last executing test programs: 1m10.043690666s ago: executing program 4 (id=121): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x107000, 0xc0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x18bdb, 0x325967a866143452) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x1, 0x0, 0x0, 0x14, 0xd, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 1m9.776439482s ago: executing program 4 (id=124): ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000940)={0x4, 0xfffffffe, 0x10, 0x11, 0x100, &(0x7f0000000040)="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"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x20010000}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m9.504632923s ago: executing program 4 (id=125): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000280), 0x1, 0x76a, &(0x7f0000000d40)="$eJzs3M1rHGUYAPBnptmmTaMbQfDjIEILLZRukubSgtB48VYoFLzWkExCyCQbspvajQVbz0JtLgqCqGePXoVS/wBvUlDwLhSt8SBeVmazSUnMptsm6Zb294Ppvu87H8/z7A5vZyAzAbyw3i7+SSIGI+JSRJTb42lEHG61jkTcWN9u7cH1yWJJotm8/EdS7BZrzfLmsZL257Fo7RKvR8TdUsTpT/4ft9ZYmZvI82yp3R+uzy8O1xorZ2bnJ2aymWxhdOz8yLmxsXMjYxHRt2sNr3VZ64n3zx+9/dN7q6s/f1+/9VbfmSTGW3VHu7YuD/NY1r+TUoxvG184iGA9lPQ6AQAAulJc5x9qX2GXohyHHnGtvcU7AweZGgAAALBPmv1NAAAA4LmXRK8zAAAAAA7Wxt8BbDzbe1DPwXZy/92IGNopfl/rGeKII1GKiIG1ZMuTCcn6brAnN25GxJ3x7efft8UZdmOPxx7Z1t/6jPThPR6d/XCnmH/Gd5p/0s35J3aYf/o23p2wR53nv4fxD3WY/y51GeOHr94o7TDcKuz+zYg3+3aKn2zGTzrE/6DL+LdWP73daV3zm4iTO/7/k2yJtcv7IcanZ/NdXz9w999T9zqtK+of6BQ/2b3+xS7r/2jtr7lOc0kR/9Tx3X//neIX58Rn7TzSiLjd/iz6q9tiHJ//5cfd6p+KaD7J7/91l/X/9l3/tS43BQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJY0IgYjSSub7TStVCKORcSrMZDm1Vr99HR1eWGqWBcxFKV0ejbPRiKivN5Piv5oq/2wf3ZbfywiXvn16HrQ2TyrTFbzqV4XDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKZjETEYSVqJiDQi/i6naaUS0dfFvv1PIT8AAABgnwz1OgEAAADgwLn/BwAAgOffk97/J/ucBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBcu3TxYrE01x5cnyz6U1cby3PVq2emstpcZX55sjJZXVqszFSrM3lWmazOP+p4ebW6OHo+lq8N17NafbjWWLkyX11eqF+ZnZ+Yya5kpadSFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI9rsLUkaSUi0lY7TSuViJciYihKyfRsno1ExMsRca9c6i/6o71OGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH1Xa6zMTeR5tqSx/420/SU/K/loPDONjyPiGUhjl0aPJyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHqi1liZm8jzbKnW60wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADorfT3JCKK5WT5xOD2tYeTf8qtz4j48MvLn1+bqNeXRovxPzfH61+0x8/2In8AAAB4IVx4nI037tM37uMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC6VWuszE3keba0t8aFaKw0kw7b9LpGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgyfwXAAD//14fxBc=") chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x4100, 0x0, 0x20}, 0x18) read$hiddev(r1, &(0x7f00000002c0)=""/164, 0xa4) 1m8.847798647s ago: executing program 4 (id=130): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000040)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}]}, 0x1, 0x453, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x181) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x14a0, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000080)={0x6081, 0x5, 0x1, 0x4, 0x1, 0x0, [{0x7fffffffffffffff, 0x5, 0x8000, '\x00', 0x800}]}) 1m7.430239024s ago: executing program 4 (id=141): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x90000005}) epoll_pwait(r2, &(0x7f0000000300)=[{}], 0x1, 0xf7fefffb, 0x0, 0x0) close(r0) 1m6.30370427s ago: executing program 3 (id=143): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000001c0)=0xa, 0x4) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 1m5.70393543s ago: executing program 4 (id=146): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 1m4.917767332s ago: executing program 32 (id=146): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 1m4.892320736s ago: executing program 3 (id=160): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0x10001, 0x0) 1m4.656457411s ago: executing program 3 (id=153): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x1cb800, 0x8f) ppoll(&(0x7f0000000000)=[{r0, 0xd005}], 0x1, 0x0, 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x6, 0x7fff0002}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m4.274867644s ago: executing program 3 (id=156): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000140)='./bus\x00', 0x2, &(0x7f0000000b40)=ANY=[@ANYRES32=0x0, @ANYRES8=0x0, @ANYRES32], 0xff, 0x2e7, &(0x7f0000000280)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x1fb978507dcbbbd6) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x68000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) creat(&(0x7f00000003c0)='./file0\x00', 0xa) 