7595a76f588745cc9d28"}, @generic={0x1a, 0x10, 0xb, "8f0eb9588c0a54df7c8cf1b58b61a943292a5f0c9f7681"}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x3f, 0x6, 0x9, 0xf00, 0xffff, [0x3f0f, 0x3f30, 0xff00c0, 0xc0, 0xff00ff, 0x1fe3ff0]}]}, 0x9, [{0x13, &(0x7f00000003c0)=@string={0x13, 0x3, "cf2e12763813791b1ac7b266eed7edf79e"}}, {0xd4, &(0x7f0000000680)=@string={0xd4, 0x3, "22d623c2a13f4d64e56fe83f83f72527005df96babc9d87959c3401d090fd49acec81a1d5eb482c396047c557d94d0fbf371e7e3f9382ec0806741c090449c0d61251ffadd8812c618bd4668e06f4f03d4a503c414f86f55d33104a5443e16c897e9018a22fba926514140ff809956292b718f95ec5fb75c7a1c61615fbfd4a459f7f4150c4c076c7dff994c0f4460853011ed59ce1a14a738e88d17536b1cacd6b561ad7b405668aee6472a967de5cb2c6fcd2e3200292edbcb723f66ca83db2f19f1fe5eff9ef778f02d878dbf2777c6e7"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xc0c}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x3412}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1404}}, {0x78, &(0x7f0000000780)=@string={0x78, 0x3, "461c76a739a42928ebf472a4774b4c6490ba63d790439a77bc4ce05486dc432d7329f635788235e445baeed3459509571bca67be2920ffe9c1247b6f5305c71b1c17880415583d9b7923fc6ec0b8adf05f8f1bf323effac7f2dfd48105477a512dd524aaf2dd60cae48724fe1ae31fd600bfb70a61bd"}}, {0x54, &(0x7f0000000800)=@string={0x54, 0x3, "0b9446f9f04160ba2285f498d0bcebe95d8dcd67a7c2404cd0944e8080faf46ada61cda1a4838e2c621f29a6dc490644b0bc169170d2e3f093b932bd1fdee88c0ae676683ed334eb5c61571e25588fdb4452"}}]}) [ 461.996452][T12763] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 462.006319][T12763] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b 05:21:44 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:21:44 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x2) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000000)) [ 464.535624][T12790] loop3: detected capacity change from 65551 to 0 [ 464.629442][T12790] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 464.637750][T12790] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 464.758989][T12801] loop2: detected capacity change from 65551 to 0 [ 464.779367][T12800] loop4: detected capacity change from 65551 to 0 [ 464.818580][T12790] F2FS-fs (loop3): invalid crc_offset: 0 [ 464.849221][T12800] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 464.857898][T12800] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 464.872588][T12800] F2FS-fs (loop4): invalid crc_offset: 0 [ 464.888761][T12801] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 464.896865][T12801] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 464.919909][T12801] F2FS-fs (loop2): invalid crc_offset: 0 05:21:47 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) [ 465.005120][T12800] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 465.014243][T12800] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 465.038823][T12790] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 465.048765][T12790] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 465.106003][ T917] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 465.155198][T12801] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 465.164403][T12801] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 05:21:47 executing program 5: socket(0xa, 0x3, 0x26) [ 465.595736][ T917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.607135][ T917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.617244][ T917] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 465.626716][ T917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.652099][ T917] usb 1-1: config 0 descriptor?? 05:21:48 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e21, 0x38, @mcast2}, 0x1c) setsockopt$inet6_group_source_req(r1, 0x29, 0x2, &(0x7f00000000c0)={0x5, {{0xa, 0x0, 0x0, @private0}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x104) read(r1, &(0x7f0000000680)=""/156, 0xfdef) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) 05:21:48 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000001340)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 466.238251][ T917] cp2112 0003:10C4:EA90.0012: item fetching failed at offset 0/1 [ 466.258074][ T917] cp2112 0003:10C4:EA90.0012: parse failed [ 466.264660][ T917] cp2112: probe of 0003:10C4:EA90.0012 failed with error -22 [ 466.440832][T12803] udc-core: couldn't find an available UDC or it's busy [ 466.450693][T12803] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 05:21:48 executing program 4: timer_gettime(0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 466.582665][ T18] usb 1-1: USB disconnect, device number 81 05:21:49 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = getpgrp(0x0) kcmp(r5, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r5}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:21:49 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:21:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'geneve1\x00', &(0x7f0000000140)=ANY=[@ANYBLOB='?']}) [ 467.199775][T12848] loop4: detected capacity change from 65551 to 0 05:21:49 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x10c4, 0xea90, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x18, &(0x7f0000000400)={0x0, 0x0, 0x3, {0x3, 0x0, '\f'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x73, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x2, 0x1, 0x80, 0x80, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xffff8001, 0x6, 0x6, 0x2}, {0x6, 0x24, 0x1a, 0xffff, 0x25}, [@obex={0x5, 0x24, 0x15, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x4, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x81, 0x0, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x2, 0x76, 0x1}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x200, 0x61, 0x80, 0x3, 0x40, 0x2}, 0x76, &(0x7f0000000340)={0x5, 0xf, 0x76, 0x5, [@ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0xffff, 0x0, 0xd7, [0xffc000, 0xc000, 0xff00f0, 0x3ff0]}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "bea475ca5bac7595a76f588745cc9d28"}, @generic={0x1a, 0x10, 0xb, "8f0eb9588c0a54df7c8cf1b58b61a943292a5f0c9f7681"}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x3f, 0x6, 0x9, 0xf00, 0xffff, [0x3f0f, 0x3f30, 0xff00c0, 0xc0, 0xff00ff, 0x1fe3ff0]}]}, 0x9, [{0x13, &(0x7f00000003c0)=@string={0x13, 0x3, "cf2e12763813791b1ac7b266eed7edf79e"}}, {0xd4, &(0x7f0000000680)=@string={0xd4, 0x3, "22d623c2a13f4d64e56fe83f83f72527005df96babc9d87959c3401d090fd49acec81a1d5eb482c396047c557d94d0fbf371e7e3f9382ec0806741c090449c0d61251ffadd8812c618bd4668e06f4f03d4a503c414f86f55d33104a5443e16c897e9018a22fba926514140ff809956292b718f95ec5fb75c7a1c61615fbfd4a459f7f4150c4c076c7dff994c0f4460853011ed59ce1a14a738e88d17536b1cacd6b561ad7b405668aee6472a967de5cb2c6fcd2e3200292edbcb723f66ca83db2f19f1fe5eff9ef778f02d878dbf2777c6e7"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xc0c}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x3412}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1404}}, {0x78, &(0x7f0000000780)=@string={0x78, 0x3, "461c76a739a42928ebf472a4774b4c6490ba63d790439a77bc4ce05486dc432d7329f635788235e445baeed3459509571bca67be2920ffe9c1247b6f5305c71b1c17880415583d9b7923fc6ec0b8adf05f8f1bf323effac7f2dfd48105477a512dd524aaf2dd60cae48724fe1ae31fd600bfb70a61bd"}}, {0x54, &(0x7f0000000800)=@string={0x54, 0x3, "0b9446f9f04160ba2285f498d0bcebe95d8dcd67a7c2404cd0944e8080faf46ada61cda1a4838e2c621f29a6dc490644b0bc169170d2e3f093b932bd1fdee88c0ae676683ed334eb5c61571e25588fdb4452"}}]}) [ 467.344735][T12848] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 467.352717][T12848] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 467.369721][T12855] loop3: detected capacity change from 65551 to 0 [ 467.371907][T12848] F2FS-fs (loop4): invalid crc_offset: 0 05:21:49 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x20, 0x0, &(0x7f0000000000)) 05:21:50 executing program 1: sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4080000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c00000002030102000000000000000001000006080005400000000a080005400000000a0800044000000001d6b6f5521e1d6405be9826e35dd460a6b0455022d6f5529f411c3c621d786dda5cd7bcc858af02c7bccfc61c367bf5e01c3b87faef5aa99908596a32409f9497aeba9c3ee3b1c13d9c117e5739d145dabdeccaea970b027fba91bf9a98096c588bd3bd238bbfd729a71eeab611b7d54eb0955b3e4ca1085b95ef59c68aaac0017515677ab2aee07dbb0a5533a7d6d54016b54ffb2bcb482d38474ccd5c45f5cd7b4263b6920d287389ad88fd63c127ffc9d147b61ed0523ad14557f34c8d6233facdf8b0f197740aa95545cd9ed74c10c300a4ffa6b8821dd23cd1935a4212a48765de2d9e3f63f2df32e90fbd6f34cb30fd2f631218af3599bb24c09dfe6b0445bb8aa0315f019c98c3109dcfbe2cee47fc38fbd05d1ede65b8867a78fc89b0ae2bf20c1b9f24f7c9e89eb82b6da1c6"], 0x2c}, 0x1, 0x0, 0x0, 0x4091}, 0x24044044) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x8000) [ 467.530783][T12860] loop2: detected capacity change from 65551 to 0 [ 467.560164][T12855] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 467.569131][T12855] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 467.614668][T12848] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 467.623743][T12848] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 467.767102][T12860] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 467.775266][T12860] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 467.820904][T12855] F2FS-fs (loop3): invalid crc_offset: 0 [ 467.893667][T12855] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 467.903326][T12855] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 468.172807][T12860] F2FS-fs (loop2): invalid crc_offset: 0 [ 468.234749][T12860] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 468.243789][T12860] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 05:21:51 executing program 5: r0 = socket(0x2, 0x3, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890d, 0x0) [ 468.846823][ T5] usb 1-1: new high-speed USB device number 82 using dummy_hcd 05:21:51 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) r3 = getpgrp(0x0) kcmp(r3, r2, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x801, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x3, 0x4, 0xd9, 0x7, 0x0, 0x9e5, 0x40200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8000, 0x1, @perf_config_ext={0x4, 0x8000}, 0x300, 0x8, 0x7fff, 0x7, 0x7, 0x81, 0x7}, r3, 0x3, r4, 0xf) [ 469.215091][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.226432][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.236618][ T5] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 469.246112][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 05:21:51 executing program 4: timer_gettime(0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:21:51 executing program 5: setuid(0xee01) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000840)='/dev/dlm-monitor\x00', 0x200000, 0x0) [ 469.456741][ T5] usb 1-1: config 0 descriptor?? 05:21:52 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:21:52 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = getpgrp(0x0) kcmp(r5, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r5}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 469.938133][ T5] cp2112 0003:10C4:EA90.0013: item fetching failed at offset 0/1 [ 469.982051][ T5] cp2112 0003:10C4:EA90.0013: parse failed [ 469.988788][ T5] cp2112: probe of 0003:10C4:EA90.0013 failed with error -22 05:21:52 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) open(&(0x7f0000000200)='./file0\x00', 0x10000, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2, &(0x7f00000000c0)={0x5, {{0xa, 0x0, 0x0, @private0}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x104) read(r2, &(0x7f0000000680)=""/156, 0xfdef) r3 = socket$inet6(0xa, 0x1, 0x7ff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000280)={'mangle\x00', 0x3, [{}, {}, {}]}, 0x54) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000240)=0x80, 0x4) splice(0xffffffffffffffff, &(0x7f0000000040)=0x4, r2, &(0x7f00000000c0)=0x4, 0xfffffffc, 0x8) [ 470.106018][T12898] loop4: detected capacity change from 65551 to 0 [ 470.140501][T12880] udc-core: couldn't find an available UDC or it's busy [ 470.147654][T12880] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 470.259191][T12898] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 470.267337][T12898] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 470.287291][T12898] F2FS-fs (loop4): invalid crc_offset: 0 [ 470.303344][ T5] usb 1-1: USB disconnect, device number 82 [ 470.425397][T12898] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 470.434537][T12898] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 05:21:53 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@nr_blocks={'nr_blocks', 0x3d, [0x36]}}]}) [ 470.650280][T12918] loop2: detected capacity change from 65551 to 0 [ 470.763783][T12918] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 470.765061][T12922] loop3: detected capacity change from 65551 to 0 [ 470.771914][T12918] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 470.831271][T12898] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 470.838888][T12898] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b [ 470.982096][T12922] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 470.990658][T12922] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 471.094403][T12918] F2FS-fs (loop2): invalid crc_offset: 0 [ 471.183928][T12922] F2FS-fs (loop3): invalid crc_offset: 0 [ 471.215941][T12918] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 471.231379][T12918] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 05:21:53 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x10c4, 0xea90, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, {0x4, 0x0, "0cb9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x73, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x2, 0x1, 0x80, 0x80, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xffff8001, 0x6, 0x6, 0x2}, {0x6, 0x24, 0x1a, 0xffff, 0x25}, [@obex={0x5, 0x24, 0x15, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x4, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x81, 0x0, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x2, 0x76, 0x1}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x200, 0x61, 0x80, 0x3, 0x40, 0x2}, 0x76, &(0x7f0000000340)={0x5, 0xf, 0x76, 0x5, [@ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0xffff, 0x0, 0xd7, [0xffc000, 0xc000, 0xff00f0, 0x3ff0]}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "bea475ca5bac7595a76f588745cc9d28"}, @generic={0x1a, 0x10, 0xb, "8f0eb9588c0a54df7c8cf1b58b61a943292a5f0c9f7681"}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x3f, 0x6, 0x9, 0xf00, 0xffff, [0x3f0f, 0x3f30, 0xff00c0, 0xc0, 0xff00ff, 0x1fe3ff0]}]}, 0x9, [{0x13, &(0x7f00000003c0)=@string={0x13, 0x3, "cf2e12763813791b1ac7b266eed7edf79e"}}, {0xd4, &(0x7f0000000680)=@string={0xd4, 0x3, "22d623c2a13f4d64e56fe83f83f72527005df96babc9d87959c3401d090fd49acec81a1d5eb482c396047c557d94d0fbf371e7e3f9382ec0806741c090449c0d61251ffadd8812c618bd4668e06f4f03d4a503c414f86f55d33104a5443e16c897e9018a22fba926514140ff809956292b718f95ec5fb75c7a1c61615fbfd4a459f7f4150c4c076c7dff994c0f4460853011ed59ce1a14a738e88d17536b1cacd6b561ad7b405668aee6472a967de5cb2c6fcd2e3200292edbcb723f66ca83db2f19f1fe5eff9ef778f02d878dbf2777c6e7"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xc0c}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x3412}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1404}}, {0x78, &(0x7f0000000780)=@string={0x78, 0x3, "461c76a739a42928ebf472a4774b4c6490ba63d790439a77bc4ce05486dc432d7329f635788235e445baeed3459509571bca67be2920ffe9c1247b6f5305c71b1c17880415583d9b7923fc6ec0b8adf05f8f1bf323effac7f2dfd48105477a512dd524aaf2dd60cae48724fe1ae31fd600bfb70a61bd"}}, {0x54, &(0x7f0000000800)=@string={0x54, 0x3, "0b9446f9f04160ba2285f498d0bcebe95d8dcd67a7c2404cd0944e8080faf46ada61cda1a4838e2c621f29a6dc490644b0bc169170d2e3f093b932bd1fdee88c0ae676683ed334eb5c61571e25588fdb4452"}}]}) 05:21:53 executing program 1: r0 = gettid() migrate_pages(r0, 0x4, &(0x7f0000000000)=0xb93, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) 05:21:53 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 471.369546][T12922] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 471.379720][T12922] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 05:21:53 executing program 5: syz_io_uring_setup(0x6d49, &(0x7f0000000040), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x26012, r0, 0x10000000) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) [ 471.437160][T12918] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 471.444857][T12918] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b 05:21:54 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:21:54 executing program 1: ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) [ 472.355121][ T9277] usb 1-1: new high-speed USB device number 83 using dummy_hcd 05:21:54 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='projid_map\x00') write$khugepaged_scan(r0, 0x0, 0x0) 05:21:55 executing program 3: timer_gettime(0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = getpgrp(0x0) kcmp(r5, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r5}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 472.725030][ T9277] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.736212][ T9277] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.746341][ T9277] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 472.757822][ T9277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.797795][T12959] loop4: detected capacity change from 65551 to 0 [ 472.810536][ T9277] usb 1-1: config 0 descriptor?? [ 472.974750][T12959] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 472.983027][T12959] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 472.987288][T12970] loop2: detected capacity change from 65551 to 0 [ 473.216384][T12970] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 473.224758][T12970] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 473.263808][T12959] F2FS-fs (loop4): invalid crc_offset: 0 [ 473.292060][ T9277] cp2112 0003:10C4:EA90.0014: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 473.364588][T12959] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 473.381154][T12959] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 473.543368][T12970] F2FS-fs (loop2): invalid crc_offset: 0 [ 473.562674][T12941] udc-core: couldn't find an available UDC or it's busy [ 473.570008][T12941] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 473.595968][ T9277] cp2112 0003:10C4:EA90.0014: error requesting version [ 473.623681][ T9277] cp2112: probe of 0003:10C4:EA90.0014 failed with error -71 05:21:56 executing program 1: prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syslog(0x2, 0x0, 0x0) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r1, r1, 0xc}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$inet6_group_source_req(r3, 0x29, 0x2, &(0x7f00000000c0)={0x5, {{0xa, 0x0, 0x0, @private0}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x104) read(r3, &(0x7f0000000680)=""/156, 0xfdef) splice(r2, &(0x7f00000003c0)=0x9, r3, &(0x7f0000000400)=0xdc14, 0x8, 0x8) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) syslog(0x9, &(0x7f00000000c0)=""/158, 0x9e) write$apparmor_current(r0, &(0x7f0000000040)=@profile={'permprofile ', '\x00'}, 0xd) clone(0x22000, &(0x7f00000001c0)="03538945a41b7df3f19955067ca538ce1fbbabb2a140f4f05a6324c017b20199cff410a5e0c609c5c6ec8a0e9b9a414f5f3d7910096295d9cb369ef0186478790b8e854234e6515d3e601024e1963fd9a8490447db4e9627cd97d93b44e8632a9434d2422e2b0deabffccc62c476bcc807f1a48e34bbe561fe68918fa6ad21442acceb444f0f6ea280dac3d4cccafe5217aefa9f3247f54a1b5d00d12df83f676d603766272facb6997040286ab752f299fe98e74b2858d96c6cf800bc454a811c1dfc864dbb0870cef81070783cc7547af8d4db7dcc52691ebd5d0a49b65a3a6df85d66ff20deb195fef4ab3de0f8f4a69ef3ce42ec01", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d03496f7b6a7dfd078c1543b494609fc86c4761a41bbcbd4") signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8, 0x800) [ 473.739118][T12970] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 473.748389][T12970] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 473.835380][T12992] loop3: detected capacity change from 65551 to 0 [ 473.847165][ T9277] usb 1-1: USB disconnect, device number 83 05:21:56 executing program 5: r0 = socket(0xa, 0x6, 0x0) getsockopt$WPAN_WANTACK(r0, 0x29, 0x4a, 0x0, &(0x7f0000000040)) [ 473.974384][T12992] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 473.982443][T12992] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 474.139047][T12992] F2FS-fs (loop3): invalid crc_offset: 0 [ 474.276086][T12992] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 474.285441][T12992] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 05:21:56 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:21:57 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x10c4, 0xea90, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, {0x4, 0x0, "0cb9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f0000000880)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x200, 0x61, 0x80, 0x3, 0x40, 0x2}, 0x76, &(0x7f0000000340)={0x5, 0xf, 0x76, 0x5, [@ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0xffff, 0x0, 0xd7, [0xffc000, 0xc000, 0xff00f0, 0x3ff0]}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "bea475ca5bac7595a76f588745cc9d28"}, @generic={0x1a, 0x10, 0xb, "8f0eb9588c0a54df7c8cf1b58b61a943292a5f0c9f7681"}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x3f, 0x6, 0x9, 0xf00, 0xffff, [0x3f0f, 0x3f30, 0xff00c0, 0xc0, 0xff00ff, 0x1fe3ff0]}]}, 0x9, [{0x13, &(0x7f00000003c0)=@string={0x13, 0x3, "cf2e12763813791b1ac7b266eed7edf79e"}}, {0xd4, &(0x7f0000000680)=@string={0xd4, 0x3, "22d623c2a13f4d64e56fe83f83f72527005df96babc9d87959c3401d090fd49acec81a1d5eb482c396047c557d94d0fbf371e7e3f9382ec0806741c090449c0d61251ffadd8812c618bd4668e06f4f03d4a503c414f86f55d33104a5443e16c897e9018a22fba926514140ff809956292b718f95ec5fb75c7a1c61615fbfd4a459f7f4150c4c076c7dff994c0f4460853011ed59ce1a14a738e88d17536b1cacd6b561ad7b405668aee6472a967de5cb2c6fcd2e3200292edbcb723f66ca83db2f19f1fe5eff9ef778f02d878dbf2777c6e7"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xc0c}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x3412}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1404}}, {0x78, &(0x7f0000000780)=@string={0x78, 0x3, "461c76a739a42928ebf472a4774b4c6490ba63d790439a77bc4ce05486dc432d7329f635788235e445baeed3459509571bca67be2920ffe9c1247b6f5305c71b1c17880415583d9b7923fc6ec0b8adf05f8f1bf323effac7f2dfd48105477a512dd524aaf2dd60cae48724fe1ae31fd600bfb70a61bd"}}, {0x54, &(0x7f0000000800)=@string={0x54, 0x3, "0b9446f9f04160ba2285f498d0bcebe95d8dcd67a7c2404cd0944e8080faf46ada61cda1a4838e2c621f29a6dc490644b0bc169170d2e3f093b932bd1fdee88c0ae676683ed334eb5c61571e25588fdb4452"}}]}) 05:21:57 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1_vlan\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="11"]}) 05:21:57 executing program 1: ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000000)={0x0, 0x401}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) 05:21:57 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 475.313009][T13020] loop4: detected capacity change from 65551 to 0 [ 475.453179][T13020] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 475.461565][T13020] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 475.574156][ T9277] usb 1-1: new high-speed USB device number 84 using dummy_hcd 05:21:58 executing program 3: timer_gettime(0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = getpgrp(0x0) kcmp(r5, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r5}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:21:58 executing program 5: keyctl$search(0xa, 0x0, &(0x7f0000000080)='rxrpc_s\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0) [ 475.680312][T13020] F2FS-fs (loop4): invalid crc_offset: 0 [ 475.788658][T13020] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 475.798239][T13020] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 05:21:58 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000000100)={0x6, 0x70, 0x2, 0x20, 0x97, 0x7, 0x0, 0x4, 0x404, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x20, 0x80, 0x1, 0x4, 0x11c, 0x2}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x2) kcmp(r4, r3, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000080)={0x0, 0x0}) write(r2, &(0x7f00000001c0)="e465de7f05", 0x5) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) r7 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x0) utimensat(r7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x3f, 0x80, 0x40, 0x3, 0x0, 0x8, 0x82080, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000200), 0x2}, 0x2, 0x3, 0x0, 0x9, 0x4, 0x5, 0x3}, 0x0, 0xc, r7, 0x2) r8 = getpgrp(0x0) kcmp(r8, r6, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) kcmp(r3, r6, 0x0, r9, r0) [ 476.069730][T13020] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 476.077477][T13020] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b [ 476.088965][T13034] loop2: detected capacity change from 65551 to 0 [ 476.137724][ T9277] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.148881][ T9277] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.158928][ T9277] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 476.170239][ T9277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.173763][T13034] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 476.186346][T13034] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 476.204697][T13034] F2FS-fs (loop2): invalid crc_offset: 0 [ 476.286969][T13034] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 476.296214][T13034] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 05:21:58 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 476.403001][T13034] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 476.410414][T13034] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 476.674716][ T9277] usb 1-1: config 0 descriptor?? 05:21:59 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 476.830190][T13054] loop3: detected capacity change from 65551 to 0 05:21:59 executing program 5: r0 = socket(0x10, 0x3, 0x9) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) [ 477.061281][T13054] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 477.069883][T13054] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 05:21:59 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000000)={0x0, 0x110b, 0x1}) [ 477.167623][ T9277] cp2112 0003:10C4:EA90.0015: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 477.251497][T13054] F2FS-fs (loop3): invalid crc_offset: 0 [ 477.359243][T13054] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 477.371138][T13054] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 477.452846][ T9277] cp2112 0003:10C4:EA90.0015: error requesting version [ 477.469030][ T9277] cp2112: probe of 0003:10C4:EA90.0015 failed with error -71 [ 477.520597][ T9277] usb 1-1: USB disconnect, device number 84 [ 477.603379][T13054] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 477.610901][T13054] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b [ 477.830877][T13081] loop4: detected capacity change from 65551 to 0 [ 477.936531][T13081] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 477.945116][T13081] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 477.961359][T13081] F2FS-fs (loop4): invalid crc_offset: 0 [ 478.001538][T13081] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 478.010951][T13081] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 05:22:00 executing program 3: timer_gettime(0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = getpgrp(0x0) kcmp(r5, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r5}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:22:00 executing program 5: socketpair$nbd(0x1, 0x5, 0x0, &(0x7f00000000c0)) 05:22:00 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$inet6_group_source_req(r2, 0x29, 0x2, &(0x7f00000000c0)={0x5, {{0xa, 0x0, 0x0, @private0}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x104) read(r2, &(0x7f0000000680)=""/156, 0xfdef) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f0000000000)={0x3, 0xaff, 0x0, 0x4, 0x3, [0x2, 0x6, 0x735c, 0x4]}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r3, 0x0, 0x17, 0x20000000, &(0x7f0000000000)={0xa, 0x4e20, 0x7fffffff, @dev={0xfe, 0x80, [], 0x2f}, 0xfffffffd}, 0x1c) read(r3, &(0x7f0000000680)=""/156, 0xfdef) read(r3, &(0x7f0000000200)=""/66, 0x42) r4 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x0) utimensat(r4, 0x0, 0x0, 0x0) r5 = syz_open_dev$admmidi(&(0x7f0000000340)='/dev/admmidi#\x00', 0x1, 0x100) r6 = openat$dsp(0xffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x400001, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300)=[r5, r6, r3, r1, r0, r7], 0x6) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) 05:22:00 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x10c4, 0xea90, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x4, {0x4, 0x0, "0cb9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) [ 478.530174][T13090] loop2: detected capacity change from 65551 to 0 [ 478.653365][T13090] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 478.664467][T13090] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 478.851386][T13090] F2FS-fs (loop2): invalid crc_offset: 0 [ 479.009261][T13090] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 479.018821][T13090] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 05:22:01 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000000340)=""/199, 0x2e, 0xc7, 0x1}, 0x20) [ 479.663829][ T8810] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 479.687778][T13111] loop3: detected capacity change from 65551 to 0 [ 479.706981][T13111] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 479.715047][T13111] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 479.731203][T13111] F2FS-fs (loop3): invalid crc_offset: 0 [ 479.882354][T13111] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 479.891507][T13111] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 05:22:02 executing program 4: timer_gettime(0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:22:02 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 480.124729][ T8810] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.137670][ T8810] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.148103][ T8810] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 480.157411][ T8810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 05:22:02 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000000)=0x7fff, 0x4) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040)) getsockopt$nfc_llcp(r0, 0x118, 0x2, &(0x7f00000000c0)=""/124, 0x7c) 05:22:02 executing program 5: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x5412, 0x0) [ 480.372051][ T8810] usb 1-1: config 0 descriptor?? [ 480.603394][T13128] loop4: detected capacity change from 65551 to 0 [ 480.858291][T13128] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 480.866691][T13128] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 480.908878][ T8810] cp2112 0003:10C4:EA90.0016: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 480.951581][T13137] loop2: detected capacity change from 65551 to 0 [ 480.997344][T13137] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 481.005662][T13137] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 481.027620][T13137] F2FS-fs (loop2): invalid crc_offset: 0 [ 481.088353][ T8810] cp2112 0003:10C4:EA90.0016: error requesting version [ 481.090418][T13128] F2FS-fs (loop4): invalid crc_offset: 0 [ 481.106998][ T8810] cp2112: probe of 0003:10C4:EA90.0016 failed with error -71 [ 481.141485][T13137] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 481.156812][T13137] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 05:22:03 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x29, 0x40, 0xd3, 0x6, 0x15, @private1, @dev={0xfe, 0x80, [], 0x35}, 0x40, 0x8, 0x10, 0x3}}) r2 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xbd12325945b9fb8a) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={@local, @private1, @remote={0xfe, 0x80, [0x6, 0x10, 0x0, 0x0, 0x2, 0x8, 0x30, 0xb, 0xb]}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x20c301e2, r5}) r6 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xbd12325945b9fb8a) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000001c0)={@local, @private1, @remote={0xfe, 0x80, [0x6, 0x10, 0x0, 0x0, 0x2, 0x8, 0x30, 0xb, 0xb]}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x20c301e2, r9}) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)=@RTM_NEWMDB={0x138, 0x54, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x4, {@in6_addr=@remote, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x2, 0x4, {@in6_addr=@mcast1}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x0, {@ip4=@rand_addr=0x64010100}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x2, {@ip4=@remote}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x3, 0x4, {@ip4=@loopback, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x3, 0x0, {@ip4=@remote, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x2, 0x0, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x1, 0x6ca27db872cb5a89, 0x3, {@ip4=@private=0xa010101}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x0, {@ip4=@dev={0xac, 0x14, 0x14, 0x43}, 0x800}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) utimensat(r0, 0x0, 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x60) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(r10, 0x10, &(0x7f0000000080)) [ 481.387032][ T8810] usb 1-1: USB disconnect, device number 85 [ 481.400099][T13128] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-4) 05:22:04 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000300)={'bridge_slave_0\x00'}) 05:22:04 executing program 3: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = getpgrp(0x0) kcmp(r5, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r5}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:22:04 executing program 4: timer_gettime(0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 481.990573][ C1] not chained 70000 origins [ 481.995122][ C1] CPU: 1 PID: 23 Comm: kworker/u4:1 Not tainted 5.11.0-rc7-syzkaller #0 [ 482.003466][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 482.013531][ C1] Workqueue: krdsd rds_connect_worker [ 482.018931][ C1] Call Trace: [ 482.022216][ C1] [ 482.025065][ C1] dump_stack+0x21c/0x280 [ 482.029419][ C1] kmsan_internal_chain_origin+0x6f/0x130 [ 482.035166][ C1] ? kmsan_get_metadata+0x116/0x180 [ 482.040392][ C1] ? kmsan_get_metadata+0x116/0x180 [ 482.045617][ C1] ? kmsan_get_metadata+0x116/0x180 [ 482.050846][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 482.056686][ C1] ? __msan_metadata_ptr_for_store_n+0xe/0x10 [ 482.062777][ C1] ? tcp_parse_options+0x225e/0x22f0 [ 482.068093][ C1] ? kmsan_get_metadata+0x116/0x180 [ 482.073314][ C1] __msan_chain_origin+0x57/0xa0 [ 482.078279][ C1] tcp_conn_request+0x1b17/0x4db0 [ 482.083417][ C1] ? memcg_slab_free_hook+0x3a/0xb00 05:22:04 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x0) utimensat(r1, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc2c45512, &(0x7f00000001c0)={{0x3, 0x2cfd52793688b376, 0x80000001, 0x7, 'syz0\x00', 0x4}, 0x0, [0x3, 0x7, 0x81, 0x1ff, 0x7f, 0x4, 0x6, 0x0, 0xff, 0x7ff, 0x3ff, 0x10001, 0x0, 0x7ff, 0xe3b, 0x9, 0x9, 0x7, 0x5, 0x0, 0x4, 0x6, 0x1a41, 0x8, 0x46, 0x1, 0x3a8, 0x5, 0xb, 0x8, 0x1, 0x6, 0x5, 0x7ff, 0x6, 0xffff, 0x0, 0x7, 0x9, 0xffff, 0x6, 0x0, 0x3f, 0x3, 0xfffff1c1, 0x7, 0x5, 0xfffffffd, 0x9da, 0x2, 0x400, 0x7f, 0xfffffff7, 0x9, 0x81, 0x6, 0x1, 0x5, 0x0, 0x8, 0x2, 0xd8, 0x193, 0x2, 0x80, 0x9, 0x3, 0x5c, 0x5, 0x900, 0xffff, 0x7fffffff, 0x3, 0x2, 0x6, 0x3, 0xad47, 0x1, 0x10000, 0x0, 0x0, 0x5, 0x0, 0x8, 0x80000000, 0x7fff, 0x200, 0xffffffff, 0x5, 0x9cd4, 0x9, 0x7, 0x9, 0x74, 0x2, 0x2, 0x2, 0x2, 0xffffffff, 0x4, 0x8, 0x7f, 0x4, 0x4, 0x2, 0x80000000, 0x3f, 0xba9, 0x8001, 0x2, 0x8, 0x4, 0x9, 0x1, 0x9, 0x8, 0x3, 0xe4, 0x1, 0x9, 0x6, 0x0, 0x8, 0x1, 0x2, 0x1, 0x400000, 0x2]}) chdir(&(0x7f0000000000)='./file0\x00') fcntl$getownex(r0, 0x10, &(0x7f0000000080)) 05:22:04 executing program 0: socketpair(0xa, 0x0, 0xcfb, &(0x7f00000004c0)) [ 482.088728][ C1] ? kmsan_get_metadata+0x116/0x180 [ 482.093952][ C1] ? kmsan_get_metadata+0x116/0x180 [ 482.099173][ C1] tcp_v4_conn_request+0x201/0x290 [ 482.104297][ C1] tcp_v6_conn_request+0xeb/0x330 [ 482.109334][ C1] ? inet6_sk_rx_dst_set+0x4d0/0x4d0 [ 482.114645][ C1] tcp_rcv_state_process+0x2f4/0x45a0 [ 482.120040][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 482.125874][ C1] ? kmsan_get_metadata+0x116/0x180 [ 482.131101][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 482.136935][ C1] ? kmsan_get_metadata+0x116/0x180 [ 482.142162][ C1] tcp_v4_do_rcv+0xc63/0x1000 [ 482.146854][ C1] ? tcp_v4_fill_cb+0x562/0x5e0 [ 482.151731][ C1] tcp_v4_rcv+0x4b0a/0x5c80 [ 482.156246][ C1] ? rcu_read_unlock_strict+0x9/0x10 [ 482.161556][ C1] ? tcp_filter+0xf0/0xf0 [ 482.165892][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 482.171376][ C1] ip_local_deliver+0x585/0x8d0 [ 482.176241][ C1] ? ip_local_deliver+0x8d0/0x8d0 [ 482.181279][ C1] ? ip_protocol_deliver_rcu+0xc50/0xc50 [ 482.186934][ C1] ip_rcv+0x599/0x820 [ 482.190933][ C1] ? ip_rcv_core+0x1480/0x1480 [ 482.195711][ C1] __netif_receive_skb+0x1ec/0x640 [ 482.200836][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 482.206493][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 482.212151][ C1] process_backlog+0x517/0xbd0 [ 482.219974][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 482.225287][ C1] napi_poll+0x428/0x15c0 [ 482.231578][ C1] ? kmsan_get_metadata+0x116/0x180 [ 482.236806][ C1] net_rx_action+0x34c/0xd30 [ 482.241424][ C1] ? net_tx_action+0xd30/0xd30 [ 482.246578][ C1] __do_softirq+0x1b9/0x715 [ 482.251101][ C1] asm_call_irq_on_stack+0xf/0x20 [ 482.256144][ C1] [ 482.259080][ C1] do_softirq_own_stack+0x6e/0x90 [ 482.265679][ C1] __local_bh_enable_ip+0x184/0x1d0 [ 482.270907][ C1] local_bh_enable+0x36/0x40 [ 482.276847][ C1] ip_finish_output2+0x2454/0x2940 [ 482.281987][ C1] ? __msan_get_context_state+0x9/0x20 05:22:04 executing program 5: syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@local, @random="8331eab42e4c", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "a1f846", 0x8, 0x0, 0x0, @private0, @local, {[@fragment]}}}}}, 0x0) [ 482.287469][ C1] ? rcu_read_unlock_strict+0x9/0x10 [ 482.292771][ C1] ? nf_ct_deliver_cached_events+0x610/0x7e0 [ 482.298774][ C1] __ip_finish_output+0x9fd/0x1050 [ 482.303915][ C1] ip_finish_output+0x329/0x480 [ 482.308793][ C1] ip_output+0x32e/0x6d0 [ 482.313061][ C1] ? ip_mc_finish_output+0x770/0x770 [ 482.318415][ C1] ? ip_finish_output+0x480/0x480 [ 482.323557][ C1] __ip_queue_xmit+0x1e3d/0x23b0 [ 482.328516][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 482.334176][ C1] ? __msan_poison_alloca+0xe9/0x110 [ 482.341073][ C1] ip_queue_xmit+0xcc/0xf0 [ 482.348061][ C1] ? __ip_queue_xmit+0x23b0/0x23b0 [ 482.356352][ C1] __tcp_transmit_skb+0x4d3f/0x5ea0 [ 482.363957][ C1] tcp_connect+0x104d/0x3cf0 [ 482.369302][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 482.377687][ C1] tcp_v4_connect+0x255c/0x26f0 [ 482.382573][ C1] ? tcp_twsk_unique+0xd40/0xd40 [ 482.389711][ C1] __inet_stream_connect+0x8d8/0x17d0 [ 482.398139][ C1] ? __local_bh_enable_ip+0x97/0x1d0 [ 482.403453][ C1] ? kmsan_get_metadata+0x116/0x180 [ 482.408680][ C1] inet_stream_connect+0x101/0x180 [ 482.413814][ C1] ? __inet_stream_connect+0x17d0/0x17d0 [ 482.420445][ C1] rds_tcp_conn_path_connect+0x9e1/0xd30 [ 482.426108][ C1] ? kmsan_get_metadata+0x116/0x180 [ 482.434002][ C1] ? rds_tcp_state_change+0x400/0x400 [ 482.442362][ C1] rds_connect_worker+0x368/0x550 [ 482.447594][ C1] ? rds_addr_cmp+0x290/0x290 [ 482.452287][ C1] process_one_work+0x1219/0x1fe0 [ 482.457345][ C1] worker_thread+0x10ec/0x2340 [ 482.462135][ C1] kthread+0x521/0x560 [ 482.466414][ C1] ? process_one_work+0x1fe0/0x1fe0 [ 482.471637][ C1] ? kthread_blkcg+0x110/0x110 [ 482.476424][ C1] ret_from_fork+0x1f/0x30 [ 482.481237][ C1] Uninit was stored to memory at: [ 482.489495][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 482.498365][ C1] __msan_chain_origin+0x57/0xa0 [ 482.503324][ C1] tcp_conn_request+0x1b4d/0x4db0 [ 482.508367][ C1] tcp_v4_conn_request+0x201/0x290 [ 482.513508][ C1] tcp_v6_conn_request+0xeb/0x330 [ 482.518545][ C1] tcp_rcv_state_process+0x2f4/0x45a0 [ 482.523922][ C1] tcp_v4_do_rcv+0xc63/0x1000 [ 482.528596][ C1] tcp_v4_rcv+0x4b0a/0x5c80 [ 482.533106][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 482.538574][ C1] ip_local_deliver+0x585/0x8d0 [ 482.543611][ C1] ip_rcv+0x599/0x820 [ 482.547595][ C1] __netif_receive_skb+0x1ec/0x640 [ 482.552710][ C1] process_backlog+0x517/0xbd0 [ 482.557475][ C1] napi_poll+0x428/0x15c0 [ 482.561805][ C1] net_rx_action+0x34c/0xd30 [ 482.566398][ C1] __do_softirq+0x1b9/0x715 [ 482.570899][ C1] [ 482.573223][ C1] Uninit was stored to memory at: [ 482.578228][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 482.583952][ C1] __msan_chain_origin+0x57/0xa0 [ 482.588899][ C1] tcp_openreq_init_rwin+0xcc6/0x1010 [ 482.594272][ C1] tcp_conn_request+0x2bd7/0x4db0 [ 482.599298][ C1] tcp_v4_conn_request+0x201/0x290 [ 482.604403][ C1] tcp_v6_conn_request+0xeb/0x330 [ 482.609431][ C1] tcp_rcv_state_process+0x2f4/0x45a0 [ 482.614802][ C1] tcp_v4_do_rcv+0xc63/0x1000 [ 482.619472][ C1] tcp_v4_rcv+0x4b0a/0x5c80 [ 482.623991][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 482.629474][ C1] ip_local_deliver+0x585/0x8d0 [ 482.634338][ C1] ip_rcv+0x599/0x820 [ 482.638330][ C1] __netif_receive_skb+0x1ec/0x640 [ 482.643459][ C1] process_backlog+0x517/0xbd0 [ 482.648232][ C1] napi_poll+0x428/0x15c0 [ 482.652568][ C1] net_rx_action+0x34c/0xd30 [ 482.657163][ C1] __do_softirq+0x1b9/0x715 [ 482.661670][ C1] [ 482.663983][ C1] Uninit was stored to memory at: [ 482.668991][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 482.674720][ C1] __msan_chain_origin+0x57/0xa0 [ 482.679660][ C1] tcp_conn_request+0x1b4d/0x4db0 [ 482.684685][ C1] tcp_v4_conn_request+0x201/0x290 [ 482.689791][ C1] tcp_v6_conn_request+0xeb/0x330 [ 482.694832][ C1] tcp_rcv_state_process+0x2f4/0x45a0 [ 482.700205][ C1] tcp_v4_do_rcv+0xc63/0x1000 [ 482.704879][ C1] tcp_v4_rcv+0x4b0a/0x5c80 [ 482.709379][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 482.714837][ C1] ip_local_deliver+0x585/0x8d0 [ 482.719687][ C1] ip_rcv+0x599/0x820 [ 482.723670][ C1] __netif_receive_skb+0x1ec/0x640 [ 482.728781][ C1] process_backlog+0x517/0xbd0 [ 482.733546][ C1] napi_poll+0x428/0x15c0 [ 482.737878][ C1] net_rx_action+0x34c/0xd30 [ 482.742468][ C1] __do_softirq+0x1b9/0x715 [ 482.746967][ C1] [ 482.749278][ C1] Uninit was stored to memory at: [ 482.754281][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 482.760001][ C1] __msan_chain_origin+0x57/0xa0 [ 482.764938][ C1] tcp_openreq_init_rwin+0xcc6/0x1010 [ 482.770308][ C1] tcp_conn_request+0x2bd7/0x4db0 [ 482.775344][ C1] tcp_v4_conn_request+0x201/0x290 [ 482.780453][ C1] tcp_v6_conn_request+0xeb/0x330 [ 482.785575][ C1] tcp_rcv_state_process+0x2f4/0x45a0 [ 482.790950][ C1] tcp_v4_do_rcv+0xc63/0x1000 [ 482.795631][ C1] tcp_v4_rcv+0x4b0a/0x5c80 [ 482.800128][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 482.805698][ C1] ip_local_deliver+0x585/0x8d0 [ 482.810551][ C1] ip_rcv+0x599/0x820 [ 482.814532][ C1] __netif_receive_skb+0x1ec/0x640 [ 482.819643][ C1] process_backlog+0x517/0xbd0 [ 482.824404][ C1] napi_poll+0x428/0x15c0 [ 482.828732][ C1] net_rx_action+0x34c/0xd30 [ 482.833320][ C1] __do_softirq+0x1b9/0x715 [ 482.837825][ C1] [ 482.840135][ C1] Uninit was stored to memory at: [ 482.845137][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 482.850859][ C1] __msan_chain_origin+0x57/0xa0 [ 482.855809][ C1] tcp_conn_request+0x1b4d/0x4db0 [ 482.860844][ C1] tcp_v4_conn_request+0x201/0x290 [ 482.865948][ C1] tcp_v6_conn_request+0xeb/0x330 [ 482.870976][ C1] tcp_rcv_state_process+0x2f4/0x45a0 [ 482.876347][ C1] tcp_v4_do_rcv+0xc63/0x1000 [ 482.881030][ C1] tcp_v4_rcv+0x4b0a/0x5c80 [ 482.885524][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 482.890983][ C1] ip_local_deliver+0x585/0x8d0 [ 482.895832][ C1] ip_rcv+0x599/0x820 [ 482.899810][ C1] __netif_receive_skb+0x1ec/0x640 [ 482.904921][ C1] process_backlog+0x517/0xbd0 [ 482.909684][ C1] napi_poll+0x428/0x15c0 [ 482.914010][ C1] net_rx_action+0x34c/0xd30 [ 482.918602][ C1] __do_softirq+0x1b9/0x715 [ 482.923103][ C1] [ 482.925414][ C1] Uninit was stored to memory at: [ 482.930591][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 482.936329][ C1] __msan_chain_origin+0x57/0xa0 [ 482.941278][ C1] tcp_openreq_init_rwin+0xcc6/0x1010 [ 482.946646][ C1] tcp_conn_request+0x2bd7/0x4db0 [ 482.951668][ C1] tcp_v4_conn_request+0x201/0x290 [ 482.956774][ C1] tcp_rcv_state_process+0x2f4/0x45a0 [ 482.962145][ C1] tcp_v4_do_rcv+0xc63/0x1000 [ 482.966814][ C1] tcp_v4_rcv+0x4b0a/0x5c80 [ 482.971310][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 482.976767][ C1] ip_local_deliver+0x585/0x8d0 [ 482.981617][ C1] ip_sublist_rcv+0x121b/0x1560 [ 482.986465][ C1] ip_list_rcv+0x8f1/0x960 [ 482.990891][ C1] __netif_receive_skb_list_core+0xe65/0x1250 [ 482.996959][ C1] __netif_receive_skb_list+0x7e2/0x930 [ 483.002521][ C1] netif_receive_skb_list_internal+0x837/0xdb0 [ 483.008672][ C1] napi_complete_done+0x552/0xf80 [ 483.013704][ C1] virtqueue_napi_complete+0xb9/0x1f0 [ 483.019081][ C1] virtnet_poll+0x170f/0x1d10 [ 483.023756][ C1] napi_poll+0x428/0x15c0 [ 483.028085][ C1] net_rx_action+0x34c/0xd30 [ 483.032674][ C1] __do_softirq+0x1b9/0x715 [ 483.037187][ C1] [ 483.039499][ C1] Uninit was stored to memory at: [ 483.044501][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 483.050224][ C1] __msan_chain_origin+0x57/0xa0 [ 483.055160][ C1] tcp_conn_request+0x1b4d/0x4db0 [ 483.060184][ C1] tcp_v4_conn_request+0x201/0x290 [ 483.065290][ C1] tcp_rcv_state_process+0x2f4/0x45a0 [ 483.070665][ C1] tcp_v4_do_rcv+0xc63/0x1000 [ 483.075334][ C1] tcp_v4_rcv+0x4b0a/0x5c80 [ 483.079842][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 483.085314][ C1] ip_local_deliver+0x585/0x8d0 [ 483.090166][ C1] ip_sublist_rcv+0x121b/0x1560 [ 483.095026][ C1] ip_list_rcv+0x8f1/0x960 [ 483.099442][ C1] __netif_receive_skb_list_core+0xe65/0x1250 [ 483.105511][ C1] __netif_receive_skb_list+0x7e2/0x930 [ 483.111073][ C1] netif_receive_skb_list_internal+0x837/0xdb0 [ 483.117224][ C1] napi_complete_done+0x552/0xf80 [ 483.122246][ C1] virtqueue_napi_complete+0xb9/0x1f0 [ 483.127617][ C1] virtnet_poll+0x170f/0x1d10 [ 483.132292][ C1] napi_poll+0x428/0x15c0 [ 483.136641][ C1] net_rx_action+0x34c/0xd30 [ 483.141231][ C1] __do_softirq+0x1b9/0x715 [ 483.145734][ C1] [ 483.148045][ C1] Uninit was created at: [ 483.152266][ C1] kmsan_save_stack_with_flags+0x3c/0x90 [ 483.157899][ C1] kmsan_alloc_page+0xd3/0x1f0 [ 483.162676][ C1] __alloc_pages_nodemask+0x827/0xf90 [ 483.168045][ C1] alloc_pages_current+0x7b6/0xb60 [ 483.173164][ C1] allocate_slab+0x392/0x11e0 [ 483.177837][ C1] ___slab_alloc+0xd42/0x1930 [ 483.182519][ C1] kmem_cache_alloc+0xc36/0xff0 [ 483.187389][ C1] inet_reqsk_alloc+0xaf/0x8c0 [ 483.192150][ C1] tcp_conn_request+0x911/0x4db0 [ 483.197087][ C1] tcp_v4_conn_request+0x201/0x290 [ 483.202193][ C1] tcp_rcv_state_process+0x2f4/0x45a0 [ 483.207566][ C1] tcp_v4_do_rcv+0xc63/0x1000 [ 483.212242][ C1] tcp_v4_rcv+0x4b0a/0x5c80 [ 483.216737][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 483.222195][ C1] ip_local_deliver+0x585/0x8d0 [ 483.227041][ C1] ip_sublist_rcv+0x121b/0x1560 [ 483.231890][ C1] ip_list_rcv+0x8f1/0x960 [ 483.236302][ C1] __netif_receive_skb_list_core+0xe65/0x1250 [ 483.242368][ C1] __netif_receive_skb_list+0x7e2/0x930 [ 483.247915][ C1] netif_receive_skb_list_internal+0x837/0xdb0 [ 483.254065][ C1] napi_complete_done+0x552/0xf80 [ 483.259087][ C1] virtqueue_napi_complete+0xb9/0x1f0 [ 483.264458][ C1] virtnet_poll+0x170f/0x1d10 [ 483.269131][ C1] napi_poll+0x428/0x15c0 [ 483.273467][ C1] net_rx_action+0x34c/0xd30 [ 483.278065][ C1] __do_softirq+0x1b9/0x715 05:22:06 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 484.095279][T13174] loop3: detected capacity change from 65551 to 0 [ 484.152210][T13176] loop4: detected capacity change from 65551 to 0 [ 484.211113][T13174] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 484.219305][T13174] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 05:22:06 executing program 0: r0 = socket(0x2, 0x3, 0x4) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) [ 484.254358][T13176] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 484.262524][T13176] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 484.263649][T13174] F2FS-fs (loop3): invalid crc_offset: 0 [ 484.368786][T13174] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 484.378139][T13174] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 484.522196][T13176] F2FS-fs (loop4): invalid crc_offset: 0 05:22:07 executing program 5: r0 = socket(0xf, 0x3, 0x2) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 05:22:07 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x1}, 0x20000010) [ 484.614167][T13176] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 484.623260][T13176] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 484.949247][T13194] loop2: detected capacity change from 65551 to 0 [ 485.086508][T13194] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 485.099929][T13194] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 05:22:07 executing program 0: syz_emit_ethernet(0x4a, &(0x7f00000010c0)={@local, @random="8331eab42e4c", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "d71198", 0x14, 0x33, 0x0, @private2, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 485.329192][T13194] F2FS-fs (loop2): invalid crc_offset: 0 [ 485.522177][T13194] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 485.532088][T13194] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 05:22:08 executing program 0: syz_io_uring_setup(0x6d49, &(0x7f0000000040), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x26012, r0, 0x10000000) 05:22:08 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, 0x0, 0x0) 05:22:08 executing program 3: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = getpgrp(0x0) kcmp(r5, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r5}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:22:08 executing program 4: timer_gettime(0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:22:08 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array]}}, &(0x7f0000000080)=""/208, 0x32, 0xd0, 0x1}, 0x20) 05:22:09 executing program 1: socketpair$nbd(0xa, 0x1, 0x0, &(0x7f00000000c0)) 05:22:09 executing program 0: syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x22002) [ 486.898298][T13230] loop3: detected capacity change from 65551 to 0 [ 486.983257][T13230] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 486.994103][T13230] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 487.087453][T13236] loop4: detected capacity change from 65551 to 0 [ 487.119505][T13236] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 487.127597][T13236] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 487.141537][T13236] F2FS-fs (loop4): invalid crc_offset: 0 [ 487.167707][T13230] F2FS-fs (loop3): invalid crc_offset: 0 [ 487.201050][T13236] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 487.210356][T13236] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 487.282254][T13230] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 487.291923][T13230] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 487.796598][T13236] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 487.804091][T13236] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b 05:22:10 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:22:10 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x5, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000002c0)=@lang_id={0x4}}, {0x2c, &(0x7f0000000300)=@string={0x2c, 0x3, "a430261492f043f7b59b04c5ffd1002afda1aa4766e8de4a8a8d99eef8700414e3a7c32e0cf0fece31d8"}}]}) 05:22:10 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x6, 0x6, 0x0, &(0x7f0000000080)) 05:22:10 executing program 0: socketpair(0xf, 0x0, 0x0, &(0x7f0000000040)) 05:22:10 executing program 4: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 488.413655][ T5] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 488.476510][T13259] loop2: detected capacity change from 65551 to 0 05:22:11 executing program 1: getrusage(0x52279364ab7933fd, 0x0) [ 488.615530][T13259] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 488.625125][T13259] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 488.649820][T13259] F2FS-fs (loop2): invalid crc_offset: 0 [ 488.674008][ T5] usb 6-1: Using ep0 maxpacket: 8 [ 488.699003][T13259] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 488.708470][T13259] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 488.794672][ T5] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 488.804807][ T5] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 488.822523][ T5] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 488.834851][ T5] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 488.845213][ T5] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 488.950718][T13259] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 488.961529][T13259] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b 05:22:11 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) 05:22:11 executing program 3: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = getpgrp(0x0) kcmp(r5, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r5}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:22:11 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 489.415744][ T5] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 489.425201][ T5] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.433770][ T5] usb 6-1: Product: syz [ 489.438585][ T5] usb 6-1: Manufacturer: イᐦ鮵씄퇿⨀ꇽ䞪䫞越烸ᐄ꟣⻃컾 [ 489.452027][ T5] usb 6-1: SerialNumber: syz 05:22:12 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8931, &(0x7f0000000000)={'ip6gre0\x00'}) [ 489.791704][T13279] loop3: detected capacity change from 65551 to 0 [ 489.824475][T13281] loop4: detected capacity change from 65551 to 0 [ 489.900609][T13279] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 489.909044][T13279] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 489.942975][ T5] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 489.972736][T13281] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 489.981024][T13281] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 05:22:12 executing program 1: r0 = socket(0xa, 0x3, 0x7) setsockopt$WPAN_SECURITY(r0, 0x29, 0x30, 0x0, 0x0) [ 490.097492][T13279] F2FS-fs (loop3): invalid crc_offset: 0 [ 490.136719][ T5] usb 6-1: USB disconnect, device number 4 05:22:12 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) [ 490.231968][T13281] F2FS-fs (loop4): invalid crc_offset: 0 [ 490.286737][T13279] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 490.295950][T13279] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 490.422827][T13281] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 490.431966][T13281] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 490.781581][T13305] loop2: detected capacity change from 65551 to 0 [ 490.843900][ T5] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 490.911787][T13305] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 490.920972][T13305] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 491.047209][T13305] F2FS-fs (loop2): invalid crc_offset: 0 [ 491.090458][ T5] usb 6-1: Using ep0 maxpacket: 8 [ 491.155237][T13305] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 491.164910][T13305] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 05:22:13 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x6, 0x24, 0x0, &(0x7f0000000080)) [ 491.443612][ T5] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 491.454057][ T5] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 491.464203][ T5] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 491.474200][ T5] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 491.484414][ T5] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 05:22:14 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000020c0)='net/kcm\x00') read$FUSE(r0, &(0x7f0000002240)={0x2020}, 0x2020) 05:22:14 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) [ 491.907360][ T5] usb 6-1: string descriptor 0 read error: -71 [ 491.914027][ T5] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 491.923438][ T5] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 05:22:14 executing program 4: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 492.035018][ T5] usb 6-1: can't set config #1, error -71 [ 492.072268][ T5] usb 6-1: USB disconnect, device number 5 05:22:14 executing program 3: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = getpgrp(0x0) kcmp(r5, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r5}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:22:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf251800000808000718"], 0x1c}}, 0x0) 05:22:15 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) 05:22:15 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000020c0)='net/kcm\x00') read$FUSE(r0, &(0x7f0000002240)={0x2020}, 0x2020) 05:22:15 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 492.688828][T13334] loop4: detected capacity change from 65551 to 0 [ 492.778279][T13334] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 492.786323][T13334] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 492.800431][T13334] F2FS-fs (loop4): invalid crc_offset: 0 [ 492.857144][T13334] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 492.866515][T13334] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 492.967852][T13341] loop3: detected capacity change from 65551 to 0 [ 493.100209][T13341] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 493.108733][T13341] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 493.292127][T13341] F2FS-fs (loop3): invalid crc_offset: 0 [ 493.411426][T13341] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 493.420769][T13341] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 05:22:16 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8971, &(0x7f0000000000)={'ip6gre0\x00'}) 05:22:16 executing program 0: socketpair(0x15, 0x5, 0x80, &(0x7f0000000040)) 05:22:16 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000020c0)='net/kcm\x00') read$FUSE(r0, &(0x7f0000002240)={0x2020}, 0x2020) [ 493.750568][T13361] loop2: detected capacity change from 65551 to 0 [ 493.879765][T13361] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 493.889642][T13361] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 494.035561][T13361] F2FS-fs (loop2): invalid crc_offset: 0 [ 494.152336][T13361] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 494.167530][T13361] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 05:22:17 executing program 1: socketpair(0x23, 0x0, 0x0, &(0x7f0000000540)) 05:22:17 executing program 4: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:22:17 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000020c0)='net/kcm\x00') read$FUSE(r0, &(0x7f0000002240)={0x2020}, 0x2020) 05:22:17 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r0, 0x80044df9, &(0x7f0000001240)) 05:22:17 executing program 3: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = getpgrp(0x0) kcmp(r5, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r5}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 495.463463][T13386] loop4: detected capacity change from 65551 to 0 [ 495.612018][T13386] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 495.620440][T13386] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 05:22:18 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2}}) [ 495.751345][T13386] F2FS-fs (loop4): invalid crc_offset: 0 05:22:18 executing program 5: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000003940)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0) [ 495.835553][T13386] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 495.844916][T13386] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 05:22:18 executing program 0: bpf$BPF_BTF_LOAD(0x8, 0x0, 0x0) 05:22:18 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 496.183319][ T917] Bluetooth: hci5: command 0x0406 tx timeout [ 496.480904][T13401] loop3: detected capacity change from 65551 to 0 [ 496.574060][T13401] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 496.582303][T13401] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 05:22:19 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000540)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000140)={0x1, 0x0, 0x0}) 05:22:19 executing program 5: r0 = socket(0xa, 0x6, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x32, &(0x7f0000000000)=0x2, 0x4) [ 496.786581][T13401] F2FS-fs (loop3): invalid crc_offset: 0 05:22:19 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x26012, r0, 0x10000000) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) [ 496.860805][T13410] loop2: detected capacity change from 65551 to 0 [ 496.961667][T13401] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 496.974589][T13401] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 497.133282][T13410] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 497.141485][T13410] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 497.231162][T13410] F2FS-fs (loop2): invalid crc_offset: 0 [ 497.402345][T13410] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 497.412202][T13410] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 05:22:20 executing program 4: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:22:20 executing program 1: syz_usb_connect(0x2, 0x5d, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x74, 0x85, 0x58, 0x10, 0xc52, 0x2211, 0x9a99, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc5, 0x0, 0x2, 0x73, 0x2e, 0xd6, 0x0, [], [{{0x9, 0x5, 0xe, 0x0, 0x10}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x3, 0xe3, 0x20, 0x92, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x3, 0x9, '#'}]}}, {{0x9, 0x5, 0x1, 0x2}}, {{0x9, 0x5, 0x9, 0x2}}]}}]}}]}}, &(0x7f0000000f40)={0xa, &(0x7f0000000a40)={0xa}, 0x17, &(0x7f0000000a80)={0x5, 0xf, 0x17, 0x3, [@generic={0x3}, @ptm_cap={0x3}, @ssp_cap={0xc}]}}) 05:22:20 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:22:20 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001340)={0x4c, 0x300, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:22:20 executing program 3: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = getpgrp(0x0) kcmp(r5, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r5}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 498.328344][T13433] loop4: detected capacity change from 65551 to 0 [ 498.462539][T13433] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 498.470816][T13433] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 498.506145][T13433] F2FS-fs (loop4): invalid crc_offset: 0 [ 498.540233][T13433] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 498.549467][T13433] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 05:22:21 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 498.694340][T13442] loop3: detected capacity change from 65551 to 0 05:22:21 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) [ 498.786461][T13442] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 498.794988][T13442] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 498.895966][T13442] F2FS-fs (loop3): invalid crc_offset: 0 [ 499.034799][T13442] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 499.046631][T13442] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 499.113792][ T8810] usb 2-1: new full-speed USB device number 2 using dummy_hcd 05:22:21 executing program 5: r0 = socket(0x2, 0x6, 0x0) getsockopt$WPAN_WANTACK(r0, 0x29, 0xb, 0x0, 0x0) [ 499.534384][ T8810] usb 2-1: not running at top speed; connect to a high speed hub [ 499.546231][T13462] loop2: detected capacity change from 65551 to 0 [ 499.637087][ T8810] usb 2-1: config 0 has an invalid interface number: 197 but max is 1 [ 499.645573][ T8810] usb 2-1: config 0 has no interface number 1 [ 499.651802][ T8810] usb 2-1: config 0 interface 197 altsetting 0 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 499.663101][ T8810] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 499.673786][ T8810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 499.683785][ T8810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 499.726454][T13462] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 499.726721][T13462] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 05:22:22 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000500)=0x7ff, 0x4) [ 499.766925][T13462] F2FS-fs (loop2): invalid crc_offset: 0 05:22:22 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000002200)={0x2020}, 0x2020) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000004240)={0x2020}, 0x2020) [ 499.834277][T13462] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 499.834475][T13462] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 500.073092][ T8810] usb 2-1: Dual-Role OTG device on HNP port [ 500.095431][ T8810] usb 2-1: New USB device found, idVendor=0c52, idProduct=2211, bcdDevice=9a.99 [ 500.095580][ T8810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.095698][ T8810] usb 2-1: Product: syz [ 500.095788][ T8810] usb 2-1: Manufacturer: syz [ 500.095880][ T8810] usb 2-1: SerialNumber: syz [ 500.099240][ T8810] usb 2-1: config 0 descriptor?? [ 500.137603][ T8810] ftdi_sio 2-1:0.197: FTDI USB Serial Device converter detected 05:22:23 executing program 4: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 500.138885][ T8810] usb 2-1: Detected FT2232C [ 500.347444][ T8810] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 500.363035][ T8810] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 500.364739][ T8810] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 500.370984][ T8810] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 500.372430][ T8810] usb 2-1: Detected FT2232C 05:22:23 executing program 3: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = getpgrp(0x0) kcmp(r5, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r5}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 500.372512][ T8810] ftdi_sio ttyUSB1: Overriding wMaxPacketSize on endpoint 1 05:22:23 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x14}, 0x40) [ 500.372604][ T8810] ftdi_sio ttyUSB1: Overriding wMaxPacketSize on endpoint 9 [ 500.403220][ T8810] ftdi_sio ttyUSB1: Unable to read latency timer: -71 [ 500.428570][ T8810] ftdi_sio ttyUSB1: Unable to write latency timer: -71 [ 500.430167][ T8810] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 500.442028][ T8810] usb 2-1: USB disconnect, device number 2 [ 500.495436][ T8810] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 500.496537][ T8810] ftdi_sio 2-1:0.197: device disconnected [ 500.543123][ T8810] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 500.544318][ T8810] ftdi_sio 2-1:0.0: device disconnected [ 501.113047][ T5] usb 2-1: new full-speed USB device number 3 using dummy_hcd 05:22:24 executing program 1: syz_usb_connect(0x2, 0x5d, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x74, 0x85, 0x58, 0x10, 0xc52, 0x2211, 0x9a99, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc5, 0x0, 0x2, 0x73, 0x2e, 0xd6, 0x0, [], [{{0x9, 0x5, 0xe, 0x0, 0x10}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x3, 0xe3, 0x20, 0x92, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x3, 0x9, '#'}]}}, {{0x9, 0x5, 0x1, 0x2}}, {{0x9, 0x5, 0x9, 0x2}}]}}]}}]}}, &(0x7f0000000f40)={0xa, &(0x7f0000000a40)={0xa}, 0x17, &(0x7f0000000a80)={0x5, 0xf, 0x17, 0x3, [@generic={0x3}, @ptm_cap={0x3}, @ssp_cap={0xc}]}}) 05:22:24 executing program 5: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x8, 0x1) [ 501.495011][T13510] loop4: detected capacity change from 65551 to 0 [ 501.525907][ T5] usb 2-1: not running at top speed; connect to a high speed hub [ 501.539200][T13510] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 501.539314][T13510] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 501.564737][T13510] F2FS-fs (loop4): invalid crc_offset: 0 [ 501.604695][ T5] usb 2-1: config 0 has an invalid interface number: 197 but max is 1 [ 501.604823][ T5] usb 2-1: config 0 has no interface number 1 [ 501.604941][ T5] usb 2-1: config 0 interface 197 altsetting 0 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 501.605096][ T5] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 501.605228][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 501.605359][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 05:22:25 executing program 0: keyctl$get_persistent(0x16, 0x0, 0xfffffffffffffffa) [ 501.618099][T13510] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 501.618204][T13510] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 501.824109][ T5] usb 2-1: Dual-Role OTG device on HNP port [ 501.842939][ T5] usb 2-1: New USB device found, idVendor=0c52, idProduct=2211, bcdDevice=9a.99 [ 501.843085][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 05:22:25 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/user\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0) [ 501.843195][ T5] usb 2-1: Product: syz [ 501.843274][ T5] usb 2-1: Manufacturer: syz [ 501.843353][ T5] usb 2-1: SerialNumber: syz [ 501.865240][ T5] usb 2-1: config 0 descriptor?? [ 502.050485][T13520] loop3: detected capacity change from 65551 to 0 [ 502.094565][T13520] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 502.094761][T13520] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 502.149192][ T5] usb 2-1: can't set config #0, error -71 [ 502.152372][ T5] usb 2-1: USB disconnect, device number 3 [ 502.166579][T13520] F2FS-fs (loop3): invalid crc_offset: 0 [ 502.314026][T13520] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 502.314219][T13520] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 503.243183][ T5] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 503.644379][ T5] usb 2-1: not running at top speed; connect to a high speed hub [ 503.724726][ T5] usb 2-1: config 0 has an invalid interface number: 197 but max is 1 [ 503.733387][ T5] usb 2-1: config 0 has no interface number 1 [ 503.739695][ T5] usb 2-1: config 0 interface 197 altsetting 0 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 503.751071][ T5] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 503.761886][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 503.771934][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 05:22:26 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:22:26 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001340)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000340)="e9"}) 05:22:26 executing program 5: syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0)='NLBL_MGMT\x00', r0) 05:22:26 executing program 3: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = getpgrp(0x0) kcmp(r5, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r5}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:22:26 executing program 4: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 504.216929][ T5] usb 2-1: Dual-Role OTG device on HNP port [ 504.243651][ T5] usb 2-1: New USB device found, idVendor=0c52, idProduct=2211, bcdDevice=9a.99 [ 504.253112][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.261419][ T5] usb 2-1: Product: syz [ 504.265912][ T5] usb 2-1: Manufacturer: syz [ 504.270692][ T5] usb 2-1: SerialNumber: syz [ 504.584889][ T5] usb 2-1: config 0 descriptor?? 05:22:27 executing program 0: fspick(0xffffffffffffff9c, 0x0, 0x0) [ 504.658847][ T5] ftdi_sio 2-1:0.197: FTDI USB Serial Device converter detected [ 504.668241][ T5] usb 2-1: Detected FT2232C 05:22:27 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x20}, {0x5}, {0x9}, {}, {}, {}]}) [ 504.756145][T13562] loop2: detected capacity change from 65551 to 0 [ 504.813574][T13563] loop4: detected capacity change from 65551 to 0 [ 504.923624][T13564] loop3: detected capacity change from 65551 to 0 [ 504.933202][ T5] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 504.952852][ T5] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 504.967358][ T5] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 504.982546][ T5] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 504.991616][ T5] usb 2-1: Detected FT2232C [ 504.996868][ T5] ftdi_sio ttyUSB1: Overriding wMaxPacketSize on endpoint 1 [ 505.004613][ T5] ftdi_sio ttyUSB1: Overriding wMaxPacketSize on endpoint 9 [ 505.036086][ T5] ftdi_sio ttyUSB1: Unable to read latency timer: -71 [ 505.121720][T13563] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 505.130070][T13563] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 505.176870][T13562] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 505.185681][T13562] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 505.201862][T13564] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 505.204129][ T5] ftdi_sio ttyUSB1: Unable to write latency timer: -71 [ 505.210140][T13564] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 505.229717][ T5] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 505.244680][ T5] usb 2-1: USB disconnect, device number 4 [ 505.258034][ T5] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 505.268788][ T5] ftdi_sio 2-1:0.197: device disconnected [ 505.284050][ T5] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 505.294920][ T5] ftdi_sio 2-1:0.0: device disconnected [ 505.534998][T13562] F2FS-fs (loop2): invalid crc_offset: 0 [ 505.540936][T13562] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-4) [ 505.554129][T13563] F2FS-fs (loop4): invalid crc_offset: 0 [ 505.560035][T13563] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-4) [ 505.636259][T13564] F2FS-fs (loop3): invalid crc_offset: 0 [ 505.642287][T13564] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-4) 05:22:28 executing program 4: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 506.170658][ C0] not chained 80000 origins [ 506.175205][ C0] CPU: 0 PID: 142 Comm: kworker/u4:4 Not tainted 5.11.0-rc7-syzkaller #0 [ 506.183638][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 506.193710][ C0] Workqueue: krdsd rds_connect_worker [ 506.199113][ C0] Call Trace: [ 506.202396][ C0] [ 506.205243][ C0] dump_stack+0x21c/0x280 [ 506.209688][ C0] kmsan_internal_chain_origin+0x6f/0x130 [ 506.215438][ C0] ? kmsan_get_metadata+0x116/0x180 [ 506.220665][ C0] ? kmsan_get_metadata+0x116/0x180 [ 506.225882][ C0] ? kmsan_get_metadata+0x116/0x180 [ 506.231122][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 506.236955][ C0] ? __msan_metadata_ptr_for_store_n+0xe/0x10 [ 506.243052][ C0] ? tcp_parse_options+0x225e/0x22f0 [ 506.248366][ C0] ? kmsan_get_metadata+0x116/0x180 [ 506.253592][ C0] __msan_chain_origin+0x57/0xa0 [ 506.258552][ C0] tcp_conn_request+0x1b17/0x4db0 [ 506.263606][ C0] ? memcg_slab_free_hook+0x3a/0xb00 05:22:28 executing program 1: syz_usb_connect(0x2, 0x5d, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x74, 0x85, 0x58, 0x10, 0xc52, 0x2211, 0x9a99, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc5, 0x0, 0x2, 0x73, 0x2e, 0xd6, 0x0, [], [{{0x9, 0x5, 0xe, 0x0, 0x10}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x3, 0xe3, 0x20, 0x92, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x3, 0x9, '#'}]}}, {{0x9, 0x5, 0x1, 0x2}}, {{0x9, 0x5, 0x9, 0x2}}]}}]}}]}}, &(0x7f0000000f40)={0xa, &(0x7f0000000a40)={0xa}, 0x17, &(0x7f0000000a80)={0x5, 0xf, 0x17, 0x3, [@generic={0x3}, @ptm_cap={0x3}, @ssp_cap={0xc}]}}) 05:22:28 executing program 3: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = getpgrp(0x0) kcmp(r5, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r5}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:22:28 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:22:28 executing program 5: openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x400800, 0x0) 05:22:28 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 506.268912][ C0] ? kmsan_get_metadata+0x116/0x180 [ 506.274139][ C0] ? kmsan_get_metadata+0x116/0x180 [ 506.279364][ C0] tcp_v4_conn_request+0x201/0x290 [ 506.285591][ C0] tcp_v6_conn_request+0xeb/0x330 [ 506.290641][ C0] ? inet6_sk_rx_dst_set+0x4d0/0x4d0 [ 506.295952][ C0] tcp_rcv_state_process+0x2f4/0x45a0 [ 506.301360][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 506.307299][ C0] ? kmsan_get_metadata+0x116/0x180 [ 506.312518][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 506.318350][ C0] ? kmsan_get_metadata+0x116/0x180 [ 506.326618][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 506.335891][ C0] ? tcp_v4_fill_cb+0x562/0x5e0 [ 506.340759][ C0] tcp_v4_rcv+0x4b0a/0x5c80 [ 506.345276][ C0] ? rcu_read_unlock_strict+0x9/0x10 [ 506.352305][ C0] ? tcp_filter+0xf0/0xf0 [ 506.357571][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 506.366909][ C0] ip_local_deliver+0x585/0x8d0 [ 506.371876][ C0] ? ip_local_deliver+0x8d0/0x8d0 [ 506.377298][ C0] ? ip_protocol_deliver_rcu+0xc50/0xc50 [ 506.390622][ C0] ip_rcv+0x599/0x820 [ 506.395831][ C0] ? ip_rcv_core+0x1480/0x1480 [ 506.400812][ C0] __netif_receive_skb+0x1ec/0x640 [ 506.406205][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 506.415738][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 506.425304][ C0] process_backlog+0x517/0xbd0 [ 506.430257][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 506.439735][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 506.445646][ C0] napi_poll+0x428/0x15c0 [ 506.452234][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 506.461751][ C0] net_rx_action+0x34c/0xd30 [ 506.467034][ C0] ? net_tx_action+0xd30/0xd30 [ 506.471992][ C0] __do_softirq+0x1b9/0x715 [ 506.477294][ C0] asm_call_irq_on_stack+0xf/0x20 [ 506.486575][ C0] [ 506.491143][ C0] do_softirq_own_stack+0x6e/0x90 [ 506.496563][ C0] __local_bh_enable_ip+0x184/0x1d0 [ 506.501779][ C0] local_bh_enable+0x36/0x40 [ 506.506910][ C0] ip_finish_output2+0x2454/0x2940 [ 506.512041][ C0] ? __msan_get_context_state+0x9/0x20 [ 506.521373][ C0] ? rcu_read_unlock_strict+0x9/0x10 [ 506.526817][ C0] ? nf_ct_deliver_cached_events+0x610/0x7e0 [ 506.536410][ C0] __ip_finish_output+0x9fd/0x1050 [ 506.545724][ C0] ip_finish_output+0x329/0x480 [ 506.552673][ C0] ip_output+0x32e/0x6d0 [ 506.557993][ C0] ? ip_mc_finish_output+0x770/0x770 [ 506.567422][ C0] ? ip_finish_output+0x480/0x480 [ 506.576761][ C0] __ip_queue_xmit+0x1e3d/0x23b0 [ 506.581753][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 506.591298][ C0] ? __msan_poison_alloca+0xe9/0x110 [ 506.596750][ C0] ip_queue_xmit+0xcc/0xf0 [ 506.601643][ C0] ? __ip_queue_xmit+0x23b0/0x23b0 [ 506.607057][ C0] __tcp_transmit_skb+0x4d3f/0x5ea0 [ 506.612292][ C0] tcp_connect+0x104d/0x3cf0 [ 506.617614][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 506.631072][ C0] tcp_v4_connect+0x255c/0x26f0 [ 506.636449][ C0] ? tcp_twsk_unique+0xd40/0xd40 [ 506.641520][ C0] __inet_stream_connect+0x8d8/0x17d0 [ 506.646992][ C0] ? __local_bh_enable_ip+0x97/0x1d0 [ 506.654106][ C0] ? kmsan_get_metadata+0x116/0x180 [ 506.659676][ C0] inet_stream_connect+0x101/0x180 [ 506.669103][ C0] ? __inet_stream_connect+0x17d0/0x17d0 [ 506.682538][ C0] rds_tcp_conn_path_connect+0x9e1/0xd30 [ 506.692033][ C0] ? kmsan_get_metadata+0x116/0x180 [ 506.697529][ C0] ? rds_tcp_state_change+0x400/0x400 [ 506.706968][ C0] rds_connect_worker+0x368/0x550 [ 506.712047][ C0] ? rds_addr_cmp+0x290/0x290 [ 506.717432][ C0] process_one_work+0x1219/0x1fe0 [ 506.726775][ C0] worker_thread+0x10ec/0x2340 [ 506.731774][ C0] kthread+0x521/0x560 [ 506.737085][ C0] ? process_one_work+0x1fe0/0x1fe0 [ 506.746687][ C0] ? kthread_blkcg+0x110/0x110 [ 506.758022][ C0] ret_from_fork+0x1f/0x30 [ 506.767315][ C0] Uninit was stored to memory at: [ 506.772339][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 506.781881][ C0] __msan_chain_origin+0x57/0xa0 [ 506.787317][ C0] tcp_conn_request+0x1b4d/0x4db0 [ 506.792640][ C0] tcp_v4_conn_request+0x201/0x290 [ 506.798259][ C0] tcp_v6_conn_request+0xeb/0x330 [ 506.807733][ C0] tcp_rcv_state_process+0x2f4/0x45a0 [ 506.817201][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 506.822218][ C0] tcp_v4_rcv+0x4b0a/0x5c80 [ 506.827593][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 506.837036][ C0] ip_local_deliver+0x585/0x8d0 [ 506.842049][ C0] ip_rcv+0x599/0x820 [ 506.847348][ C0] __netif_receive_skb+0x1ec/0x640 [ 506.859082][ C0] process_backlog+0x517/0xbd0 [ 506.868507][ C0] napi_poll+0x428/0x15c0 [ 506.877845][ C0] net_rx_action+0x34c/0xd30 [ 506.887162][ C0] __do_softirq+0x1b9/0x715 [ 506.896543][ C0] [ 506.901032][ C0] Uninit was stored to memory at: [ 506.906462][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 506.916106][ C0] __msan_chain_origin+0x57/0xa0 [ 506.921185][ C0] tcp_openreq_init_rwin+0xcc6/0x1010 [ 506.926689][ C0] tcp_conn_request+0x2bd7/0x4db0 [ 506.931772][ C0] tcp_v4_conn_request+0x201/0x290 [ 506.937265][ C0] tcp_v6_conn_request+0xeb/0x330 [ 506.946666][ C0] tcp_rcv_state_process+0x2f4/0x45a0 [ 506.952056][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 506.957246][ C0] tcp_v4_rcv+0x4b0a/0x5c80 [ 506.964131][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 506.969741][ C0] ip_local_deliver+0x585/0x8d0 [ 506.979277][ C0] ip_rcv+0x599/0x820 [ 506.988562][ C0] __netif_receive_skb+0x1ec/0x640 [ 506.998078][ C0] process_backlog+0x517/0xbd0 [ 507.007503][ C0] napi_poll+0x428/0x15c0 [ 507.016784][ C0] net_rx_action+0x34c/0xd30 [ 507.021794][ C0] __do_softirq+0x1b9/0x715 [ 507.027223][ C0] [ 507.032208][ C0] Uninit was stored to memory at: [ 507.037810][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 507.043559][ C0] __msan_chain_origin+0x57/0xa0 [ 507.048916][ C0] tcp_conn_request+0x1b4d/0x4db0 [ 507.054406][ C0] tcp_v4_conn_request+0x201/0x290 [ 507.060388][ C0] tcp_v6_conn_request+0xeb/0x330 [ 507.067902][ C0] tcp_rcv_state_process+0x2f4/0x45a0 [ 507.073869][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 507.079314][ C0] tcp_v4_rcv+0x4b0a/0x5c80 [ 507.085124][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 507.090704][ C0] ip_local_deliver+0x585/0x8d0 [ 507.096550][ C0] ip_rcv+0x599/0x820 [ 507.101832][ C0] __netif_receive_skb+0x1ec/0x640 [ 507.107785][ C0] process_backlog+0x517/0xbd0 [ 507.113225][ C0] napi_poll+0x428/0x15c0 [ 507.119040][ C0] net_rx_action+0x34c/0xd30 [ 507.124433][ C0] __do_softirq+0x1b9/0x715 [ 507.130256][ C0] [ 507.135183][ C0] Uninit was stored to memory at: [ 507.141114][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 507.146854][ C0] __msan_chain_origin+0x57/0xa0 [ 507.152700][ C0] tcp_openreq_init_rwin+0xcc6/0x1010 [ 507.158275][ C0] tcp_conn_request+0x2bd7/0x4db0 [ 507.166254][ C0] tcp_v4_conn_request+0x201/0x290 [ 507.171810][ C0] tcp_v6_conn_request+0xeb/0x330 [ 507.177754][ C0] tcp_rcv_state_process+0x2f4/0x45a0 [ 507.183343][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 507.189248][ C0] tcp_v4_rcv+0x4b0a/0x5c80 [ 507.194639][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 507.200657][ C0] ip_local_deliver+0x585/0x8d0 [ 507.206114][ C0] ip_rcv+0x599/0x820 [ 507.211842][ C0] __netif_receive_skb+0x1ec/0x640 [ 507.217389][ C0] process_backlog+0x517/0xbd0 [ 507.223370][ C0] napi_poll+0x428/0x15c0 [ 507.228775][ C0] net_rx_action+0x34c/0xd30 [ 507.234604][ C0] __do_softirq+0x1b9/0x715 [ 507.240042][ C0] [ 507.245432][ C0] Uninit was stored to memory at: [ 507.250970][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 507.257024][ C0] __msan_chain_origin+0x57/0xa0 [ 507.262540][ C0] tcp_conn_request+0x1b4d/0x4db0 [ 507.270511][ C0] tcp_v4_conn_request+0x201/0x290 [ 507.276050][ C0] tcp_v6_conn_request+0xeb/0x330 [ 507.282062][ C0] tcp_rcv_state_process+0x2f4/0x45a0 [ 507.287701][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 507.293169][ C0] tcp_v4_rcv+0x4b0a/0x5c80 [ 507.298624][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 507.304676][ C0] ip_local_deliver+0x585/0x8d0 [ 507.310196][ C0] ip_rcv+0x599/0x820 [ 507.315934][ C0] __netif_receive_skb+0x1ec/0x640 [ 507.321487][ C0] process_backlog+0x517/0xbd0 [ 507.327424][ C0] napi_poll+0x428/0x15c0 [ 507.332809][ C0] net_rx_action+0x34c/0xd30 [ 507.338720][ C0] __do_softirq+0x1b9/0x715 [ 507.344133][ C0] [ 507.349544][ C0] Uninit was stored to memory at: [ 507.355060][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 507.361166][ C0] __msan_chain_origin+0x57/0xa0 [ 507.366688][ C0] tcp_openreq_init_rwin+0xcc6/0x1010 [ 507.374739][ C0] tcp_conn_request+0x2bd7/0x4db0 [ 507.380299][ C0] tcp_v4_conn_request+0x201/0x290 [ 507.386258][ C0] tcp_v6_conn_request+0xeb/0x330 [ 507.391833][ C0] tcp_rcv_state_process+0x2f4/0x45a0 [ 507.397892][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 507.403376][ C0] tcp_v4_rcv+0x4b0a/0x5c80 [ 507.409293][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 507.414954][ C0] ip_local_deliver+0x585/0x8d0 [ 507.421048][ C0] ip_rcv+0x599/0x820 [ 507.430680][ C0] __netif_receive_skb+0x1ec/0x640 [ 507.436284][ C0] process_backlog+0x517/0xbd0 [ 507.442471][ C0] napi_poll+0x428/0x15c0 [ 507.447925][ C0] net_rx_action+0x34c/0xd30 [ 507.453812][ C0] __do_softirq+0x1b9/0x715 [ 507.459270][ C0] [ 507.464693][ C0] Uninit was stored to memory at: [ 507.470267][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 507.478371][ C0] __msan_chain_origin+0x57/0xa0 [ 507.483903][ C0] tcp_conn_request+0x1b4d/0x4db0 [ 507.489919][ C0] tcp_v4_conn_request+0x201/0x290 [ 507.495499][ C0] tcp_v6_conn_request+0xeb/0x330 [ 507.501505][ C0] tcp_rcv_state_process+0x2f4/0x45a0 [ 507.508288][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 507.513331][ C0] tcp_v4_rcv+0x4b0a/0x5c80 [ 507.518388][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 507.524498][ C0] ip_local_deliver+0x585/0x8d0 [ 507.530069][ C0] ip_rcv+0x599/0x820 [ 507.535830][ C0] __netif_receive_skb+0x1ec/0x640 [ 507.541424][ C0] process_backlog+0x517/0xbd0 [ 507.547394][ C0] napi_poll+0x428/0x15c0 [ 507.552819][ C0] net_rx_action+0x34c/0xd30 [ 507.558762][ C0] __do_softirq+0x1b9/0x715 [ 507.564213][ C0] [ 507.569664][ C0] Uninit was created at: [ 507.577141][ C0] kmsan_save_stack_with_flags+0x3c/0x90 [ 507.583484][ C0] kmsan_alloc_page+0xd3/0x1f0 [ 507.589103][ C0] __alloc_pages_nodemask+0x827/0xf90 [ 507.595231][ C0] alloc_pages_current+0x7b6/0xb60 [ 507.600884][ C0] allocate_slab+0x392/0x11e0 [ 507.606855][ C0] ___slab_alloc+0xd42/0x1930 [ 507.612419][ C0] kmem_cache_alloc+0xc36/0xff0 [ 507.618717][ C0] inet_reqsk_alloc+0xaf/0x8c0 [ 507.624544][ C0] tcp_conn_request+0x911/0x4db0 [ 507.630882][ C0] tcp_v4_conn_request+0x201/0x290 [ 507.636545][ C0] tcp_rcv_state_process+0x2f4/0x45a0 [ 507.642746][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 507.648354][ C0] tcp_v4_rcv+0x4b0a/0x5c80 [ 507.654347][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 507.660083][ C0] ip_local_deliver+0x585/0x8d0 [ 507.666082][ C0] ip_sublist_rcv+0x121b/0x1560 [ 507.671700][ C0] ip_list_rcv+0x8f1/0x960 [ 507.679640][ C0] __netif_receive_skb_list_core+0xe65/0x1250 [ 507.685734][ C0] __netif_receive_skb_list+0x7e2/0x930 [ 507.691594][ C0] netif_receive_skb_list_internal+0x837/0xdb0 [ 507.697764][ C0] napi_complete_done+0x552/0xf80 [ 507.703454][ C0] virtqueue_napi_complete+0xb9/0x1f0 [ 507.709140][ C0] virtnet_poll+0x170f/0x1d10 [ 507.715132][ C0] napi_poll+0x428/0x15c0 [ 507.720604][ C0] net_rx_action+0x34c/0xd30 [ 507.726510][ C0] __do_softirq+0x1b9/0x715 [ 508.280327][T13614] loop4: detected capacity change from 65551 to 0 [ 508.350378][T13614] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 508.358468][T13614] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 508.376679][T13614] F2FS-fs (loop4): invalid crc_offset: 0 [ 508.420565][T13627] loop2: detected capacity change from 65551 to 0 [ 508.549974][T13614] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 508.559175][T13614] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 508.649202][ T9800] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 508.673151][T13627] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 508.681271][T13627] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 508.704410][T13627] F2FS-fs (loop2): invalid crc_offset: 0 [ 508.739034][T13627] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 508.748837][T13627] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 508.843174][T13634] loop3: detected capacity change from 65551 to 0 [ 508.984385][T13634] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 508.992428][T13634] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 509.115037][T13634] F2FS-fs (loop3): invalid crc_offset: 0 05:22:31 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001340)={0x28, 0x0, &(0x7f00000000c0)=[@enter_looper, @acquire_done, @decrefs, @release], 0x1, 0x0, &(0x7f0000000340)="fb"}) 05:22:31 executing program 0: r0 = socket(0x2, 0x3, 0xa) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 509.236968][T13634] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 509.246250][T13634] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 509.354480][ T9800] usb 2-1: not running at top speed; connect to a high speed hub [ 509.453938][ T9800] usb 2-1: config 0 has an invalid interface number: 197 but max is 1 [ 509.472885][ T9800] usb 2-1: config 0 has no interface number 1 [ 509.479130][ T9800] usb 2-1: config 0 interface 197 altsetting 0 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 509.494037][ T9800] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 509.505148][ T9800] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 509.514214][ T3162] ieee802154 phy0 wpan0: encryption failed: -22 [ 509.515051][ T9800] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 509.521276][ T3162] ieee802154 phy1 wpan1: encryption failed: -22 05:22:32 executing program 5: syz_usb_connect(0x0, 0x719, &(0x7f00000008c0)=ANY=[@ANYBLOB="1201100167de5a20d2194301a862010203010902070704038000070904b40501ffffff"], 0x0) [ 510.033793][ T9800] usb 2-1: Dual-Role OTG device on HNP port [ 510.053514][ T9800] usb 2-1: New USB device found, idVendor=0c52, idProduct=2211, bcdDevice=9a.99 [ 510.062921][ T9800] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.071047][ T9800] usb 2-1: Product: syz [ 510.076191][ T9800] usb 2-1: Manufacturer: syz [ 510.080908][ T9800] usb 2-1: SerialNumber: syz 05:22:32 executing program 0: syz_open_dev$vim2m(&(0x7f0000000140)='/dev/video#\x00', 0x0, 0x2) io_setup(0xff, &(0x7f0000000000)) [ 510.401872][ T9800] usb 2-1: config 0 descriptor?? 