1m3.440751222s ago: executing program 3 (id=159): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x80000000, 0x3, 0xe, 0xfffffffc, 0x6, 0x7, 0x17, 0xb, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0xfff], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x169432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x3, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x200002, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x6, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c3, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x1, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x0, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m2.151460055s ago: executing program 3 (id=163): r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000340)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f0000000380)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0x7f}], 0x1, 0x10120, 0x0) 1m1.410921113s ago: executing program 33 (id=163): r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000340)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f0000000380)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0x7f}], 0x1, 0x10120, 0x0) 14.075404761s ago: executing program 0 (id=317): syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @link_local, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x1, 0x8, 0x28, 0x68, 0x0, 0x8, 0x21, 0x0, @rand_addr=0x64010100, @multicast2, {[@generic={0x82, 0x2}]}}, {{0x4e21, 0x4e21, 0x4, 0x1, 0xb, 0x0, 0x0, 0x0, 0x3, "740e23", 0xd, '1\x00'}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000700180a050000000000000000000a0000000900010073797a30000000000900020073797a31000000001400000011"], 0x54}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="001286dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 13.244968037s ago: executing program 0 (id=323): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="00dc6b"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00033c0000005d03"], 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0}, 0x0) 9.22846239s ago: executing program 1 (id=333): r0 = socket$inet(0x2, 0x4000000000000001, 0x100) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 7.968653302s ago: executing program 0 (id=337): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xbfb3) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)) r1 = syz_open_pts(r0, 0x101000) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 6.065189806s ago: executing program 6 (id=343): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d0001000060000904008002030000000921060400012205000905810320000908070905020340"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002212"], 0x0}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) 5.906716154s ago: executing program 1 (id=345): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) preadv(r0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/14, 0xe}], 0x1, 0x0, 0x2) 5.732366933s ago: executing program 0 (id=347): syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009740)='./file1\x00', 0x8, &(0x7f0000009780), 0x1, 0x9798, &(0x7f0000016540)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) chdir(&(0x7f0000000140)='./bus\x00') syz_mount_image$vfat(&(0x7f0000000700), &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x290c471, 0x0, 0x1, 0x0, &(0x7f0000000740)) rmdir(&(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000080)={[{@errors_remount}, {@jqfmt_vfsv1}, {@noquota}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@nodioread_nolock}]}, 0x1, 0x5af, &(0x7f0000003e80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x105042, 0x0) 5.51470599s ago: executing program 5 (id=349): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x8, 0x0, 0x7fffffff}]}) socket(0x2, 0x3, 0x7) setregid(0x0, 0x0) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchmodat(r1, &(0x7f00000004c0)='.\x00', 0x1) 5.27499378s ago: executing program 2 (id=350): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f00000001c0)="93e1", 0x2, 0x201, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) splice(r1, 0x0, r0, 0x0, 0x1, 0x0) 5.222666243s ago: executing program 5 (id=351): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)="4e813c", 0x3, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='yeah', 0x4) shutdown(r0, 0x1) 5.065291252s ago: executing program 2 (id=352): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0xe8, 0x0, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@multicast1, @broadcast, 0xff000000, 0xff, 0x9, 0x12, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}}, 0x0, 0x3, 0x3, 0xa90a, 0x6, 0x3ff, 'veth0_vlan\x00', 'wg2\x00', {0xff}, {0xff}, 0x0, 0x71}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@empty, @loopback, 0x0, 0xffffffff, 0xe, 0x2, {@mac=@local, {[0xff, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@random="8e932bc3db22", {[0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0x400, 0x4fd9, 0x0, 0x98dc, 'team_slave_1\x00', 'macsec0\x00', {0xff}, {0xff}, 0x0, 0x280}, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @loopback, 0xf, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @loopback, @multicast1, 0xf}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r1 = socket$unix(0x1, 0x2, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000002300)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x60, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@loopback, 0x1234, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x2, {{'digest_null\x00'}}}]}, 0x138}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x11) sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x1234, @loopback}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000001, 0x11, 0xffffffffffffffff, 0xc10c3000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010028bd7000fedbdf2500000000", @ANYBLOB="da430100000000000800168044003f8014000300776c616e3000000000000000000000002f1fd83910391dbf09d07ba1bce2b34be682aef6b014dc9d619e3be2b5e5780c5046f1a456494097aac21aa67b15676aafc6d81a8cae76f37fb367f50276c1687f1a4dfb536ae3a26e1c0e1092352950b124dee4d9519d95de12e4cc9a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000880}, 0xc0d0) socket$xdp(0x2c, 0x3, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x58) mkdir(&(0x7f0000000540)='./trace\x00', 0x1ff) 4.99906365s ago: executing program 7 (id=353): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x40001}, 0x881) r1 = dup(r0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0x1}}, 0x20) 4.947448238s ago: executing program 5 (id=354): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) syz_clone(0x8202000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0xf5}}], 0x48}, 0x0) 4.610023471s ago: executing program 7 (id=355): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000080)={@empty, @empty, 0x4, "97943e142c06737c54df5c4a9fc8398fc4ea165b26b7458e31bb8d1aa22f4a59", 0xb, 0x1, 0xb78, 0x10000}, 0x3c) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000400)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @remote, @multicast1=0xe0000300}, @parameter_prob={0xc, 0x0, 0x0, 0x9, 0x7, 0x0, {0x5, 0x4, 0x2, 0xc, 0x9, 0x66, 0xb, 0xf8, 0x2, 0x5, @loopback, @broadcast}}}}}}, 0x0) 3.731003584s ago: executing program 2 (id=356): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 3.646551905s ago: executing program 1 (id=357): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x8, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000340)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d010203010902"], 0x0) shutdown(r0, 0x1) 3.450052891s ago: executing program 7 (id=358): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@multicast, @broadcast, @val={@val={0x88a8, 0x4}, {0x8100, 0x1, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x10, 0x3a, 0xff, @private1, @empty, {[], @ndisc_ra={0x89, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0xffffffff}}}}}}, 0x0) 3.138965004s ago: executing program 7 (id=359): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 3.10117874s ago: executing program 2 (id=360): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000100), 0x82, 0x602) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000004c0)={0x20, 0x1, 0x3, "68fe42"}, 0x0}) write$hidraw(r1, 0x0, 0x100000) 2.932677454s ago: executing program 6 (id=361): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xbfb3) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)) r1 = syz_open_pts(r0, 0x101000) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 2.764674136s ago: executing program 5 (id=362): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB], 0xa) r2 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000280)={'a', ' *:* ', 'rm\x00'}, 0x9) 2.546027217s ago: executing program 0 (id=363): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x14, 0x6, 0xff, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0xfffc, 0x0, 0x4}}}}}}}, 0x0) 2.31937178s ago: executing program 5 (id=364): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x6ca21}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x1000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1.876928786s