05:22:32 executing program 4: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:22:32 executing program 2: timer_gettime(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xad3) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 510.482738][ T9800] ftdi_sio 2-1:0.197: FTDI USB Serial Device converter detected [ 510.494087][ T9800] usb 2-1: Detected FT2232C 05:22:33 executing program 3: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = getpgrp(0x0) kcmp(r5, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r5}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 510.733233][ T9800] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 510.753714][ T9800] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 510.828993][ T9800] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 510.832836][ T2017] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 510.842733][ T9800] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 510.855897][ T9800] usb 2-1: Detected FT2232C [ 510.861462][ T9800] ftdi_sio ttyUSB1: Overriding wMaxPacketSize on endpoint 1 [ 510.869241][ T9800] ftdi_sio ttyUSB1: Overriding wMaxPacketSize on endpoint 9 [ 510.956042][T13670] loop4: detected capacity change from 65551 to 0 [ 511.004774][T13670] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 511.013070][T13670] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 511.034690][T13670] F2FS-fs (loop4): invalid crc_offset: 0 [ 511.093773][ T2017] usb 6-1: Using ep0 maxpacket: 32 [ 511.116154][T13670] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 511.125653][T13670] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 511.413057][ T9800] ftdi_sio ttyUSB1: Unable to read latency timer: -71 [ 511.443477][ T2017] usb 6-1: config 3 has an invalid interface number: 180 but max is 3 [ 511.452297][ T2017] usb 6-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 511.464961][ T2017] usb 6-1: config 3 has 1 interface, different from the descriptor's value: 4 [ 511.474501][ T2017] usb 6-1: config 3 has no interface number 0 [ 511.480704][ T2017] usb 6-1: config 3 interface 180 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 511.494046][ T2017] usb 6-1: config 3 interface 180 has no altsetting 0 [ 511.501786][ T9800] ftdi_sio ttyUSB1: Unable to write latency timer: -71 [ 511.501930][T13670] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 511.517196][T13670] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b [ 511.531448][T13678] loop3: detected capacity change from 65551 to 0 [ 511.553232][ T9800] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 511.589549][ T9800] usb 2-1: USB disconnect, device number 5 [ 511.614559][ T9800] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 511.625345][ T9800] ftdi_sio 2-1:0.197: device disconnected [ 511.693822][T13693] loop2: detected capacity change from 65551 to 0 [ 511.736834][T13678] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 511.739485][T13693] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 511.746122][T13678] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 511.752994][T13693] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 511.786325][ T9800] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 511.797004][ T9800] ftdi_sio 2-1:0.0: device disconnected 05:22:34 executing program 1: syz_usb_connect(0x2, 0x5d, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x74, 0x85, 0x58, 0x10, 0xc52, 0x2211, 0x9a99, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc5, 0x0, 0x2, 0x73, 0x2e, 0xd6, 0x0, [], [{{0x9, 0x5, 0xe, 0x0, 0x10}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x3, 0xe3, 0x20, 0x92, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x3, 0x9, '#'}]}}, {{0x9, 0x5, 0x1, 0x2}}, {{0x9, 0x5, 0x9, 0x2}}]}}]}}]}}, &(0x7f0000000f40)={0xa, &(0x7f0000000a40)={0xa}, 0x17, &(0x7f0000000a80)={0x5, 0xf, 0x17, 0x3, [@generic={0x3}, @ptm_cap={0x3}, @ssp_cap={0xc}]}}) 05:22:34 executing program 0: syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x7fffffff, 0x0) [ 511.977296][T13678] F2FS-fs (loop3): invalid crc_offset: 0 [ 512.029033][T13678] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 512.039305][T13678] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 512.083109][ T2017] usb 6-1: New USB device found, idVendor=19d2, idProduct=0143, bcdDevice=62.a8 [ 512.093016][ T2017] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.101148][ T2017] usb 6-1: Product: syz [ 512.105550][ T2017] usb 6-1: Manufacturer: syz [ 512.110305][ T2017] usb 6-1: SerialNumber: syz [ 512.121473][T13693] F2FS-fs (loop2): invalid crc_offset: 0 [ 512.412419][T13693] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 512.421471][T13693] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 05:22:35 executing program 4: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 512.790085][ T2017] option 6-1:3.180: GSM modem (1-port) converter detected [ 512.924485][ T2017] usb 6-1: USB disconnect, device number 6 [ 512.932542][ T2017] option 6-1:3.180: device disconnected 05:22:35 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8901, &(0x7f0000000000)={'ip6gre0\x00'}) 05:22:35 executing program 3: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = getpgrp(0x0) kcmp(r5, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r5}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 513.283508][ T5] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 513.623810][ T2017] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 513.683618][ T5] usb 2-1: not running at top speed; connect to a high speed hub [ 513.774540][ T5] usb 2-1: config 0 has an invalid interface number: 197 but max is 1 [ 513.783351][ T5] usb 2-1: config 0 has no interface number 1 [ 513.790040][ T5] usb 2-1: config 0 interface 197 altsetting 0 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 513.801487][ T5] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 513.812328][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 513.824754][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 05:22:36 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x2, &(0x7f00000003c0)) [ 513.882699][ T2017] usb 6-1: Using ep0 maxpacket: 32 [ 513.964480][T13735] loop3: detected capacity change from 65551 to 0 [ 514.013585][ T2017] usb 6-1: config 3 has an invalid interface number: 180 but max is 3 [ 514.024603][ T2017] usb 6-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 514.035428][ T2017] usb 6-1: config 3 has 1 interface, different from the descriptor's value: 4 [ 514.044595][ T2017] usb 6-1: config 3 has no interface number 0 [ 514.050807][ T2017] usb 6-1: config 3 interface 180 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 514.064168][ T2017] usb 6-1: config 3 interface 180 has no altsetting 0 05:22:36 executing program 2: timer_gettime(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xad3) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 514.168092][T13735] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 514.178461][T13735] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 514.287908][T13735] F2FS-fs (loop3): invalid crc_offset: 0 [ 514.366636][T13742] loop4: detected capacity change from 65551 to 0 [ 514.406538][T13742] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 514.414844][T13742] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 514.415052][ T5] usb 2-1: Dual-Role OTG device on HNP port [ 514.453298][T13742] F2FS-fs (loop4): invalid crc_offset: 0 [ 514.488062][T13735] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 514.497663][T13735] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 05:22:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}}, 0x0) [ 514.728440][ T5] usb 2-1: New USB device found, idVendor=0c52, idProduct=2211, bcdDevice=9a.99 [ 514.740090][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.748846][ T5] usb 2-1: Product: syz [ 514.753347][ T5] usb 2-1: Manufacturer: syz [ 514.758151][ T5] usb 2-1: SerialNumber: syz [ 514.788476][ T5] usb 2-1: config 0 descriptor?? [ 514.818411][T13742] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 514.827762][T13742] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 514.836046][ T5] ftdi_sio 2-1:0.197: FTDI USB Serial Device converter detected [ 514.848995][ T5] usb 2-1: Detected FT2232C 05:22:37 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, &(0x7f0000001600), 0xc) [ 514.912558][ T2017] usb 6-1: New USB device found, idVendor=19d2, idProduct=0143, bcdDevice=62.a8 [ 514.922330][ T2017] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.032499][ T2017] usb 6-1: can't set config #3, error -71 [ 515.089726][ T2017] usb 6-1: USB disconnect, device number 7 [ 515.112369][ T5] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 515.137562][ T5] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 515.190322][ T5] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 515.205015][ T5] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 515.214122][ T5] usb 2-1: Detected FT2232C [ 515.217155][T13762] loop2: detected capacity change from 65551 to 0 [ 515.218909][ T5] ftdi_sio ttyUSB1: Overriding wMaxPacketSize on endpoint 1 [ 515.219002][ T5] ftdi_sio ttyUSB1: Overriding wMaxPacketSize on endpoint 9 [ 515.270986][T13762] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 515.279215][T13762] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 515.439413][T13762] F2FS-fs (loop2): invalid crc_offset: 0 [ 515.565525][T13762] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 515.575333][T13762] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 05:22:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x1) [ 515.852215][ T5] ftdi_sio ttyUSB1: Unable to read latency timer: -71 [ 515.873346][ T5] ftdi_sio ttyUSB1: Unable to write latency timer: -71 [ 515.902759][ T5] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 516.033127][ T5] usb 2-1: USB disconnect, device number 6 05:22:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getmulticast={0x14, 0x3a, 0x1}, 0x14}}, 0x0) [ 516.202797][ T5] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 516.213585][ T5] ftdi_sio 2-1:0.197: device disconnected 05:22:38 executing program 2: timer_gettime(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xad3) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 516.492286][ T5] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 516.503184][ T5] ftdi_sio 2-1:0.0: device disconnected 05:22:39 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x1, 0x6, 0x3, 0x1, 0x0, 0xbb96, 0x40, 0xe, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_bp, 0x4000, 0x3, 0x8, 0x5, 0x6, 0x4, 0x1}, 0x0, 0x2, r0, 0x8) 05:22:39 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000000)={0x17, 0x0, 0x0}) 05:22:39 executing program 4: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 517.268957][T13805] loop2: detected capacity change from 65551 to 0 05:22:39 executing program 3: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = getpgrp(0x0) kcmp(r5, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r5}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:22:39 executing program 1: timer_create(0xfeffffff, 0x0, &(0x7f0000000200)) [ 517.519540][T13805] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 517.527867][T13805] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 517.643152][T13805] F2FS-fs (loop2): invalid crc_offset: 0 [ 517.743262][T13805] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 517.752722][T13805] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 518.177438][T13823] loop3: detected capacity change from 65551 to 0 [ 518.210116][T13823] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 518.225131][T13823] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 518.261148][T13823] F2FS-fs (loop3): invalid crc_offset: 0 05:22:40 executing program 1: r0 = socket(0xa, 0x3, 0x26) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x45) [ 518.435542][T13823] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 518.437861][T13832] loop4: detected capacity change from 65551 to 0 [ 518.445027][T13823] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 05:22:41 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0xa0800, 0x0) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, 0x0) [ 518.664258][T13832] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 518.673130][T13832] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 05:22:41 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xad3) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 518.881094][T13832] F2FS-fs (loop4): invalid crc_offset: 0 [ 518.993401][T13832] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 519.003060][T13832] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 05:22:41 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8906, 0x0) [ 519.624311][T13848] loop2: detected capacity change from 65551 to 0 05:22:42 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 519.680219][T13848] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 519.692375][T13848] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 519.740971][T13848] F2FS-fs (loop2): invalid crc_offset: 0 [ 519.903954][T13848] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 519.913515][T13848] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 05:22:42 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0xc0045878, 0x0) 05:22:42 executing program 3: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = getpgrp(0x0) kcmp(r5, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r5}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 521.338461][T13866] loop3: detected capacity change from 65551 to 0 [ 521.381110][T13866] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 521.389489][T13866] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 521.416606][T13866] F2FS-fs (loop3): invalid crc_offset: 0 [ 521.459213][T13866] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 521.468663][T13866] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 521.706522][T13866] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 521.713955][T13866] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b 05:22:45 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x1, 0x6, 0x3, 0x1, 0x0, 0xbb96, 0x40, 0xe, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_bp, 0x4000, 0x3, 0x8, 0x5, 0x6, 0x4, 0x1}, 0x0, 0x2, r0, 0x8) 05:22:45 executing program 4: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:22:45 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xad3) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:22:45 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000200)) 05:22:45 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x10, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 05:22:45 executing program 3: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = getpgrp(0x0) kcmp(r5, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r5}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 522.884663][T13884] loop2: detected capacity change from 65551 to 0 [ 522.956859][T13889] loop4: detected capacity change from 65551 to 0 [ 523.037947][T13887] loop3: detected capacity change from 65551 to 0 [ 523.049363][T13889] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 523.057772][T13889] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 05:22:45 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x1, 0x6, 0x3, 0x1, 0x0, 0xbb96, 0x40, 0xe, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_bp, 0x4000, 0x3, 0x8, 0x5, 0x6, 0x4, 0x1}, 0x0, 0x2, r0, 0x8) [ 523.213246][T13887] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 523.221460][T13887] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 523.246708][T13884] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 523.249112][T13889] F2FS-fs (loop4): invalid crc_offset: 0 [ 523.255158][T13884] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 523.280180][T13887] F2FS-fs (loop3): invalid crc_offset: 0 [ 523.361200][T13889] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 523.370843][T13889] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 523.494207][T13884] F2FS-fs (loop2): invalid crc_offset: 0 [ 523.623986][T13889] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 523.631457][T13889] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b [ 523.647536][T13884] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-4) [ 523.690431][T13887] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 523.699645][T13887] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 05:22:46 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001340)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000340)="e9"}) 05:22:46 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xad3) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:22:46 executing program 4: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 524.294732][T13917] binder: 13915:13917 ioctl c0306201 20001340 returned -14 05:22:46 executing program 1: r0 = syz_open_dev$swradio(&(0x7f00000014c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000001540)={0x0, 0x9, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6637dbc0"}, 0x0, 0x0, @planes=&(0x7f0000001500)={0x0, 0x0, @userptr}, 0x2}) 05:22:47 executing program 3: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = getpgrp(0x0) kcmp(r5, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r5}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 524.664527][T13919] loop2: detected capacity change from 65551 to 0 [ 524.724795][T13919] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 524.733225][T13919] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 524.754590][T13919] F2FS-fs (loop2): invalid crc_offset: 0 [ 524.818386][T13919] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 524.849703][T13919] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 525.093466][T13919] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 525.100839][T13919] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 525.606203][T13933] loop3: detected capacity change from 65551 to 0 [ 525.766150][T13933] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 525.774598][T13933] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 525.827474][T13933] F2FS-fs (loop3): invalid crc_offset: 0 [ 525.835543][T13938] loop4: detected capacity change from 65551 to 0 [ 525.863468][T13938] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 525.871893][T13938] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 525.888744][T13938] F2FS-fs (loop4): invalid crc_offset: 0 [ 525.955274][T13938] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 525.955927][T13933] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 525.964809][T13938] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 525.973709][T13933] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 526.252774][T13933] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 526.260130][T13933] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b [ 528.407145][ C0] not chained 90000 origins [ 528.411690][ C0] CPU: 0 PID: 1341 Comm: kworker/u4:20 Not tainted 5.11.0-rc7-syzkaller #0 [ 528.420389][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 528.430455][ C0] Workqueue: krdsd rds_connect_worker [ 528.435974][ C0] Call Trace: [ 528.439255][ C0] [ 528.442104][ C0] dump_stack+0x21c/0x280 [ 528.446458][ C0] kmsan_internal_chain_origin+0x6f/0x130 [ 528.452210][ C0] ? kmsan_get_metadata+0x116/0x180 [ 528.457435][ C0] ? kmsan_get_metadata+0x116/0x180 [ 528.462655][ C0] ? kmsan_get_metadata+0x116/0x180 [ 528.467878][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 528.473710][ C0] ? __msan_metadata_ptr_for_store_n+0xe/0x10 [ 528.479804][ C0] ? tcp_parse_options+0x225e/0x22f0 [ 528.485130][ C0] ? kmsan_get_metadata+0x116/0x180 [ 528.490362][ C0] __msan_chain_origin+0x57/0xa0 [ 528.495325][ C0] tcp_conn_request+0x1b17/0x4db0 [ 528.500378][ C0] ? memcg_slab_free_hook+0x3a/0xb00 [ 528.505686][ C0] ? kmsan_get_metadata+0x116/0x180 [ 528.510910][ C0] ? kmsan_get_metadata+0x116/0x180 [ 528.516131][ C0] tcp_v4_conn_request+0x201/0x290 [ 528.521259][ C0] tcp_v6_conn_request+0xeb/0x330 [ 528.526311][ C0] ? inet6_sk_rx_dst_set+0x4d0/0x4d0 [ 528.531620][ C0] tcp_rcv_state_process+0x2f4/0x45a0 [ 528.537013][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 528.542845][ C0] ? kmsan_get_metadata+0x116/0x180 [ 528.548072][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 528.554079][ C0] ? kmsan_get_metadata+0x116/0x180 [ 528.559301][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 528.563988][ C0] ? tcp_v4_fill_cb+0x562/0x5e0 [ 528.568859][ C0] tcp_v4_rcv+0x4b0a/0x5c80 [ 528.573376][ C0] ? rcu_read_unlock_strict+0x9/0x10 [ 528.578687][ C0] ? tcp_filter+0xf0/0xf0 [ 528.583030][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 528.588515][ C0] ip_local_deliver+0x585/0x8d0 [ 528.593416][ C0] ? ip_local_deliver+0x8d0/0x8d0 [ 528.598462][ C0] ? ip_protocol_deliver_rcu+0xc50/0xc50 [ 528.604165][ C0] ip_rcv+0x599/0x820 [ 528.608175][ C0] ? ip_rcv_core+0x1480/0x1480 [ 528.612961][ C0] __netif_receive_skb+0x1ec/0x640 [ 528.618095][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 528.623753][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 528.629414][ C0] process_backlog+0x517/0xbd0 [ 528.634202][ C0] ? native_apic_mem_write+0x45/0x90 [ 528.639548][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 528.645012][ C0] napi_poll+0x428/0x15c0 [ 528.649376][ C0] net_rx_action+0x34c/0xd30 [ 528.653994][ C0] ? net_tx_action+0xd30/0xd30 [ 528.658782][ C0] __do_softirq+0x1b9/0x715 [ 528.663324][ C0] asm_call_irq_on_stack+0xf/0x20 [ 528.668367][ C0] [ 528.671305][ C0] do_softirq_own_stack+0x6e/0x90 [ 528.676365][ C0] __local_bh_enable_ip+0x184/0x1d0 [ 528.681589][ C0] local_bh_enable+0x36/0x40 [ 528.686206][ C0] ip_finish_output2+0x2454/0x2940 [ 528.691341][ C0] ? __msan_get_context_state+0x9/0x20 [ 528.696823][ C0] ? rcu_read_unlock_strict+0x9/0x10 [ 528.702138][ C0] ? nf_ct_deliver_cached_events+0x610/0x7e0 [ 528.708146][ C0] __ip_finish_output+0x9fd/0x1050 [ 528.713288][ C0] ip_finish_output+0x329/0x480 [ 528.718165][ C0] ip_output+0x32e/0x6d0 [ 528.722432][ C0] ? ip_mc_finish_output+0x770/0x770 [ 528.727740][ C0] ? ip_finish_output+0x480/0x480 [ 528.732788][ C0] __ip_queue_xmit+0x1e3d/0x23b0 [ 528.737748][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 528.743407][ C0] ? __msan_poison_alloca+0xe9/0x110 [ 528.748723][ C0] ip_queue_xmit+0xcc/0xf0 [ 528.753253][ C0] ? __ip_queue_xmit+0x23b0/0x23b0 [ 528.758387][ C0] __tcp_transmit_skb+0x4d3f/0x5ea0 [ 528.763621][ C0] tcp_connect+0x104d/0x3cf0 [ 528.768233][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 528.773904][ C0] tcp_v4_connect+0x255c/0x26f0 [ 528.778791][ C0] ? tcp_twsk_unique+0xd40/0xd40 [ 528.783754][ C0] __inet_stream_connect+0x8d8/0x17d0 [ 528.789162][ C0] ? __local_bh_enable_ip+0x97/0x1d0 [ 528.794474][ C0] ? kmsan_get_metadata+0x116/0x180 [ 528.799708][ C0] inet_stream_connect+0x101/0x180 [ 528.804845][ C0] ? __inet_stream_connect+0x17d0/0x17d0 [ 528.810504][ C0] rds_tcp_conn_path_connect+0x9e1/0xd30 [ 528.816169][ C0] ? kmsan_get_metadata+0x116/0x180 [ 528.821398][ C0] ? rds_tcp_state_change+0x400/0x400 [ 528.826797][ C0] rds_connect_worker+0x368/0x550 [ 528.831836][ C0] ? rds_addr_cmp+0x290/0x290 [ 528.836535][ C0] process_one_work+0x1219/0x1fe0 [ 528.841586][ C0] worker_thread+0x10ec/0x2340 [ 528.846373][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 528.852203][ C0] ? kmsan_get_metadata+0x116/0x180 [ 528.857429][ C0] kthread+0x521/0x560 [ 528.861519][ C0] ? process_one_work+0x1fe0/0x1fe0 [ 528.866742][ C0] ? kthread_blkcg+0x110/0x110 [ 528.871529][ C0] ret_from_fork+0x1f/0x30 [ 528.875977][ C0] Uninit was stored to memory at: [ 528.880997][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 528.886741][ C0] __msan_chain_origin+0x57/0xa0 [ 528.891712][ C0] tcp_conn_request+0x1b4d/0x4db0 [ 528.896756][ C0] tcp_v4_conn_request+0x201/0x290 [ 528.901881][ C0] tcp_v6_conn_request+0xeb/0x330 [ 528.906950][ C0] tcp_rcv_state_process+0x2f4/0x45a0 [ 528.912350][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 528.917040][ C0] tcp_v4_rcv+0x4b0a/0x5c80 [ 528.921555][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 528.927034][ C0] ip_local_deliver+0x585/0x8d0 [ 528.931909][ C0] ip_rcv+0x599/0x820 [ 528.935910][ C0] __netif_receive_skb+0x1ec/0x640 [ 528.941043][ C0] process_backlog+0x517/0xbd0 [ 528.945824][ C0] napi_poll+0x428/0x15c0 [ 528.950175][ C0] net_rx_action+0x34c/0xd30 [ 528.954779][ C0] __do_softirq+0x1b9/0x715 [ 528.959297][ C0] [ 528.961621][ C0] Uninit was stored to memory at: [ 528.966635][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 528.972378][ C0] __msan_chain_origin+0x57/0xa0 [ 528.977333][ C0] tcp_openreq_init_rwin+0xcc6/0x1010 [ 528.982717][ C0] tcp_conn_request+0x2bd7/0x4db0 [ 528.987756][ C0] tcp_v4_conn_request+0x201/0x290 [ 528.992878][ C0] tcp_rcv_state_process+0x2f4/0x45a0 [ 528.998276][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 529.002964][ C0] tcp_v4_rcv+0x4b0a/0x5c80 [ 529.007488][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 529.012968][ C0] ip_local_deliver+0x585/0x8d0 [ 529.017835][ C0] ip_sublist_rcv+0x121b/0x1560 [ 529.022710][ C0] ip_list_rcv+0x8f1/0x960 [ 529.027143][ C0] __netif_receive_skb_list_core+0xe65/0x1250 [ 529.033232][ C0] __netif_receive_skb_list+0x7e2/0x930 [ 529.038796][ C0] netif_receive_skb_list_internal+0x837/0xdb0 [ 529.044979][ C0] napi_complete_done+0x552/0xf80 [ 529.050019][ C0] virtqueue_napi_complete+0xb9/0x1f0 [ 529.055427][ C0] virtnet_poll+0x170f/0x1d10 [ 529.060125][ C0] napi_poll+0x428/0x15c0 [ 529.064475][ C0] net_rx_action+0x34c/0xd30 [ 529.069093][ C0] __do_softirq+0x1b9/0x715 [ 529.073617][ C0] [ 529.075943][ C0] Uninit was stored to memory at: [ 529.080958][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 529.086762][ C0] __msan_chain_origin+0x57/0xa0 [ 529.091725][ C0] tcp_conn_request+0x1b4d/0x4db0 [ 529.096772][ C0] tcp_v4_conn_request+0x201/0x290 [ 529.101905][ C0] tcp_rcv_state_process+0x2f4/0x45a0 [ 529.107302][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 529.111996][ C0] tcp_v4_rcv+0x4b0a/0x5c80 [ 529.116516][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 529.122005][ C0] ip_local_deliver+0x585/0x8d0 [ 529.126877][ C0] ip_sublist_rcv+0x121b/0x1560 [ 529.131754][ C0] ip_list_rcv+0x8f1/0x960 [ 529.136192][ C0] __netif_receive_skb_list_core+0xe65/0x1250 [ 529.142282][ C0] __netif_receive_skb_list+0x7e2/0x930 [ 529.147852][ C0] netif_receive_skb_list_internal+0x837/0xdb0 [ 529.154029][ C0] napi_complete_done+0x552/0xf80 [ 529.159075][ C0] virtqueue_napi_complete+0xb9/0x1f0 [ 529.164468][ C0] virtnet_poll+0x170f/0x1d10 [ 529.169167][ C0] napi_poll+0x428/0x15c0 [ 529.173514][ C0] net_rx_action+0x34c/0xd30 [ 529.178122][ C0] __do_softirq+0x1b9/0x715 [ 529.182642][ C0] [ 529.184966][ C0] Uninit was stored to memory at: [ 529.189985][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 529.195730][ C0] __msan_chain_origin+0x57/0xa0 [ 529.200807][ C0] tcp_openreq_init_rwin+0xcc6/0x1010 [ 529.206195][ C0] tcp_conn_request+0x2bd7/0x4db0 [ 529.211241][ C0] tcp_v4_conn_request+0x201/0x290 [ 529.216365][ C0] tcp_rcv_state_process+0x2f4/0x45a0 [ 529.221757][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 529.226448][ C0] tcp_v4_rcv+0x4b0a/0x5c80 [ 529.230974][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 529.236452][ C0] ip_local_deliver+0x585/0x8d0 [ 529.241321][ C0] ip_sublist_rcv+0x121b/0x1560 [ 529.246186][ C0] ip_list_rcv+0x8f1/0x960 [ 529.250622][ C0] __netif_receive_skb_list_core+0xe65/0x1250 [ 529.256712][ C0] __netif_receive_skb_list+0x7e2/0x930 [ 529.262279][ C0] netif_receive_skb_list_internal+0x837/0xdb0 [ 529.268454][ C0] napi_complete_done+0x552/0xf80 [ 529.273497][ C0] virtqueue_napi_complete+0xb9/0x1f0 [ 529.278894][ C0] virtnet_poll+0x170f/0x1d10 [ 529.283592][ C0] napi_poll+0x428/0x15c0 [ 529.287970][ C0] net_rx_action+0x34c/0xd30 [ 529.292684][ C0] __do_softirq+0x1b9/0x715 [ 529.297206][ C0] [ 529.299531][ C0] Uninit was stored to memory at: [ 529.304551][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 529.310300][ C0] __msan_chain_origin+0x57/0xa0 [ 529.315260][ C0] tcp_conn_request+0x1b4d/0x4db0 [ 529.320322][ C0] tcp_v4_conn_request+0x201/0x290 [ 529.325447][ C0] tcp_rcv_state_process+0x2f4/0x45a0 [ 529.330840][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 529.335533][ C0] tcp_v4_rcv+0x4b0a/0x5c80 [ 529.340048][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 529.345528][ C0] ip_local_deliver+0x585/0x8d0 [ 529.350400][ C0] ip_sublist_rcv+0x121b/0x1560 [ 529.355269][ C0] ip_list_rcv+0x8f1/0x960 [ 529.360400][ C0] __netif_receive_skb_list_core+0xe65/0x1250 [ 529.366493][ C0] __netif_receive_skb_list+0x7e2/0x930 [ 529.372060][ C0] netif_receive_skb_list_internal+0x837/0xdb0 [ 529.378231][ C0] napi_complete_done+0x552/0xf80 [ 529.383270][ C0] virtqueue_napi_complete+0xb9/0x1f0 [ 529.388666][ C0] virtnet_poll+0x170f/0x1d10 [ 529.393366][ C0] napi_poll+0x428/0x15c0 [ 529.397712][ C0] net_rx_action+0x34c/0xd30 [ 529.402320][ C0] __do_softirq+0x1b9/0x715 [ 529.406845][ C0] [ 529.409167][ C0] Uninit was stored to memory at: [ 529.414184][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 529.419928][ C0] __msan_chain_origin+0x57/0xa0 [ 529.424887][ C0] tcp_openreq_init_rwin+0xcc6/0x1010 [ 529.430277][ C0] tcp_conn_request+0x2bd7/0x4db0 [ 529.435320][ C0] tcp_v4_conn_request+0x201/0x290 [ 529.440444][ C0] tcp_rcv_state_process+0x2f4/0x45a0 [ 529.445837][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 529.450526][ C0] tcp_v4_rcv+0x4b0a/0x5c80 [ 529.455040][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 529.460523][ C0] ip_local_deliver+0x585/0x8d0 [ 529.465390][ C0] ip_sublist_rcv+0x121b/0x1560 [ 529.470260][ C0] ip_list_rcv+0x8f1/0x960 [ 529.474694][ C0] __netif_receive_skb_list_core+0xe65/0x1250 [ 529.480782][ C0] __netif_receive_skb_list+0x7e2/0x930 [ 529.486342][ C0] netif_receive_skb_list_internal+0x837/0xdb0 [ 529.492517][ C0] napi_complete_done+0x552/0xf80 [ 529.497555][ C0] virtqueue_napi_complete+0xb9/0x1f0 [ 529.502956][ C0] virtnet_poll+0x170f/0x1d10 [ 529.507662][ C0] napi_poll+0x428/0x15c0 [ 529.512007][ C0] net_rx_action+0x34c/0xd30 [ 529.516615][ C0] __do_softirq+0x1b9/0x715 [ 529.521138][ C0] [ 529.523461][ C0] Uninit was stored to memory at: [ 529.528588][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 529.534339][ C0] __msan_chain_origin+0x57/0xa0 [ 529.539299][ C0] tcp_conn_request+0x1b4d/0x4db0 [ 529.544345][ C0] tcp_v4_conn_request+0x201/0x290 [ 529.549469][ C0] tcp_rcv_state_process+0x2f4/0x45a0 [ 529.554860][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 529.559552][ C0] tcp_v4_rcv+0x4b0a/0x5c80 [ 529.564072][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 529.569554][ C0] ip_local_deliver+0x585/0x8d0 [ 529.574430][ C0] ip_sublist_rcv+0x121b/0x1560 [ 529.579301][ C0] ip_list_rcv+0x8f1/0x960 [ 529.583737][ C0] __netif_receive_skb_list_core+0xe65/0x1250 [ 529.589827][ C0] __netif_receive_skb_list+0x7e2/0x930 [ 529.595411][ C0] netif_receive_skb_list_internal+0x837/0xdb0 [ 529.601585][ C0] napi_complete_done+0x552/0xf80 [ 529.606800][ C0] virtqueue_napi_complete+0xb9/0x1f0 [ 529.612284][ C0] virtnet_poll+0x170f/0x1d10 [ 529.616984][ C0] napi_poll+0x428/0x15c0 [ 529.621337][ C0] net_rx_action+0x34c/0xd30 [ 529.625950][ C0] __do_softirq+0x1b9/0x715 [ 529.630463][ C0] [ 529.632778][ C0] Uninit was created at: [ 529.637014][ C0] kmsan_save_stack_with_flags+0x3c/0x90 [ 529.642672][ C0] kmsan_alloc_page+0xd3/0x1f0 [ 529.647462][ C0] __alloc_pages_nodemask+0x827/0xf90 [ 529.652871][ C0] alloc_pages_current+0x7b6/0xb60 [ 529.658006][ C0] allocate_slab+0x392/0x11e0 [ 529.662700][ C0] ___slab_alloc+0xd42/0x1930 [ 529.667406][ C0] kmem_cache_alloc+0xc36/0xff0 [ 529.672281][ C0] inet_reqsk_alloc+0xaf/0x8c0 [ 529.677063][ C0] tcp_conn_request+0x911/0x4db0 [ 529.682021][ C0] tcp_v4_conn_request+0x201/0x290 [ 529.687758][ C0] tcp_rcv_state_process+0x2f4/0x45a0 [ 529.693234][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 529.697926][ C0] tcp_v4_rcv+0x4b0a/0x5c80 [ 529.702442][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 529.707923][ C0] ip_local_deliver+0x585/0x8d0 [ 529.712796][ C0] ip_sublist_rcv+0x121b/0x1560 [ 529.717668][ C0] ip_list_rcv+0x8f1/0x960 [ 529.722103][ C0] __netif_receive_skb_list_core+0xe65/0x1250 [ 529.728194][ C0] __netif_receive_skb_list+0x7e2/0x930 [ 529.733762][ C0] netif_receive_skb_list_internal+0x837/0xdb0 [ 529.740023][ C0] napi_complete_done+0x552/0xf80 [ 529.745066][ C0] virtqueue_napi_complete+0xb9/0x1f0 [ 529.750461][ C0] virtnet_poll+0x170f/0x1d10 [ 529.755164][ C0] napi_poll+0x428/0x15c0 [ 529.759513][ C0] net_rx_action+0x34c/0xd30 [ 529.764121][ C0] __do_softirq+0x1b9/0x715 05:23:06 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x1, 0x6, 0x3, 0x1, 0x0, 0xbb96, 0x40, 0xe, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_bp, 0x4000, 0x3, 0x8, 0x5, 0x6, 0x4, 0x1}, 0x0, 0x2, r0, 0x8) 05:23:06 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000140)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0x5452, &(0x7f0000000200)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1aa55650"}, 0x0, 0x0, @planes=0x0}) 05:23:06 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_mount_image$f2fs(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xad3) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:23:06 executing program 3: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = getpgrp(0x0) kcmp(r5, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r5}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:23:06 executing program 4: timer_gettime(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 544.375678][T13968] loop4: detected capacity change from 65551 to 0 [ 544.423361][T13969] loop2: detected capacity change from 65551 to 0 [ 544.451850][T13972] loop3: detected capacity change from 65551 to 0 [ 544.586090][T13972] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 544.597089][T13972] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 05:23:07 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x1, 0x6, 0x3, 0x1, 0x0, 0xbb96, 0x40, 0xe, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_bp, 0x4000, 0x3, 0x8, 0x5, 0x6, 0x4, 0x1}, 0x0, 0x2, r0, 0x8) [ 544.684454][T13968] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 544.692907][T13968] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 544.831932][T13972] F2FS-fs (loop3): invalid crc_offset: 0 [ 544.865658][T13968] F2FS-fs (loop4): invalid crc_offset: 0 [ 544.993124][T13968] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 545.002540][T13968] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 545.117737][T13972] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 545.127220][T13972] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 05:23:07 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xa0000, &(0x7f00000024c0)) 05:23:07 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_mount_image$f2fs(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xad3) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 546.182640][T14000] loop2: detected capacity change from 65551 to 0 05:23:08 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x20882) write$evdev(r0, &(0x7f00000000c0)=[{{0x0, 0x2710}}], 0x200030c4) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:23:08 executing program 3: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = getpgrp(0x0) kcmp(r5, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r5}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:23:09 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_mount_image$f2fs(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xad3) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:23:09 executing program 4: timer_gettime(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 547.092778][T14012] loop3: detected capacity change from 65551 to 0 [ 547.159265][T14018] loop2: detected capacity change from 65551 to 0 [ 547.256500][T14012] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 547.264987][T14012] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 547.287985][T14012] F2FS-fs (loop3): invalid crc_offset: 0 [ 547.356778][T14012] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 547.366256][T14012] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 547.595322][T14012] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 547.603088][T14012] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b [ 547.802515][T14026] loop4: detected capacity change from 65551 to 0 [ 547.956777][T14026] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 547.965248][T14026] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 548.271136][T14026] F2FS-fs (loop4): invalid crc_offset: 0 [ 548.348926][T14026] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 548.361900][T14026] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 550.299415][ C0] not chained 100000 origins [ 550.304053][ C0] CPU: 0 PID: 269 Comm: kworker/u4:6 Not tainted 5.11.0-rc7-syzkaller #0 [ 550.312485][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 550.325541][ C0] Workqueue: krdsd rds_connect_worker [ 550.330941][ C0] Call Trace: [ 550.334222][ C0] [ 550.341420][ C0] dump_stack+0x21c/0x280 [ 550.345775][ C0] kmsan_internal_chain_origin+0x6f/0x130 [ 550.351523][ C0] ? ip_route_output_key_hash_rcu+0x1ce9/0x1ef0 [ 550.358672][ C0] ? kmsan_get_metadata+0x116/0x180 [ 550.363898][ C0] ? xfrm_lookup_route+0x2e0/0x3a0 [ 550.369058][ C0] ? ip_route_output_flow+0x411/0x4c0 [ 550.376020][ C0] ? kmsan_get_metadata+0x116/0x180 [ 550.381247][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 550.387080][ C0] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 550.393262][ C0] ? tcp_select_initial_window+0x92f/0x9f0 [ 550.399098][ C0] ? kmsan_get_metadata+0x116/0x180 [ 550.408385][ C0] __msan_chain_origin+0x57/0xa0 [ 550.413355][ C0] tcp_openreq_init_rwin+0xcc6/0x1010 [ 550.420298][ C0] tcp_conn_request+0x2bd7/0x4db0 [ 550.425351][ C0] ? memcg_slab_free_hook+0x3a/0xb00 [ 550.435679][ C0] ? kmsan_get_metadata+0x116/0x180 [ 550.440904][ C0] ? kmsan_get_metadata+0x116/0x180 [ 550.448628][ C0] tcp_v4_conn_request+0x201/0x290 [ 550.457473][ C0] tcp_v6_conn_request+0xeb/0x330 [ 550.462527][ C0] ? inet6_sk_rx_dst_set+0x4d0/0x4d0 [ 550.471586][ C0] tcp_rcv_state_process+0x2f4/0x45a0 [ 550.476994][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 550.482831][ C0] ? kmsan_get_metadata+0x116/0x180 [ 550.488054][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 550.496391][ C0] ? kmsan_get_metadata+0x116/0x180 [ 550.501616][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 550.506307][ C0] ? tcp_v4_fill_cb+0x562/0x5e0 [ 550.512423][ C0] tcp_v4_rcv+0x4b0a/0x5c80 [ 550.516940][ C0] ? rcu_read_unlock_strict+0x9/0x10 [ 550.524842][ C0] ? tcp_filter+0xf0/0xf0 [ 550.529184][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 550.539206][ C0] ip_local_deliver+0x585/0x8d0 [ 550.544084][ C0] ? ip_local_deliver+0x8d0/0x8d0 [ 550.550460][ C0] ? ip_protocol_deliver_rcu+0xc50/0xc50 [ 550.556115][ C0] ip_rcv+0x599/0x820 [ 550.560123][ C0] ? ip_rcv_core+0x1480/0x1480 [ 550.564906][ C0] __netif_receive_skb+0x1ec/0x640 [ 550.570038][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 550.577554][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 550.583221][ C0] process_backlog+0x517/0xbd0 [ 550.588016][ C0] ? native_apic_mem_write+0x45/0x90 [ 550.595450][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 550.600760][ C0] napi_poll+0x428/0x15c0 [ 550.605121][ C0] net_rx_action+0x34c/0xd30 [ 550.609736][ C0] ? net_tx_action+0xd30/0xd30 [ 550.614522][ C0] __do_softirq+0x1b9/0x715 [ 550.619051][ C0] asm_call_irq_on_stack+0xf/0x20 [ 550.624093][ C0] [ 550.630426][ C0] do_softirq_own_stack+0x6e/0x90 [ 550.640941][ C0] __local_bh_enable_ip+0x184/0x1d0 [ 550.648078][ C0] local_bh_enable+0x36/0x40 [ 550.657763][ C0] ip_finish_output2+0x2454/0x2940 [ 550.662903][ C0] ? __msan_get_context_state+0x9/0x20 [ 550.668387][ C0] ? rcu_read_unlock_strict+0x9/0x10 [ 550.673692][ C0] ? nf_ct_deliver_cached_events+0x610/0x7e0 [ 550.679793][ C0] __ip_finish_output+0x9fd/0x1050 [ 550.687944][ C0] ip_finish_output+0x329/0x480 [ 550.697990][ C0] ip_output+0x32e/0x6d0 [ 550.707153][ C0] ? ip_mc_finish_output+0x770/0x770 [ 550.717496][ C0] ? ip_finish_output+0x480/0x480 [ 550.722547][ C0] __ip_queue_xmit+0x1e3d/0x23b0 [ 550.729384][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 550.740158][ C0] ? __msan_poison_alloca+0xe9/0x110 [ 550.745480][ C0] ip_queue_xmit+0xcc/0xf0 [ 550.749928][ C0] ? __ip_queue_xmit+0x23b0/0x23b0 [ 550.755067][ C0] __tcp_transmit_skb+0x4d3f/0x5ea0 [ 550.765049][ C0] tcp_connect+0x104d/0x3cf0 [ 550.769669][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 550.777654][ C0] tcp_v4_connect+0x255c/0x26f0 [ 550.784962][ C0] ? tcp_twsk_unique+0xd40/0xd40 [ 550.789928][ C0] __inet_stream_connect+0x8d8/0x17d0 [ 550.795322][ C0] ? __local_bh_enable_ip+0x97/0x1d0 [ 550.800637][ C0] ? kmsan_get_metadata+0x116/0x180 [ 550.809371][ C0] inet_stream_connect+0x101/0x180 [ 550.816416][ C0] ? __inet_stream_connect+0x17d0/0x17d0 [ 550.822080][ C0] rds_tcp_conn_path_connect+0x9e1/0xd30 [ 550.827747][ C0] ? kmsan_get_metadata+0x116/0x180 [ 550.832976][ C0] ? rds_tcp_state_change+0x400/0x400 [ 550.838400][ C0] rds_connect_worker+0x368/0x550 [ 550.847604][ C0] ? rds_addr_cmp+0x290/0x290 [ 550.854168][ C0] process_one_work+0x1219/0x1fe0 [ 550.859224][ C0] worker_thread+0x10ec/0x2340 [ 550.864022][ C0] kthread+0x521/0x560 [ 550.868113][ C0] ? process_one_work+0x1fe0/0x1fe0 [ 550.877081][ C0] ? kthread_blkcg+0x110/0x110 [ 550.883712][ C0] ret_from_fork+0x1f/0x30 [ 550.888152][ C0] Uninit was stored to memory at: [ 550.893169][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 550.898913][ C0] __msan_chain_origin+0x57/0xa0 [ 550.906990][ C0] tcp_conn_request+0x1b4d/0x4db0 [ 550.913629][ C0] tcp_v4_conn_request+0x201/0x290 [ 550.918751][ C0] tcp_v6_conn_request+0xeb/0x330 [ 550.927051][ C0] tcp_rcv_state_process+0x2f4/0x45a0 [ 550.933802][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 550.938492][ C0] tcp_v4_rcv+0x4b0a/0x5c80 [ 550.943007][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 550.948482][ C0] ip_local_deliver+0x585/0x8d0 [ 550.953352][ C0] ip_rcv+0x599/0x820 [ 550.957355][ C0] __netif_receive_skb+0x1ec/0x640 [ 550.966771][ C0] process_backlog+0x517/0xbd0 [ 550.973422][ C0] napi_poll+0x428/0x15c0 [ 550.977767][ C0] net_rx_action+0x34c/0xd30 [ 550.982373][ C0] __do_softirq+0x1b9/0x715 [ 550.989548][ C0] [ 550.991868][ C0] Uninit was stored to memory at: [ 551.000942][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 551.011892][ C0] __msan_chain_origin+0x57/0xa0 [ 551.016858][ C0] tcp_openreq_init_rwin+0xcc6/0x1010 [ 551.022249][ C0] tcp_conn_request+0x2bd7/0x4db0 [ 551.027293][ C0] tcp_v4_conn_request+0x201/0x290 [ 551.032431][ C0] tcp_v6_conn_request+0xeb/0x330 [ 551.041213][ C0] tcp_rcv_state_process+0x2f4/0x45a0 [ 551.051825][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 551.056519][ C0] tcp_v4_rcv+0x4b0a/0x5c80 [ 551.061034][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 551.069650][ C0] ip_local_deliver+0x585/0x8d0 [ 551.084524][ C0] ip_rcv+0x599/0x820 [ 551.088533][ C0] __netif_receive_skb+0x1ec/0x640 [ 551.093666][ C0] process_backlog+0x517/0xbd0 [ 551.098454][ C0] napi_poll+0x428/0x15c0 [ 551.106974][ C0] net_rx_action+0x34c/0xd30 [ 551.113610][ C0] __do_softirq+0x1b9/0x715 [ 551.118133][ C0] [ 551.120463][ C0] Uninit was stored to memory at: [ 551.125485][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 551.131226][ C0] __msan_chain_origin+0x57/0xa0 [ 551.137673][ C0] tcp_conn_request+0x1b4d/0x4db0 [ 551.144378][ C0] tcp_v4_conn_request+0x201/0x290 [ 551.150035][ C0] tcp_v6_conn_request+0xeb/0x330 [ 551.155081][ C0] tcp_rcv_state_process+0x2f4/0x45a0 [ 551.160475][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 551.166709][ C0] tcp_v4_rcv+0x4b0a/0x5c80 [ 551.173415][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 551.178896][ C0] ip_local_deliver+0x585/0x8d0 [ 551.183854][ C0] ip_rcv+0x599/0x820 [ 551.187938][ C0] __netif_receive_skb+0x1ec/0x640 [ 551.197744][ C0] process_backlog+0x517/0xbd0 [ 551.204404][ C0] napi_poll+0x428/0x15c0 [ 551.208757][ C0] net_rx_action+0x34c/0xd30 [ 551.213365][ C0] __do_softirq+0x1b9/0x715 [ 551.217890][ C0] [ 551.220214][ C0] Uninit was stored to memory at: [ 551.227644][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 551.234547][ C0] __msan_chain_origin+0x57/0xa0 [ 551.239500][ C0] tcp_openreq_init_rwin+0xcc6/0x1010 [ 551.244889][ C0] tcp_conn_request+0x2bd7/0x4db0 [ 551.254682][ C0] tcp_v4_conn_request+0x201/0x290 [ 551.261459][ C0] tcp_v6_conn_request+0xeb/0x330 [ 551.266513][ C0] tcp_rcv_state_process+0x2f4/0x45a0 [ 551.271907][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 551.276599][ C0] tcp_v4_rcv+0x4b0a/0x5c80 [ 551.281116][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 551.287703][ C0] ip_local_deliver+0x585/0x8d0 [ 551.294424][ C0] ip_rcv+0x599/0x820 [ 551.298426][ C0] __netif_receive_skb+0x1ec/0x640 [ 551.303559][ C0] process_backlog+0x517/0xbd0 [ 551.308342][ C0] napi_poll+0x428/0x15c0 [ 551.317025][ C0] net_rx_action+0x34c/0xd30 [ 551.323757][ C0] __do_softirq+0x1b9/0x715 [ 551.328281][ C0] [ 551.330603][ C0] Uninit was stored to memory at: [ 551.335620][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 551.343620][ C0] __msan_chain_origin+0x57/0xa0 [ 551.348582][ C0] tcp_conn_request+0x1b4d/0x4db0 [ 551.357605][ C0] tcp_v4_conn_request+0x201/0x290 [ 551.367979][ C0] tcp_v6_conn_request+0xeb/0x330 [ 551.373032][ C0] tcp_rcv_state_process+0x2f4/0x45a0 [ 551.378425][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 551.383111][ C0] tcp_v4_rcv+0x4b0a/0x5c80 [ 551.391457][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 551.396939][ C0] ip_local_deliver+0x585/0x8d0 [ 551.401808][ C0] ip_rcv+0x599/0x820 [ 551.408001][ C0] __netif_receive_skb+0x1ec/0x640 [ 551.414813][ C0] process_backlog+0x517/0xbd0 [ 551.419601][ C0] napi_poll+0x428/0x15c0 [ 551.423951][ C0] net_rx_action+0x34c/0xd30 [ 551.431212][ C0] __do_softirq+0x1b9/0x715 [ 551.435731][ C0] [ 551.438057][ C0] Uninit was stored to memory at: [ 551.443075][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 551.448820][ C0] __msan_chain_origin+0x57/0xa0 [ 551.457390][ C0] tcp_openreq_init_rwin+0xcc6/0x1010 [ 551.468086][ C0] tcp_conn_request+0x2bd7/0x4db0 [ 551.477701][ C0] tcp_v4_conn_request+0x201/0x290 [ 551.488082][ C0] tcp_v6_conn_request+0xeb/0x330 [ 551.493133][ C0] tcp_rcv_state_process+0x2f4/0x45a0 [ 551.498552][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 551.508098][ C0] tcp_v4_rcv+0x4b0a/0x5c80 [ 551.517912][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 551.523397][ C0] ip_local_deliver+0x585/0x8d0 [ 551.528274][ C0] ip_rcv+0x599/0x820 [ 551.532270][ C0] __netif_receive_skb+0x1ec/0x640 [ 551.539110][ C0] process_backlog+0x517/0xbd0 [ 551.543978][ C0] napi_poll+0x428/0x15c0 [ 551.552823][ C0] net_rx_action+0x34c/0xd30 [ 551.557435][ C0] __do_softirq+0x1b9/0x715 [ 551.561956][ C0] [ 551.564278][ C0] Uninit was stored to memory at: [ 551.571628][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 551.582137][ C0] __msan_chain_origin+0x57/0xa0 [ 551.587101][ C0] tcp_conn_request+0x1b4d/0x4db0 [ 551.594177][ C0] tcp_v4_conn_request+0x201/0x290 [ 551.599309][ C0] tcp_v6_conn_request+0xeb/0x330 [ 551.604372][ C0] tcp_rcv_state_process+0x2f4/0x45a0 [ 551.611966][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 551.616660][ C0] tcp_v4_rcv+0x4b0a/0x5c80 [ 551.621175][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 551.626659][ C0] ip_local_deliver+0x585/0x8d0 [ 551.635934][ C0] ip_rcv+0x599/0x820 [ 551.640057][ C0] __netif_receive_skb+0x1ec/0x640 [ 551.645197][ C0] process_backlog+0x517/0xbd0 [ 551.649988][ C0] napi_poll+0x428/0x15c0 [ 551.657493][ C0] net_rx_action+0x34c/0xd30 [ 551.664563][ C0] __do_softirq+0x1b9/0x715 [ 551.669089][ C0] [ 551.671412][ C0] Uninit was created at: [ 551.680839][ C0] kmsan_save_stack_with_flags+0x3c/0x90 [ 551.686501][ C0] kmsan_alloc_page+0xd3/0x1f0 [ 551.694298][ C0] __alloc_pages_nodemask+0x827/0xf90 [ 551.699695][ C0] alloc_pages_current+0x7b6/0xb60 [ 551.709907][ C0] allocate_slab+0x392/0x11e0 [ 551.714608][ C0] ___slab_alloc+0xd42/0x1930 [ 551.719303][ C0] kmem_cache_alloc+0xc36/0xff0 [ 551.724169][ C0] inet_reqsk_alloc+0xaf/0x8c0 [ 551.728951][ C0] tcp_conn_request+0x911/0x4db0 [ 551.735496][ C0] tcp_v4_conn_request+0x201/0x290 [ 551.740621][ C0] tcp_rcv_state_process+0x2f4/0x45a0 [ 551.746018][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 551.750708][ C0] tcp_v4_rcv+0x4b0a/0x5c80 [ 551.757443][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 551.764705][ C0] ip_local_deliver+0x585/0x8d0 [ 551.769578][ C0] ip_sublist_rcv+0x121b/0x1560 [ 551.774449][ C0] ip_list_rcv+0x8f1/0x960 [ 551.780855][ C0] __netif_receive_skb_list_core+0xe65/0x1250 [ 551.786944][ C0] __netif_receive_skb_list+0x7e2/0x930 [ 551.795906][ C0] netif_receive_skb_list_internal+0x837/0xdb0 [ 551.802089][ C0] napi_complete_done+0x552/0xf80 [ 551.807135][ C0] virtqueue_napi_complete+0xb9/0x1f0 [ 551.812567][ C0] virtnet_poll+0x170f/0x1d10 [ 551.817267][ C0] napi_poll+0x428/0x15c0 [ 551.821616][ C0] net_rx_action+0x34c/0xd30 [ 551.828929][ C0] __do_softirq+0x1b9/0x715 05:23:22 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x1, 0x6, 0x3, 0x1, 0x0, 0xbb96, 0x40, 0xe, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_bp, 0x4000, 0x3, 0x8, 0x5, 0x6, 0x4, 0x1}, 0x0, 0x2, r0, 0x8) 05:23:22 executing program 1: r0 = io_uring_setup(0x14c0, &(0x7f0000000000)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) 05:23:22 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', 0x0, 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xad3) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:23:22 executing program 3: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = getpgrp(0x0) kcmp(r5, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r5}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:23:22 executing program 4: timer_gettime(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 560.480158][T14043] loop2: detected capacity change from 65551 to 0 [ 560.628846][T14049] loop3: detected capacity change from 65551 to 0 [ 560.678416][T14050] loop4: detected capacity change from 65551 to 0 [ 562.059263][T14049] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 562.062761][T14050] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 562.070362][T14049] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 562.077960][T14050] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 562.119549][T14049] F2FS-fs (loop3): invalid crc_offset: 0 [ 562.125894][T14049] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-4) [ 562.175665][T14050] F2FS-fs (loop4): invalid crc_offset: 0 [ 562.181931][T14050] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-4) 05:23:25 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x1, 0x6, 0x3, 0x1, 0x0, 0xbb96, 0x40, 0xe, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_bp, 0x4000, 0x3, 0x8, 0x5, 0x6, 0x4, 0x1}, 0x0, 0x2, r0, 0x8) 05:23:25 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', 0x0, 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xad3) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:23:25 executing program 1: syz_emit_ethernet(0x4a, &(0x7f00000010c0)={@local, @random="8331eab42e4c", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "d71198", 0x14, 0x29, 0x0, @private2, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 05:23:25 executing program 3: timer_gettime(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xad3) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) r4 = getpgrp(0x0) kcmp(r4, r3, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r4}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:23:25 executing program 4: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 563.445280][T14089] loop2: detected capacity change from 65551 to 0 [ 563.483909][T14091] loop4: detected capacity change from 65551 to 0 [ 563.523895][T14090] loop3: detected capacity change from 65551 to 0 [ 563.715281][T14090] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 563.724551][T14090] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 563.748333][T14091] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 563.757268][T14091] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 05:23:26 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8912, &(0x7f0000000000)={'ip6gre0\x00'}) [ 564.037069][T14091] F2FS-fs (loop4): invalid crc_offset: 0 [ 564.037601][T14090] F2FS-fs (loop3): invalid crc_offset: 0 05:23:26 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', 0x0, 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xad3) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 564.178660][T14091] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 564.188324][T14091] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 564.221369][T14090] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 564.230654][T14090] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 564.428701][ C0] not chained 110000 origins [ 564.433329][ C0] CPU: 0 PID: 269 Comm: kworker/u4:6 Not tainted 5.11.0-rc7-syzkaller #0 [ 564.441742][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 564.451791][ C0] Workqueue: krdsd rds_tcp_accept_worker [ 564.457436][ C0] Call Trace: [ 564.460704][ C0] [ 564.463538][ C0] dump_stack+0x21c/0x280 [ 564.467874][ C0] kmsan_internal_chain_origin+0x6f/0x130 [ 564.473597][ C0] ? inet_twsk_alloc+0xa75/0xb90 [ 564.478535][ C0] ? tcp_time_wait+0xd1/0x1170 [ 564.483471][ C0] ? tcp_fin+0x230/0x9d0 [ 564.487713][ C0] ? tcp_data_queue+0x2b14/0xaa10 [ 564.492739][ C0] ? tcp_rcv_state_process+0x3385/0x45a0 [ 564.498377][ C0] ? tcp_v4_do_rcv+0xc63/0x1000 [ 564.503224][ C0] ? tcp_v4_rcv+0x584e/0x5c80 [ 564.507907][ C0] ? ip_protocol_deliver_rcu+0x572/0xc50 [ 564.513720][ C0] ? ip_local_deliver+0x585/0x8d0 [ 564.518744][ C0] ? ip_rcv+0x599/0x820 [ 564.522902][ C0] ? __netif_receive_skb+0x1ec/0x640 [ 564.528204][ C0] ? process_backlog+0x517/0xbd0 [ 564.533141][ C0] ? napi_poll+0x428/0x15c0 [ 564.537646][ C0] ? net_rx_action+0x34c/0xd30 [ 564.542411][ C0] ? kmsan_internal_chain_origin+0x30/0x130 [ 564.548308][ C0] ? do_softirq_own_stack+0x6e/0x90 [ 564.553506][ C0] ? __local_bh_enable_ip+0x184/0x1d0 [ 564.558886][ C0] ? local_bh_enable+0x36/0x40 [ 564.563651][ C0] ? ip_finish_output2+0x2454/0x2940 [ 564.568939][ C0] ? __ip_finish_output+0x9fd/0x1050 [ 564.574225][ C0] ? ip_finish_output+0x329/0x480 [ 564.579255][ C0] ? ip_output+0x32e/0x6d0 [ 564.583672][ C0] ? __ip_queue_xmit+0x1e3d/0x23b0 [ 564.589661][ C0] ? ip_queue_xmit+0xcc/0xf0 [ 564.594268][ C0] ? __tcp_transmit_skb+0x4d3f/0x5ea0 [ 564.599648][ C0] ? tcp_write_xmit+0x4eab/0xf2b0 [ 564.604684][ C0] ? __tcp_push_pending_frames+0x150/0x5b0 [ 564.610502][ C0] ? tcp_send_fin+0x1678/0x1b40 [ 564.615363][ C0] ? tcp_shutdown+0x1f5/0x270 [ 564.620058][ C0] ? inet_shutdown+0x44f/0x6d0 [ 564.624822][ C0] ? kernel_sock_shutdown+0x98/0xc0 [ 564.630075][ C0] ? rds_tcp_accept_one+0x107e/0x12e0 [ 564.635496][ C0] ? rds_tcp_accept_worker+0x60/0x180 [ 564.641061][ C0] ? process_one_work+0x1219/0x1fe0 [ 564.646296][ C0] ? worker_thread+0x10ec/0x2340 [ 564.651242][ C0] ? kthread+0x521/0x560 [ 564.655492][ C0] ? ret_from_fork+0x1f/0x30 [ 564.660086][ C0] ? __irq_exit_rcu+0x83/0x280 [ 564.664856][ C0] ? __msan_get_context_state+0x9/0x20 [ 564.670360][ C0] ? irqentry_exit+0x12/0x50 [ 564.674969][ C0] ? sysvec_call_function_single+0x11d/0x130 [ 564.680956][ C0] ? kmsan_get_metadata+0x116/0x180 [ 564.686158][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 564.691973][ C0] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 564.698131][ C0] ? __msan_get_context_state+0x9/0x20 [ 564.703593][ C0] ? __module_get+0x19/0x170 [ 564.708269][ C0] ? kmsan_get_metadata+0x116/0x180 [ 564.713471][ C0] __msan_chain_origin+0x57/0xa0 [ 564.718413][ C0] __inet_twsk_schedule+0x285/0x2e0 [ 564.723614][ C0] tcp_time_wait+0xe0a/0x1170 [ 564.728306][ C0] tcp_fin+0x230/0x9d0 [ 564.732376][ C0] tcp_data_queue+0x2b14/0xaa10 [ 564.737228][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 564.743039][ C0] ? tcp_urg+0xba5/0x10a0 [ 564.747371][ C0] tcp_rcv_state_process+0x3385/0x45a0 [ 564.752857][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 564.758677][ C0] ? kmsan_get_metadata+0x116/0x180 [ 564.763879][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 564.768575][ C0] ? kmsan_save_stack_with_flags+0x50/0x90 [ 564.774387][ C0] tcp_v4_rcv+0x584e/0x5c80 [ 564.778886][ C0] ? rcu_read_unlock_strict+0x9/0x10 [ 564.784178][ C0] ? tcp_v4_rcv+0x1961/0x5c80 [ 564.788849][ C0] ? tcp_filter+0xf0/0xf0 [ 564.793174][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 564.798639][ C0] ip_local_deliver+0x585/0x8d0 [ 564.803498][ C0] ? ip_local_deliver+0x8d0/0x8d0 [ 564.808538][ C0] ? ip_protocol_deliver_rcu+0xc50/0xc50 [ 564.814182][ C0] ip_rcv+0x599/0x820 [ 564.818191][ C0] ? ip_rcv_core+0x1480/0x1480 [ 564.822979][ C0] __netif_receive_skb+0x1ec/0x640 [ 564.828104][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 564.833746][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 564.839389][ C0] process_backlog+0x517/0xbd0 [ 564.844156][ C0] ? native_apic_mem_write+0x45/0x90 [ 564.849451][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 564.854741][ C0] napi_poll+0x428/0x15c0 [ 564.859077][ C0] net_rx_action+0x34c/0xd30 [ 564.863673][ C0] ? net_tx_action+0xd30/0xd30 [ 564.868439][ C0] __do_softirq+0x1b9/0x715 [ 564.872947][ C0] asm_call_irq_on_stack+0xf/0x20 [ 564.877975][ C0] [ 564.880900][ C0] do_softirq_own_stack+0x6e/0x90 [ 564.885928][ C0] __local_bh_enable_ip+0x184/0x1d0 [ 564.891129][ C0] local_bh_enable+0x36/0x40 [ 564.895736][ C0] ip_finish_output2+0x2454/0x2940 [ 564.900874][ C0] ? __msan_get_context_state+0x9/0x20 [ 564.906334][ C0] ? rcu_read_unlock_strict+0x9/0x10 [ 564.911619][ C0] ? nf_ct_deliver_cached_events+0x610/0x7e0 [ 564.917604][ C0] __ip_finish_output+0x9fd/0x1050 [ 564.922726][ C0] ip_finish_output+0x329/0x480 [ 564.927594][ C0] ip_output+0x32e/0x6d0 [ 564.931840][ C0] ? ip_mc_finish_output+0x770/0x770 [ 564.937138][ C0] ? ip_finish_output+0x480/0x480 [ 564.942188][ C0] __ip_queue_xmit+0x1e3d/0x23b0 [ 564.947147][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 564.952792][ C0] ? __msan_poison_alloca+0xe9/0x110 [ 564.958087][ C0] ? bpf_skops_write_hdr_opt+0x104/0x850 [ 564.963747][ C0] ip_queue_xmit+0xcc/0xf0 [ 564.968168][ C0] ? __ip_queue_xmit+0x23b0/0x23b0 [ 564.973385][ C0] __tcp_transmit_skb+0x4d3f/0x5ea0 [ 564.978608][ C0] tcp_write_xmit+0x4eab/0xf2b0 [ 564.983461][ C0] ? kmsan_get_shadow_origin_ptr+0x29/0xb0 [ 564.989288][ C0] ? kmsan_get_metadata+0x116/0x180 [ 564.994491][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 565.000303][ C0] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 565.006373][ C0] ? kmsan_get_metadata+0x116/0x180 [ 565.011576][ C0] __tcp_push_pending_frames+0x150/0x5b0 [ 565.017216][ C0] tcp_send_fin+0x1678/0x1b40 [ 565.021904][ C0] ? kmsan_get_metadata+0x116/0x180 [ 565.027106][ C0] tcp_shutdown+0x1f5/0x270 [ 565.031607][ C0] ? tcp_set_state+0xb90/0xb90 [ 565.036368][ C0] inet_shutdown+0x44f/0x6d0 [ 565.040960][ C0] ? inet_recvmsg+0x6c0/0x6c0 [ 565.045636][ C0] kernel_sock_shutdown+0x98/0xc0 [ 565.050662][ C0] rds_tcp_accept_one+0x107e/0x12e0 [ 565.055867][ C0] rds_tcp_accept_worker+0x60/0x180 [ 565.061074][ C0] ? rds_tcp_exit_net+0xcd0/0xcd0 [ 565.066099][ C0] process_one_work+0x1219/0x1fe0 [ 565.071136][ C0] worker_thread+0x10ec/0x2340 [ 565.075914][ C0] kthread+0x521/0x560 [ 565.079981][ C0] ? process_one_work+0x1fe0/0x1fe0 [ 565.085185][ C0] ? kthread_blkcg+0x110/0x110 [ 565.089950][ C0] ret_from_fork+0x1f/0x30 [ 565.094370][ C0] Uninit was stored to memory at: [ 565.099387][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 565.105110][ C0] __msan_chain_origin+0x57/0xa0 [ 565.110046][ C0] inet_twsk_alloc+0xaa6/0xb90 [ 565.114802][ C0] tcp_time_wait+0xd1/0x1170 [ 565.119387][ C0] tcp_fin+0x230/0x9d0 [ 565.123452][ C0] tcp_data_queue+0x2b14/0xaa10 [ 565.128303][ C0] tcp_rcv_state_process+0x3385/0x45a0 [ 565.133760][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 565.138434][ C0] tcp_v4_rcv+0x584e/0x5c80 [ 565.142929][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 565.148387][ C0] ip_local_deliver+0x585/0x8d0 [ 565.153236][ C0] ip_rcv+0x599/0x820 [ 565.157214][ C0] __netif_receive_skb+0x1ec/0x640 [ 565.162325][ C0] process_backlog+0x517/0xbd0 [ 565.167087][ C0] napi_poll+0x428/0x15c0 [ 565.171415][ C0] net_rx_action+0x34c/0xd30 [ 565.176004][ C0] __do_softirq+0x1b9/0x715 [ 565.180520][ C0] [ 565.182874][ C0] Uninit was stored to memory at: [ 565.187881][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 565.193608][ C0] __msan_chain_origin+0x57/0xa0 [ 565.198547][ C0] __inet_twsk_schedule+0x285/0x2e0 [ 565.203749][ C0] tcp_time_wait+0xe0a/0x1170 [ 565.208440][ C0] tcp_fin+0x230/0x9d0 [ 565.212524][ C0] tcp_data_queue+0x2b14/0xaa10 [ 565.217386][ C0] tcp_rcv_state_process+0x3385/0x45a0 [ 565.222852][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 565.227526][ C0] tcp_v4_rcv+0x584e/0x5c80 [ 565.232026][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 565.237488][ C0] ip_local_deliver+0x585/0x8d0 [ 565.242343][ C0] ip_rcv+0x599/0x820 [ 565.246324][ C0] __netif_receive_skb+0x1ec/0x640 [ 565.251435][ C0] process_backlog+0x517/0xbd0 [ 565.256197][ C0] napi_poll+0x428/0x15c0 [ 565.260525][ C0] net_rx_action+0x34c/0xd30 [ 565.265112][ C0] __do_softirq+0x1b9/0x715 [ 565.269612][ C0] [ 565.271932][ C0] Uninit was stored to memory at: [ 565.276940][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 565.282661][ C0] __msan_chain_origin+0x57/0xa0 [ 565.287601][ C0] tcp_time_wait+0x814/0x1170 [ 565.292274][ C0] tcp_fin+0x230/0x9d0 [ 565.296341][ C0] tcp_data_queue+0x2b14/0xaa10 [ 565.301191][ C0] tcp_rcv_state_process+0x3385/0x45a0 [ 565.306652][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 565.311324][ C0] tcp_v4_rcv+0x584e/0x5c80 [ 565.315821][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 565.321279][ C0] ip_local_deliver+0x585/0x8d0 [ 565.326132][ C0] ip_rcv+0x599/0x820 [ 565.330111][ C0] __netif_receive_skb+0x1ec/0x640 [ 565.335222][ C0] process_backlog+0x517/0xbd0 [ 565.339986][ C0] napi_poll+0x428/0x15c0 [ 565.344318][ C0] net_rx_action+0x34c/0xd30 [ 565.348909][ C0] __do_softirq+0x1b9/0x715 [ 565.353415][ C0] [ 565.355731][ C0] Uninit was stored to memory at: [ 565.360734][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 565.366467][ C0] __msan_chain_origin+0x57/0xa0 [ 565.371405][ C0] inet_twsk_alloc+0xaa6/0xb90 [ 565.376165][ C0] tcp_time_wait+0xd1/0x1170 [ 565.380750][ C0] tcp_fin+0x230/0x9d0 [ 565.384829][ C0] tcp_data_queue+0x2b14/0xaa10 [ 565.389677][ C0] tcp_rcv_state_process+0x3385/0x45a0 [ 565.395142][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 565.399837][ C0] tcp_v4_rcv+0x584e/0x5c80 [ 565.404351][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 565.409821][ C0] ip_local_deliver+0x585/0x8d0 [ 565.414678][ C0] ip_rcv+0x599/0x820 [ 565.418660][ C0] __netif_receive_skb+0x1ec/0x640 [ 565.423774][ C0] process_backlog+0x517/0xbd0 [ 565.428542][ C0] napi_poll+0x428/0x15c0 [ 565.432871][ C0] net_rx_action+0x34c/0xd30 [ 565.437464][ C0] __do_softirq+0x1b9/0x715 [ 565.441966][ C0] [ 565.444276][ C0] Uninit was stored to memory at: [ 565.449278][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 565.455001][ C0] __msan_chain_origin+0x57/0xa0 [ 565.459939][ C0] __inet_twsk_schedule+0x285/0x2e0 [ 565.465137][ C0] tcp_time_wait+0xe0a/0x1170 [ 565.469810][ C0] tcp_fin+0x230/0x9d0 [ 565.473873][ C0] tcp_data_queue+0x2b14/0xaa10 [ 565.478720][ C0] tcp_rcv_state_process+0x3385/0x45a0 [ 565.484178][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 565.488851][ C0] tcp_v4_rcv+0x584e/0x5c80 [ 565.493348][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 565.498805][ C0] ip_local_deliver+0x585/0x8d0 [ 565.503652][ C0] ip_rcv+0x599/0x820 [ 565.507631][ C0] __netif_receive_skb+0x1ec/0x640 [ 565.512745][ C0] process_backlog+0x517/0xbd0 [ 565.517507][ C0] napi_poll+0x428/0x15c0 [ 565.521836][ C0] net_rx_action+0x34c/0xd30 [ 565.527300][ C0] __do_softirq+0x1b9/0x715 [ 565.531813][ C0] [ 565.534124][ C0] Uninit was stored to memory at: [ 565.539126][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 565.544868][ C0] __msan_chain_origin+0x57/0xa0 [ 565.549807][ C0] tcp_time_wait+0x814/0x1170 [ 565.554478][ C0] tcp_fin+0x230/0x9d0 [ 565.559150][ C0] tcp_data_queue+0x2b14/0xaa10 [ 565.563999][ C0] tcp_rcv_state_process+0x3385/0x45a0 [ 565.569464][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 565.574135][ C0] tcp_v4_rcv+0x584e/0x5c80 [ 565.578634][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 565.584093][ C0] ip_local_deliver+0x585/0x8d0 [ 565.588957][ C0] ip_rcv+0x599/0x820 [ 565.592960][ C0] __netif_receive_skb+0x1ec/0x640 [ 565.598071][ C0] process_backlog+0x517/0xbd0 [ 565.602835][ C0] napi_poll+0x428/0x15c0 [ 565.607163][ C0] net_rx_action+0x34c/0xd30 [ 565.611840][ C0] __do_softirq+0x1b9/0x715 [ 565.616339][ C0] [ 565.618646][ C0] Uninit was stored to memory at: [ 565.623649][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 565.629394][ C0] __msan_chain_origin+0x57/0xa0 [ 565.634367][ C0] inet_twsk_alloc+0xaa6/0xb90 [ 565.639132][ C0] tcp_time_wait+0xd1/0x1170 [ 565.643731][ C0] tcp_fin+0x230/0x9d0 [ 565.647813][ C0] tcp_data_queue+0x2b14/0xaa10 [ 565.652668][ C0] tcp_rcv_state_process+0x3385/0x45a0 [ 565.658130][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 565.662804][ C0] tcp_v4_rcv+0x584e/0x5c80 [ 565.667303][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 565.672769][ C0] ip_local_deliver+0x585/0x8d0 [ 565.677638][ C0] ip_rcv+0x599/0x820 [ 565.681625][ C0] __netif_receive_skb+0x1ec/0x640 [ 565.686745][ C0] process_backlog+0x517/0xbd0 [ 565.691543][ C0] napi_poll+0x428/0x15c0 [ 565.695901][ C0] net_rx_action+0x34c/0xd30 [ 565.700499][ C0] __do_softirq+0x1b9/0x715 [ 565.705002][ C0] [ 565.707314][ C0] Uninit was created at: [ 565.711560][ C0] kmsan_save_stack_with_flags+0x3c/0x90 [ 565.717207][ C0] kmsan_alloc_page+0xd3/0x1f0 [ 565.721988][ C0] __alloc_pages_nodemask+0x827/0xf90 [ 565.727369][ C0] alloc_pages_current+0x7b6/0xb60 [ 565.732503][ C0] allocate_slab+0x392/0x11e0 [ 565.737191][ C0] ___slab_alloc+0xd42/0x1930 [ 565.741871][ C0] kmem_cache_alloc+0xc36/0xff0 [ 565.746724][ C0] inet_twsk_alloc+0x158/0xb90 [ 565.751485][ C0] tcp_time_wait+0xd1/0x1170 [ 565.756077][ C0] tcp_fin+0x230/0x9d0 [ 565.760145][ C0] tcp_data_queue+0x2b14/0xaa10 [ 565.765006][ C0] tcp_rcv_state_process+0x3385/0x45a0 [ 565.770473][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 565.775167][ C0] tcp_v4_rcv+0x584e/0x5c80 [ 565.779675][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 565.785576][ C0] ip_local_deliver+0x585/0x8d0 [ 565.790965][ C0] ip_rcv+0x599/0x820 [ 565.794950][ C0] __netif_receive_skb+0x1ec/0x640 [ 565.800063][ C0] process_backlog+0x517/0xbd0 [ 565.804827][ C0] napi_poll+0x428/0x15c0 [ 565.809155][ C0] net_rx_action+0x34c/0xd30 [ 565.813752][ C0] __do_softirq+0x1b9/0x715 [ 566.196757][T14114] loop2: detected capacity change from 65551 to 0 05:23:30 executing program 5: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x2, 0x0, 0x4}}, 0x9) 05:23:30 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0xf000) 05:23:30 executing program 0: socket(0x22, 0x0, 0xff) 05:23:30 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xad3) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:23:30 executing program 3: timer_gettime(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xad3) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) r4 = getpgrp(0x0) kcmp(r4, r3, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r4}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:23:30 executing program 4: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 567.778722][T14130] loop3: detected capacity change from 65551 to 0 [ 567.858215][T14130] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 567.866741][T14130] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 05:23:30 executing program 1: r0 = socket(0x2, 0x3, 0xa) recvmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x12000) [ 567.933806][T14134] loop4: detected capacity change from 65551 to 0 [ 568.094555][T14134] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 568.103354][T14134] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 05:23:30 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xad3) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 568.137282][T14130] F2FS-fs (loop3): invalid crc_offset: 0 [ 568.278030][T14130] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 568.278793][T14134] F2FS-fs (loop4): invalid crc_offset: 0 [ 568.287872][T14130] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 568.343314][T14134] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 568.352891][T14134] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 568.630372][ T8254] Bluetooth: hci5: ACL packet for unknown connection handle 0 [ 568.659541][ T8254] Bluetooth: hci5: ACL packet for unknown connection handle 0 05:23:31 executing program 5: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8041, 0x0) 05:23:31 executing program 0: bpf$BPF_BTF_LOAD(0xd, 0x0, 0x0) 05:23:31 executing program 1: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={@null=' \x00', 0x0, 'veth0_to_bond\x00'}) 05:23:32 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xad3) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:23:32 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000080)=""/143) 05:23:32 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc020660b, 0x0) 05:23:32 executing program 4: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:23:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000023c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0f01d40f01c20f78de0f4d7f00f0f7563c0f01c5b8b1018ed8640fc73166b9800000c00f326635002000000f300f00cd", 0x30}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:23:32 executing program 3: timer_gettime(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xad3) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) r4 = getpgrp(0x0) kcmp(r4, r3, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r4}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:23:33 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xad3) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:23:33 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x1004d) [ 570.910476][ T3162] ieee802154 phy0 wpan0: encryption failed: -22 [ 570.917073][ T3162] ieee802154 phy1 wpan1: encryption failed: -22 05:23:33 executing program 0: pselect6(0x40, &(0x7f0000000cc0), &(0x7f0000000d00), 0x0, &(0x7f0000000d80)={0x0, 0x989680}, &(0x7f0000000e00)={&(0x7f0000000dc0)={[0x7]}, 0x8}) [ 571.168270][T14173] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 571.194828][T14172] loop4: detected capacity change from 65551 to 0 [ 571.366586][T14172] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 571.368587][T14181] loop2: detected capacity change from 65536 to 0 [ 571.375070][T14172] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 571.505843][T14186] loop3: detected capacity change from 65551 to 0 [ 571.540376][T14181] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 571.548375][T14186] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 571.548550][T14186] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 571.558281][T14186] F2FS-fs (loop3): invalid crc_offset: 0 [ 571.565044][T14181] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 571.663862][T14186] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 571.690300][T14186] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 571.887350][T14172] F2FS-fs (loop4): invalid crc_offset: 0 [ 571.969324][T14172] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-4) 05:23:34 executing program 1: msgrcv(0xffffffffffffffff, 0x0, 0x1008, 0x0, 0x0) [ 572.091580][T14181] F2FS-fs (loop2): invalid crc_offset: 0 [ 572.170817][T14181] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-4) 05:23:34 executing program 4: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:23:34 executing program 5: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0xffffffffffffffff) 05:23:35 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xad3) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:23:35 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="0100ed000000047f0000310000de080003"], 0x1c}}, 0x0) [ 573.023709][T14209] loop4: detected capacity change from 65551 to 0 05:23:35 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x5451, 0x0) 05:23:35 executing program 5: syz_emit_ethernet(0x4a, &(0x7f00000010c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa8331eab42e4c86dd60d7119800142100fe80000000000000000000000000000000aa00"/55], 0x0) 05:23:36 executing program 4: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 573.638737][T14219] loop2: detected capacity change from 65536 to 0 05:23:36 executing program 3: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xad3) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) r4 = getpgrp(0x0) kcmp(r4, r3, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r4}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:23:36 executing program 0: r0 = socket(0xa, 0x6, 0x0) getsockopt$WPAN_WANTACK(r0, 0x29, 0x18, 0x0, &(0x7f0000000040)) 05:23:36 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, &(0x7f0000000800)) 05:23:36 executing program 5: r0 = socket(0xa, 0x6, 0x0) getsockopt$WPAN_WANTACK(r0, 0x29, 0x1a, 0x0, &(0x7f0000000040)) [ 574.305524][T14231] loop4: detected capacity change from 65551 to 0 [ 574.611432][T14239] loop3: detected capacity change from 65551 to 0 05:23:37 executing program 4: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:23:37 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000100)={"cb80447f97d41feec837803a510c9898"}) 05:23:37 executing program 1: socketpair(0x25, 0x0, 0x0, &(0x7f0000002640)) [ 575.393841][T14252] loop4: detected capacity change from 65551 to 0 [ 575.406813][ T1] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=6/ABRT [ 575.819977][ T1] systemd[1]: systemd-journald.service: Unit entered failed state. [ 575.848625][ T1] systemd[1]: systemd-journald.service: Failed with result 'watchdog'. [ 575.999280][ T1] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 576.379942][ T1] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 576.418118][ T1] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 576.442234][ T1] systemd[1]: Stopped Journal Service. [ 576.684519][ T1] systemd[1]: Starting Journal Service... [ 577.341529][T14263] systemd-journald[14263]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 580.240022][T14219] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 580.252884][T14219] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 580.264196][T14239] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 580.274747][T14239] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 580.399429][T14239] F2FS-fs (loop3): invalid crc_offset: 0 [ 580.405601][T14239] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-4) [ 580.462547][T14219] F2FS-fs (loop2): invalid crc_offset: 0 [ 580.468461][T14219] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-4) 05:23:43 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xad3) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:23:43 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x5421, 0x0) 05:23:43 executing program 4: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', 0x0, 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:23:43 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x1) 05:23:43 executing program 0: setuid(0xee01) clock_settime(0x0, &(0x7f0000000000)={0x77359400}) 05:23:43 executing program 3: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xad3) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) r4 = getpgrp(0x0) kcmp(r4, r3, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r4}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 581.040069][T14282] loop3: detected capacity change from 65551 to 0 [ 581.112475][T14282] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 581.120631][T14282] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 581.140073][T14282] F2FS-fs (loop3): invalid crc_offset: 0 05:23:43 executing program 1: r0 = syz_io_uring_setup(0x7d94, &(0x7f0000000440), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000500)) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) [ 581.285469][T14282] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 581.295093][T14282] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 05:23:43 executing program 5: r0 = socket(0x2a, 0x2, 0x0) bind$pptp(r0, 0x0, 0x0) [ 581.523557][T14291] loop4: detected capacity change from 65551 to 0 [ 581.595769][T14282] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 581.611378][T14282] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b [ 581.620848][T14299] loop2: detected capacity change from 65536 to 0 [ 581.664218][T14299] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 581.672414][T14299] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 05:23:44 executing program 0: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 581.840249][T14299] F2FS-fs (loop2): invalid crc_offset: 0 [ 581.962527][T14299] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 581.971823][T14299] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 05:23:44 executing program 3: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xad3) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) r4 = getpgrp(0x0) kcmp(r4, r3, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r4}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:23:44 executing program 4: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', 0x0, 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 582.519012][T14299] F2FS-fs (loop2): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 582.625927][T14299] F2FS-fs (loop2): Failed to read root inode 05:23:45 executing program 5: r0 = socket(0xa, 0x3, 0x7) setsockopt$WPAN_SECURITY(r0, 0x29, 0x22, 0x0, 0x59) [ 582.861391][T14322] loop4: detected capacity change from 65551 to 0 [ 583.406980][T14331] loop3: detected capacity change from 65551 to 0 [ 583.570670][T14331] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 583.578973][T14331] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 583.674021][T14331] F2FS-fs (loop3): invalid crc_offset: 0 05:23:46 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {0x0, 0x0, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xad3) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:23:46 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x5450, 0x0) 05:23:46 executing program 1: getitimer(0x0, &(0x7f0000000540)) 05:23:46 executing program 4: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', 0x0, 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:23:46 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000280)={0x0}) [ 583.916055][T14331] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 583.929603][T14331] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 584.198090][T14340] loop4: detected capacity change from 65551 to 0 05:23:46 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x5409, 0x0) 05:23:47 executing program 1: syz_mount_image$nfs(&(0x7f00000012c0)='nfs\x00', 0x0, 0x0, 0x1, &(0x7f0000001500)=[{&(0x7f0000001340)='^', 0x1}], 0x0, &(0x7f0000001540)) 05:23:47 executing program 3: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = getpgrp(0x0) kcmp(r5, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r5}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 584.674807][T14354] loop2: detected capacity change from 65551 to 0 05:23:47 executing program 5: io_setup(0x6a75, &(0x7f0000000000)) io_setup(0x2, &(0x7f0000000380)=0x0) io_destroy(r0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(r0) 05:23:47 executing program 4: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 584.819465][T14354] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 584.828485][T14354] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 584.858424][T14354] F2FS-fs (loop2): invalid crc_offset: 0 [ 584.918162][T14354] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 584.927466][T14354] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 585.042321][ C1] not chained 120000 origins [ 585.046957][ C1] CPU: 1 PID: 584 Comm: kworker/u4:12 Not tainted 5.11.0-rc7-syzkaller #0 [ 585.055466][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 585.065528][ C1] Workqueue: krdsd rds_connect_worker [ 585.070927][ C1] Call Trace: [ 585.074205][ C1] [ 585.077046][ C1] dump_stack+0x21c/0x280 [ 585.081399][ C1] kmsan_internal_chain_origin+0x6f/0x130 [ 585.087141][ C1] ? kmsan_get_metadata+0x116/0x180 [ 585.092362][ C1] ? kmsan_get_metadata+0x116/0x180 [ 585.097682][ C1] ? kmsan_get_metadata+0x116/0x180 [ 585.102895][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 585.108725][ C1] ? __msan_metadata_ptr_for_store_n+0xe/0x10 [ 585.114810][ C1] ? tcp_parse_options+0x225e/0x22f0 [ 585.120119][ C1] ? kmsan_get_metadata+0x116/0x180 [ 585.125342][ C1] __msan_chain_origin+0x57/0xa0 [ 585.130314][ C1] tcp_conn_request+0x1b4d/0x4db0 [ 585.135369][ C1] ? memcg_slab_free_hook+0x3a/0xb00 [ 585.140679][ C1] ? kmsan_get_metadata+0x116/0x180 [ 585.143489][T14354] F2FS-fs (loop2): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 585.145905][ C1] ? kmsan_get_metadata+0x116/0x180 [ 585.145960][ C1] tcp_v4_conn_request+0x201/0x290 [ 585.145993][ C1] tcp_v6_conn_request+0xeb/0x330 [ 585.146032][ C1] ? inet6_sk_rx_dst_set+0x4d0/0x4d0 [ 585.146069][ C1] tcp_rcv_state_process+0x2f4/0x45a0 [ 585.146102][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 585.157691][T14354] F2FS-fs (loop2): Failed to read root inode [ 585.162054][ C1] ? kmsan_get_metadata+0x116/0x180 [ 585.162102][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 585.162141][ C1] ? kmsan_get_metadata+0x116/0x180 [ 585.162177][ C1] tcp_v4_do_rcv+0xc63/0x1000 [ 585.162204][ C1] ? tcp_v4_fill_cb+0x562/0x5e0 [ 585.162235][ C1] tcp_v4_rcv+0x4b0a/0x5c80 [ 585.162260][ C1] ? rcu_read_unlock_strict+0x9/0x10 [ 585.162301][ C1] ? tcp_filter+0xf0/0xf0 [ 585.162328][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 585.162367][ C1] ip_local_deliver+0x585/0x8d0 [ 585.245060][ C1] ? ip_local_deliver+0x8d0/0x8d0 [ 585.250106][ C1] ? ip_protocol_deliver_rcu+0xc50/0xc50 [ 585.255773][ C1] ip_rcv+0x599/0x820 [ 585.259772][ C1] ? ip_rcv_core+0x1480/0x1480 [ 585.264552][ C1] __netif_receive_skb+0x1ec/0x640 [ 585.269683][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 585.275333][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 585.280990][ C1] process_backlog+0x517/0xbd0 [ 585.285769][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 585.291425][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 585.296729][ C1] napi_poll+0x428/0x15c0 [ 585.301077][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 585.306732][ C1] net_rx_action+0x34c/0xd30 [ 585.311342][ C1] ? net_tx_action+0xd30/0xd30 [ 585.316122][ C1] __do_softirq+0x1b9/0x715 [ 585.320641][ C1] asm_call_irq_on_stack+0xf/0x20 [ 585.325786][ C1] [ 585.328718][ C1] do_softirq_own_stack+0x6e/0x90 [ 585.333761][ C1] __local_bh_enable_ip+0x184/0x1d0 [ 585.338975][ C1] local_bh_enable+0x36/0x40 [ 585.343687][ C1] ip_finish_output2+0x2454/0x2940 [ 585.348828][ C1] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 585.355099][ C1] __ip_finish_output+0x9fd/0x1050 [ 585.363384][ C1] ip_finish_output+0x329/0x480 [ 585.368258][ C1] ip_output+0x32e/0x6d0 [ 585.369114][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 585.372524][ C1] ? ip_mc_finish_output+0x770/0x770 [ 585.372560][ C1] ? ip_finish_output+0x480/0x480 [ 585.372593][ C1] __ip_queue_xmit+0x1e3d/0x23b0 [ 585.372626][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 585.415789][ C1] ? __msan_poison_alloca+0xe9/0x110 [ 585.423837][ C1] ip_queue_xmit+0xcc/0xf0 [ 585.428283][ C1] ? __ip_queue_xmit+0x23b0/0x23b0 [ 585.433425][ C1] __tcp_transmit_skb+0x4d3f/0x5ea0 [ 585.448100][ C1] tcp_connect+0x104d/0x3cf0 [ 585.455297][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 585.456620][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 585.460979][ C1] tcp_v4_connect+0x255c/0x26f0 [ 585.461028][ C1] ? tcp_twsk_unique+0xd40/0xd40 [ 585.492557][ C1] __inet_stream_connect+0x8d8/0x17d0 [ 585.505851][ C1] ? __local_bh_enable_ip+0x97/0x1d0 [ 585.516645][ C1] ? kmsan_get_metadata+0x116/0x180 [ 585.516973][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 585.521870][ C1] inet_stream_connect+0x101/0x180 [ 585.521908][ C1] ? __inet_stream_connect+0x17d0/0x17d0 [ 585.554744][ C1] rds_tcp_conn_path_connect+0x9e1/0xd30 [ 585.568113][ C1] ? kmsan_get_metadata+0x116/0x180 [ 585.578615][ C1] ? rds_tcp_state_change+0x400/0x400 [ 585.578692][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 585.584019][ C1] rds_connect_worker+0x368/0x550 [ 585.584052][ C1] ? rds_addr_cmp+0x290/0x290 [ 585.584078][ C1] process_one_work+0x1219/0x1fe0 [ 585.584122][ C1] worker_thread+0x10ec/0x2340 [ 585.584158][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 585.584197][ C1] ? kmsan_get_metadata+0x116/0x180 [ 585.584237][ C1] kthread+0x521/0x560 [ 585.649919][ C1] ? process_one_work+0x1fe0/0x1fe0 [ 585.664684][ C1] ? kthread_blkcg+0x110/0x110 [ 585.672007][ C1] ret_from_fork+0x1f/0x30 [ 585.679045][ C1] Uninit was stored to memory at: [ 585.687188][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 585.694520][ C1] __msan_chain_origin+0x57/0xa0 [ 585.708807][ C1] tcp_conn_request+0x1b4d/0x4db0 [ 585.719779][ C1] tcp_v4_conn_request+0x201/0x290 [ 585.719856][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 585.724897][ C1] tcp_v6_conn_request+0xeb/0x330 [ 585.724933][ C1] tcp_rcv_state_process+0x2f4/0x45a0 [ 585.724970][ C1] tcp_v4_do_rcv+0xc63/0x1000 [ 585.724994][ C1] tcp_v4_rcv+0x4b0a/0x5c80 [ 585.725017][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 585.725048][ C1] ip_local_deliver+0x585/0x8d0 [ 585.725077][ C1] ip_rcv+0x599/0x820 [ 585.725103][ C1] __netif_receive_skb+0x1ec/0x640 [ 585.725136][ C1] process_backlog+0x517/0xbd0 [ 585.808373][ C1] napi_poll+0x428/0x15c0 [ 585.812737][ C1] net_rx_action+0x34c/0xd30 [ 585.820363][ C1] __do_softirq+0x1b9/0x715 [ 585.827479][ C1] [ 585.834338][ C1] Uninit was stored to memory at: [ 585.842522][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 585.856107][ C1] __msan_chain_origin+0x57/0xa0 [ 585.864368][ C1] tcp_openreq_init_rwin+0xcc6/0x1010 [ 585.864662][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 585.869755][ C1] tcp_conn_request+0x2bd7/0x4db0 [ 585.869790][ C1] tcp_v4_conn_request+0x201/0x290 [ 585.902137][ C1] tcp_v6_conn_request+0xeb/0x330 [ 585.915625][ C1] tcp_rcv_state_process+0x2f4/0x45a0 [ 585.926489][ C1] tcp_v4_do_rcv+0xc63/0x1000 [ 585.926750][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 585.931176][ C1] tcp_v4_rcv+0x4b0a/0x5c80 [ 585.931203][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 585.963712][ C1] ip_local_deliver+0x585/0x8d0 [ 585.977442][ C1] ip_rcv+0x599/0x820 [ 585.985519][ C1] __netif_receive_skb+0x1ec/0x640 [ 585.985826][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 585.990646][ C1] process_backlog+0x517/0xbd0 [ 585.990681][ C1] napi_poll+0x428/0x15c0 [ 586.020250][ C1] net_rx_action+0x34c/0xd30 [ 586.027737][ C1] __do_softirq+0x1b9/0x715 [ 586.027954][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 586.032252][ C1] [ 586.032258][ C1] Uninit was stored to memory at: [ 586.032266][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 586.032302][ C1] __msan_chain_origin+0x57/0xa0 [ 586.032333][ C1] tcp_conn_request+0x1b4d/0x4db0 [ 586.032364][ C1] tcp_v4_conn_request+0x201/0x290 [ 586.032389][ C1] tcp_v6_conn_request+0xeb/0x330 [ 586.032422][ C1] tcp_rcv_state_process+0x2f4/0x45a0 [ 586.032452][ C1] tcp_v4_do_rcv+0xc63/0x1000 [ 586.032476][ C1] tcp_v4_rcv+0x4b0a/0x5c80 [ 586.119783][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 586.127246][ C1] ip_local_deliver+0x585/0x8d0 [ 586.134587][ C1] ip_rcv+0x599/0x820 [ 586.142536][ C1] __netif_receive_skb+0x1ec/0x640 [ 586.150043][ C1] process_backlog+0x517/0xbd0 [ 586.157254][ C1] napi_poll+0x428/0x15c0 [ 586.171774][ C1] net_rx_action+0x34c/0xd30 [ 586.180182][ C1] __do_softirq+0x1b9/0x715 [ 586.180260][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 586.184693][ C1] [ 586.184698][ C1] Uninit was stored to memory at: [ 586.184706][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 586.184741][ C1] __msan_chain_origin+0x57/0xa0 [ 586.184770][ C1] tcp_openreq_init_rwin+0xcc6/0x1010 [ 586.184797][ C1] tcp_conn_request+0x2bd7/0x4db0 [ 586.184824][ C1] tcp_v4_conn_request+0x201/0x290 [ 586.184863][ C1] tcp_v6_conn_request+0xeb/0x330 [ 586.184897][ C1] tcp_rcv_state_process+0x2f4/0x45a0 [ 586.266752][ C1] tcp_v4_do_rcv+0xc63/0x1000 [ 586.271458][ C1] tcp_v4_rcv+0x4b0a/0x5c80 [ 586.281740][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 586.295657][ C1] ip_local_deliver+0x585/0x8d0 [ 586.303966][ C1] ip_rcv+0x599/0x820 [ 586.311251][ C1] __netif_receive_skb+0x1ec/0x640 [ 586.328545][ C1] process_backlog+0x517/0xbd0 [ 586.343074][ C1] napi_poll+0x428/0x15c0 [ 586.350346][ C1] net_rx_action+0x34c/0xd30 [ 586.357638][ C1] __do_softirq+0x1b9/0x715 [ 586.365842][ C1] [ 586.372824][ C1] Uninit was stored to memory at: [ 586.381121][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 586.395099][ C1] __msan_chain_origin+0x57/0xa0 [ 586.403434][ C1] tcp_conn_request+0x1b4d/0x4db0 [ 586.410924][ C1] tcp_v4_conn_request+0x201/0x290 [ 586.418249][ C1] tcp_v6_conn_request+0xeb/0x330 [ 586.423292][ C1] tcp_rcv_state_process+0x2f4/0x45a0 [ 586.434308][ C1] tcp_v4_do_rcv+0xc63/0x1000 [ 586.442034][ C1] tcp_v4_rcv+0x4b0a/0x5c80 [ 586.449410][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 586.457423][ C1] ip_local_deliver+0x585/0x8d0 [ 586.465488][ C1] ip_rcv+0x599/0x820 [ 586.473215][ C1] __netif_receive_skb+0x1ec/0x640 [ 586.481108][ C1] process_backlog+0x517/0xbd0 [ 586.488491][ C1] napi_poll+0x428/0x15c0 [ 586.496460][ C1] net_rx_action+0x34c/0xd30 [ 586.504295][ C1] __do_softirq+0x1b9/0x715 [ 586.512814][ C1] [ 586.520246][ C1] Uninit was stored to memory at: [ 586.530967][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 586.545402][ C1] __msan_chain_origin+0x57/0xa0 [ 586.553627][ C1] tcp_openreq_init_rwin+0xcc6/0x1010 [ 586.561588][ C1] tcp_conn_request+0x2bd7/0x4db0 [ 586.569180][ C1] tcp_v4_conn_request+0x201/0x290 [ 586.577186][ C1] tcp_v6_conn_request+0xeb/0x330 [ 586.585250][ C1] tcp_rcv_state_process+0x2f4/0x45a0 [ 586.593547][ C1] tcp_v4_do_rcv+0xc63/0x1000 [ 586.601387][ C1] tcp_v4_rcv+0x4b0a/0x5c80 [ 586.608868][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 586.617266][ C1] ip_local_deliver+0x585/0x8d0 [ 586.625291][ C1] ip_rcv+0x599/0x820 [ 586.629288][ C1] __netif_receive_skb+0x1ec/0x640 [ 586.636837][ C1] process_backlog+0x517/0xbd0 [ 586.644987][ C1] napi_poll+0x428/0x15c0 [ 586.652873][ C1] net_rx_action+0x34c/0xd30 [ 586.660978][ C1] __do_softirq+0x1b9/0x715 [ 586.668375][ C1] [ 586.676280][ C1] Uninit was stored to memory at: [ 586.684150][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 586.692256][ C1] __msan_chain_origin+0x57/0xa0 [ 586.700185][ C1] tcp_conn_request+0x1b4d/0x4db0 [ 586.714546][ C1] tcp_v4_conn_request+0x201/0x290 [ 586.722461][ C1] tcp_v6_conn_request+0xeb/0x330 [ 586.733135][ C1] tcp_rcv_state_process+0x2f4/0x45a0 [ 586.741075][ C1] tcp_v4_do_rcv+0xc63/0x1000 [ 586.748430][ C1] tcp_v4_rcv+0x4b0a/0x5c80 [ 586.756418][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 586.764593][ C1] ip_local_deliver+0x585/0x8d0 [ 586.772654][ C1] ip_rcv+0x599/0x820 [ 586.780310][ C1] __netif_receive_skb+0x1ec/0x640 [ 586.791877][ C1] process_backlog+0x517/0xbd0 [ 586.799894][ C1] napi_poll+0x428/0x15c0 [ 586.814493][ C1] net_rx_action+0x34c/0xd30 [ 586.822489][ C1] __do_softirq+0x1b9/0x715 [ 586.831591][ C1] [ 586.833921][ C1] Uninit was created at: [ 586.842536][ C1] kmsan_save_stack_with_flags+0x3c/0x90 [ 586.850725][ C1] kmsan_alloc_page+0xd3/0x1f0 [ 586.865089][ C1] __alloc_pages_nodemask+0x827/0xf90 [ 586.873237][ C1] alloc_pages_current+0x7b6/0xb60 [ 586.881335][ C1] allocate_slab+0x392/0x11e0 [ 586.895715][ C1] ___slab_alloc+0xd42/0x1930 [ 586.903509][ C1] kmem_cache_alloc+0xc36/0xff0 [ 586.911671][ C1] inet_reqsk_alloc+0xaf/0x8c0 [ 586.926209][ C1] tcp_conn_request+0x911/0x4db0 [ 586.934229][ C1] tcp_v4_conn_request+0x201/0x290 [ 586.944986][ C1] tcp_rcv_state_process+0x2f4/0x45a0 [ 586.953180][ C1] tcp_v4_do_rcv+0xc63/0x1000 [ 586.960960][ C1] tcp_v4_rcv+0x4b0a/0x5c80 [ 586.968307][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 586.976728][ C1] ip_local_deliver+0x585/0x8d0 [ 586.984787][ C1] ip_sublist_rcv+0x121b/0x1560 [ 586.992852][ C1] ip_list_rcv+0x8f1/0x960 [ 587.000977][ C1] __netif_receive_skb_list_core+0xe65/0x1250 [ 587.008712][ C1] __netif_receive_skb_list+0x7e2/0x930 [ 587.016885][ C1] netif_receive_skb_list_internal+0x837/0xdb0 [ 587.025313][ C1] napi_complete_done+0x552/0xf80 [ 587.033587][ C1] virtqueue_napi_complete+0xb9/0x1f0 [ 587.044516][ C1] virtnet_poll+0x170f/0x1d10 [ 587.052553][ C1] napi_poll+0x428/0x15c0 [ 587.060611][ C1] net_rx_action+0x34c/0xd30 [ 587.075005][ C1] __do_softirq+0x1b9/0x715 05:23:49 executing program 0: timer_create(0x2, 0x0, &(0x7f0000000080)) timer_delete(0x0) 05:23:50 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {0x0, 0x0, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xad3) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 588.013891][T14372] loop3: detected capacity change from 65551 to 0 05:23:50 executing program 1: socketpair(0x11, 0x2, 0x100, &(0x7f00000000c0)) 05:23:50 executing program 4: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:23:51 executing program 0: r0 = socket(0xa, 0x3, 0x7) setsockopt$WPAN_SECURITY(r0, 0x29, 0x2b, 0x0, 0x300) 05:23:51 executing program 5: r0 = socket(0xa, 0x6, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0xe, 0x0, &(0x7f0000000040)) 05:23:51 executing program 3: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = getpgrp(0x0) kcmp(r5, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r5}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:23:51 executing program 1: socketpair(0x11, 0x2, 0x100, &(0x7f00000000c0)) [ 588.961341][T14393] loop2: detected capacity change from 65551 to 0 05:23:51 executing program 4: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:23:52 executing program 0: syz_mount_image$hfs(&(0x7f00000000c0)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f00000002c0)={[{@creator={'creator', 0x3d, "cdf9f1e3"}, 0x38}]}) [ 589.785543][T14409] loop3: detected capacity change from 65551 to 0 05:23:52 executing program 3: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = getpgrp(0x0) kcmp(r5, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r5}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:23:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) 05:23:52 executing program 1: socketpair(0x11, 0x2, 0x100, &(0x7f00000000c0)) [ 590.639577][T14423] loop3: detected capacity change from 65551 to 0 [ 595.762829][T14393] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 595.771807][T14393] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 595.794131][T14418] hfs: creator requires a 4 character value [ 595.800139][T14418] hfs: unable to parse mount options [ 595.831055][T14393] F2FS-fs (loop2): invalid crc_offset: 0 [ 595.837187][T14393] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-4) 05:23:58 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {0x0, 0x0, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xad3) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:23:58 executing program 4: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:23:58 executing program 1: socketpair(0x11, 0x2, 0x100, &(0x7f00000000c0)) 05:23:58 executing program 5: msgctl$MSG_INFO(0x0, 0xc, &(0x7f00000002c0)=""/128) 05:23:58 executing program 3: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', 0x0, 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = getpgrp(0x0) kcmp(r5, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r5}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:23:58 executing program 0: syz_usb_connect(0x0, 0x719, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) [ 596.869041][T14450] loop4: detected capacity change from 65536 to 0 [ 596.932545][T14449] loop3: detected capacity change from 65551 to 0 [ 596.977439][T14450] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 596.988108][T14450] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 597.072830][ T2017] usb 1-1: new high-speed USB device number 86 using dummy_hcd 05:23:59 executing program 5: syz_mount_image$fuse(&(0x7f0000000000)='fuse\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 05:23:59 executing program 1: r0 = socket(0x2, 0x3, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000000)) [ 597.292938][T14450] F2FS-fs (loop4): invalid crc_offset: 0 [ 597.312583][ T2017] usb 1-1: Using ep0 maxpacket: 32 [ 597.404482][T14450] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 597.414951][T14450] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 597.443185][ T2017] usb 1-1: config 3 has an invalid interface number: 180 but max is 3 [ 597.451643][ T2017] usb 1-1: config 3 has an invalid interface number: 83 but max is 3 [ 597.459997][ T2017] usb 1-1: config 3 has an invalid interface number: 77 but max is 3 [ 597.468501][ T2017] usb 1-1: config 3 has an invalid interface number: 247 but max is 3 [ 597.479198][ T2017] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 597.489844][ T2017] usb 1-1: config 3 has no interface number 0 [ 597.496109][ T2017] usb 1-1: config 3 has no interface number 1 [ 597.502380][ T2017] usb 1-1: config 3 has no interface number 2 [ 597.508571][ T2017] usb 1-1: config 3 has no interface number 3 [ 597.514868][ T2017] usb 1-1: config 3 interface 180 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 597.525732][ T2017] usb 1-1: config 3 interface 83 altsetting 6 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 597.536760][ T2017] usb 1-1: config 3 interface 83 altsetting 6 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 597.547896][ T2017] usb 1-1: config 3 interface 77 altsetting 4 has a duplicate endpoint with address 0x2, skipping [ 597.559176][ T2017] usb 1-1: config 3 interface 77 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 597.569955][ T2017] usb 1-1: config 3 interface 77 altsetting 4 endpoint 0x83 has invalid maxpacket 512, setting to 64 [ 597.581086][ T2017] usb 1-1: config 3 interface 77 altsetting 4 has a duplicate endpoint with address 0xA, skipping [ 597.591932][ T2017] usb 1-1: config 3 interface 77 altsetting 4 has 5 endpoint descriptors, different from the interface descriptor's value: 12 [ 597.605236][ T2017] usb 1-1: too many endpoints for config 3 interface 247 altsetting 92: 140, using maximum allowed: 30 [ 597.616525][ T2017] usb 1-1: config 3 interface 247 altsetting 92 has 0 endpoint descriptors, different from the interface descriptor's value: 140 [ 597.630102][ T2017] usb 1-1: config 3 interface 180 has no altsetting 0 [ 597.637105][ T2017] usb 1-1: config 3 interface 83 has no altsetting 0 [ 597.644048][ T2017] usb 1-1: config 3 interface 77 has no altsetting 0 05:24:00 executing program 3: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', 0x0, 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = getpgrp(0x0) kcmp(r5, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r5}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 597.650878][ T2017] usb 1-1: config 3 interface 247 has no altsetting 0 [ 597.834872][T14474] loop2: detected capacity change from 65551 to 0 [ 597.979061][T14474] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 597.987254][T14474] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 598.101323][ T2017] usb 1-1: New USB device found, idVendor=19d2, idProduct=0143, bcdDevice=62.a8 [ 598.111357][ T2017] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.119642][ T2017] usb 1-1: Product: syz [ 598.123987][ T2017] usb 1-1: Manufacturer: syz [ 598.128709][ T2017] usb 1-1: SerialNumber: syz [ 598.198762][T14474] F2FS-fs (loop2): invalid crc_offset: 0 [ 598.285316][T14474] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 598.294557][T14474] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 05:24:00 executing program 5: r0 = socket(0x23, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000440)={'ip6tnl0\x00', 0x0}) [ 598.466835][T14450] F2FS-fs (loop4): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 598.562751][T14486] loop3: detected capacity change from 65551 to 0 [ 598.582615][T14450] F2FS-fs (loop4): Failed to read root inode 05:24:01 executing program 1: r0 = socket(0xa, 0x3, 0x7) setsockopt$WPAN_SECURITY(r0, 0x29, 0x22, 0x0, 0x0) [ 598.711143][ T2017] option 1-1:3.180: GSM modem (1-port) converter detected [ 598.879842][ T2017] usb 1-1: USB disconnect, device number 86 [ 598.887898][ T2017] option 1-1:3.180: device disconnected [ 599.119672][T14474] F2FS-fs (loop2): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 599.189493][T14474] F2FS-fs (loop2): Failed to read root inode 05:24:01 executing program 3: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', 0x0, 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = getpgrp(0x0) kcmp(r5, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r5}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 599.662631][ T2017] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 599.855852][T14515] loop3: detected capacity change from 65551 to 0 [ 599.912555][ T2017] usb 1-1: Using ep0 maxpacket: 32 [ 600.036405][ T2017] usb 1-1: config 3 has an invalid interface number: 180 but max is 3 [ 600.044940][ T2017] usb 1-1: config 3 has an invalid interface number: 83 but max is 3 [ 600.053294][ T2017] usb 1-1: config 3 has an invalid interface number: 77 but max is 3 [ 600.061520][ T2017] usb 1-1: config 3 has an invalid interface number: 247 but max is 3 [ 600.069938][ T2017] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 600.080258][ T2017] usb 1-1: config 3 has no interface number 0 [ 600.086544][ T2017] usb 1-1: config 3 has no interface number 1 [ 600.093062][ T2017] usb 1-1: config 3 has no interface number 2 [ 600.099267][ T2017] usb 1-1: config 3 has no interface number 3 [ 600.105573][ T2017] usb 1-1: config 3 interface 180 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 600.116443][ T2017] usb 1-1: config 3 interface 83 altsetting 6 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 600.127468][ T2017] usb 1-1: config 3 interface 83 altsetting 6 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 600.138607][ T2017] usb 1-1: config 3 interface 77 altsetting 4 has a duplicate endpoint with address 0x2, skipping [ 600.149460][ T2017] usb 1-1: config 3 interface 77 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 600.160281][ T2017] usb 1-1: config 3 interface 77 altsetting 4 endpoint 0x83 has invalid maxpacket 512, setting to 64 [ 600.171597][ T2017] usb 1-1: config 3 interface 77 altsetting 4 has a duplicate endpoint with address 0xA, skipping [ 600.182448][ T2017] usb 1-1: config 3 interface 77 altsetting 4 has 5 endpoint descriptors, different from the interface descriptor's value: 12 [ 600.195776][ T2017] usb 1-1: too many endpoints for config 3 interface 247 altsetting 92: 140, using maximum allowed: 30 [ 600.207109][ T2017] usb 1-1: config 3 interface 247 altsetting 92 has 0 endpoint descriptors, different from the interface descriptor's value: 140 [ 600.220686][ T2017] usb 1-1: config 3 interface 180 has no altsetting 0 [ 600.227666][ T2017] usb 1-1: config 3 interface 83 has no altsetting 0 05:24:02 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20), 0x0, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xad3) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:24:02 executing program 4: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:24:02 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000a40)={&(0x7f0000000940), 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x28, r0, 0x10f, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x28}}, 0x0) 05:24:02 executing program 1: r0 = socket(0x23, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f00000000c0)={'sit0\x00', 0x0}) [ 600.234582][ T2017] usb 1-1: config 3 interface 77 has no altsetting 0 [ 600.241414][ T2017] usb 1-1: config 3 interface 247 has no altsetting 0 05:24:02 executing program 3: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = getpgrp(0x0) kcmp(r5, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r5}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:24:03 executing program 0: syz_usb_connect(0x0, 0x719, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) [ 600.665903][T14530] loop4: detected capacity change from 65536 to 0 [ 600.835179][T14530] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 600.843987][T14530] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 600.980942][T14530] F2FS-fs (loop4): invalid crc_offset: 0 [ 601.129922][T14530] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 601.139911][T14530] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 601.172514][T14538] loop2: detected capacity change from 65551 to 0 05:24:03 executing program 5: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 05:24:03 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) [ 601.322621][T14538] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 601.330897][T14538] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 601.371377][T14530] F2FS-fs (loop4): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 601.383701][T14530] F2FS-fs (loop4): Failed to read root inode [ 601.612095][T14538] F2FS-fs (loop2): invalid crc_offset: 0 [ 601.731738][T14538] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 601.741487][T14538] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 05:24:04 executing program 3: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = getpgrp(0x0) kcmp(r5, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r5}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:24:04 executing program 5: r0 = io_uring_setup(0x14c0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x8, 0x2, 0x0) 05:24:04 executing program 4: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 602.353013][ T2095] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 602.381020][T14538] F2FS-fs (loop2): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 602.424229][ T2017] usb 1-1: string descriptor 0 read error: -71 [ 602.430781][ T2017] usb 1-1: New USB device found, idVendor=19d2, idProduct=0143, bcdDevice=62.a8 [ 602.440350][ T2017] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.540057][T14538] F2FS-fs (loop2): Failed to read root inode [ 602.622984][ T2017] usb 1-1: can't set config #3, error -71 [ 602.631209][ T2017] usb 1-1: USB disconnect, device number 87 05:24:05 executing program 3: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = getpgrp(0x0) kcmp(r5, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r5}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 602.673051][ T2095] usb 2-1: Using ep0 maxpacket: 8 [ 602.856154][ T2095] usb 2-1: unable to get BOS descriptor or descriptor too short [ 602.973357][ T2095] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 602.978391][T14574] loop4: detected capacity change from 65536 to 0 [ 603.043244][ T2017] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 603.263010][ T2095] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 603.272586][ T2095] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.280743][ T2095] usb 2-1: Product: syz [ 603.284098][ T2017] usb 1-1: Using ep0 maxpacket: 32 [ 603.285148][ T2095] usb 2-1: Manufacturer: syz [ 603.295023][ T2095] usb 2-1: SerialNumber: syz [ 603.403821][ T2017] usb 1-1: config 3 has an invalid interface number: 180 but max is 3 [ 603.412187][ T2017] usb 1-1: config 3 has an invalid interface number: 83 but max is 3 [ 603.422958][ T2017] usb 1-1: config 3 has an invalid interface number: 77 but max is 3 [ 603.431213][ T2017] usb 1-1: config 3 has an invalid interface number: 247 but max is 3 [ 603.439993][ T2017] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 603.450312][ T2017] usb 1-1: config 3 has no interface number 0 [ 603.460285][ T2017] usb 1-1: config 3 has no interface number 1 [ 603.466619][ T2017] usb 1-1: config 3 has no interface number 2 [ 603.472957][ T2017] usb 1-1: config 3 has no interface number 3 [ 603.479220][ T2017] usb 1-1: config 3 interface 180 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 603.490131][ T2017] usb 1-1: config 3 interface 83 altsetting 6 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 603.501241][ T2017] usb 1-1: config 3 interface 83 altsetting 6 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 603.512420][ T2017] usb 1-1: config 3 interface 77 altsetting 4 has a duplicate endpoint with address 0x2, skipping [ 603.529914][ T2017] usb 1-1: config 3 interface 77 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 603.542393][ T2017] usb 1-1: config 3 interface 77 altsetting 4 endpoint 0x83 has invalid maxpacket 512, setting to 64 [ 603.553665][ T2017] usb 1-1: config 3 interface 77 altsetting 4 has a duplicate endpoint with address 0xA, skipping [ 603.564568][ T2017] usb 1-1: config 3 interface 77 altsetting 4 has 5 endpoint descriptors, different from the interface descriptor's value: 12 [ 603.573977][ T2095] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 603.577901][ T2017] usb 1-1: too many endpoints for config 3 interface 247 altsetting 92: 140, using maximum allowed: 30 [ 603.595702][ T2017] usb 1-1: config 3 interface 247 altsetting 92 has 0 endpoint descriptors, different from the interface descriptor's value: 140 [ 603.609309][ T2017] usb 1-1: config 3 interface 180 has no altsetting 0 [ 603.616342][ T2017] usb 1-1: config 3 interface 83 has no altsetting 0 [ 603.623283][ T2017] usb 1-1: config 3 interface 77 has no altsetting 0 [ 603.630104][ T2017] usb 1-1: config 3 interface 247 has no altsetting 0 [ 603.704440][T14574] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 603.712717][T14574] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 603.754718][T14574] F2FS-fs (loop4): invalid crc_offset: 0 [ 603.760929][T14574] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-4) [ 603.783166][ T2095] usb 2-1: USB disconnect, device number 7 05:24:06 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20), 0x0, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xad3) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:24:06 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000080)) 05:24:06 executing program 3: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = getpgrp(0x0) kcmp(r5, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r5}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:24:06 executing program 4: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {0x0, 0x0, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:24:06 executing program 5: fstat(0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000300)={0x35, ""/53}) [ 604.590864][T14601] loop2: detected capacity change from 65551 to 0 [ 604.603432][ T2095] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 604.633726][T14602] loop3: detected capacity change from 65536 to 0 [ 604.723684][T14602] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 604.731930][T14602] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 604.762228][T14602] F2FS-fs (loop3): invalid crc_offset: 0 [ 604.769669][T14610] loop4: detected capacity change from 65551 to 0 [ 604.811884][T14602] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 604.823206][T14602] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 604.837297][T14610] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 604.845566][T14610] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 604.872708][T14610] F2FS-fs (loop4): invalid crc_offset: 0 [ 604.920094][T14601] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 604.928712][T14601] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 605.082812][ T2095] usb 2-1: Using ep0 maxpacket: 8 [ 605.100220][T14610] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 605.110003][T14610] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 05:24:07 executing program 0: syz_usb_connect(0x0, 0x719, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) [ 605.264179][ T2017] usb 1-1: New USB device found, idVendor=19d2, idProduct=0143, bcdDevice=62.a8 [ 605.273808][ T2017] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.348351][T14610] F2FS-fs (loop4): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 605.365042][T14610] F2FS-fs (loop4): Failed to read root inode [ 605.407967][T14601] F2FS-fs (loop2): invalid crc_offset: 0 [ 605.414168][T14601] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-4) [ 605.558203][ T2017] usb 1-1: can't set config #3, error -71 05:24:08 executing program 5: r0 = syz_open_dev$vcsa(0x0, 0x2, 0x0) write$FUSE_DIRENTPLUS(r0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x4a401, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x8, 0x5, 0x7f, 0x9, r0, 0x9, [], 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x40) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10948, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x201}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 605.639855][T14602] F2FS-fs (loop3): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 605.686060][ T2017] usb 1-1: USB disconnect, device number 88 [ 605.704360][T14602] F2FS-fs (loop3): Failed to read root inode 05:24:08 executing program 1: r0 = socket(0x2, 0x3, 0x4) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) [ 605.832580][ T2095] usb 2-1: unable to get BOS descriptor or descriptor too short 05:24:08 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20), 0x0, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xad3) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 605.912600][ T2095] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 605.920432][ T2095] usb 2-1: can't read configurations, error -71 05:24:08 executing program 4: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {0x0, 0x0, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 606.303427][ T9800] usb 1-1: new high-speed USB device number 89 using dummy_hcd 05:24:08 executing program 3: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = getpgrp(0x0) kcmp(r5, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r5}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:24:09 executing program 5: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x0, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x9, 0x2, &(0x7f0000000180)=@raw=[@initr0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x78) [ 606.534036][T14643] loop2: detected capacity change from 65551 to 0 [ 606.567472][ T9800] usb 1-1: Using ep0 maxpacket: 32 [ 606.634420][T14643] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 606.643118][T14643] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 606.703379][ T9800] usb 1-1: config 3 has an invalid interface number: 180 but max is 3 [ 606.711797][ T9800] usb 1-1: config 3 has an invalid interface number: 83 but max is 3 [ 606.720391][ T9800] usb 1-1: config 3 has an invalid interface number: 77 but max is 3 [ 606.728710][ T9800] usb 1-1: config 3 has an invalid interface number: 247 but max is 3 [ 606.737122][ T9800] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 606.747607][ T9800] usb 1-1: config 3 has no interface number 0 [ 606.753869][ T9800] usb 1-1: config 3 has no interface number 1 [ 606.760062][ T9800] usb 1-1: config 3 has no interface number 2 [ 606.766373][ T9800] usb 1-1: config 3 has no interface number 3 [ 606.772659][ T9800] usb 1-1: config 3 interface 180 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 606.783493][ T9800] usb 1-1: config 3 interface 83 altsetting 6 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 606.794524][ T9800] usb 1-1: config 3 interface 83 altsetting 6 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 606.805644][ T9800] usb 1-1: config 3 interface 77 altsetting 4 has a duplicate endpoint with address 0x2, skipping [ 606.816573][ T9800] usb 1-1: config 3 interface 77 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 606.827327][ T9800] usb 1-1: config 3 interface 77 altsetting 4 endpoint 0x83 has invalid maxpacket 512, setting to 64 [ 606.838445][ T9800] usb 1-1: config 3 interface 77 altsetting 4 has a duplicate endpoint with address 0xA, skipping [ 606.849408][ T9800] usb 1-1: config 3 interface 77 altsetting 4 has 5 endpoint descriptors, different from the interface descriptor's value: 12 [ 606.862744][ T9800] usb 1-1: too many endpoints for config 3 interface 247 altsetting 92: 140, using maximum allowed: 30 [ 606.874068][ T9800] usb 1-1: config 3 interface 247 altsetting 92 has 0 endpoint descriptors, different from the interface descriptor's value: 140 [ 606.887677][ T9800] usb 1-1: config 3 interface 180 has no altsetting 0 [ 606.894706][ T9800] usb 1-1: config 3 interface 83 has no altsetting 0 05:24:09 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4) [ 606.901523][ T9800] usb 1-1: config 3 interface 77 has no altsetting 0 [ 606.908517][ T9800] usb 1-1: config 3 interface 247 has no altsetting 0 [ 606.991132][T14649] loop4: detected capacity change from 65551 to 0 [ 607.030601][T14643] F2FS-fs (loop2): invalid crc_offset: 0 [ 607.112638][ T9800] usb 1-1: New USB device found, idVendor=19d2, idProduct=0143, bcdDevice=62.a8 [ 607.125807][ T9800] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.134261][ T9800] usb 1-1: Product: syz [ 607.138531][ T9800] usb 1-1: Manufacturer: syz [ 607.143474][ T9800] usb 1-1: SerialNumber: syz [ 607.178635][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 607.189745][T14643] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 607.199535][T14643] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 607.292699][ C0] not chained 130000 origins [ 607.297327][ C0] CPU: 0 PID: 269 Comm: kworker/u4:6 Not tainted 5.11.0-rc7-syzkaller #0 [ 607.305752][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 607.315814][ C0] Workqueue: krdsd rds_tcp_accept_worker [ 607.321477][ C0] Call Trace: [ 607.324755][ C0] [ 607.327706][ C0] dump_stack+0x21c/0x280 [ 607.332054][ C0] ? kmsan_get_metadata+0x116/0x180 [ 607.337272][ C0] kmsan_internal_chain_origin+0x6f/0x130 [ 607.343009][ C0] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 607.349095][ C0] ? idle_cpu+0x9a/0x1d0 [ 607.359587][ C0] ? __irq_exit_rcu+0x83/0x280 [ 607.364370][ C0] ? __msan_get_context_state+0x9/0x20 [ 607.369850][ C0] ? irqentry_exit+0x12/0x50 [ 607.374451][ C0] ? sysvec_apic_timer_interrupt+0x11d/0x130 [ 607.380460][ C0] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 607.386627][ C0] ? kmsan_get_metadata+0x116/0x180 [ 607.391846][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 607.397672][ C0] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 607.403847][ C0] ? __msan_get_context_state+0x9/0x20 [ 607.409336][ C0] ? __module_get+0x19/0x170 [ 607.413951][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 607.419789][ C0] ? inet_twsk_alloc+0x7b6/0xb90 [ 607.424749][ C0] ? kmsan_get_metadata+0x116/0x180 [ 607.429977][ C0] __msan_chain_origin+0x57/0xa0 [ 607.434938][ C0] tcp_time_wait+0x814/0x1170 [ 607.439638][ C0] tcp_fin+0x230/0x9d0 [ 607.443726][ C0] tcp_data_queue+0x2b14/0xaa10 [ 607.462451][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 607.473099][ C0] ? tcp_urg+0xba5/0x10a0 [ 607.477457][ C0] tcp_rcv_state_process+0x3385/0x45a0 [ 607.482936][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 607.484984][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 607.488768][ C0] ? kmsan_get_metadata+0x116/0x180 [ 607.488810][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 607.488838][ C0] ? kmsan_save_stack_with_flags+0x50/0x90 [ 607.488876][ C0] tcp_v4_rcv+0x584e/0x5c80 [ 607.488901][ C0] ? rcu_read_unlock_strict+0x9/0x10 [ 607.535405][ C0] ? tcp_v4_rcv+0x1961/0x5c80 [ 607.540293][ C0] ? tcp_filter+0xf0/0xf0 [ 607.544726][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 607.556284][ C0] ip_local_deliver+0x585/0x8d0 [ 607.561167][ C0] ? ip_local_deliver+0x8d0/0x8d0 [ 607.565832][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 607.566218][ C0] ? ip_protocol_deliver_rcu+0xc50/0xc50 [ 607.566255][ C0] ip_rcv+0x599/0x820 [ 607.584265][ C0] ? ip_rcv_core+0x1480/0x1480 [ 607.602488][ C0] __netif_receive_skb+0x1ec/0x640 [ 607.607639][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 607.613297][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 607.618952][ C0] process_backlog+0x517/0xbd0 [ 607.630027][ C0] ? native_apic_mem_write+0x45/0x90 [ 607.635348][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 607.640766][ C0] napi_poll+0x428/0x15c0 [ 607.643461][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 607.645123][ C0] net_rx_action+0x34c/0xd30 [ 607.645165][ C0] ? net_tx_action+0xd30/0xd30 [ 607.645198][ C0] __do_softirq+0x1b9/0x715 [ 607.645232][ C0] asm_call_irq_on_stack+0xf/0x20 [ 607.645264][ C0] [ 607.645273][ C0] do_softirq_own_stack+0x6e/0x90 [ 607.693555][ C0] __local_bh_enable_ip+0x184/0x1d0 [ 607.698789][ C0] local_bh_enable+0x36/0x40 [ 607.703407][ C0] ip_finish_output2+0x2454/0x2940 [ 607.713664][ C0] ? __msan_get_context_state+0x9/0x20 [ 607.719153][ C0] ? rcu_read_unlock_strict+0x9/0x10 [ 607.724483][ C0] ? nf_ct_deliver_cached_events+0x610/0x7e0 [ 607.727928][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 607.730479][ C0] __ip_finish_output+0x9fd/0x1050 [ 607.730524][ C0] ip_finish_output+0x329/0x480 [ 607.730562][ C0] ip_output+0x32e/0x6d0 [ 607.730596][ C0] ? ip_mc_finish_output+0x770/0x770 [ 607.730631][ C0] ? ip_finish_output+0x480/0x480 [ 607.775176][ C0] __ip_queue_xmit+0x1e3d/0x23b0 [ 607.780144][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 607.785814][ C0] ? __msan_poison_alloca+0xe9/0x110 [ 607.796569][ C0] ? bpf_skops_write_hdr_opt+0x104/0x850 [ 607.802228][ C0] ip_queue_xmit+0xcc/0xf0 [ 607.806665][ C0] ? __ip_queue_xmit+0x23b0/0x23b0 [ 607.807881][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 607.811895][ C0] __tcp_transmit_skb+0x4d3f/0x5ea0 [ 607.811956][ C0] tcp_write_xmit+0x4eab/0xf2b0 [ 607.811992][ C0] ? kmsan_get_shadow_origin_ptr+0x29/0xb0 [ 607.812045][ C0] ? kmsan_get_metadata+0x116/0x180 [ 607.841446][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 607.857232][ C0] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 607.863331][ C0] ? kmsan_get_metadata+0x116/0x180 [ 607.868554][ C0] __tcp_push_pending_frames+0x150/0x5b0 [ 607.874213][ C0] tcp_send_fin+0x1678/0x1b40 [ 607.885199][ C0] ? kmsan_get_metadata+0x116/0x180 [ 607.890430][ C0] tcp_shutdown+0x1f5/0x270 [ 607.894957][ C0] ? tcp_set_state+0xb90/0xb90 [ 607.897576][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 607.899735][ C0] inet_shutdown+0x44f/0x6d0 [ 607.899771][ C0] ? inet_recvmsg+0x6c0/0x6c0 [ 607.899801][ C0] kernel_sock_shutdown+0x98/0xc0 [ 607.899832][ C0] rds_tcp_accept_one+0x107e/0x12e0 [ 607.899873][ C0] rds_tcp_accept_worker+0x60/0x180 [ 607.943877][ C0] ? rds_tcp_exit_net+0xcd0/0xcd0 [ 607.949045][ C0] process_one_work+0x1219/0x1fe0 [ 607.954106][ C0] worker_thread+0x10ec/0x2340 [ 607.958901][ C0] kthread+0x521/0x560 [ 607.962993][ C0] ? process_one_work+0x1fe0/0x1fe0 [ 607.971231][ C0] ? kthread_blkcg+0x110/0x110 [ 607.976017][ C0] ret_from_fork+0x1f/0x30 [ 607.980458][ C0] Uninit was stored to memory at: [ 607.983187][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 607.985475][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 607.985515][ C0] __msan_chain_origin+0x57/0xa0 [ 607.985549][ C0] inet_twsk_alloc+0xaa6/0xb90 [ 607.985574][ C0] tcp_time_wait+0xd1/0x1170 [ 607.985602][ C0] tcp_fin+0x230/0x9d0 [ 608.031077][ C0] tcp_data_queue+0x2b14/0xaa10 [ 608.035950][ C0] tcp_rcv_state_process+0x3385/0x45a0 [ 608.041432][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 608.051693][ C0] tcp_v4_rcv+0x584e/0x5c80 [ 608.056219][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 608.061426][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 608.061697][ C0] ip_local_deliver+0x585/0x8d0 [ 608.061733][ C0] ip_rcv+0x599/0x820 [ 608.078940][ C0] __netif_receive_skb+0x1ec/0x640 [ 608.096651][ C0] process_backlog+0x517/0xbd0 [ 608.101441][ C0] napi_poll+0x428/0x15c0 [ 608.105790][ C0] net_rx_action+0x34c/0xd30 [ 608.110401][ C0] __do_softirq+0x1b9/0x715 [ 608.114919][ C0] [ 608.123821][ C0] Uninit was stored to memory at: [ 608.128851][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 608.134606][ C0] __msan_chain_origin+0x57/0xa0 [ 608.136224][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 608.139564][ C0] __inet_twsk_schedule+0x285/0x2e0 [ 608.139595][ C0] tcp_time_wait+0xe0a/0x1170 [ 608.139622][ C0] tcp_fin+0x230/0x9d0 [ 608.139650][ C0] tcp_data_queue+0x2b14/0xaa10 [ 608.139678][ C0] tcp_rcv_state_process+0x3385/0x45a0 [ 608.139710][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 608.188660][ C0] tcp_v4_rcv+0x584e/0x5c80 [ 608.193182][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 608.198668][ C0] ip_local_deliver+0x585/0x8d0 [ 608.203539][ C0] ip_rcv+0x599/0x820 [ 608.211359][ C0] __netif_receive_skb+0x1ec/0x640 [ 608.216490][ C0] process_backlog+0x517/0xbd0 [ 608.221271][ C0] napi_poll+0x428/0x15c0 [ 608.236441][ C0] net_rx_action+0x34c/0xd30 [ 608.241083][ C0] __do_softirq+0x1b9/0x715 [ 608.245613][ C0] [ 608.247941][ C0] Uninit was stored to memory at: [ 608.252960][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 608.258703][ C0] __msan_chain_origin+0x57/0xa0 [ 608.263661][ C0] tcp_time_wait+0x814/0x1170 [ 608.275316][ C0] tcp_fin+0x230/0x9d0 [ 608.279403][ C0] tcp_data_queue+0x2b14/0xaa10 [ 608.294543][ C0] tcp_rcv_state_process+0x3385/0x45a0 [ 608.300027][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 608.304717][ C0] tcp_v4_rcv+0x584e/0x5c80 [ 608.309232][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 608.320731][ C0] ip_local_deliver+0x585/0x8d0 [ 608.325604][ C0] ip_rcv+0x599/0x820 [ 608.329605][ C0] __netif_receive_skb+0x1ec/0x640 [ 608.346995][ C0] process_backlog+0x517/0xbd0 [ 608.351786][ C0] napi_poll+0x428/0x15c0 [ 608.356137][ C0] net_rx_action+0x34c/0xd30 [ 608.360745][ C0] __do_softirq+0x1b9/0x715 [ 608.371375][ C0] [ 608.373706][ C0] Uninit was stored to memory at: [ 608.378727][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 608.384469][ C0] __msan_chain_origin+0x57/0xa0 [ 608.400549][ C0] inet_twsk_alloc+0xaa6/0xb90 [ 608.405340][ C0] tcp_time_wait+0xd1/0x1170 [ 608.409958][ C0] tcp_fin+0x230/0x9d0 [ 608.414049][ C0] tcp_data_queue+0x2b14/0xaa10 [ 608.418916][ C0] tcp_rcv_state_process+0x3385/0x45a0 [ 608.430424][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 608.435223][ C0] tcp_v4_rcv+0x584e/0x5c80 [ 608.439739][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 608.458052][ C0] ip_local_deliver+0x585/0x8d0 [ 608.462936][ C0] ip_rcv+0x599/0x820 [ 608.466939][ C0] __netif_receive_skb+0x1ec/0x640 [ 608.472070][ C0] process_backlog+0x517/0xbd0 [ 608.476854][ C0] napi_poll+0x428/0x15c0 [ 608.484948][ C0] net_rx_action+0x34c/0xd30 [ 608.489560][ C0] __do_softirq+0x1b9/0x715 [ 608.494079][ C0] [ 608.509211][ C0] Uninit was stored to memory at: [ 608.514239][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 608.519988][ C0] __msan_chain_origin+0x57/0xa0 [ 608.524947][ C0] __inet_twsk_schedule+0x285/0x2e0 [ 608.535150][ C0] tcp_time_wait+0xe0a/0x1170 [ 608.539850][ C0] tcp_fin+0x230/0x9d0 [ 608.543946][ C0] tcp_data_queue+0x2b14/0xaa10 [ 608.548822][ C0] tcp_rcv_state_process+0x3385/0x45a0 [ 608.564964][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 608.569766][ C0] tcp_v4_rcv+0x584e/0x5c80 [ 608.574285][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 608.579791][ C0] ip_local_deliver+0x585/0x8d0 [ 608.590769][ C0] ip_rcv+0x599/0x820 [ 608.594883][ C0] __netif_receive_skb+0x1ec/0x640 [ 608.600021][ C0] process_backlog+0x517/0xbd0 [ 608.614644][ C0] napi_poll+0x428/0x15c0 [ 608.618993][ C0] net_rx_action+0x34c/0xd30 [ 608.623605][ C0] __do_softirq+0x1b9/0x715 [ 608.628124][ C0] [ 608.630473][ C0] Uninit was stored to memory at: [ 608.635492][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 608.641237][ C0] __msan_chain_origin+0x57/0xa0 [ 608.650108][ C0] tcp_time_wait+0x814/0x1170 [ 608.654806][ C0] tcp_fin+0x230/0x9d0 [ 608.658897][ C0] tcp_data_queue+0x2b14/0xaa10 [ 608.676615][ C0] tcp_rcv_state_process+0x3385/0x45a0 [ 608.682104][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 608.686794][ C0] tcp_v4_rcv+0x584e/0x5c80 [ 608.691309][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 608.702327][ C0] ip_local_deliver+0x585/0x8d0 [ 608.707201][ C0] ip_rcv+0x599/0x820 [ 608.711197][ C0] __netif_receive_skb+0x1ec/0x640 [ 608.726878][ C0] process_backlog+0x517/0xbd0 [ 608.731670][ C0] napi_poll+0x428/0x15c0 [ 608.736021][ C0] net_rx_action+0x34c/0xd30 [ 608.740631][ C0] __do_softirq+0x1b9/0x715 [ 608.745147][ C0] [ 608.747584][ C0] Uninit was stored to memory at: [ 608.755601][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 608.761355][ C0] __msan_chain_origin+0x57/0xa0 [ 608.766313][ C0] inet_twsk_alloc+0xaa6/0xb90 [ 608.781086][ C0] tcp_time_wait+0xd1/0x1170 [ 608.785693][ C0] tcp_fin+0x230/0x9d0 [ 608.789776][ C0] tcp_data_queue+0x2b14/0xaa10 [ 608.794645][ C0] tcp_rcv_state_process+0x3385/0x45a0 [ 608.800125][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 608.809849][ C0] tcp_v4_rcv+0x584e/0x5c80 [ 608.814392][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 608.833445][ C0] ip_local_deliver+0x585/0x8d0 [ 608.838323][ C0] ip_rcv+0x599/0x820 [ 608.842326][ C0] __netif_receive_skb+0x1ec/0x640 [ 608.847456][ C0] process_backlog+0x517/0xbd0 [ 608.852241][ C0] napi_poll+0x428/0x15c0 [ 608.862111][ C0] net_rx_action+0x34c/0xd30 [ 608.866726][ C0] __do_softirq+0x1b9/0x715 [ 608.871332][ C0] [ 608.873655][ C0] Uninit was created at: [ 608.888321][ C0] kmsan_save_stack_with_flags+0x3c/0x90 [ 608.893986][ C0] kmsan_alloc_page+0xd3/0x1f0 [ 608.898781][ C0] __alloc_pages_nodemask+0x827/0xf90 [ 608.904174][ C0] alloc_pages_current+0x7b6/0xb60 [ 608.909311][ C0] allocate_slab+0x392/0x11e0 [ 608.919792][ C0] ___slab_alloc+0xd42/0x1930 [ 608.924489][ C0] kmem_cache_alloc+0xc36/0xff0 [ 608.929358][ C0] inet_twsk_alloc+0x158/0xb90 [ 608.945115][ C0] tcp_time_wait+0xd1/0x1170 [ 608.949725][ C0] tcp_fin+0x230/0x9d0 [ 608.953809][ C0] tcp_data_queue+0x2b14/0xaa10 [ 608.958677][ C0] tcp_rcv_state_process+0x3385/0x45a0 [ 608.964157][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 608.968848][ C0] tcp_v4_rcv+0x584e/0x5c80 [ 608.977356][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 608.982855][ C0] ip_local_deliver+0x585/0x8d0 [ 608.987725][ C0] ip_rcv+0x599/0x820 [ 609.002443][ C0] __netif_receive_skb+0x1ec/0x640 [ 609.007581][ C0] process_backlog+0x517/0xbd0 [ 609.012365][ C0] napi_poll+0x428/0x15c0 [ 609.016711][ C0] net_rx_action+0x34c/0xd30 [ 609.027888][ C0] __do_softirq+0x1b9/0x715 [ 609.068759][T14643] F2FS-fs (loop2): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 609.123093][T14649] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 609.131161][T14649] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 609.272419][T14643] F2FS-fs (loop2): Failed to read root inode [ 609.348267][T14649] F2FS-fs (loop4): invalid crc_offset: 0 [ 609.357554][T14649] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-4) [ 609.406159][T14666] loop3: detected capacity change from 65536 to 0 05:24:11 executing program 1: r0 = socket(0x2, 0x3, 0xa) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsu\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) 05:24:11 executing program 0: syz_usb_connect(0x0, 0x719, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) [ 609.573739][ T9800] usb 1-1: can't set config #3, error -71 [ 609.599690][T14666] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 609.607948][T14666] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 609.613992][ T9800] usb 1-1: USB disconnect, device number 89 05:24:12 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x2, 0x22002) write$char_usb(r0, 0x0, 0x0) 05:24:12 executing program 4: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {0x0, 0x0, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 609.761605][T14666] F2FS-fs (loop3): invalid crc_offset: 0 [ 609.835717][T14666] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 609.845029][T14666] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 05:24:12 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)='\x00\x00\x00\x00\x00\x00\x00', 0x7, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xad3) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 610.225007][T14666] F2FS-fs (loop3): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 610.265241][T14666] F2FS-fs (loop3): Failed to read root inode [ 610.344484][ T9800] usb 1-1: new high-speed USB device number 90 using dummy_hcd 05:24:13 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) [ 610.641581][T14694] loop4: detected capacity change from 65551 to 0 [ 610.644068][ T9800] usb 1-1: Using ep0 maxpacket: 32 05:24:13 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001080)={0xffffffffffffffff}) fsync(r0) [ 610.754162][T14694] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 610.763023][T14694] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 610.833376][ T9800] usb 1-1: config 3 has an invalid interface number: 180 but max is 3 [ 610.841751][ T9800] usb 1-1: config 3 has an invalid interface number: 83 but max is 3 [ 610.850161][ T9800] usb 1-1: config 3 has an invalid interface number: 77 but max is 3 [ 610.858489][ T9800] usb 1-1: config 3 has an invalid interface number: 247 but max is 3 [ 610.866963][ T9800] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 610.877350][ T9800] usb 1-1: config 3 has no interface number 0 [ 610.896348][ T9800] usb 1-1: config 3 has no interface number 1 [ 610.903272][ T9800] usb 1-1: config 3 has no interface number 2 [ 610.909565][ T9800] usb 1-1: config 3 has no interface number 3 [ 610.915907][ T9800] usb 1-1: config 3 interface 180 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 610.926841][ T9800] usb 1-1: config 3 interface 83 altsetting 6 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 610.938188][ T9800] usb 1-1: config 3 interface 83 altsetting 6 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 610.949348][ T9800] usb 1-1: config 3 interface 77 altsetting 4 has a duplicate endpoint with address 0x2, skipping [ 610.960222][ T9800] usb 1-1: config 3 interface 77 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 610.971081][ T9800] usb 1-1: config 3 interface 77 altsetting 4 endpoint 0x83 has invalid maxpacket 512, setting to 64 [ 610.973843][T14694] F2FS-fs (loop4): invalid crc_offset: 0 [ 610.982223][ T9800] usb 1-1: config 3 interface 77 altsetting 4 has a duplicate endpoint with address 0xA, skipping [ 610.982421][ T9800] usb 1-1: config 3 interface 77 altsetting 4 has 5 endpoint descriptors, different from the interface descriptor's value: 12 [ 610.982591][ T9800] usb 1-1: too many endpoints for config 3 interface 247 altsetting 92: 140, using maximum allowed: 30 [ 611.023375][ T9800] usb 1-1: config 3 interface 247 altsetting 92 has 0 endpoint descriptors, different from the interface descriptor's value: 140 [ 611.036982][ T9800] usb 1-1: config 3 interface 180 has no altsetting 0 [ 611.046424][ T9800] usb 1-1: config 3 interface 83 has no altsetting 0 [ 611.060706][ T9800] usb 1-1: config 3 interface 77 has no altsetting 0 [ 611.067659][ T9800] usb 1-1: config 3 interface 247 has no altsetting 0 [ 611.089944][T14701] loop2: detected capacity change from 65551 to 0 [ 611.168560][T14694] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 611.178688][T14694] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 611.247129][T14701] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 611.255440][T14701] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 611.404480][T14701] F2FS-fs (loop2): invalid crc_offset: 0 [ 611.472069][T14701] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 611.481230][T14701] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 05:24:14 executing program 3: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = getpgrp(0x0) kcmp(r5, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r5}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:24:14 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, 0x0) 05:24:14 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001340)={0x2, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)="e9"}) [ 612.033220][T14694] F2FS-fs (loop4): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 612.138922][T14694] F2FS-fs (loop4): Failed to read root inode [ 612.162939][T14716] loop3: detected capacity change from 65536 to 0 [ 612.198369][T14716] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 612.206532][T14716] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 612.229405][T14716] F2FS-fs (loop3): invalid crc_offset: 0 [ 612.252090][T14701] F2FS-fs (loop2): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 612.266155][T14701] F2FS-fs (loop2): Failed to read root inode [ 612.386332][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 612.395632][T14716] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 612.405236][T14716] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 612.436069][ T9800] usb 1-1: New USB device found, idVendor=19d2, idProduct=0143, bcdDevice=62.a8 [ 612.445546][ T9800] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.454075][ T9800] usb 1-1: Product: syz [ 612.458346][ T9800] usb 1-1: Manufacturer: syz [ 612.463186][ T9800] usb 1-1: SerialNumber: syz [ 612.955617][T14726] binder: 14724:14726 ioctl c0306201 20001340 returned -14 05:24:15 executing program 0: r0 = socket(0x18, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x40047452, 0x0) 05:24:15 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)='\x00\x00\x00\x00\x00\x00\x00', 0x7, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xad3) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:24:15 executing program 4: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20), 0x0, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 613.128280][ T9800] option 1-1:3.180: GSM modem (1-port) converter detected [ 613.236583][T14716] F2FS-fs (loop3): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 613.280158][T14716] F2FS-fs (loop3): Failed to read root inode 05:24:15 executing program 1: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x40049409, 0x3) 05:24:15 executing program 5: r0 = fsopen(&(0x7f0000000040)='f2fs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000000c0)='sync\x00', 0x0, 0x0) [ 613.391516][ T9800] usb 1-1: USB disconnect, device number 90 [ 613.399589][ T9800] option 1-1:3.180: device disconnected [ 613.578576][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. 05:24:16 executing program 3: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {0x0, 0x0, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = getpgrp(0x0) kcmp(r5, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r5}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 613.814249][T14751] loop4: detected capacity change from 65551 to 0 [ 613.841577][T14753] loop2: detected capacity change from 65551 to 0 [ 613.886326][T14751] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 613.894605][T14751] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 613.919940][T14751] F2FS-fs (loop4): invalid crc_offset: 0 [ 613.954505][T14751] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 613.972023][T14751] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 613.993541][T14753] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 614.001893][T14753] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 614.041089][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 614.215996][T14751] F2FS-fs (loop4): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 614.228704][T14751] F2FS-fs (loop4): Failed to read root inode 05:24:16 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000140)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc0d05640, &(0x7f0000000200)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1aa55650"}, 0x0, 0x0, @planes=0x0}) 05:24:16 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000740)={'virt_wifi0\x00', &(0x7f0000000880)=@ethtool_per_queue_op={0x4b, 0xf}}) [ 614.455642][T14753] F2FS-fs (loop2): invalid crc_offset: 0 [ 614.578788][T14753] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 614.588005][T14753] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 05:24:17 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000500), 0x4) 05:24:17 executing program 4: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20), 0x0, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 614.696076][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 614.919644][T14771] loop3: detected capacity change from 65551 to 0 [ 615.011615][T14771] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 615.020643][T14771] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 615.041863][T14771] F2FS-fs (loop3): invalid crc_offset: 0 [ 615.044977][T14753] F2FS-fs (loop2): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 615.113727][T14753] F2FS-fs (loop2): Failed to read root inode [ 615.222060][T14771] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 615.236065][T14771] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 615.274798][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. 05:24:17 executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, @short}, 0x14, &(0x7f0000000100)={0x0}}, 0x4000040) [ 615.464692][T14771] F2FS-fs (loop3): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 615.477392][T14771] F2FS-fs (loop3): Failed to read root inode 05:24:18 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x3, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d44fdd67"}, 0x0, 0x0, @planes=0x0}) 05:24:18 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000080)={@local}) [ 615.758713][T14784] loop4: detected capacity change from 65551 to 0 [ 615.811888][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 615.832977][T14784] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 615.840968][T14784] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 616.027745][T14784] F2FS-fs (loop4): invalid crc_offset: 0 [ 616.115716][T14784] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 616.125296][T14784] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 05:24:18 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)='\x00\x00\x00\x00\x00\x00\x00', 0x7, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xad3) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:24:18 executing program 3: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {0x0, 0x0, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = getpgrp(0x0) kcmp(r5, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r5}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:24:18 executing program 1: bpf$PROG_LOAD(0x16, 0x0, 0x0) 05:24:18 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) read$rfkill(r0, 0x0, 0xffffffffffffffe9) 05:24:19 executing program 0: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10068, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 616.875091][T14784] F2FS-fs (loop4): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 616.981937][T14805] loop3: detected capacity change from 65551 to 0 [ 617.052154][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 617.191237][T14784] F2FS-fs (loop4): Failed to read root inode 05:24:19 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000140)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000200)={0x0, 0xd, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1aa55650"}, 0x0, 0x0, @planes=0x0}) [ 617.235743][T14805] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 617.251624][T14805] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 617.356206][T14812] loop2: detected capacity change from 65551 to 0 05:24:19 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f0000000000)=@raw=[@call, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], &(0x7f0000000040)='syzkaller\x00', 0x3, 0xea, &(0x7f0000000080)=""/234, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 617.398614][T14812] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 617.401645][T14805] F2FS-fs (loop3): invalid crc_offset: 0 [ 617.406902][T14812] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 617.415820][T14812] F2FS-fs (loop2): invalid crc_offset: 0 [ 617.525848][T14812] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 617.535648][T14812] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 617.726127][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 617.773984][T14812] F2FS-fs (loop2): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 617.785721][T14812] F2FS-fs (loop2): Failed to read root inode [ 617.837703][T14805] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-4) 05:24:20 executing program 4: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20), 0x0, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:24:20 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300", 0xa, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xad3) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:24:20 executing program 3: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {0x0, 0x0, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = getpgrp(0x0) kcmp(r5, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r5}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:24:20 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0xd2, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc0, 0x1, 0x1, 0x2, 0x20, 0x40, [{{0x9, 0x4, 0x0, 0x1a, 0x3, 0x2, 0x6, 0x0, 0x5, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xfad2, 0x2, 0x0, 0x8}, [@mdlm_detail={0xb, 0x24, 0x13, 0x9, "c945832acdafee"}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x9}, @mdlm_detail={0x73, 0x24, 0x13, 0x0, "5bf419260b6982dcc343426bab7a1ee89ffc6dc8045758aa550afe5102305f58b629c89e539938129a1fe46895e7bbf5f1ba0b5cf589d1d5e784151b94820db31fe585e710ccaf4c404193676f21671f1b22bd8f6f448db45f68f19a8b8d24188e7fc9dd50656eb1fe52519b4873e0"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x41, 0xff, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x80, 0x0, 0x9}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x0, 0x9, 0x78, 0x40, 0x6}, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x458}}, {0x8d, &(0x7f0000000300)=@string={0x8d, 0x3, "a430261492f043f7b59b04c5ffd1002afda1aa4766e8de4a8a8d99eef8700414e3a7c32e0cf0fece31d879d8cdac080afeb6070a2a1b19638b5ea60751f7ef1cf31487419378f90936c49261a32bbaab74ae07a2af94827b07ec34484cf58da32cd7c1bbf9a7dfcdfb086dee22efb6913fc6120e38b945b0b972e6c25faa02575738831c4a57ce0800247a"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x42c}}]}) 05:24:21 executing program 0: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6586, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 05:24:21 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x802, 0x0) write$input_event(r0, &(0x7f0000000040)={{0x0, 0xea60}}, 0x18) [ 619.119803][T14835] loop2: detected capacity change from 65551 to 0 [ 619.161796][T14835] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 619.170406][T14835] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 619.209680][T14835] F2FS-fs (loop2): invalid crc_offset: 0 [ 619.270838][T14839] loop4: detected capacity change from 65551 to 0 [ 619.282136][T14835] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 619.297338][T14835] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 619.507624][ T9800] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 619.599277][T14839] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 619.607697][T14839] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 619.650210][T14853] loop3: detected capacity change from 65551 to 0 [ 619.711668][T14853] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 619.720080][T14853] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 619.803167][ T9800] usb 2-1: Using ep0 maxpacket: 8 [ 619.870329][T14839] F2FS-fs (loop4): invalid crc_offset: 0 [ 619.908917][T14853] F2FS-fs (loop3): invalid crc_offset: 0 [ 619.929317][T14853] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 619.938775][T14853] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 620.038843][T14839] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-4) [ 620.061816][T14853] F2FS-fs (loop3): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 620.074997][T14853] F2FS-fs (loop3): Failed to read root inode [ 620.183318][ T9800] usb 2-1: config 1 interface 0 altsetting 26 endpoint 0x82 has invalid wMaxPacketSize 0 [ 620.193671][ T9800] usb 2-1: config 1 interface 0 altsetting 26 bulk endpoint 0x82 has invalid maxpacket 0 [ 620.199760][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 620.203781][ T9800] usb 2-1: config 1 interface 0 altsetting 26 bulk endpoint 0x3 has invalid maxpacket 1024 05:24:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001240)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001a80)={0x38, r1, 0x201, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x38}}, 0x0) [ 620.203923][ T9800] usb 2-1: config 1 interface 0 altsetting 26 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 620.204077][ T9800] usb 2-1: config 1 interface 0 has no altsetting 0 05:24:22 executing program 5: r0 = socket(0x11, 0x2, 0x0) getsockopt$WPAN_WANTACK(r0, 0x29, 0x2, 0x0, 0x0) [ 620.390187][T14835] F2FS-fs (loop2): sanity_check_inode: corrupted inode footer i_ino=3, ino,nid: [0, 3] run fsck to fix. [ 620.452946][T14835] F2FS-fs (loop2): Failed to read root inode 05:24:23 executing program 4: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)='\x00\x00\x00\x00\x00\x00\x00', 0x7, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 620.556990][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 620.814043][ T9800] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 620.825242][ T9800] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.839896][ T9800] usb 2-1: Product: Ь [ 620.844212][ T9800] usb 2-1: Manufacturer: イᐦ鮵씄퇿⨀ꇽ䞪䫞越烸ᐄ꟣⻃컾곍ਈ뛾ਇᬪ挙庋ަᳯᓳ䆇碓৹쐶憒⮣ꮺ깴ꈇ钯箂䠴ꎍ휬믁ꟹ췟ࣻ醶옿ฒ뤸끅犹싦꩟圂㡗ᲃ坊࣎␀ [ 620.866232][ T9800] usb 2-1: SerialNumber: syz [ 620.909842][T14831] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 620.956391][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. 05:24:23 executing program 3: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20), 0x0, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = getpgrp(0x0) kcmp(r5, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r5}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 621.193776][T14875] loop4: detected capacity change from 65551 to 0 [ 621.244434][ T9800] usb 2-1: bad CDC descriptors [ 621.264312][ T9800] usb 2-1: USB disconnect, device number 10 [ 621.427531][T14875] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 621.436214][T14875] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 05:24:23 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300", 0xa, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xad3) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:24:23 executing program 0: io_setup(0x7, &(0x7f00000000c0)=0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000023c0)='/dev/vhost-vsock\x00', 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000240)="deb673d90f3838b63c97875fe9601b773d6f130d23a93e49681d0ee3b7bc20aa6e1b252b5dfa2e8faf71f04cc2bfa6d260d40197b2201553bff1e8fa3accf5583e41395defd68544", 0x48}]) [ 621.450345][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. 05:24:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'wg1\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4c}}) [ 621.757561][T14875] F2FS-fs (loop4): invalid crc_offset: 0 [ 621.864820][T14875] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 621.874541][T14875] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 621.946615][T14889] loop3: detected capacity change from 65551 to 0 [ 622.038885][T14889] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 622.047524][T14889] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 622.083545][ T5] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 622.105621][T14889] F2FS-fs (loop3): invalid crc_offset: 0 [ 622.162009][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 622.236653][T14889] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 622.238093][T14875] F2FS-fs (loop4): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 622.246026][T14889] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 622.432999][ T5] usb 2-1: Using ep0 maxpacket: 8 [ 622.446558][T14875] F2FS-fs (loop4): Failed to read root inode [ 622.636977][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 622.776331][T14904] loop2: detected capacity change from 65551 to 0 [ 622.890784][ T5] usb 2-1: unable to get BOS descriptor set [ 622.913616][T14904] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 622.921928][T14904] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 05:24:25 executing program 1: syz_emit_ethernet(0x47, &(0x7f0000000000)={@local, @random="8331eab42e4c", @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "3eacae", 0x11, 0x21, 0x0, @private2, @mcast2, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, "831d1f", 0x0, "dc8541"}, '8'}}}}}}, 0x0) [ 622.952592][ T5] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 622.960674][ T5] usb 2-1: can't read configurations, error -71 [ 623.006188][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. 05:24:25 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f00000000c0), 0x4) [ 623.139177][T14904] F2FS-fs (loop2): invalid crc_offset: 0 [ 623.234768][T14889] F2FS-fs (loop3): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 623.304935][T14904] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 623.314518][T14904] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 623.351356][T14915] dccp_v6_rcv: dropped packet with invalid checksum [ 623.417937][T14915] dccp_v6_rcv: dropped packet with invalid checksum [ 623.531448][T14889] F2FS-fs (loop3): Failed to read root inode 05:24:26 executing program 4: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)='\x00\x00\x00\x00\x00\x00\x00', 0x7, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:24:26 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8, 0x1, 'etf\x00'}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb}}}}]}, 0x40}}, 0x0) [ 623.582676][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. 05:24:26 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) 05:24:26 executing program 3: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20), 0x0, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = getpgrp(0x0) kcmp(r5, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r5}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:24:26 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) keyctl$clear(0x7, 0xfffffffffffffff8) [ 624.215234][T14923] loop4: detected capacity change from 65551 to 0 [ 624.429401][T14923] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 624.437956][T14923] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 624.575601][T14904] F2FS-fs (loop2): sanity_check_inode: corrupted inode footer i_ino=3, ino,nid: [0, 3] run fsck to fix. [ 624.706031][T14923] F2FS-fs (loop4): invalid crc_offset: 0 [ 624.712130][T14904] F2FS-fs (loop2): Failed to read root inode 05:24:27 executing program 5: socketpair(0x48, 0x0, 0x0, &(0x7f0000002640)) [ 624.894121][T14923] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 624.903660][T14923] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 05:24:27 executing program 1: setuid(0xee01) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x0, 0x0) [ 625.035830][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 625.113712][T14936] loop3: detected capacity change from 65551 to 0 [ 625.261150][T14936] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 625.269427][T14936] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 625.381427][T14936] F2FS-fs (loop3): invalid crc_offset: 0 [ 625.511032][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 625.520525][T14936] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 625.530108][T14936] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 625.847824][T14923] F2FS-fs (loop4): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 625.921223][T14923] F2FS-fs (loop4): Failed to read root inode 05:24:28 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300", 0xa, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xad3) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:24:28 executing program 0: r0 = io_uring_setup(0x14c0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xa, 0x2, 0x0) 05:24:28 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000080)=0xc) [ 626.137006][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. 05:24:28 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x6, 0x1e, 0x0, &(0x7f0000000080)) [ 626.576378][T14936] F2FS-fs (loop3): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] 05:24:29 executing program 5: r0 = socket(0x25, 0x1, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, 0x0, 0x0) [ 626.688437][T14962] loop2: detected capacity change from 65551 to 0 [ 626.775343][T14936] F2FS-fs (loop3): Failed to read root inode 05:24:29 executing program 4: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)='\x00\x00\x00\x00\x00\x00\x00', 0x7, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:24:29 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="bd2efb739319", @random="8331eab42e4c", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "3a6ad2", 0x8, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, {[@fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}]}}}}}, 0x0) [ 626.933824][T14962] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 626.942080][T14962] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 626.958436][T14962] F2FS-fs (loop2): invalid crc_offset: 0 [ 627.013093][T14962] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 627.023012][T14962] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 627.370826][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. 05:24:29 executing program 0: select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000100)={0x401}, &(0x7f0000000180)={0x77359400}) [ 627.789367][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 627.860181][T14962] F2FS-fs (loop2): sanity_check_inode: corrupted inode footer i_ino=3, ino,nid: [0, 3] run fsck to fix. [ 627.964074][T14978] loop4: detected capacity change from 65551 to 0 [ 628.014229][T14962] F2FS-fs (loop2): Failed to read root inode [ 628.057093][T14978] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 628.065502][T14978] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 628.115272][T14978] F2FS-fs (loop4): invalid crc_offset: 0 05:24:30 executing program 3: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20), 0x0, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = getpgrp(0x0) kcmp(r5, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r5}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:24:30 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000880)={'ip6tnl0\x00', 0x0}) 05:24:30 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x8001, 0x0, 0x6}, 0x40) 05:24:30 executing program 0: syz_emit_ethernet(0x8a, &(0x7f00000010c0)={@local, @random="8331eab42e4c", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "d71198", 0x6, 0x21, 0x0, @private2, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4}, @eol, @md5sig={0x13, 0x12, "8014aa7d29776128bac492a987e161eb"}, @fastopen={0x22, 0xe, "958aea849731e0db4969f7a5"}, @timestamp={0x8, 0xa}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}]}}}}}}}}, 0x0) [ 628.215482][T14978] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 628.224961][T14978] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 628.446374][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 628.804477][T14978] F2FS-fs (loop4): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] 05:24:31 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="000000000000000003000000", 0xc, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xad3) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:24:31 executing program 1: ustat(0x4, &(0x7f0000000100)) [ 628.947866][T14978] F2FS-fs (loop4): Failed to read root inode [ 629.063784][T14995] loop3: detected capacity change from 65551 to 0 [ 629.269115][T14995] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 629.277535][T14995] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 05:24:31 executing program 5: r0 = socket(0xa, 0x6, 0x0) getsockopt$WPAN_WANTACK(r0, 0x29, 0x0, 0x0, 0x0) [ 629.320796][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. 05:24:31 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x40104593, 0x0) 05:24:31 executing program 1: syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x23c0490, &(0x7f0000001200)) [ 629.447727][T14995] F2FS-fs (loop3): invalid crc_offset: 0 [ 629.502382][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 629.568661][T14995] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 629.578446][T14995] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 05:24:32 executing program 4: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300", 0xa, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 629.966062][T15006] loop2: detected capacity change from 65551 to 0 [ 629.980754][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 630.045226][T15006] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 630.053649][T15006] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 630.240510][T15006] F2FS-fs (loop2): invalid crc_offset: 0 [ 630.329788][T15006] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 630.339444][T15006] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 05:24:32 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0x5, 0x9, 0x6, 0x4, 0x108}, 0x40) 05:24:32 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x2, 0x0, &(0x7f0000000080)) [ 630.441877][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 630.592630][T14995] F2FS-fs (loop3): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 630.621180][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 630.683751][T14995] F2FS-fs (loop3): Failed to read root inode [ 630.856599][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 631.018950][T15023] loop4: detected capacity change from 65551 to 0 [ 631.126717][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 631.188594][T15006] F2FS-fs (loop2): sanity_check_inode: corrupted inode footer i_ino=3, ino,nid: [0, 3] run fsck to fix. [ 631.227088][T15023] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 631.235644][T15023] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 631.324232][T15006] F2FS-fs (loop2): Failed to read root inode 05:24:33 executing program 1: r0 = socket$inet(0x2, 0x3, 0x7) ioctl$sock_inet_udp_SIOCINQ(r0, 0x5411, &(0x7f0000000100)) 05:24:33 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x22002) write$char_usb(r0, 0x0, 0x0) 05:24:33 executing program 3: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)='\x00\x00\x00\x00\x00\x00\x00', 0x7, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = getpgrp(0x0) kcmp(r5, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r5}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:24:33 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x6, 0xb, 0x0, &(0x7f0000000080)) [ 631.468418][T15023] F2FS-fs (loop4): invalid crc_offset: 0 [ 631.664104][T15023] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 631.673583][T15023] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 05:24:34 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="000000000000000003000000", 0xc, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xad3) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:24:34 executing program 1: r0 = socket$inet(0x2, 0x3, 0x7) ioctl$sock_inet_udp_SIOCINQ(r0, 0x5411, &(0x7f0000000100)) [ 632.301622][T15042] loop3: detected capacity change from 65551 to 0 05:24:34 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc03020001005265497345723346730000000200000002", 0x45, 0x10000}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000a99000000000000000000000100000002000000000000000000000000002c5f27000000010000000200000001000000f4bbe4120f003000a40f", 0x46, 0x3d97000}], 0x0, &(0x7f0000011500)=ANY=[]) [ 632.354907][ T3162] ieee802154 phy0 wpan0: encryption failed: -22 [ 632.361479][ T3162] ieee802154 phy1 wpan1: encryption failed: -22 05:24:34 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x16, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000000340)=""/199, 0x2e, 0xc7, 0x1}, 0x20) [ 632.503383][T15042] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 632.512808][T15042] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 632.626052][T15023] F2FS-fs (loop4): sanity_check_inode: corrupted inode footer i_ino=3, ino,nid: [0, 3] run fsck to fix. [ 632.681493][T15042] F2FS-fs (loop3): invalid crc_offset: 0 [ 632.711178][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 632.759312][T15023] F2FS-fs (loop4): Failed to read root inode [ 632.872626][T15042] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 632.881954][T15042] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 05:24:35 executing program 1: r0 = socket$inet(0x2, 0x3, 0x7) ioctl$sock_inet_udp_SIOCINQ(r0, 0x5411, &(0x7f0000000100)) [ 633.330007][T15058] loop5: detected capacity change from 252272 to 0 [ 633.402213][T15056] loop2: detected capacity change from 65551 to 0 [ 633.461858][T15058] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 633.494044][T15056] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) 05:24:35 executing program 4: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300", 0xa, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 633.513677][T15056] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 633.553462][T15058] REISERFS (device loop5): using ordered data mode [ 633.560458][T15058] reiserfs: using flush barriers [ 633.574835][T15058] REISERFS (device loop5): journal params: device loop5, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 633.609617][T15056] F2FS-fs (loop2): invalid crc_offset: 0 [ 633.687993][T15056] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 633.706233][T15056] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 633.740217][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 633.770718][T15058] REISERFS (device loop5): checking transaction log (loop5) 05:24:36 executing program 0: socket(0x2, 0xa, 0xffff) [ 633.922980][T15042] F2FS-fs (loop3): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 633.943256][T15056] F2FS-fs (loop2): sanity_check_inode: corrupted inode footer i_ino=3, ino,nid: [0, 3] run fsck to fix. [ 634.025782][T15058] REISERFS warning: reiserfs-5084 is_leaf: item location seems wrong: *3.5*[1 2 0x0 SD], item_len 24364, item_location 39, free_space(entry_count) 0 [ 634.044607][T15042] F2FS-fs (loop3): Failed to read root inode [ 634.051329][T15058] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 15767. Fsck? [ 634.062958][T15058] REISERFS (device loop5): Remounting filesystem read-only [ 634.070333][T15058] REISERFS error (device loop5): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 634.084257][T15058] REISERFS (device loop5): Using rupasov hash to sort names [ 634.091717][T15058] REISERFS (device loop5): using 3.5.x disk format [ 634.113386][T15056] F2FS-fs (loop2): Failed to read root inode [ 634.220290][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 634.305679][T15071] loop4: detected capacity change from 65551 to 0 [ 634.417012][T15071] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 634.425539][T15071] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 05:24:36 executing program 3: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)='\x00\x00\x00\x00\x00\x00\x00', 0x7, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = getpgrp(0x0) kcmp(r5, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r5}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:24:37 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="000000000000000003000000", 0xc, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xad3) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 634.654890][T15071] F2FS-fs (loop4): invalid crc_offset: 0 [ 634.777969][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 634.799785][T15082] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) [ 634.807692][T15071] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 634.817363][T15071] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 05:24:37 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc03020001005265497345723346730000000200000002", 0x45, 0x10000}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000a99000000000000000000000100000002000000000000000000000000002c5f27000000010000000200000001000000f4bbe4120f003000a40f", 0x46, 0x3d97000}], 0x0, &(0x7f0000011500)=ANY=[]) 05:24:37 executing program 1: r0 = socket$inet(0x2, 0x3, 0x7) ioctl$sock_inet_udp_SIOCINQ(r0, 0x5411, &(0x7f0000000100)) 05:24:37 executing program 0: r0 = syz_io_uring_setup(0x4e9f, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000200)=""/253, 0xfd}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/18, 0x12}], 0x3) [ 635.331238][T15086] loop3: detected capacity change from 65551 to 0 [ 635.441019][ C0] not chained 140000 origins [ 635.445669][ C0] CPU: 0 PID: 1341 Comm: kworker/u4:20 Not tainted 5.11.0-rc7-syzkaller #0 [ 635.454289][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 635.465225][ C0] Workqueue: krdsd rds_connect_worker [ 635.470610][ C0] Call Trace: [ 635.473889][ C0] [ 635.476732][ C0] dump_stack+0x21c/0x280 [ 635.481075][ C0] kmsan_internal_chain_origin+0x6f/0x130 [ 635.486808][ C0] ? kmsan_get_metadata+0x116/0x180 [ 635.492023][ C0] ? kmsan_get_metadata+0x116/0x180 [ 635.497322][ C0] ? kmsan_get_metadata+0x116/0x180 [ 635.502532][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 635.508381][ C0] ? __msan_metadata_ptr_for_store_n+0xe/0x10 [ 635.514459][ C0] ? tcp_parse_options+0x225e/0x22f0 [ 635.519789][ C0] ? kmsan_get_metadata+0x116/0x180 [ 635.525002][ C0] __msan_chain_origin+0x57/0xa0 [ 635.529989][ C0] tcp_conn_request+0x1b17/0x4db0 [ 635.535029][ C0] ? memcg_slab_free_hook+0x3a/0xb00 [ 635.540328][ C0] ? kmsan_get_metadata+0x116/0x180 [ 635.545534][ C0] ? kmsan_get_metadata+0x116/0x180 [ 635.550748][ C0] tcp_v4_conn_request+0x201/0x290 [ 635.555867][ C0] tcp_v6_conn_request+0xeb/0x330 [ 635.560904][ C0] ? inet6_sk_rx_dst_set+0x4d0/0x4d0 [ 635.566199][ C0] tcp_rcv_state_process+0x2f4/0x45a0 [ 635.571581][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 635.577403][ C0] ? kmsan_get_metadata+0x116/0x180 [ 635.582643][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 635.588466][ C0] ? kmsan_get_metadata+0x116/0x180 [ 635.593677][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 635.598365][ C0] ? tcp_v4_fill_cb+0x562/0x5e0 [ 635.603239][ C0] tcp_v4_rcv+0x4b0a/0x5c80 [ 635.607755][ C0] ? rcu_read_unlock_strict+0x9/0x10 [ 635.613065][ C0] ? tcp_filter+0xf0/0xf0 [ 635.617410][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 635.622891][ C0] ip_local_deliver+0x585/0x8d0 [ 635.627758][ C0] ? ip_local_deliver+0x8d0/0x8d0 [ 635.632795][ C0] ? ip_protocol_deliver_rcu+0xc50/0xc50 [ 635.638444][ C0] ip_rcv+0x599/0x820 [ 635.642468][ C0] ? ip_rcv_core+0x1480/0x1480 [ 635.647242][ C0] __netif_receive_skb+0x1ec/0x640 [ 635.652369][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 635.658015][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 635.663659][ C0] process_backlog+0x517/0xbd0 [ 635.668468][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 635.673763][ C0] napi_poll+0x428/0x15c0 [ 635.678108][ C0] net_rx_action+0x34c/0xd30 [ 635.682714][ C0] ? net_tx_action+0xd30/0xd30 [ 635.687489][ C0] __do_softirq+0x1b9/0x715 [ 635.692003][ C0] asm_call_irq_on_stack+0xf/0x20 [ 635.697122][ C0] [ 635.700093][ C0] do_softirq_own_stack+0x6e/0x90 [ 635.705127][ C0] __local_bh_enable_ip+0x184/0x1d0 [ 635.710335][ C0] local_bh_enable+0x36/0x40 [ 635.714960][ C0] ip_finish_output2+0x2454/0x2940 [ 635.720110][ C0] ? __msan_get_context_state+0x9/0x20 [ 635.725669][ C0] ? rcu_read_unlock_strict+0x9/0x10 [ 635.730961][ C0] ? nf_ct_deliver_cached_events+0x610/0x7e0 [ 635.737615][ C0] __ip_finish_output+0x9fd/0x1050 [ 635.742742][ C0] ip_finish_output+0x329/0x480 [ 635.747605][ C0] ip_output+0x32e/0x6d0 [ 635.751861][ C0] ? ip_mc_finish_output+0x770/0x770 [ 635.757170][ C0] ? ip_finish_output+0x480/0x480 [ 635.762222][ C0] __ip_queue_xmit+0x1e3d/0x23b0 [ 635.767181][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 635.772834][ C0] ? __msan_poison_alloca+0xe9/0x110 [ 635.778144][ C0] ip_queue_xmit+0xcc/0xf0 [ 635.782581][ C0] ? __ip_queue_xmit+0x23b0/0x23b0 [ 635.787707][ C0] __tcp_transmit_skb+0x4d3f/0x5ea0 [ 635.792934][ C0] tcp_connect+0x104d/0x3cf0 [ 635.797576][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 635.803234][ C0] tcp_v4_connect+0x255c/0x26f0 [ 635.808115][ C0] ? tcp_twsk_unique+0xd40/0xd40 [ 635.813084][ C0] __inet_stream_connect+0x8d8/0x17d0 [ 635.818469][ C0] ? __local_bh_enable_ip+0x97/0x1d0 [ 635.823774][ C0] ? kmsan_get_metadata+0x116/0x180 [ 635.828989][ C0] inet_stream_connect+0x101/0x180 [ 635.834113][ C0] ? __inet_stream_connect+0x17d0/0x17d0 [ 635.839849][ C0] rds_tcp_conn_path_connect+0x9e1/0xd30 [ 635.845513][ C0] ? kmsan_get_metadata+0x116/0x180 [ 635.850733][ C0] ? rds_tcp_state_change+0x400/0x400 [ 635.856118][ C0] rds_connect_worker+0x368/0x550 [ 635.861156][ C0] ? rds_addr_cmp+0x290/0x290 [ 635.865841][ C0] process_one_work+0x1219/0x1fe0 [ 635.870887][ C0] worker_thread+0x10ec/0x2340 [ 635.875666][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 635.881485][ C0] ? kmsan_get_metadata+0x116/0x180 [ 635.886702][ C0] kthread+0x521/0x560 [ 635.890780][ C0] ? process_one_work+0x1fe0/0x1fe0 [ 635.895994][ C0] ? kthread_blkcg+0x110/0x110 [ 635.900766][ C0] ret_from_fork+0x1f/0x30 [ 635.905192][ C0] Uninit was stored to memory at: [ 635.910206][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 635.915938][ C0] __msan_chain_origin+0x57/0xa0 [ 635.920886][ C0] tcp_conn_request+0x1b4d/0x4db0 [ 635.925917][ C0] tcp_v4_conn_request+0x201/0x290 [ 635.931032][ C0] tcp_v6_conn_request+0xeb/0x330 [ 635.936068][ C0] tcp_rcv_state_process+0x2f4/0x45a0 [ 635.941454][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 635.946138][ C0] tcp_v4_rcv+0x4b0a/0x5c80 [ 635.950645][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 635.956114][ C0] ip_local_deliver+0x585/0x8d0 [ 635.960972][ C0] ip_rcv+0x599/0x820 [ 635.964999][ C0] __netif_receive_skb+0x1ec/0x640 [ 635.970120][ C0] process_backlog+0x517/0xbd0 [ 635.974890][ C0] napi_poll+0x428/0x15c0 [ 635.979227][ C0] net_rx_action+0x34c/0xd30 [ 635.983822][ C0] __do_softirq+0x1b9/0x715 [ 635.988331][ C0] [ 635.990647][ C0] Uninit was stored to memory at: [ 635.995658][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 636.001389][ C0] __msan_chain_origin+0x57/0xa0 [ 636.006331][ C0] tcp_openreq_init_rwin+0xcc6/0x1010 [ 636.011704][ C0] tcp_conn_request+0x2bd7/0x4db0 [ 636.016736][ C0] tcp_v4_conn_request+0x201/0x290 [ 636.021847][ C0] tcp_v6_conn_request+0xeb/0x330 [ 636.026878][ C0] tcp_rcv_state_process+0x2f4/0x45a0 [ 636.032272][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 636.036949][ C0] tcp_v4_rcv+0x4b0a/0x5c80 [ 636.041495][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 636.046964][ C0] ip_local_deliver+0x585/0x8d0 [ 636.051825][ C0] ip_rcv+0x599/0x820 [ 636.055812][ C0] __netif_receive_skb+0x1ec/0x640 [ 636.060932][ C0] process_backlog+0x517/0xbd0 [ 636.065702][ C0] napi_poll+0x428/0x15c0 [ 636.070039][ C0] net_rx_action+0x34c/0xd30 [ 636.074641][ C0] __do_softirq+0x1b9/0x715 [ 636.079177][ C0] [ 636.081493][ C0] Uninit was stored to memory at: [ 636.086536][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 636.092302][ C0] __msan_chain_origin+0x57/0xa0 [ 636.097247][ C0] tcp_conn_request+0x1b4d/0x4db0 [ 636.102276][ C0] tcp_v4_conn_request+0x201/0x290 [ 636.107391][ C0] tcp_v6_conn_request+0xeb/0x330 [ 636.112452][ C0] tcp_rcv_state_process+0x2f4/0x45a0 [ 636.117833][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 636.122512][ C0] tcp_v4_rcv+0x4b0a/0x5c80 [ 636.127018][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 636.132486][ C0] ip_local_deliver+0x585/0x8d0 [ 636.137345][ C0] ip_rcv+0x599/0x820 [ 636.141330][ C0] __netif_receive_skb+0x1ec/0x640 [ 636.146455][ C0] process_backlog+0x517/0xbd0 [ 636.151227][ C0] napi_poll+0x428/0x15c0 [ 636.155562][ C0] net_rx_action+0x34c/0xd30 [ 636.160156][ C0] __do_softirq+0x1b9/0x715 [ 636.164663][ C0] [ 636.167009][ C0] Uninit was stored to memory at: [ 636.172021][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 636.177838][ C0] __msan_chain_origin+0x57/0xa0 [ 636.182781][ C0] tcp_openreq_init_rwin+0xcc6/0x1010 [ 636.188159][ C0] tcp_conn_request+0x2bd7/0x4db0 [ 636.193192][ C0] tcp_v4_conn_request+0x201/0x290 [ 636.198309][ C0] tcp_v6_conn_request+0xeb/0x330 [ 636.203341][ C0] tcp_rcv_state_process+0x2f4/0x45a0 [ 636.208724][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 636.213404][ C0] tcp_v4_rcv+0x4b0a/0x5c80 [ 636.218005][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 636.223475][ C0] ip_local_deliver+0x585/0x8d0 [ 636.228332][ C0] ip_rcv+0x599/0x820 [ 636.232320][ C0] __netif_receive_skb+0x1ec/0x640 [ 636.237441][ C0] process_backlog+0x517/0xbd0 [ 636.242216][ C0] napi_poll+0x428/0x15c0 [ 636.246554][ C0] net_rx_action+0x34c/0xd30 [ 636.251153][ C0] __do_softirq+0x1b9/0x715 [ 636.255660][ C0] [ 636.257979][ C0] Uninit was stored to memory at: [ 636.262989][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 636.268718][ C0] __msan_chain_origin+0x57/0xa0 [ 636.273663][ C0] tcp_conn_request+0x1b4d/0x4db0 [ 636.278697][ C0] tcp_v4_conn_request+0x201/0x290 [ 636.283852][ C0] tcp_v6_conn_request+0xeb/0x330 [ 636.288916][ C0] tcp_rcv_state_process+0x2f4/0x45a0 [ 636.294306][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 636.298986][ C0] tcp_v4_rcv+0x4b0a/0x5c80 [ 636.303526][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 636.308994][ C0] ip_local_deliver+0x585/0x8d0 [ 636.313850][ C0] ip_rcv+0x599/0x820 [ 636.317839][ C0] __netif_receive_skb+0x1ec/0x640 [ 636.322988][ C0] process_backlog+0x517/0xbd0 [ 636.327759][ C0] napi_poll+0x428/0x15c0 [ 636.332092][ C0] net_rx_action+0x34c/0xd30 [ 636.336686][ C0] __do_softirq+0x1b9/0x715 [ 636.341193][ C0] [ 636.343512][ C0] Uninit was stored to memory at: [ 636.348520][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 636.354247][ C0] __msan_chain_origin+0x57/0xa0 [ 636.359190][ C0] tcp_openreq_init_rwin+0xcc6/0x1010 [ 636.364564][ C0] tcp_conn_request+0x2bd7/0x4db0 [ 636.369596][ C0] tcp_v4_conn_request+0x201/0x290 [ 636.374708][ C0] tcp_v6_conn_request+0xeb/0x330 [ 636.379737][ C0] tcp_rcv_state_process+0x2f4/0x45a0 [ 636.385114][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 636.389790][ C0] tcp_v4_rcv+0x4b0a/0x5c80 [ 636.394293][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 636.399771][ C0] ip_local_deliver+0x585/0x8d0 [ 636.404643][ C0] ip_rcv+0x599/0x820 [ 636.408632][ C0] __netif_receive_skb+0x1ec/0x640 [ 636.413754][ C0] process_backlog+0x517/0xbd0 [ 636.418554][ C0] napi_poll+0x428/0x15c0 [ 636.422890][ C0] net_rx_action+0x34c/0xd30 [ 636.427620][ C0] __do_softirq+0x1b9/0x715 [ 636.432178][ C0] [ 636.434502][ C0] Uninit was stored to memory at: [ 636.439545][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 636.445273][ C0] __msan_chain_origin+0x57/0xa0 [ 636.450221][ C0] tcp_conn_request+0x1b4d/0x4db0 [ 636.455272][ C0] tcp_v4_conn_request+0x201/0x290 [ 636.460385][ C0] tcp_v6_conn_request+0xeb/0x330 [ 636.465417][ C0] tcp_rcv_state_process+0x2f4/0x45a0 [ 636.470800][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 636.475479][ C0] tcp_v4_rcv+0x4b0a/0x5c80 [ 636.480001][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 636.485468][ C0] ip_local_deliver+0x585/0x8d0 [ 636.490326][ C0] ip_rcv+0x599/0x820 [ 636.494311][ C0] __netif_receive_skb+0x1ec/0x640 [ 636.499431][ C0] process_backlog+0x517/0xbd0 [ 636.504206][ C0] napi_poll+0x428/0x15c0 [ 636.508547][ C0] net_rx_action+0x34c/0xd30 [ 636.513144][ C0] __do_softirq+0x1b9/0x715 [ 636.517653][ C0] [ 636.519969][ C0] Uninit was created at: [ 636.524198][ C0] kmsan_save_stack_with_flags+0x3c/0x90 [ 636.529838][ C0] kmsan_alloc_page+0xd3/0x1f0 [ 636.534613][ C0] __alloc_pages_nodemask+0x827/0xf90 [ 636.539993][ C0] alloc_pages_current+0x7b6/0xb60 [ 636.545111][ C0] allocate_slab+0x392/0x11e0 [ 636.549793][ C0] ___slab_alloc+0xd42/0x1930 [ 636.554470][ C0] kmem_cache_alloc+0xc36/0xff0 [ 636.559325][ C0] inet_reqsk_alloc+0xaf/0x8c0 [ 636.564092][ C0] tcp_conn_request+0x911/0x4db0 [ 636.569037][ C0] tcp_v4_conn_request+0x201/0x290 [ 636.574148][ C0] tcp_rcv_state_process+0x2f4/0x45a0 [ 636.579524][ C0] tcp_v4_do_rcv+0xc63/0x1000 [ 636.584201][ C0] tcp_v4_rcv+0x4b0a/0x5c80 [ 636.588740][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 636.594204][ C0] ip_local_deliver+0x585/0x8d0 [ 636.599062][ C0] ip_sublist_rcv+0x121b/0x1560 [ 636.603920][ C0] ip_list_rcv+0x8f1/0x960 [ 636.608344][ C0] __netif_receive_skb_list_core+0xe65/0x1250 [ 636.614420][ C0] __netif_receive_skb_list+0x7e2/0x930 [ 636.620064][ C0] netif_receive_skb_list_internal+0x837/0xdb0 [ 636.626222][ C0] napi_complete_done+0x552/0xf80 [ 636.631253][ C0] virtqueue_napi_complete+0xb9/0x1f0 [ 636.636729][ C0] virtnet_poll+0x170f/0x1d10 [ 636.641429][ C0] napi_poll+0x428/0x15c0 [ 636.645770][ C0] net_rx_action+0x34c/0xd30 [ 636.650371][ C0] __do_softirq+0x1b9/0x715 [ 636.734110][T15086] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 636.742183][T15086] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 636.804547][T15071] F2FS-fs (loop4): sanity_check_inode: corrupted inode footer i_ino=3, ino,nid: [0, 3] run fsck to fix. [ 636.875829][T15071] F2FS-fs (loop4): Failed to read root inode [ 636.895328][T15086] F2FS-fs (loop3): invalid crc_offset: 0 [ 636.917041][T15093] loop2: detected capacity change from 65551 to 0 [ 636.964842][T15086] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-4) [ 636.979181][T15093] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 636.988413][T15093] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 637.049267][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 637.143588][T15100] loop5: detected capacity change from 252272 to 0 [ 637.224321][T15093] F2FS-fs (loop2): invalid crc_offset: 0 [ 637.276775][T15100] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 637.308072][T15100] REISERFS (device loop5): using ordered data mode [ 637.316572][T15100] reiserfs: using flush barriers [ 637.326731][T15100] REISERFS (device loop5): journal params: device loop5, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 637.356105][T15100] REISERFS (device loop5): checking transaction log (loop5) [ 637.366598][T15100] REISERFS warning: reiserfs-5084 is_leaf: item location seems wrong: *3.5*[1 2 0x0 SD], item_len 24364, item_location 39, free_space(entry_count) 0 [ 637.382021][T15100] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 15767. Fsck? [ 637.393073][T15100] REISERFS (device loop5): Remounting filesystem read-only [ 637.400552][T15100] REISERFS error (device loop5): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 637.418158][T15100] REISERFS (device loop5): Using rupasov hash to sort names [ 637.425889][T15100] REISERFS (device loop5): using 3.5.x disk format [ 637.473002][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 637.484778][T15093] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 637.494405][T15093] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 05:24:40 executing program 3: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)='\x00\x00\x00\x00\x00\x00\x00', 0x7, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = getpgrp(0x0) kcmp(r5, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r5}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:24:40 executing program 4: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300", 0xa, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 638.219040][T15112] loop4: detected capacity change from 65551 to 0 05:24:40 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc03020001005265497345723346730000000200000002", 0x45, 0x10000}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000a99000000000000000000000100000002000000000000000000000000002c5f27000000010000000200000001000000f4bbe4120f003000a40f", 0x46, 0x3d97000}], 0x0, &(0x7f0000011500)=ANY=[]) [ 638.284056][T15112] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 638.292285][T15112] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 638.310965][T15112] F2FS-fs (loop4): invalid crc_offset: 0 [ 638.439564][T15093] F2FS-fs (loop2): sanity_check_inode: corrupted inode footer i_ino=3, ino,nid: [0, 3] run fsck to fix. [ 638.447935][T15112] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 638.460628][T15112] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 638.473691][T15093] F2FS-fs (loop2): Failed to read root inode 05:24:41 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000440)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x5}) [ 638.647825][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 638.692629][T15112] F2FS-fs (loop4): sanity_check_inode: corrupted inode footer i_ino=3, ino,nid: [0, 3] run fsck to fix. [ 638.705037][T15112] F2FS-fs (loop4): Failed to read root inode [ 638.904220][T15123] loop3: detected capacity change from 65551 to 0 [ 639.088954][T15123] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 639.097297][T15123] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 639.140432][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 639.221041][T15137] loop5: detected capacity change from 252272 to 0 [ 639.225268][T15123] F2FS-fs (loop3): invalid crc_offset: 0 [ 639.401266][T15137] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 639.450046][T15123] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 639.466782][T15123] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 639.577788][T15137] REISERFS (device loop5): using ordered data mode [ 639.584657][T15137] reiserfs: using flush barriers 05:24:42 executing program 4: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="000000000000000003000000", 0xc, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 639.661193][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. 05:24:42 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x5452, &(0x7f00000002c0)) [ 639.736297][T15137] REISERFS (device loop5): journal params: device loop5, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 05:24:42 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) [ 639.929624][T15137] REISERFS (device loop5): checking transaction log (loop5) 05:24:42 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xad3) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 640.051869][T15137] REISERFS warning: reiserfs-5084 is_leaf: item location seems wrong: *3.5*[1 2 0x0 SD], item_len 24364, item_location 39, free_space(entry_count) 0 [ 640.067585][T15137] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 15767. Fsck? [ 640.078548][T15137] REISERFS (device loop5): Remounting filesystem read-only [ 640.086149][T15137] REISERFS error (device loop5): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 640.100018][T15137] REISERFS (device loop5): Using rupasov hash to sort names [ 640.107561][T15137] REISERFS (device loop5): using 3.5.x disk format [ 640.250981][T15147] loop4: detected capacity change from 65551 to 0 [ 640.302745][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 640.380940][T15123] F2FS-fs (loop3): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 640.407623][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 640.421178][T15123] F2FS-fs (loop3): Failed to read root inode [ 640.503256][T15147] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 640.511441][T15147] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 640.651525][T15147] F2FS-fs (loop4): invalid crc_offset: 0 [ 640.693889][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. 05:24:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf2518000008080007"], 0x1c}}, 0x0) [ 640.789332][T15159] loop2: detected capacity change from 65536 to 0 [ 640.810403][T15147] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 640.820111][T15147] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 05:24:43 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="0040000068020000973d00001200000000000000843d00000004000073564d38840300001e000000000000000010cc03020001005265497345723346730000000200000002", 0x45, 0x10000}, {&(0x7f0000011200)="0000020000000000000000001200000000000000843d00000004000073564d388403", 0x22, 0x3d96000}, {&(0x7f0000011300)="010002005c0f0000000000000a99000000000000000000000100000002000000000000000000000000002c5f27000000010000000200000001000000f4bbe4120f003000a40f", 0x46, 0x3d97000}], 0x0, &(0x7f0000011500)=ANY=[]) 05:24:43 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046207, 0x0) [ 641.126292][T15159] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 641.134488][T15159] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 641.179368][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 641.298454][T15159] F2FS-fs (loop2): invalid crc_offset: 0 05:24:43 executing program 3: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300", 0xa, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = getpgrp(0x0) kcmp(r5, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r5}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 641.443616][T15159] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 641.453176][T15159] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 641.507039][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 641.591387][T15171] loop5: detected capacity change from 252272 to 0 [ 641.773992][T15147] F2FS-fs (loop4): sanity_check_inode: corrupted inode footer i_ino=3, ino,nid: [0, 3] run fsck to fix. [ 641.820616][T15171] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 641.838319][T15171] REISERFS (device loop5): using ordered data mode [ 641.845271][T15171] reiserfs: using flush barriers [ 641.855663][T15171] REISERFS (device loop5): journal params: device loop5, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 641.899796][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 641.909800][T15147] F2FS-fs (loop4): Failed to read root inode [ 641.972910][T15171] REISERFS (device loop5): checking transaction log (loop5) [ 642.168672][T15171] REISERFS warning: reiserfs-5084 is_leaf: item location seems wrong: *3.5*[1 2 0x0 SD], item_len 24364, item_location 39, free_space(entry_count) 0 [ 642.184111][T15171] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 15767. Fsck? [ 642.195062][T15171] REISERFS (device loop5): Remounting filesystem read-only [ 642.202720][T15171] REISERFS error (device loop5): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] 05:24:44 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @random="8331eab42e4c", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "004084", 0x28, 0x6, 0x0, @private2, @local, {[], {{0x0, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "8014aa7d29776128bac492a987e161eb"}]}}}}}}}}, 0x0) [ 642.216727][T15171] REISERFS (device loop5): Using rupasov hash to sort names [ 642.226682][T15171] REISERFS (device loop5): using 3.5.x disk format [ 642.337350][T15159] F2FS-fs (loop2): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 642.387323][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 642.464155][T15159] F2FS-fs (loop2): Failed to read root inode [ 642.481466][T15184] loop3: detected capacity change from 65551 to 0 05:24:44 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000206a053f004000010203810902240001010000790904"], 0x0) 05:24:44 executing program 4: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="000000000000000003000000", 0xc, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 642.692346][T15184] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 642.700588][T15184] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 642.789337][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 642.883794][T15184] F2FS-fs (loop3): invalid crc_offset: 0 [ 643.029296][T15184] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 643.039158][T15184] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 05:24:45 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x31, 0x0, &(0x7f0000000080)) 05:24:45 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @random="8331eab42e4c", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "004084", 0x28, 0x6, 0x0, @private2, @local, {[], {{0x0, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "8014aa7d29776128bac492a987e161eb"}]}}}}}}}}, 0x0) 05:24:46 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xad3) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 643.588041][T15198] loop4: detected capacity change from 65551 to 0 [ 643.793032][T15198] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 643.801560][T15198] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 643.801667][T15184] F2FS-fs (loop3): sanity_check_inode: corrupted inode footer i_ino=3, ino,nid: [0, 3] run fsck to fix. [ 643.801938][T15184] F2FS-fs (loop3): Failed to read root inode [ 643.853031][ T917] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 644.050041][T15198] F2FS-fs (loop4): invalid crc_offset: 0 [ 644.129750][ T917] usb 2-1: Using ep0 maxpacket: 32 [ 644.174128][ T917] usb 2-1: too many configurations: 129, using maximum allowed: 8 [ 644.274985][ T917] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config 05:24:46 executing program 5: recvmsg(0xffffffffffffffff, 0x0, 0x80000001) [ 644.351557][T15198] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-4) [ 644.362734][ T917] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 644.425736][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 644.453900][ T917] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config 05:24:47 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @random="8331eab42e4c", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "004084", 0x28, 0x6, 0x0, @private2, @local, {[], {{0x0, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "8014aa7d29776128bac492a987e161eb"}]}}}}}}}}, 0x0) [ 644.552651][ T917] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 644.644545][ T917] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 644.661291][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 644.679100][T15214] loop2: detected capacity change from 65536 to 0 05:24:47 executing program 4: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="000000000000000003000000", 0xc, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 644.739529][ T917] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 644.799519][T15214] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 644.807770][T15214] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 644.825997][T15214] F2FS-fs (loop2): invalid crc_offset: 0 [ 644.833633][ T917] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 644.864583][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 644.933923][ T917] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config 05:24:47 executing program 3: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300", 0xa, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = getpgrp(0x0) kcmp(r5, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r5}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 644.975338][T15214] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 644.984694][T15214] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 645.141296][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 645.213663][ T917] usb 2-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.40 [ 645.223199][ T917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.231357][ T917] usb 2-1: Product: syz [ 645.235807][ T917] usb 2-1: Manufacturer: syz [ 645.240533][ T917] usb 2-1: SerialNumber: syz 05:24:48 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10948, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 645.683423][T15232] loop4: detected capacity change from 65551 to 0 [ 645.709646][T15214] F2FS-fs (loop2): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 645.716768][ T917] usb 2-1: USB disconnect, device number 13 05:24:48 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @random="8331eab42e4c", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "004084", 0x28, 0x6, 0x0, @private2, @local, {[], {{0x0, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "8014aa7d29776128bac492a987e161eb"}]}}}}}}}}, 0x0) [ 645.792253][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 645.801888][T15232] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 645.835207][T15232] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 645.881412][T15234] loop3: detected capacity change from 65551 to 0 [ 645.887148][T15214] F2FS-fs (loop2): Failed to read root inode [ 646.024209][T15234] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 646.032502][T15234] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 646.079124][T15234] F2FS-fs (loop3): invalid crc_offset: 0 [ 646.174012][T15234] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 646.183806][T15234] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 646.190579][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 646.391822][T15232] F2FS-fs (loop4): invalid crc_offset: 0 [ 646.440965][T15232] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-4) 05:24:49 executing program 5: syz_mount_image$nfs(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuseblk(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xe4010, 0x0) [ 646.543752][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 646.553320][ T18] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 646.839217][ T18] usb 2-1: Using ep0 maxpacket: 32 [ 646.893397][ T18] usb 2-1: too many configurations: 129, using maximum allowed: 8 [ 646.963331][T15234] F2FS-fs (loop3): sanity_check_inode: corrupted inode footer i_ino=3, ino,nid: [0, 3] run fsck to fix. [ 646.969577][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 647.003919][ T18] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 647.022944][T15234] F2FS-fs (loop3): Failed to read root inode [ 647.128294][ T18] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 647.333701][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. 05:24:49 executing program 1: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x12, &(0x7f0000000100)={0x5, 0xf, 0x12, 0x2, [@ptm_cap={0x3}, @ss_cap={0xa}]}}) 05:24:49 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xad3) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:24:49 executing program 4: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:24:49 executing program 0: bpf$BPF_BTF_LOAD(0x19, 0x0, 0x0) 05:24:49 executing program 5: r0 = socket(0xa, 0x3, 0x7) setsockopt$WPAN_SECURITY(r0, 0x29, 0x3e, 0x0, 0x0) [ 647.492899][ T18] usb 2-1: unable to read config index 2 descriptor/start: -71 [ 647.500732][ T18] usb 2-1: can't read configurations, error -71 [ 647.684587][T15263] loop4: detected capacity change from 65536 to 0 [ 647.724691][T15263] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 05:24:50 executing program 3: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300", 0xa, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = getpgrp(0x0) kcmp(r5, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r5}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 647.733306][T15263] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 647.836016][T15268] loop2: detected capacity change from 65536 to 0 [ 647.869848][T15268] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 647.878207][T15268] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 647.888238][T15268] F2FS-fs (loop2): invalid crc_offset: 0 [ 648.005950][T15268] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. 05:24:50 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 648.006147][T15268] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 648.016548][T15263] F2FS-fs (loop4): invalid crc_offset: 0 [ 648.217614][T15268] F2FS-fs (loop2): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 648.218211][T15268] F2FS-fs (loop2): Failed to read root inode [ 648.331521][T15263] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 648.331770][T15263] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 648.506071][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 648.593216][T15283] loop3: detected capacity change from 65551 to 0 [ 648.621053][T15283] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 648.621249][T15283] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 648.633079][T15283] F2FS-fs (loop3): invalid crc_offset: 0 [ 648.760522][T15283] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 648.770252][T15283] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 649.027769][T15283] F2FS-fs (loop3): sanity_check_inode: corrupted inode footer i_ino=3, ino,nid: [0, 3] run fsck to fix. [ 649.039893][T15283] F2FS-fs (loop3): Failed to read root inode 05:24:51 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x6, 0x4, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x5}]}}}) [ 649.272409][T15263] F2FS-fs (loop4): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 649.325421][T15263] F2FS-fs (loop4): Failed to read root inode [ 649.342521][ T9277] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 649.458817][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. 05:24:52 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xad3) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 649.583129][ T9277] usb 2-1: Using ep0 maxpacket: 8 05:24:52 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) [ 649.792882][ T9277] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 05:24:52 executing program 3: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="000000000000000003000000", 0xc, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = getpgrp(0x0) kcmp(r5, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r5}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:24:52 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10948, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x201}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 650.142751][ T9277] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 650.152557][ T9277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.160761][ T9277] usb 2-1: Product: syz [ 650.165136][ T9277] usb 2-1: Manufacturer: syz [ 650.174720][ T9277] usb 2-1: SerialNumber: syz [ 650.248420][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 650.352483][T15301] loop2: detected capacity change from 65551 to 0 [ 650.463539][T15312] loop3: detected capacity change from 65551 to 0 [ 650.486833][T15301] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 650.491574][T15312] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 650.495113][T15301] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 650.502958][T15312] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 650.536835][T15312] F2FS-fs (loop3): invalid crc_offset: 0 [ 650.596080][T15312] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 650.605535][T15312] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 650.630868][ T9277] usb 2-1: USB disconnect, device number 16 [ 650.856392][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 650.857441][T15312] F2FS-fs (loop3): sanity_check_inode: corrupted inode footer i_ino=3, ino,nid: [0, 3] run fsck to fix. [ 650.895856][T15301] F2FS-fs (loop2): invalid crc_offset: 0 [ 650.914183][T15312] F2FS-fs (loop3): Failed to read root inode [ 651.134737][T15301] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-4) [ 651.265689][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 651.423790][ T9277] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 651.662335][ T9277] usb 2-1: Using ep0 maxpacket: 8 [ 651.884116][ T9277] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 05:24:54 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x4, 0x0, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x40) 05:24:54 executing program 4: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:24:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c010000", @ANYRES16=r1, @ANYBLOB="010027bd7000fddbdf25050000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300020000000e0001006e657464657673696d0000000f0002006e657464657673696d30"], 0x14c}}, 0x0) 05:24:54 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0xaf01, 0x0) 05:24:54 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xad3) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:24:54 executing program 3: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="000000000000000003000000", 0xc, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = getpgrp(0x0) kcmp(r5, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r5}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 652.222449][ T9277] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 652.231717][ T9277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.377569][T15339] loop3: detected capacity change from 65551 to 0 [ 652.393387][ T9277] usb 2-1: can't set config #1, error -71 [ 652.396814][T15344] netlink: 240 bytes leftover after parsing attributes in process `syz-executor.5'. [ 652.448647][T15340] loop4: detected capacity change from 65536 to 0 [ 652.562924][ T9277] usb 2-1: USB disconnect, device number 17 [ 652.585903][T15343] loop2: detected capacity change from 65551 to 0 [ 652.620100][T15339] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 652.628360][T15339] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 652.668515][T15339] F2FS-fs (loop3): invalid crc_offset: 0 [ 652.696108][T15340] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 652.704591][T15340] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 652.815029][T15343] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 652.838345][T15343] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 652.871162][T15339] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 652.889755][T15339] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 653.030858][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. 05:24:55 executing program 5: socketpair(0x21, 0x0, 0x0, &(0x7f0000002640)) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1d, 0x5, 0x0, &(0x7f00000002c0)) syz_genetlink_get_family_id$devlink(&(0x7f0000000340)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, 0x0, 0x0) [ 653.230068][T15340] F2FS-fs (loop4): invalid crc_offset: 0 [ 653.236153][T15340] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-4) [ 653.249062][T15343] F2FS-fs (loop2): invalid crc_offset: 0 [ 653.255412][T15343] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-4) 05:24:55 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, 0x0, 0x0) 05:24:55 executing program 4: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:24:56 executing program 1: syz_mount_image$ntfs(0x0, 0x0, 0x0, 0x2, &(0x7f00000012c0)=[{&(0x7f0000000140)="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", 0xec1}, {0xfffffffffffffffe}], 0x0, 0x0) [ 653.501665][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. 05:24:56 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xad3) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 653.830685][T15339] F2FS-fs (loop3): sanity_check_inode: corrupted inode footer i_ino=3, ino,nid: [0, 3] run fsck to fix. [ 653.939723][T15339] F2FS-fs (loop3): Failed to read root inode [ 654.099408][T15378] loop1: detected capacity change from 7 to 0 [ 654.124716][T15372] can: request_module (can-proto-0) failed. [ 654.234043][T15376] can: request_module (can-proto-0) failed. [ 654.314294][T15378] loop1: detected capacity change from 7 to 0 05:24:56 executing program 0: bpf$BPF_PROG_GET_FD_BY_ID(0x11, 0x0, 0x0) [ 654.383415][T15386] loop2: detected capacity change from 65551 to 0 [ 654.392849][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 654.455244][T15388] loop4: detected capacity change from 65536 to 0 [ 654.554423][T15388] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 654.563092][T15388] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 654.576823][T15386] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 654.585709][T15386] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 05:24:57 executing program 5: connect$x25(0xffffffffffffffff, 0x0, 0x0) 05:24:57 executing program 1: timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x1}, &(0x7f0000000200)) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000280)) [ 654.737292][T15386] F2FS-fs (loop2): invalid crc_offset: 0 [ 654.745865][T15388] F2FS-fs (loop4): invalid crc_offset: 0 [ 654.806133][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 654.885112][T15388] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 654.895082][T15388] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 654.912929][T15386] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 654.931123][T15386] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 655.164194][T15386] F2FS-fs (loop2): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. [ 655.176168][T15386] F2FS-fs (loop2): Failed to read root inode 05:24:57 executing program 3: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="000000000000000003000000", 0xc, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = getpgrp(0x0) kcmp(r5, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r5}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 655.373214][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. 05:24:58 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0xc0189436, 0x0) 05:24:58 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x1, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000001c0)={0xad, 0x0, 0x3ff, 0x0, "52c7219b62f627ba253f78ce2899cdd414887797c8f85013b03a08f0bb1eb1a0"}) 05:24:58 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef]}}, &(0x7f0000000080)=""/208, 0x26, 0xd0, 0x1}, 0x20) [ 655.978909][T15388] F2FS-fs (loop4): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] 05:24:58 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {0x0, 0x0, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xad3) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 656.057210][T15388] F2FS-fs (loop4): Failed to read root inode [ 656.258000][T15411] loop3: detected capacity change from 65551 to 0 [ 656.374414][T15411] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 656.384332][T15411] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 656.490112][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 656.499485][T15411] F2FS-fs (loop3): invalid crc_offset: 0 [ 656.631753][T15411] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 656.641471][T15411] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 05:24:59 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000140)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0x5450, 0x0) [ 657.035479][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 657.167175][T15428] loop2: detected capacity change from 65551 to 0 [ 657.202917][T15428] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) 05:24:59 executing program 4: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:24:59 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)="e9"}) 05:24:59 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'tgr192\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x6, 0x0, 0x0) [ 657.211042][T15428] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 657.227799][T15428] F2FS-fs (loop2): invalid crc_offset: 0 [ 657.306120][T15428] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 657.315460][T15428] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 657.508460][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 657.532012][T15428] F2FS-fs (loop2): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. [ 657.544086][T15428] F2FS-fs (loop2): Failed to read root inode [ 657.860643][T15411] F2FS-fs (loop3): sanity_check_inode: corrupted inode footer i_ino=3, ino,nid: [0, 3] run fsck to fix. [ 658.013614][T15411] F2FS-fs (loop3): Failed to read root inode [ 658.124652][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. 