ago: executing program 1 (id=365): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x60048040}, 0xc040445) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x303, 0x36}, "00000007e4008000", "8b3de2aabceef22f419e59f30000000004000000000200", "e73400", "000000d900"}, 0x38) 1.770514818s ago: executing program 6 (id=366): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffa}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f00000005c0)=ANY=[], 0x0) 1.076175249s ago: executing program 1 (id=367): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1001a, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@inlinecrypt}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nojournal_checksum}, {@jqfmt_vfsv1}]}, 0xff, 0x439, &(0x7f00000004c0)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) writev(r0, &(0x7f0000002780)=[{&(0x7f0000000000)="0ce880", 0x3}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f00000002c0)={@desc={0x1, 0x0, @desc2}}) 1.075189972s ago: executing program 6 (id=368): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x8, 0x0, 0x102}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) 1.016571241s ago: executing program 5 (id=369): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_ublk_setup_io_uring(0x1b, &(0x7f0000000540)={0x0, 0x30b5, 0x800, 0x2, 0x15e}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000000)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x4, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35b9, 0x1, 0xfffffffd, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1000c1cf, 0x1000, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 933.372923ms ago: executing program 0 (id=370): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010002000000406a0800010100000000010902120001010080320904"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='1\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r1, &(0x7f0000000a00)='0', 0x1) 567.886868ms ago: executing program 7 (id=371): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x9}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x58, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x3, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5, 0x7, 0x4c2}, {{0x2}, {0xf0ffff, 0x1, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000045}, 0x2008c014) 516.648491ms ago: executing program 2 (id=372): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 374.512059ms ago: executing program 6 (id=373): setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000400)={0x100000, 0x0, 0x1, {0x2, @win={{0x7, 0x7f, 0xffffff7c, 0xe6}, 0x6, 0xc83, 0x0, 0x9, 0x0, 0x5}}, 0x5}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40186f40, &(0x7f0000000440)=0x1f) io_uring_setup(0x5da7, &(0x7f00000002c0)={0x0, 0x72c2, 0x800, 0x2, 0x146, 0x0, r1}) 35.718937ms ago: executing program 7 (id=374): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)={0x5, &(0x7f0000000240)=[{0xfffd, 0x2, 0x2}, {0x4, 0x81, 0x0, 0x7}, {0x7fff, 0x2, 0x6, 0x5}, {0xef, 0x7, 0x8, 0x98}, {0x1, 0x5, 0x4b, 0x2}]}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00b3f0ffffffffffffaaaaaaaaaabb86dd69"], 0x7a) 35.353257ms ago: executing program 6 (id=375): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x1, 0x0) 1.131848ms ago: executing program 1 (id=376): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfbfffffd, 0x0, 0x0, 0x0, 0x7fc}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0xc, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x1f, &(0x7f00000004c0)={@remote, @random="8d81e3403687", @val={@val={0x88a8, 0x4, 0x1, 0x2}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x30, 0x28, 0x65, 0x0, 0x9, 0x6, 0x0, @rand_addr=0x64010100, @multicast1}, {{0x4e22, 0x4e20, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x25, 0x200, 0x0, 0x1ff}}}}}}, 0x0) 0s ago: executing program 2 (id=377): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB="20185d000000683ade6e67ddc3e23b06572171996e02bc464b5adaabf38f2c7d0dbfa0045129045c4efa0c76b16a44173d29e55707"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xd, 0x2, "28e4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Trace: [ 112.310760][ T5634] [ 112.310772][ T5634] dump_stack_lvl+0x100/0x190 [ 112.310815][ T5634] f2fs_stop_checkpoint+0x5e6/0xb30 [ 112.310870][ T5634] ? __filemap_set_wb_err+0x3c/0x200 [ 112.310927][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.310975][ T5634] f2fs_write_end_bio+0xf53/0x1340 [ 112.311014][ T5634] ? __pfx_f2fs_write_end_bio+0x10/0x10 [ 112.311055][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.311102][ T5634] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 112.311135][ T5634] bio_endio+0x778/0x8e0 [ 112.311184][ T5634] submit_bio_noacct+0x64c/0x1ff0 [ 112.311247][ T5634] f2fs_submit_write_bio+0x133/0x330 [ 112.311303][ T5634] __submit_merged_bio+0x330/0x7b0 [ 112.311337][ T5634] ? rcu_is_watching+0x12/0xc0 [ 112.311393][ T5634] __submit_merged_write_cond+0x3fe/0x510 [ 112.311434][ T5634] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 112.311480][ T5634] ? __pfx___might_resched+0x10/0x10 [ 112.311518][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.311558][ T5634] ? folio_clear_dirty_for_io+0x178/0x960 [ 112.311618][ T5634] f2fs_write_cache_pages+0x20e9/0x2630 [ 112.311683][ T5634] ? __bfs+0xef/0x2a0 [ 112.311742][ T5634] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 112.311791][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.311837][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.311885][ T5634] ? __kasan_check_byte+0x13/0x50 [ 112.311924][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.311969][ T5634] ? unwind_next_frame+0x3be/0x2090 [ 112.312028][ T5634] ? rcu_is_watching+0x12/0xc0 [ 112.312080][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.312126][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.312170][ T5634] ? __kasan_check_byte+0x13/0x50 [ 112.312212][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.312272][ T5634] ? is_bpf_text_address+0x94/0x1a0 [ 112.312312][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.312360][ T5634] ? kernel_text_address+0x8d/0x100 [ 112.312456][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.312501][ T5634] ? check_prev_add+0x354/0xe60 [ 112.312540][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.312584][ T5634] ? rcu_is_watching+0x12/0xc0 [ 112.312642][ T5634] f2fs_write_data_pages+0x799/0x16d0 [ 112.312702][ T5634] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 112.312757][ T5634] ? do_writepages+0x4b5/0x600 [ 112.312817][ T5634] ? do_writepages+0x4b5/0x600 [ 112.312874][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.312922][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.312966][ T5634] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 112.313017][ T5634] do_writepages+0x278/0x600 [ 112.313081][ T5634] ? __pfx_do_writepages+0x10/0x10 [ 112.313139][ T5634] ? do_raw_spin_unlock+0x145/0x1e0 [ 112.313199][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.313244][ T5634] ? _raw_spin_unlock+0x28/0x50 [ 112.313287][ T5634] filemap_writeback+0x22d/0x2e0 [ 112.313352][ T5634] ? __pfx_filemap_writeback+0x10/0x10 [ 112.313463][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.313509][ T5634] ? find_held_lock+0x2b/0x80 [ 112.313564][ T5634] ? f2fs_sync_dirty_inodes+0x3a7/0x970 [ 112.313614][ T5634] ? f2fs_sync_dirty_inodes+0x3a7/0x970 [ 112.313660][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.313714][ T5634] f2fs_sync_dirty_inodes+0x46a/0x970 [ 112.313774][ T5634] block_operations+0x2a6/0xfc0 [ 112.313826][ T5634] ? __pfx_block_operations+0x10/0x10 [ 112.313914][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.313957][ T5634] ? ktime_get+0x22c/0x320 [ 112.313993][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.314033][ T5634] ? rcu_is_watching+0x12/0xc0 [ 112.314086][ T5634] f2fs_write_checkpoint+0x58b/0x53d0 [ 112.314132][ T5634] ? _raw_spin_unlock_irq+0x23/0x50 [ 112.314168][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.314214][ T5634] ? _raw_spin_unlock_irq+0x2e/0x50 [ 112.314247][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.314287][ T5634] ? __wait_for_common+0x1f3/0x4c0 [ 112.314326][ T5634] ? __pfx_schedule_timeout+0x10/0x10 [ 112.314387][ T5634] ? __pfx___wait_for_common+0x10/0x10 [ 112.314428][ T5634] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 112.314482][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.314521][ T5634] ? rcu_is_watching+0x12/0xc0 [ 112.314568][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.314608][ T5634] ? kthread_stop+0x280/0x630 [ 112.314664][ T5634] kill_f2fs_super+0x3f1/0x4a0 [ 112.314707][ T5634] ? __pfx_kill_f2fs_super+0x10/0x10 [ 112.314767][ T5634] ? lockdep_hardirqs_on+0x78/0x100 [ 112.314807][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.314848][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.314901][ T5634] deactivate_locked_super+0xc1/0x1b0 [ 112.314943][ T5634] deactivate_super+0xe7/0x110 [ 112.314984][ T5634] cleanup_mnt+0x21f/0x450 [ 112.315036][ T5634] task_work_run+0x150/0x240 [ 112.315073][ T5634] ? __pfx_task_work_run+0x10/0x10 [ 112.315109][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.315156][ T5634] exit_to_user_mode_loop+0x1d8/0x6f0 [ 112.315201][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 112.315240][ T5634] ? rcu_is_watching+0x12/0xc0 [ 112.315292][ T5634] do_syscall_64+0x666/0x870 [ 112.315339][ T5634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.315373][ T5634] RIP: 0033:0x7ff30139f257 [ 112.315399][ T5634] Code: a2 c7 05 9c 44 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 112.315430][ T5634] RSP: 002b:00007ffd9dd6e978 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 112.315460][ T5634] RAX: 0000000000000000 RBX: 00007ff30143445c RCX: 00007ff30139f257 [ 112.315481][ T5634] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd9dd6ea30 [ 112.315501][ T5634] RBP: 00007ffd9dd6ea30 R08: 00007ffd9dd6fa30 R09: 00000000ffffffff [ 112.315522][ T5634] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd9dd6fac0 [ 112.315542][ T5634] R13: 00007ff30143445c R14: 000000000001b63a R15: 00007ffd9dd6fb00 [ 112.315585][ T5634] [ 112.917080][ T5634] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 113.024320][ T5795] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 113.094328][ T5996] netlink: 27 bytes leftover after parsing attributes in process `syz.1.47'. [ 113.270178][ T5795] usb 3-1: USB disconnect, device number 2 [ 113.381005][ T29] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 113.534253][ T6004] loop1: detected capacity change from 0 to 8 [ 113.583187][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.623133][ T6004] SQUASHFS error: zstd decompression error: 10 [ 113.630106][ T6004] SQUASHFS error: zstd decompression failed, data probably corrupt [ 113.638515][ T6004] SQUASHFS error: Failed to read block 0x62b: -5 [ 113.645097][ T6004] SQUASHFS error: Unable to read metadata cache entry [629] [ 113.652513][ T6004] SQUASHFS error: Unable to read directory block [629:ff26] [ 113.654262][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.720790][ T29] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 113.757660][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.830670][ T29] usb 5-1: config 0 descriptor?? [ 113.963220][ T6009] netlink: 'syz.1.55': attribute type 7 has an invalid length. [ 113.996138][ T6009] netlink: 'syz.1.55': attribute type 8 has an invalid length. [ 114.587987][ T6021] netlink: 'syz.3.61': attribute type 1 has an invalid length. [ 114.604474][ T6018] loop1: detected capacity change from 0 to 4096 [ 114.827929][ T6018] ntfs3(loop1): Failed to load $Extend (-22). [ 114.853666][ T6018] ntfs3(loop1): Failed to initialize $Extend. [ 114.989493][ T6026] loop5: detected capacity change from 0 to 32768 [ 114.999801][ T30] audit: type=1800 audit(1785448420.868:4): pid=6018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.60" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 115.021133][ T6026] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.63 (6026) [ 115.046097][ T6026] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 115.056806][ T6026] BTRFS info (device loop5): using sha256 checksum algorithm [ 115.064571][ T6026] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 115.084894][ T29] hid-led 0003:27B8:01ED.0001: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.4-1/input0 [ 115.231477][ T6026] BTRFS info (device loop5): rebuilding free space tree [ 115.249441][ T29] hid-led 0003:27B8:01ED.0001: ThingM blink(1) initialized [ 115.282103][ T29] usb 5-1: USB disconnect, device number 2 [ 115.317687][ T6026] BTRFS info (device loop5): disabling free space tree [ 115.325911][ T6026] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 115.335744][ T6026] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 115.340828][ T6018] ntfs3(loop1): ino=5, "/" mi_enum_attr [ 115.365564][ T6026] BTRFS info (device loop5): enabling ssd optimizations [ 115.374162][ T6026] BTRFS info (device loop5): turning on async discard [ 115.381027][ T6026] BTRFS info (device loop5): enabling disk space caching [ 115.388061][ T6026] BTRFS info (device loop5): force clearing of disk cache [ 115.501929][ T6018] ntfs3(loop1): ino=5, "/" mi_enum_attr [ 115.640427][ T5795] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 115.673688][ T6046] fido_id[6046]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 115.728129][ T13] ntfs3(loop1): ino=5, mi_enum_attr [ 115.742655][ T13] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 115.860704][ T5795] usb 