05:25:00 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-generic\x00'}, 0x58) [ 658.234223][T15446] loop4: detected capacity change from 65551 to 0 05:25:00 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {0x0, 0x0, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xad3) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 658.329436][T15446] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 658.337776][T15446] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 658.366890][T15446] F2FS-fs (loop4): invalid crc_offset: 0 05:25:00 executing program 0: r0 = socket(0x2, 0x3, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000000)) [ 658.468331][T15446] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 658.477616][T15446] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 658.647371][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 659.096233][T15457] loop2: detected capacity change from 65551 to 0 [ 659.190557][T15457] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 659.199001][T15457] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 659.218000][T15457] F2FS-fs (loop2): invalid crc_offset: 0 [ 659.321348][T15457] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 659.344566][T15457] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 659.355663][T15446] F2FS-fs (loop4): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. [ 659.370309][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 659.454255][T15446] F2FS-fs (loop4): Failed to read root inode 05:25:02 executing program 3: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = getpgrp(0x0) kcmp(r5, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r5}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:25:02 executing program 5: mmap$binder(&(0x7f0000ff3000/0xa000)=nil, 0xa000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 05:25:02 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x6364, 0x0) 05:25:02 executing program 0: r0 = socket(0xa, 0x6, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x31, &(0x7f0000000000)=0x2, 0x4) 05:25:02 executing program 5: r0 = socket(0xa, 0x5, 0x0) bind$pptp(r0, &(0x7f0000000100)={0x2, 0x2, {0x0, @multicast1}}, 0x1e) 05:25:02 executing program 1: syz_open_dev$vcsn(&(0x7f0000000240)='/dev/vcs#\x00', 0x0, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) [ 660.260355][T15457] F2FS-fs (loop2): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. [ 660.302933][T15475] loop3: detected capacity change from 65536 to 0 [ 660.383465][T15475] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 660.391790][T15475] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 660.478358][T15457] F2FS-fs (loop2): Failed to read root inode 05:25:03 executing program 4: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:25:03 executing program 5: syz_usb_connect$uac1(0x0, 0xa1, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8f, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @selector_unit={0x9, 0x24, 0x5, 0x0, 0x0, "d930a27c"}, @processing_unit={0x7}, @selector_unit={0x5}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x3, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 660.716682][T15475] F2FS-fs (loop3): invalid crc_offset: 0 05:25:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7c}]}, 0x30}}, 0x0) [ 660.909091][T15475] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 660.918565][T15475] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 05:25:03 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {0x0, 0x0, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xad3) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:25:03 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8982, &(0x7f0000000000)={'ip6gre0\x00'}) [ 661.566812][T15475] F2FS-fs (loop3): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 661.614392][T15491] loop4: detected capacity change from 65551 to 0 [ 661.643860][T15491] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 661.660308][T15491] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 661.677870][T15491] F2FS-fs (loop4): invalid crc_offset: 0 [ 661.703159][ T18] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 661.715766][T15475] F2FS-fs (loop3): Failed to read root inode [ 661.819697][T15491] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 661.830470][T15491] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 661.975597][ T18] usb 6-1: Using ep0 maxpacket: 16 [ 662.040839][T15491] F2FS-fs (loop4): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. [ 662.054582][T15491] F2FS-fs (loop4): Failed to read root inode [ 662.133295][ T18] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 662.142325][ T18] usb 6-1: config 1 has an invalid interface descriptor of length 3, skipping [ 662.151319][ T18] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 662.161807][ T18] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 662.266613][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 662.443845][ T18] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 662.453633][ T18] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.461777][ T18] usb 6-1: Product: syz [ 662.466242][ T18] usb 6-1: Manufacturer: syz [ 662.470971][ T18] usb 6-1: SerialNumber: syz 05:25:04 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x8, 0x5, 0x7f, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x40) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10948, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x201}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 05:25:05 executing program 3: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = getpgrp(0x0) kcmp(r5, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r5}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 662.549443][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 662.608420][T15504] loop2: detected capacity change from 65551 to 0 05:25:05 executing program 1: r0 = socket(0x200000100000011, 0x803, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xe0d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0xc, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8}]}}]}, 0x38}}, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @unused, @name="28ce59dfc7ae9009f994fd025a0444dfebfb7061a5948c4662e39f8256c579834959742b871c005de3473b0e280182715450c02515a2c5d21e772323fe1657d3642995ef8d01878b4dbe5ede9690d2d84ca15da1e7c84eddf9aca1da186d54a296939e223b6265d68dfe21f81723d7a621f6f7aa2c89463dfc1d69dd148f62656028fc982be8c7a2e3db7886e44b9cdb10817a47ca82dde2e49bf7ea9a1b46194a6cbeb18135d16ce9bada1b60428b6ca93555de1e2ddd207dc9c27a6619bcc41e286831a35bd48f43f25533121478d86e7d0de744bdb0d916809fb565f85374cbaf7f4cd1a93720f63f44d1c97a87d72473869397b2fb08cdf9387a7448e463888dd126e3d9f50c5bf051e04d25c63adec3f2c51a8817c39f219b27c45bbda09415e0bfac248567c9305a3c315b3dace9e38c4e74a6e2ee113d04664499ceb5eb09c96110b2519cda7eb60f3a232cbc8612aba66257dbc4331619aba1949219078ab50af9774d5458bc1c7b220753b97bc0bca415c7185b1b17cecc72971abe4f746f1de7709e5310836bb4c0b6032a126074aa144162817627e876bec17c0f1097ff0434ee10e224bc5be76c5045a10a390830760c83ad960bd6994c6041870ca5ffc5552fe110623a3db1f20fd82f3696af69f30aeb07c5e4059a2634f5ebcb2f1d6464cfbaa981d170b600b6d0cddcc6cff8b43d289dfe2fb889fc7cae3a2fb4236ad58247d77561b646d95745fb3ff7424accfea99ec6f082da6d7c70fe94b3ec470dc6221f8af3ebdcfc13411e0021005bae03fcc3fc63e4c9779233bb798d848187111c0eae93d43a9f17673c95cd3241d4b6c6f073a81ed65b11c8558be0f17354f360d458301874afe6737e1477eb5b9f85beaf38f73e73409b8b9c13efeb44c11524fca25625f6cdf5096f0f109a84bfad42bdcb33a669cb178a6754a74f02ab9bccb040d5067f06909ac9b16d38e7cd83cb098fc6967354c0f3dc34a85b4393dce310abb803edbd2406637e03502c4e9b6ddd2ecc17514155743958322eda52bbadcfe23d6be9e5c20f066d4576e7e642b19e4578bc0ad247d01b399b78512e86aa1257d84a19cc87e9577085924297b3a2c5a037dc1c5f951c6323a728e6a5a18dec901c2394eee655df7ba19a3005bda0399f2aa951d450870dcd7f6dd205e623f2034135ad43fe6a572f00211b348219ea08e60e4983847bf0c966f4161bc9c321e1c4896bfc214ba6187da50cfb6bb600f5f357ddcf6c870893f537977f25ed88e093346fcf7e487480a03e5feba3043539a7bc6a8f9caaf478d971aa3711491d3b8243e08df7d3107a004db259865f00c65980a71399aaa1546678325f1ad823c5ac42b87aa87a6e9df14d710aab37fe2879857685d7e255d7ed20389dedef7e609981d70844808699cddd431cb43c24f6cab329ab62d2209d6d4aabd6f725d65aa060285b18e8da5442ccee5eb133401d2e7296790e0ff5fd704ae77279c305ffdde9cf2c38c453f9d3111cf091a853d196b649c9e4d2210e9806ff00bf67210a0fe0a908a51e64d49d78220f2d832222bbca3129f1399a0b526af79d7b598e4bbf2ce7a0c87fbae70cb1c015c4688912639ef7e86d1fe05a05c5b2d31e8a41f4e1cf54f0118b872a9351e69a7ce9e9ebc45cab02023ac2020422c67108b2b2c90de25c82f7d83fc2ab1a4561fd01bdc659599ef2554d5ef06b73a2a5ba5bb830dfcd308e8717bf193fc117b81eca101b0420825405448d5e89360f872fa7da544d70526b8e46f1667272e0e5e0aabbb207024cee92acd42de8cf88dfe9657df9fc49baba452c838ed655172ea101b49cf114b5e84ef41c82af855fcb41c2def9211b2fbb80718df94d9c9983df56f1d2162f2a24a0711c8528ae63d79e618a913c809b0cd8ea3f678580ed41b15eac9ac719b2f1d8c058004cefa6a8b93fdbfb6cd497b91349aa209e9401aa4040f9c627db8c7cbd2ba2620ff25762a2b0f9a536f88ddd3e4c9a82f435ca7073572a6b9d33a4a4781f5807986556cdbe6fec2a2172a0aa6c5a69c2232056488bf2ba99d85665e1fee7a2a6b6c2350e241fe28250c455c03dfc65dc96786f0e5cbb51ab87bd9d9d158faab451d7413da5a6aaa45073ef019c79c52e9de921b28b65e08211b800ef1683bfcad71daaf22ffee53df5e89044c2a326d47b9b280f3fe92cd67aa45d5464e680e90608b43206c5c760dea98e5d62bc920ed020900a033fea587e98a1079ed5487b19853986725eb68a53ee376fa4260bea626bca1814c2575545662bfedef988acb23156e56688b84dfaef74cbd9b3149acc3b4d58dcfa5d096e034ea5c908461a6a85067b6e4640d7b0f707c441102475742ce3e80af6828f5b80c172af605a3388f43589d79562394b473b49c3dcf3f67fba758451e191a8f5539b91e40766bb2c1bbed2a2193d7ac6bff72d60b9ceae5777d7f977ae32462147adc3df1e566aa2484b8d989daf327bdcaeaf289cba3e063772bd268f926f01fb76f23b5e7bc950635a2a653d2fee646e3bf7c855456be51d7ea8f3ecc43f9794dae591219492481d40e36bf7190ba4aa32e46b2400c0ab1ec1d2fc17e1cb8061fe94a2f01b1c44dfa7c0b2dd9438c8d103304e8f3bbbedfa6b1a302e10bd8d9fddca1c7954f4b9eb4ab47e91bc549eff21702a62875e01ca5ff8e61b25aa61b0d8c2c0f636c3202c068e1abbf47f259ebfce16560194b70409e6d15f185707da1ba8365e954c24d70481499587bf10f78c9a5cefc7e0b47636e7e8842f2a52fe3814091bdc40e525632fc42cdcfe7d8c0caedb8e2704502ec6ff139be06555523cb458031bdea1aed979aa7053683eae25eb0f7aa04ba06db9bfe5c3084d661f8026cf81a352a45d04312d12b9b3e1a1a5e34ca5219feaa7abe61c20d60745ca5039df6afbfb2d1a2ca3c7d66f1404ec5418e2f7fe2a0bb72b9d9ebca3a1c94247487416d95197ed5b6678a6bc313f70639b0e671eb805669232259360a6f1c8c019b30e5a13d897ec9a18166b06a51de49f6d434ed08fe1fa899daa6837f8fc538657ab4b8e67b6fc66beae7b0454f00d3b7f520406e4b03609ce04137217c7a55da45fd21b1af18a7c4588ea6b453f4ac0cf4148f8b8eef01844a1eacc253cf56b93e59b7a110b5b9d6fa0d12a19c7ca11c81eb6a97b327d3f2a21364a02cb31d6b722a9928a57a934455473905d5d177ec57d798f0b8497e3702d00afe8ff20d54b6aae293fd6f7915448fc5494a1694402c377230c1ae15512bebaaf077d338aeab3604dbaa87a4dff5a9a9cc73cf7b0f2ae1953720414a352f91c905cb1b034363861a0735645c43a4eef1f7e77f270e42e55df8909ab81f50b16be2db6629efa8a316f1b6090f7705481c5152cc0886ff9794030573fe087dd55029b800375c102d596eed0c56581b7b60de12be1bfaa586bf7ac2988f87e9f79fc655284b02b9a6e48e68c70e9e7623cdc441bf8f4ede01abf16850bbbaa5546780b22096639243501e302a26ea901f589cc46ad20cd1b449d44710341b8944b33daf18a8a07fee2d6d582c098fa1ea15be8c19a482cb9b66096933e7a935dab7b6b78064ddc5aca9d670f05e178f7ec11a7759a7dc4134a62a076bddf1583724f53cdb6735fdf035c487049a582efbd383c132c0f1812b8b17b81a78ee9e0c0f0ef03f150b40e8dba014b7ebf14a5625a3f829cbfaed783010d2d152b87439b553ffe9dc2f18880fa3c8e3bd894afbff760d399af441b291b17c746ac18475cc68f65669ff36bf4a65b5dfb07b6f6f159efef98e56cbf2de04e1a6d632224597f50297355d683aa02e4088f019f3ad1b96cc9ed93184a5374ae78bf967c48092da50435ab0248f3f357021f23d1155cec96efc277a988f4c4e3de8c40181238ee851fcc04cb19a9ac5340d7c2ef34989f23e82c0adc0b05c6860c8b8f9c0e91b8228e1e3ea7ffd5d051210f83027ec9f1bab539d58e2553828c58274a8262c3114d9ce02d63608d5b6dfb142d80e6ad8c161dde7e9116887e8ec6af73c7b83abf046ee9e331c2a5420925b5ece25d711d4e0682b6ce2d9e983e992feeec14554a5a6057e8295c01c3d804be6973849730f7a843a08568ab8d141de44d974f5fc674935d8463a568e4c491154606b2e323038716584e0dbe67ab70014d01d3874e0b9f24cf1ece5fa03793dfa7b11243d7f6429958842b62330c8f89850cb5f8fe70cf68e71d49ba6ed53e702feafd0d1e5a658da4a47c88244a97e3a7002618f76c9965837a7f1ee394a8440df7cf1f191966df765d361056d5db3956626930fef1a89958a44b54eb53f7f573f1d9ead5d41a830b1fc2beeb555ddcbad949f6d413c41c73f9c42637852fc6d14b78ec9058fabdae49a8fdd1cd713dccc2cb19887da1a7e67d73ec5d004f5eaa92681423809eb6169de7223cd6479f494a8dd9dc9554535e1198cb06a8447aa7e5d925fcbff4de1cfb74bfa13a95e3d3ede6d3ebfdad1ba37f88c4f4fe5dc3663d54879bdaa0a276971b56e4656b1fff27c6a3d227f5d7ca67dbc7bfb2292f15f3632dc7d0a85fd2a6a2d06dcd4dbf67ea4d6882d594048ae005259ec148671d35cbad59d2097fac024665d1361bea887647c49d84c005800f9923e382459e999ef28008e7057fd243a7606dfd010c6632504e6f438cbcb5fa0739f55e65ddd99033239dc8df3bb1a3f7c00263128d72bbfb078fd909c6855312b516ee7580adcf35358cc4d63cc6fbee890a15116fdfe3836671af25ff88c8f2545012a4332d015b6a3d71aaab84f2823a73698cdefbb8232137b19edd5e1572b7745de6caa2c7147e9492cf29e284651b575ed08efd0aa9eb7399a022427c89cf2c9c4ec364ba9b72ea09dc2cadb9070652baadd18a1f78138b09c384d4383c5d5f091b58015d98e3f1d8a9aca5f805740658e1171c2a48ae88272890882fa865a8728bb733eb827d5f2b19348af28c933abca596fe6d959221ec2f8de2516b2b29624c62f13a5a6ac8249a19538dcd00ce538393a06c25418ba80bd49ea0a3479801dca9be79752745b2dce441e15c3a4684e7eae98f8932936c30c658fa5d669541d342786fc91a61f566ae6b02db3700add11c81d4e82da126295ab6451ad11db35a1f66ae039d7fd88f9c5cbed848292b4cfa9697315a5be50a0350d0466e8d6b5f00d0d4a2f8f55234a9fc20d45d0dd13aa0a4ebbee89259af4223a6aa9ca08624a2da75f639436d564f6bea795b9d9eda1b862fd423f08cb1c2a921a56507a2195863f3339b932ac0da21bb5b7834a6a964a38f367479452c08bd3ec30b1c4bd389fdf550456e7d06448cfcee499f3e565fa419bf6e7a0d47bcb312b6809198800cd353f4306cc28fa625fda8509094824b89b8de2d92bdfb65802f558db3f7839886049aec113307de7b40701015e5c043940be1f8fdd9b767c54607fbfc8eec0520b53ce2059debdcc99f602e9db12c5cb9c034669e22fbe7bd0525bfb9464c6aba7454f015a6a6fb9d5da687ce1fc0c151b7fd72e00c95449663f8cea68f09258bc9bacf223a20bba6489149d2a0f8d1bccbdb32d1ff18bafd0fd6eb4b8252e870da204bac6895753e112fb5b2b2f604865ddc68e9696cdf175e3ec96d42d1071ce19911949b3735b52c5b18cf9480141087146a4d32081ef09473cfd61a714c2cb70eca"}) sendto$packet(r0, &(0x7f0000000980)="030ae8850007ffffffe8000686dd", 0x5ea, 0x0, &(0x7f00000002c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) [ 662.741769][T15504] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 662.750725][T15504] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 662.778389][T15504] F2FS-fs (loop2): invalid crc_offset: 0 [ 662.838188][T15504] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 662.847614][T15504] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 05:25:05 executing program 4: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 663.096292][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 663.155241][ T18] usb 6-1: 0:2 : does not exist [ 663.228016][ T18] usb 6-1: USB disconnect, device number 8 [ 663.380709][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 663.416076][T15534] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 663.566903][T15536] loop3: detected capacity change from 65536 to 0 [ 663.586566][T15539] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 663.624832][T15536] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 663.638800][T15536] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 663.669293][T15536] F2FS-fs (loop3): invalid crc_offset: 0 [ 663.712470][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. 05:25:06 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc050565d, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d44fdd67"}, 0x0, 0x0, @planes=0x0}) [ 663.820705][T15504] F2FS-fs (loop2): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. [ 663.832926][T15536] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 663.833129][T15536] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 664.039962][ T8467] usb 6-1: new high-speed USB device number 9 using dummy_hcd 05:25:06 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x400454ca, &(0x7f00000002c0)) [ 664.168322][T15549] loop4: detected capacity change from 65551 to 0 [ 664.207903][T15504] F2FS-fs (loop2): Failed to read root inode [ 664.318857][T15549] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 664.327193][T15549] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 664.335895][ T8467] usb 6-1: Using ep0 maxpacket: 16 05:25:06 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480), 0x0, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xad3) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 664.414716][T15549] F2FS-fs (loop4): invalid crc_offset: 0 [ 664.420981][T15536] F2FS-fs (loop3): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 664.478895][T15536] F2FS-fs (loop3): Failed to read root inode [ 664.493040][ T8467] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 664.502246][ T8467] usb 6-1: config 1 has an invalid interface descriptor of length 3, skipping [ 664.511242][ T8467] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 664.521652][ T8467] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 664.584792][T15549] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 664.595135][T15549] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 664.821515][T15549] F2FS-fs (loop4): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. [ 664.837484][T15549] F2FS-fs (loop4): Failed to read root inode 05:25:07 executing program 5: socketpair(0x8, 0x0, 0x0, &(0x7f0000000380)) [ 664.916535][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 665.093077][ T8467] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 665.102731][ T8467] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.151475][ C1] not chained 150000 origins [ 665.156095][ C1] CPU: 1 PID: 269 Comm: kworker/u4:6 Not tainted 5.11.0-rc7-syzkaller #0 [ 665.164523][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 665.174588][ C1] Workqueue: krdsd rds_connect_worker [ 665.179985][ C1] Call Trace: [ 665.183268][ C1] [ 665.186120][ C1] dump_stack+0x21c/0x280 [ 665.190480][ C1] kmsan_internal_chain_origin+0x6f/0x130 [ 665.196236][ C1] ? kmsan_get_metadata+0x116/0x180 [ 665.201472][ C1] ? kmsan_get_metadata+0x116/0x180 [ 665.206702][ C1] ? kmsan_get_metadata+0x116/0x180 [ 665.211928][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 665.217759][ C1] ? __msan_metadata_ptr_for_store_n+0xe/0x10 [ 665.223853][ C1] ? tcp_parse_options+0x225e/0x22f0 [ 665.229166][ C1] ? kmsan_get_metadata+0x116/0x180 [ 665.234386][ C1] __msan_chain_origin+0x57/0xa0 [ 665.239358][ C1] tcp_conn_request+0x1b17/0x4db0 [ 665.248529][ C1] ? memcg_slab_free_hook+0x3a/0xb00 [ 665.253842][ C1] ? kmsan_get_metadata+0x116/0x180 [ 665.259064][ C1] ? kmsan_get_metadata+0x116/0x180 [ 665.264291][ C1] tcp_v4_conn_request+0x201/0x290 [ 665.269422][ C1] tcp_v6_conn_request+0xeb/0x330 [ 665.274482][ C1] ? inet6_sk_rx_dst_set+0x4d0/0x4d0 [ 665.279794][ C1] tcp_rcv_state_process+0x2f4/0x45a0 [ 665.285192][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 665.291027][ C1] ? kmsan_get_metadata+0x116/0x180 [ 665.296373][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 665.302563][ C1] ? kmsan_get_metadata+0x116/0x180 [ 665.307786][ C1] tcp_v4_do_rcv+0xc63/0x1000 [ 665.309705][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 665.312474][ C1] ? tcp_v4_fill_cb+0x562/0x5e0 [ 665.312508][ C1] tcp_v4_rcv+0x4b0a/0x5c80 [ 665.312535][ C1] ? rcu_read_unlock_strict+0x9/0x10 [ 665.312577][ C1] ? tcp_filter+0xf0/0xf0 [ 665.312604][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 665.312643][ C1] ip_local_deliver+0x585/0x8d0 [ 665.312678][ C1] ? ip_local_deliver+0x8d0/0x8d0 [ 665.312710][ C1] ? ip_protocol_deliver_rcu+0xc50/0xc50 [ 665.312742][ C1] ip_rcv+0x599/0x820 [ 665.312774][ C1] ? ip_rcv_core+0x1480/0x1480 [ 665.312804][ C1] __netif_receive_skb+0x1ec/0x640 [ 665.312841][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 665.391342][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 665.391395][ C1] process_backlog+0x517/0xbd0 [ 665.391432][ C1] ? native_apic_mem_write+0x45/0x90 [ 665.391480][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 665.391516][ C1] napi_poll+0x428/0x15c0 [ 665.391554][ C1] net_rx_action+0x34c/0xd30 [ 665.391593][ C1] ? net_tx_action+0xd30/0xd30 [ 665.391627][ C1] __do_softirq+0x1b9/0x715 [ 665.391662][ C1] asm_call_irq_on_stack+0xf/0x20 [ 665.391695][ C1] [ 665.391705][ C1] do_softirq_own_stack+0x6e/0x90 [ 665.391740][ C1] __local_bh_enable_ip+0x184/0x1d0 [ 665.391776][ C1] local_bh_enable+0x36/0x40 [ 665.391812][ C1] ip_finish_output2+0x2454/0x2940 [ 665.391847][ C1] ? __msan_get_context_state+0x9/0x20 [ 665.391884][ C1] ? rcu_read_unlock_strict+0x9/0x10 [ 665.391913][ C1] ? nf_ct_deliver_cached_events+0x610/0x7e0 [ 665.391950][ C1] __ip_finish_output+0x9fd/0x1050 [ 665.391991][ C1] ip_finish_output+0x329/0x480 [ 665.392028][ C1] ip_output+0x32e/0x6d0 [ 665.392065][ C1] ? ip_mc_finish_output+0x770/0x770 05:25:07 executing program 1: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x131040) [ 665.392101][ C1] ? ip_finish_output+0x480/0x480 [ 665.392135][ C1] __ip_queue_xmit+0x1e3d/0x23b0 [ 665.392170][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 665.392214][ C1] ? __msan_poison_alloca+0xe9/0x110 [ 665.392255][ C1] ip_queue_xmit+0xcc/0xf0 [ 665.392290][ C1] ? __ip_queue_xmit+0x23b0/0x23b0 [ 665.392325][ C1] __tcp_transmit_skb+0x4d3f/0x5ea0 [ 665.392373][ C1] tcp_connect+0x104d/0x3cf0 [ 665.392408][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 665.392459][ C1] tcp_v4_connect+0x255c/0x26f0 [ 665.392504][ C1] ? tcp_twsk_unique+0xd40/0xd40 [ 665.392540][ C1] __inet_stream_connect+0x8d8/0x17d0 [ 665.392572][ C1] ? __local_bh_enable_ip+0x97/0x1d0 [ 665.392609][ C1] ? kmsan_get_metadata+0x116/0x180 [ 665.392645][ C1] inet_stream_connect+0x101/0x180 [ 665.392675][ C1] ? __inet_stream_connect+0x17d0/0x17d0 [ 665.392706][ C1] rds_tcp_conn_path_connect+0x9e1/0xd30 [ 665.392746][ C1] ? kmsan_get_metadata+0x116/0x180 [ 665.539227][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 665.541590][ C1] ? rds_tcp_state_change+0x400/0x400 [ 665.541634][ C1] rds_connect_worker+0x368/0x550 [ 665.541667][ C1] ? rds_addr_cmp+0x290/0x290 [ 665.541695][ C1] process_one_work+0x1219/0x1fe0 [ 665.541740][ C1] worker_thread+0x10ec/0x2340 [ 665.541780][ C1] kthread+0x521/0x560 [ 665.541810][ C1] ? process_one_work+0x1fe0/0x1fe0 [ 665.541848][ C1] ? kthread_blkcg+0x110/0x110 [ 665.541880][ C1] ret_from_fork+0x1f/0x30 [ 665.646151][ C1] Uninit was stored to memory at: [ 665.651165][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 665.656896][ C1] __msan_chain_origin+0x57/0xa0 [ 665.661856][ C1] tcp_conn_request+0x1b4d/0x4db0 [ 665.666894][ C1] tcp_v4_conn_request+0x201/0x290 [ 665.672006][ C1] tcp_v6_conn_request+0xeb/0x330 [ 665.677039][ C1] tcp_rcv_state_process+0x2f4/0x45a0 [ 665.682417][ C1] tcp_v4_do_rcv+0xc63/0x1000 [ 665.687202][ C1] tcp_v4_rcv+0x4b0a/0x5c80 [ 665.691724][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 665.697186][ C1] ip_local_deliver+0x585/0x8d0 [ 665.702042][ C1] ip_rcv+0x599/0x820 [ 665.706023][ C1] __netif_receive_skb+0x1ec/0x640 [ 665.711137][ C1] process_backlog+0x517/0xbd0 [ 665.715902][ C1] napi_poll+0x428/0x15c0 [ 665.720232][ C1] net_rx_action+0x34c/0xd30 [ 665.724819][ C1] __do_softirq+0x1b9/0x715 [ 665.729408][ C1] [ 665.731720][ C1] Uninit was stored to memory at: [ 665.736723][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 665.742445][ C1] __msan_chain_origin+0x57/0xa0 [ 665.747403][ C1] tcp_openreq_init_rwin+0xcc6/0x1010 [ 665.752786][ C1] tcp_conn_request+0x2bd7/0x4db0 [ 665.757809][ C1] tcp_v4_conn_request+0x201/0x290 [ 665.762916][ C1] tcp_v6_conn_request+0xeb/0x330 [ 665.767944][ C1] tcp_rcv_state_process+0x2f4/0x45a0 [ 665.773315][ C1] tcp_v4_do_rcv+0xc63/0x1000 [ 665.777987][ C1] tcp_v4_rcv+0x4b0a/0x5c80 [ 665.782482][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 665.787941][ C1] ip_local_deliver+0x585/0x8d0 [ 665.792794][ C1] ip_rcv+0x599/0x820 [ 665.796782][ C1] __netif_receive_skb+0x1ec/0x640 [ 665.801912][ C1] process_backlog+0x517/0xbd0 [ 665.806686][ C1] napi_poll+0x428/0x15c0 [ 665.811459][ C1] net_rx_action+0x34c/0xd30 [ 665.816063][ C1] __do_softirq+0x1b9/0x715 [ 665.820573][ C1] [ 665.822913][ C1] Uninit was stored to memory at: [ 665.827924][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 665.833650][ C1] __msan_chain_origin+0x57/0xa0 [ 665.838592][ C1] tcp_conn_request+0x1b4d/0x4db0 [ 665.843635][ C1] tcp_v4_conn_request+0x201/0x290 [ 665.848748][ C1] tcp_v6_conn_request+0xeb/0x330 [ 665.853778][ C1] tcp_rcv_state_process+0x2f4/0x45a0 [ 665.859153][ C1] tcp_v4_do_rcv+0xc63/0x1000 [ 665.863827][ C1] tcp_v4_rcv+0x4b0a/0x5c80 [ 665.868330][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 665.873791][ C1] ip_local_deliver+0x585/0x8d0 [ 665.878644][ C1] ip_rcv+0x599/0x820 [ 665.882624][ C1] __netif_receive_skb+0x1ec/0x640 [ 665.887739][ C1] process_backlog+0x517/0xbd0 [ 665.892505][ C1] napi_poll+0x428/0x15c0 [ 665.896837][ C1] net_rx_action+0x34c/0xd30 [ 665.901425][ C1] __do_softirq+0x1b9/0x715 [ 665.905929][ C1] [ 665.908240][ C1] Uninit was stored to memory at: [ 665.913243][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 665.918966][ C1] __msan_chain_origin+0x57/0xa0 [ 665.923905][ C1] tcp_openreq_init_rwin+0xcc6/0x1010 [ 665.929284][ C1] tcp_conn_request+0x2bd7/0x4db0 [ 665.934307][ C1] tcp_v4_conn_request+0x201/0x290 [ 665.939415][ C1] tcp_v6_conn_request+0xeb/0x330 [ 665.944452][ C1] tcp_rcv_state_process+0x2f4/0x45a0 [ 665.949827][ C1] tcp_v4_do_rcv+0xc63/0x1000 [ 665.954496][ C1] tcp_v4_rcv+0x4b0a/0x5c80 [ 665.958991][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 665.964453][ C1] ip_local_deliver+0x585/0x8d0 [ 665.969303][ C1] ip_rcv+0x599/0x820 [ 665.973283][ C1] __netif_receive_skb+0x1ec/0x640 [ 665.978400][ C1] process_backlog+0x517/0xbd0 [ 665.983166][ C1] napi_poll+0x428/0x15c0 [ 665.987493][ C1] net_rx_action+0x34c/0xd30 [ 665.992083][ C1] __do_softirq+0x1b9/0x715 [ 665.996586][ C1] [ 665.998894][ C1] Uninit was stored to memory at: [ 666.003895][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 666.009619][ C1] __msan_chain_origin+0x57/0xa0 [ 666.014559][ C1] tcp_conn_request+0x1b4d/0x4db0 [ 666.019598][ C1] tcp_v4_conn_request+0x201/0x290 [ 666.024705][ C1] tcp_v6_conn_request+0xeb/0x330 [ 666.029731][ C1] tcp_rcv_state_process+0x2f4/0x45a0 [ 666.035104][ C1] tcp_v4_do_rcv+0xc63/0x1000 [ 666.039776][ C1] tcp_v4_rcv+0x4b0a/0x5c80 [ 666.044273][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 666.049730][ C1] ip_local_deliver+0x585/0x8d0 [ 666.054581][ C1] ip_rcv+0x599/0x820 [ 666.058559][ C1] __netif_receive_skb+0x1ec/0x640 [ 666.063676][ C1] process_backlog+0x517/0xbd0 [ 666.068443][ C1] napi_poll+0x428/0x15c0 [ 666.072772][ C1] net_rx_action+0x34c/0xd30 [ 666.077366][ C1] __do_softirq+0x1b9/0x715 [ 666.081875][ C1] [ 666.084188][ C1] Uninit was stored to memory at: [ 666.089191][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 666.094914][ C1] __msan_chain_origin+0x57/0xa0 [ 666.099853][ C1] tcp_openreq_init_rwin+0xcc6/0x1010 [ 666.105222][ C1] tcp_conn_request+0x2bd7/0x4db0 [ 666.110257][ C1] tcp_v4_conn_request+0x201/0x290 [ 666.115363][ C1] tcp_v6_conn_request+0xeb/0x330 [ 666.120389][ C1] tcp_rcv_state_process+0x2f4/0x45a0 [ 666.125763][ C1] tcp_v4_do_rcv+0xc63/0x1000 [ 666.130436][ C1] tcp_v4_rcv+0x4b0a/0x5c80 [ 666.134942][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 666.140400][ C1] ip_local_deliver+0x585/0x8d0 [ 666.145252][ C1] ip_rcv+0x599/0x820 [ 666.149230][ C1] __netif_receive_skb+0x1ec/0x640 [ 666.154343][ C1] process_backlog+0x517/0xbd0 [ 666.159105][ C1] napi_poll+0x428/0x15c0 [ 666.163434][ C1] net_rx_action+0x34c/0xd30 [ 666.168039][ C1] __do_softirq+0x1b9/0x715 [ 666.172538][ C1] [ 666.174846][ C1] Uninit was stored to memory at: [ 666.179848][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 666.185576][ C1] __msan_chain_origin+0x57/0xa0 [ 666.190517][ C1] tcp_conn_request+0x1b4d/0x4db0 [ 666.195542][ C1] tcp_v4_conn_request+0x201/0x290 [ 666.200650][ C1] tcp_v6_conn_request+0xeb/0x330 [ 666.205680][ C1] tcp_rcv_state_process+0x2f4/0x45a0 [ 666.211051][ C1] tcp_v4_do_rcv+0xc63/0x1000 [ 666.215722][ C1] tcp_v4_rcv+0x4b0a/0x5c80 [ 666.220217][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 666.225673][ C1] ip_local_deliver+0x585/0x8d0 [ 666.230522][ C1] ip_rcv+0x599/0x820 [ 666.234502][ C1] __netif_receive_skb+0x1ec/0x640 [ 666.239614][ C1] process_backlog+0x517/0xbd0 [ 666.244377][ C1] napi_poll+0x428/0x15c0 [ 666.248704][ C1] net_rx_action+0x34c/0xd30 [ 666.253292][ C1] __do_softirq+0x1b9/0x715 [ 666.257792][ C1] [ 666.260103][ C1] Uninit was created at: [ 666.264322][ C1] kmsan_save_stack_with_flags+0x3c/0x90 [ 666.269957][ C1] kmsan_alloc_page+0xd3/0x1f0 [ 666.274723][ C1] __alloc_pages_nodemask+0x827/0xf90 [ 666.280094][ C1] alloc_pages_current+0x7b6/0xb60 [ 666.285208][ C1] allocate_slab+0x392/0x11e0 [ 666.289883][ C1] ___slab_alloc+0xd42/0x1930 [ 666.294558][ C1] kmem_cache_alloc+0xc36/0xff0 [ 666.299405][ C1] inet_reqsk_alloc+0xaf/0x8c0 [ 666.304172][ C1] tcp_conn_request+0x911/0x4db0 [ 666.309112][ C1] tcp_v4_conn_request+0x201/0x290 [ 666.314220][ C1] tcp_rcv_state_process+0x2f4/0x45a0 [ 666.319590][ C1] tcp_v4_do_rcv+0xc63/0x1000 [ 666.324260][ C1] tcp_v4_rcv+0x4b0a/0x5c80 [ 666.328759][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 666.334216][ C1] ip_local_deliver+0x585/0x8d0 [ 666.339065][ C1] ip_sublist_rcv+0x121b/0x1560 [ 666.343914][ C1] ip_list_rcv+0x8f1/0x960 [ 666.348330][ C1] __netif_receive_skb_list_core+0xe65/0x1250 [ 666.354401][ C1] __netif_receive_skb_list+0x7e2/0x930 [ 666.359961][ C1] netif_receive_skb_list_internal+0x837/0xdb0 [ 666.366113][ C1] napi_complete_done+0x552/0xf80 [ 666.371134][ C1] virtqueue_napi_complete+0xb9/0x1f0 [ 666.376505][ C1] virtnet_poll+0x170f/0x1d10 [ 666.381192][ C1] napi_poll+0x428/0x15c0 [ 666.385520][ C1] net_rx_action+0x34c/0xd30 [ 666.390112][ C1] __do_softirq+0x1b9/0x715 05:25:08 executing program 3: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002000000001000000000000002", 0x19, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = getpgrp(0x0) kcmp(r5, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r5}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:25:08 executing program 4: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {0x0, 0x0, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 666.469507][ T8467] usb 6-1: can't set config #1, error -71 [ 666.477400][ T8467] usb 6-1: USB disconnect, device number 9 05:25:09 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000540)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000300)) [ 666.655952][ T1] systemd[1]: systemd-journald.service: Start operation timed out. Terminating. 05:25:09 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480), 0x0, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xad3) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 668.339673][T15585] loop2: detected capacity change from 65551 to 0 [ 668.387841][T15588] loop4: detected capacity change from 65551 to 0 [ 668.453434][T15584] loop3: detected capacity change from 65536 to 0 05:25:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'batadv0\x00', &(0x7f00000001c0)=@ethtool_sset_info={0x37, 0x0, 0x98}}) 05:25:11 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000003f40)={0x2020}, 0x2020) 05:25:11 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) [ 669.122220][T15584] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 669.130231][T15584] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 669.142532][T15585] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 669.150519][T15585] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 669.164100][T15588] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 669.180553][T15588] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 669.292375][T15584] F2FS-fs (loop3): invalid crc_offset: 0 [ 669.298558][T15584] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-4) [ 669.324789][T15585] F2FS-fs (loop2): invalid crc_offset: 0 [ 669.330925][T15585] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-4) [ 669.397866][T15588] F2FS-fs (loop4): invalid crc_offset: 0 [ 669.404404][T15588] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-4) 05:25:12 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x301, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8}]}, 0x1c}}, 0x0) 05:25:12 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480), 0x0, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xad3) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:25:12 executing program 3: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = getpgrp(0x0) kcmp(r5, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r5}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:25:12 executing program 4: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {0x0, 0x0, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:25:12 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000003f40)={0x2020}, 0x2020) 05:25:12 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) [ 670.410714][T15622] loop2: detected capacity change from 65551 to 0 [ 670.546952][T15630] loop3: detected capacity change from 65551 to 0 [ 670.715854][T15634] loop4: detected capacity change from 65551 to 0 05:25:13 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0xffffffff, 0x0, 0x0, "3f13627c00"}) 05:25:13 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000003f40)={0x2020}, 0x2020) 05:25:13 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) [ 671.249271][T15622] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 671.249384][T15622] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 671.260584][T15634] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 05:25:14 executing program 3: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xad3) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) r5 = getpgrp(0x0) kcmp(r5, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2, @tid=r5}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 671.260781][T15634] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 05:25:14 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002", 0xd, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xad3) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 671.263333][T15630] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 671.263522][T15630] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 671.275053][T15634] F2FS-fs (loop4): invalid crc_offset: 0 [ 671.276015][T15622] F2FS-fs (loop2): invalid crc_offset: 0 [ 671.276202][T15622] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-4) [ 671.277209][T15630] F2FS-fs (loop3): invalid crc_offset: 0 [ 671.277447][T15630] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-4) 05:25:14 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000003f40)={0x2020}, 0x2020) [ 671.369356][T15634] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 671.369471][T15634] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 05:25:14 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) [ 672.134138][T15634] F2FS-fs (loop4): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. [ 672.134898][T15634] F2FS-fs (loop4): Failed to read root inode [ 672.679971][T15665] loop2: detected capacity change from 65551 to 0 [ 672.712481][T15666] loop3: detected capacity change from 65551 to 0 05:25:15 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSWINSZ(r0, 0x540b, 0x0) [ 673.099675][T15665] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 673.108119][T15665] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 673.126292][T15666] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 673.134604][T15666] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 673.277933][T15666] F2FS-fs (loop3): invalid crc_offset: 0 [ 673.286458][T15665] F2FS-fs (loop2): invalid crc_offset: 0 05:25:15 executing program 1: madvise(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x1) [ 673.438649][T15665] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-4) [ 673.499203][T15666] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 673.510251][T15666] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 05:25:16 executing program 4: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {0x0, 0x0, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:25:16 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000480)) 05:25:16 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x10001, 0x1}, 0x40) [ 674.345674][T15666] F2FS-fs (loop3): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. [ 674.450044][T15666] F2FS-fs (loop3): Failed to read root inode 05:25:17 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0x11, 0x0, &(0x7f0000000100)="280e003f4305607e5bc5795e6558000800", 0x0, 0x100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x48) 05:25:17 executing program 2: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480)="ed410000e8030000e803000002", 0xd, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) utimensat(r1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xad3) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) 05:25:17 executing program 4: timer_gettime(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000e0209000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f00000106c0)="0bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010780)="00000000000000000000000000000000000000000000000000000000d9fa28d501000300000000030000000010", 0x2d, 0x200fe0}, {&(0x7f0000000600)="000000000000000000000000000000000000000000000000000000060000000000010c80", 0x24, 0x2011e0}, {&(0x7f0000010800)="000000000000000000000001", 0xc, 0x201240}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000002", 0x1a, 0x201280}, {&(0x7f0000010840)="0000000000000003", 0x8, 0x2012e0}, {&(0x7f0000010860)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', 0x16, 0x201320}, {&(0x7f0000010880)="00000005", 0x4, 0x201380}, {&(0x7f0000010920)="00000000000000000000000000000000000000000000000000000001000000000bd03b7500000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000010a00)="00000000000000000000000000000000000000000000000000000000d9fa28d5", 0x20, 0x205fe0}, {&(0x7f0000000480), 0x0, 0x1000000}, {&(0x7f0000010d20)="00000000000000000300000003", 0xd, 0x1000fe0}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00d11d357fa8a9d7bfd30871e4a08b01000000000000008b83b8d3e9b108fb00f5bacb7f7701000008ee78155bdfae5000ef0000000000000026bd01a1915cd2f0a3b5d96bb1d8b384ce80277d49853df461ef941ff1c86069a5bebde7f200c7a053"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x19b, 0x20e00) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x16, 0x2}, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000140)) [ 675.143670][T15707] loop4: detected capacity change from 65551 to 0 [ 675.184788][T15713] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 675.191448][T15713] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 675.291967][T15707] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 675.302118][T15707] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 675.375486][T15713] ===================================================== [ 675.382471][T15713] BUG: KMSAN: uninit-value in hsr_get_node+0x45d/0xba0 [ 675.389424][T15713] CPU: 0 PID: 15713 Comm: syz-executor.1 Not tainted 5.11.0-rc7-syzkaller #0 [ 675.398203][T15713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 675.408273][T15713] Call Trace: [ 675.416283][T15713] dump_stack+0x21c/0x280 [ 675.420646][T15713] kmsan_report+0xfb/0x1e0 [ 675.425097][T15713] __msan_warning+0x5f/0xa0 [ 675.429628][T15713] hsr_get_node+0x45d/0xba0 [ 675.434162][T15713] hsr_forward_skb+0x9d9/0x2610 [ 675.439036][T15713] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 675.451481][T15713] hsr_dev_xmit+0x133/0x230 [ 675.456025][T15713] ? is_hsr_master+0xb0/0xb0 [ 675.460636][T15713] xmit_one+0x2b6/0x760 [ 675.464815][T15713] __dev_queue_xmit+0x3426/0x45c0 [ 675.469863][T15713] ? skb_release_data+0x6df/0xdb0 [ 675.474993][T15713] dev_queue_xmit+0x4b/0x60 [ 675.493027][T15713] __bpf_redirect+0x148d/0x1700 [ 675.497993][T15713] bpf_clone_redirect+0x4a1/0x660 [ 675.503059][T15713] ___bpf_prog_run+0x4279/0x93e0 [ 675.508114][T15713] ? kmsan_get_metadata+0x116/0x180 [ 675.513358][T15713] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 675.513409][T15713] ? bpf_csum_level+0x760/0x760 [ 675.513449][T15713] __bpf_prog_run512+0x12e/0x190 [ 675.513492][T15713] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 675.513538][T15713] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 675.513578][T15713] ? __perf_event_task_sched_in+0xf62/0xfd0 [ 675.513675][T15713] ? kmsan_get_metadata+0x116/0x180 [ 675.513712][T15713] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 675.513751][T15713] ? switch_to_extra+0x77/0x180 [ 675.513779][T15713] ? kmsan_get_metadata+0x116/0x180 [ 675.513817][T15713] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 675.513856][T15713] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 675.513895][T15713] ? kmsan_get_metadata+0x116/0x180 [ 675.513933][T15713] ? kmsan_get_metadata+0x116/0x180 [ 675.513971][T15713] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 675.514009][T15713] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 675.514045][T15713] ? ktime_get+0x390/0x470 [ 675.514142][T15713] ? kmsan_get_metadata+0x4f/0x180 [ 675.514181][T15713] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 675.514221][T15713] ? __bpf_prog_run480+0x190/0x190 [ 675.514260][T15713] bpf_test_run+0x544/0xea0 [ 675.514354][T15713] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 675.514395][T15713] bpf_prog_test_run_skb+0x1914/0x3500 [ 675.514436][T15713] ? __bpf_prog_test_run_raw_tp+0x410/0x410 [ 675.514467][T15713] __do_sys_bpf+0xbd97/0x1a840 [ 675.514498][T15713] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 675.514544][T15713] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 675.514584][T15713] ? __perf_event_task_sched_in+0xf62/0xfd0 [ 675.514622][T15713] ? kmsan_get_metadata+0x116/0x180 [ 675.514658][T15713] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 675.514696][T15713] ? switch_to_extra+0x77/0x180 [ 675.514723][T15713] ? kmsan_get_metadata+0x116/0x180 [ 675.514758][T15713] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 675.514796][T15713] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 675.514837][T15713] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 675.514872][T15713] ? kmsan_get_metadata+0x116/0x180 [ 675.592877][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 675.597601][T15713] ? kmsan_get_metadata+0x116/0x180 [ 675.597651][T15713] __se_sys_bpf+0x8e/0xa0 [ 675.597683][T15713] __ia32_sys_bpf+0x4a/0x70 [ 675.597710][T15713] __do_fast_syscall_32+0x102/0x160 [ 675.597745][T15713] do_fast_syscall_32+0x6a/0xc0 [ 675.773360][T15713] do_SYSENTER_32+0x73/0x90 [ 675.777910][T15713] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 675.789966][T15713] RIP: 0023:0xf7f56549 [ 675.794057][T15713] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 675.823019][T15713] RSP: 002b:00000000f552f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 675.831462][T15713] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000140 [ 675.839452][T15713] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 675.847459][T15713] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 675.855441][T15713] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 675.863424][T15713] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 675.874055][T15713] [ 675.876378][T15713] Uninit was created at: [ 675.880625][T15713] kmsan_internal_poison_shadow+0x5c/0xf0 [ 675.886374][T15713] kmsan_slab_alloc+0x8d/0xe0 [ 675.891077][T15713] __kmalloc_node_track_caller+0xa37/0x1430 [ 675.895309][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 675.896995][T15713] pskb_expand_head+0x25e/0x1e20 [ 675.897041][T15713] skb_ensure_writable+0x4cf/0x590 [ 675.897069][T15713] bpf_clone_redirect+0x25d/0x660 [ 675.897102][T15713] ___bpf_prog_run+0x4279/0x93e0 [ 675.897135][T15713] __bpf_prog_run512+0x12e/0x190 [ 675.930496][T15713] bpf_test_run+0x544/0xea0 [ 675.947379][T15713] bpf_prog_test_run_skb+0x1914/0x3500 [ 675.952889][T15713] __do_sys_bpf+0xbd97/0x1a840 [ 675.957671][T15713] __se_sys_bpf+0x8e/0xa0 [ 675.962042][T15713] __ia32_sys_bpf+0x4a/0x70 [ 675.966562][T15713] __do_fast_syscall_32+0x102/0x160 [ 675.971783][T15713] do_fast_syscall_32+0x6a/0xc0 [ 675.976653][T15713] do_SYSENTER_32+0x73/0x90 [ 675.981177][T15713] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 675.990726][T15713] ===================================================== [ 675.997664][T15713] Disabling lock debugging due to kernel taint [ 676.003818][T15713] Kernel panic - not syncing: panic_on_warn set ... [ 676.010413][T15713] CPU: 0 PID: 15713 Comm: syz-executor.1 Tainted: G B 5.11.0-rc7-syzkaller #0 [ 676.011699][T14263] systemd-journald[14263]: /dev/kmsg buffer overrun, some messages lost. [ 676.020600][T15713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 676.020619][T15713] Call Trace: [ 676.020630][T15713] dump_stack+0x21c/0x280 [ 676.020667][T15713] panic+0x4c6/0xea7 [ 676.020739][T15713] ? add_taint+0x17c/0x210 [ 676.020774][T15713] kmsan_report+0x1de/0x1e0 [ 676.020808][T15713] __msan_warning+0x5f/0xa0 [ 676.020843][T15713] hsr_get_node+0x45d/0xba0 [ 676.020879][T15713] hsr_forward_skb+0x9d9/0x2610 [ 676.020911][T15713] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 676.020955][T15713] hsr_dev_xmit+0x133/0x230 [ 676.020983][T15713] ? is_hsr_master+0xb0/0xb0 [ 676.021019][T15713] xmit_one+0x2b6/0x760 [ 676.021050][T15713] __dev_queue_xmit+0x3426/0x45c0 [ 676.021079][T15713] ? skb_release_data+0x6df/0xdb0 [ 676.021118][T15713] dev_queue_xmit+0x4b/0x60 [ 676.021147][T15713] __bpf_redirect+0x148d/0x1700 [ 676.021187][T15713] bpf_clone_redirect+0x4a1/0x660 [ 676.021227][T15713] ___bpf_prog_run+0x4279/0x93e0 [ 676.021263][T15713] ? kmsan_get_metadata+0x116/0x180 [ 676.021300][T15713] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 676.021338][T15713] ? bpf_csum_level+0x760/0x760 [ 676.021375][T15713] __bpf_prog_run512+0x12e/0x190 [ 676.021411][T15713] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 676.021448][T15713] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 676.021486][T15713] ? __perf_event_task_sched_in+0xf62/0xfd0 [ 676.021522][T15713] ? kmsan_get_metadata+0x116/0x180 [ 676.021559][T15713] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 676.021597][T15713] ? switch_to_extra+0x77/0x180 [ 676.021625][T15713] ? kmsan_get_metadata+0x116/0x180 [ 676.021660][T15713] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 676.021698][T15713] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 676.021734][T15713] ? kmsan_get_metadata+0x116/0x180 [ 676.021770][T15713] ? kmsan_get_metadata+0x116/0x180 [ 676.021806][T15713] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 676.021844][T15713] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 676.021881][T15713] ? ktime_get+0x390/0x470 [ 676.021916][T15713] ? kmsan_get_metadata+0x4f/0x180 [ 676.021951][T15713] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 676.021988][T15713] ? __bpf_prog_run480+0x190/0x190 [ 676.022029][T15713] bpf_test_run+0x544/0xea0 [ 676.022065][T15713] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 676.022102][T15713] bpf_prog_test_run_skb+0x1914/0x3500 [ 676.022143][T15713] ? __bpf_prog_test_run_raw_tp+0x410/0x410 [ 676.022175][T15713] __do_sys_bpf+0xbd97/0x1a840 [ 676.022207][T15713] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 676.022245][T15713] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 676.022282][T15713] ? __perf_event_task_sched_in+0xf62/0xfd0 [ 676.022317][T15713] ? kmsan_get_metadata+0x116/0x180 [ 676.022352][T15713] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 676.022391][T15713] ? switch_to_extra+0x77/0x180 [ 676.337841][T15713] ? kmsan_get_metadata+0x116/0x180 [ 676.343081][T15713] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 676.348918][T15713] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 676.355105][T15713] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 676.365480][T15713] ? kmsan_get_metadata+0x116/0x180 [ 676.370716][T15713] ? kmsan_get_metadata+0x116/0x180 [ 676.375947][T15713] __se_sys_bpf+0x8e/0xa0 [ 676.380301][T15713] __ia32_sys_bpf+0x4a/0x70 [ 676.384943][T15713] __do_fast_syscall_32+0x102/0x160 [ 676.390429][T15713] do_fast_syscall_32+0x6a/0xc0 [ 676.395302][T15713] do_SYSENTER_32+0x73/0x90 [ 676.410986][T15713] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 676.417355][T15713] RIP: 0023:0xf7f56549 [ 676.421432][T15713] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 676.441142][T15713] RSP: 002b:00000000f552f5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 676.449574][T15713] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000140 [ 676.457558][T15713] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 676.465627][T15713] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 676.475529][T15713] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 676.483512][T15713] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 676.492196][T15713] Kernel Offset: disabled [ 676.496514][T15713] Rebooting in 86400 seconds..