3-1: Using ep0 maxpacket: 8 [ 115.884416][ T5795] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 115.913682][ T5795] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 115.962652][ T5795] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 116.008870][ T5795] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 116.068601][ T5795] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.123947][ T5795] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 116.175084][ T5795] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.199723][ T6061] loop1: detected capacity change from 0 to 128 [ 116.220055][ T6064] loop3: detected capacity change from 0 to 64 [ 116.438604][ T30] audit: type=1804 audit(1785448422.328:5): pid=6061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.69" name="/newroot/15/bus/bus" dev="loop1" ino=1048610 res=1 errno=0 [ 116.483139][ T5795] usb 3-1: usb_control_msg returned -32 [ 116.485736][ T6064] hfs: request for non-existent node 237 in B*Tree [ 116.520817][ T5795] usbtmc 3-1:16.0: can't read capabilities [ 116.561270][ T6064] hfs: request for non-existent node 237 in B*Tree [ 116.634492][ T6068] hfs: request for non-existent node 237 in B*Tree [ 116.679763][ T6068] hfs: request for non-existent node 237 in B*Tree [ 116.703488][ T6068] hfs: request for non-existent node 237 in B*Tree [ 116.708676][ T5630] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 116.719266][ T6068] hfs: request for non-existent node 237 in B*Tree [ 116.733696][ T6068] hfs: request for non-existent node 237 in B*Tree [ 116.756926][ T6068] hfs: request for non-existent node 237 in B*Tree [ 116.790378][ T29] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 116.954494][ T6069] usbtmc 3-1:16.0: INITIATE_CLEAR returned 0 [ 116.972840][ T29] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.006812][ T29] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 117.036888][ T29] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 117.052472][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.073990][ T29] usb 1-1: Product: syz [ 117.095518][ T29] usb 1-1: Manufacturer: syz [ 117.114044][ T29] usb 1-1: SerialNumber: syz [ 117.155645][ T5769] usb 3-1: USB disconnect, device number 3 [ 117.306533][ T6076] batadv_slave_1: entered promiscuous mode [ 117.543447][ T6075] batadv_slave_1: left promiscuous mode [ 117.611363][ T5795] usb 1-1: USB disconnect, device number 3 [ 118.389470][ T6095] loop1: detected capacity change from 0 to 2048 [ 118.459661][ T6099] syz_tun: entered allmulticast mode [ 118.510688][ T6099] pim6reg: entered allmulticast mode [ 118.555884][ T6099] pim6reg: left allmulticast mode [ 118.570941][ T6099] syz_tun: left allmulticast mode [ 118.621929][ T30] audit: type=1800 audit(1785448424.518:6): pid=6095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.81" name="bus" dev="loop1" ino=1367 res=0 errno=0 [ 118.686453][ T30] audit: type=1800 audit(1785448424.558:7): pid=6102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.81" name="bus" dev="loop1" ino=1367 res=0 errno=0 [ 118.795930][ T6094] UDF-fs: warning (device loop1): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 12288 lbcount: 16384 extent 65+4096 [ 119.100752][ T988] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 119.196875][ T6113] netlink: 40 bytes leftover after parsing attributes in process `syz.1.89'. [ 119.225366][ T6113] netlink: 40 bytes leftover after parsing attributes in process `syz.1.89'. [ 119.292008][ T988] usb 6-1: Using ep0 maxpacket: 32 [ 119.329493][ T988] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 119.337892][ T6116] netlink: 40 bytes leftover after parsing attributes in process `syz.1.89'. [ 119.337965][ T6116] netlink: 40 bytes leftover after parsing attributes in process `syz.1.89'. [ 119.425315][ T988] usb 6-1: config 0 has no interface number 0 [ 119.444243][ T988] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 119.456589][ T6120] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.466070][ T6120] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.473011][ T988] usb 6-1: config 0 interface 196 has no altsetting 0 [ 119.492434][ T6113] netlink: 40 bytes leftover after parsing attributes in process `syz.1.89'. [ 119.521488][ T6113] netlink: 40 bytes leftover after parsing attributes in process `syz.1.89'. [ 119.544421][ T988] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 119.566335][ T6116] netlink: 40 bytes leftover after parsing attributes in process `syz.1.89'. [ 119.568063][ T988] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.598332][ T988] usb 6-1: Product: syz [ 119.600047][ T6116] netlink: 40 bytes leftover after parsing attributes in process `syz.1.89'. [ 119.620154][ T988] usb 6-1: Manufacturer: syz [ 119.646916][ T988] usb 6-1: SerialNumber: syz [ 119.729435][ T988] usb 6-1: config 0 descriptor?? [ 119.760107][ T6105] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 119.996254][ T6126] loop4: detected capacity change from 0 to 40427 [ 120.003971][ T6126] F2FS-fs: heap/no_heap options were deprecated [ 120.013348][ T6123] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.014772][ T6126] F2FS-fs (loop4): build fault injection rate: 19 [ 120.020618][ T6123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.026833][ T6126] F2FS-fs (loop4): build fault injection type: 0x3bfe8c [ 120.028020][ T6126] F2FS-fs (loop4): invalid crc value [ 120.034652][ T6123] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.053866][ T6123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.092640][ T6123] bridge0: entered promiscuous mode [ 120.098037][ T6123] bridge0: entered allmulticast mode [ 120.117677][ T6126] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of __f2fs_build_free_nids+0x1fe/0x10a0 [ 120.194407][ T6126] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_get_node_info+0xe15/0x1710 [ 120.213883][ T6126] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 120.227733][ T6126] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 120.357284][ T6126] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0x114c/0x3020 [ 120.387316][ T6126] F2FS-fs (loop4): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio.part.0+0x345/0xe00 [ 120.400204][ T6126] F2FS-fs (loop4): inconsistent node block, node_type:1, nid:14, node_footer[nid:14,ino:14,ofs:0,cpver:0,blkaddr:0] [ 120.604081][ T5633] bio_check_eod: 633 callbacks suppressed [ 120.604106][ T5633] syz-executor: attempt to access beyond end of device [ 120.604106][ T5633] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 120.696788][ T5633] CPU: 1 UID: 0 PID: 5633 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 120.696836][ T5633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 120.696858][ T5633] Call Trace: [ 120.696869][ T5633] [ 120.696882][ T5633] dump_stack_lvl+0x100/0x190 [ 120.696932][ T5633] f2fs_stop_checkpoint+0x5e6/0xb30 [ 120.696995][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.697041][ T5633] ? errseq_set+0xe3/0x150 [ 120.697099][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.697152][ T5633] f2fs_write_end_bio+0xf53/0x1340 [ 120.697202][ T5633] ? __pfx_f2fs_write_end_bio+0x10/0x10 [ 120.697250][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.697307][ T5633] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 120.697346][ T5633] bio_endio+0x778/0x8e0 [ 120.697398][ T5633] submit_bio_noacct+0x64c/0x1ff0 [ 120.697470][ T5633] f2fs_submit_write_bio+0x133/0x330 [ 120.697534][ T5633] __submit_merged_bio+0x330/0x7b0 [ 120.697571][ T5633] ? rcu_is_watching+0x12/0xc0 [ 120.697633][ T5633] __submit_merged_write_cond+0x3fe/0x510 [ 120.697685][ T5633] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 120.697739][ T5633] ? __pfx___might_resched+0x10/0x10 [ 120.697779][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.697824][ T5633] ? folio_clear_dirty_for_io+0x178/0x960 [ 120.697893][ T5633] f2fs_write_cache_pages+0x20e9/0x2630 [ 120.697966][ T5633] ? __bfs+0xef/0x2a0 [ 120.698024][ T5633] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 120.698070][ T5633] ? is_bpf_text_address+0x8a/0x1a0 [ 120.698113][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.698157][ T5633] ? __kasan_check_byte+0x13/0x50 [ 120.698201][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.698247][ T5633] ? unwind_next_frame+0x3be/0x2090 [ 120.698307][ T5633] ? rcu_is_watching+0x12/0xc0 [ 120.698359][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.698407][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.698451][ T5633] ? __kasan_check_byte+0x13/0x50 [ 120.698489][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.698553][ T5633] ? is_bpf_text_address+0x94/0x1a0 [ 120.698592][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.698636][ T5633] ? kernel_text_address+0x8d/0x100 [ 120.698747][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.698792][ T5633] ? check_prev_add+0x354/0xe60 [ 120.698832][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.698877][ T5633] ? rcu_is_watching+0x12/0xc0 [ 120.698937][ T5633] f2fs_write_data_pages+0x799/0x16d0 [ 120.699001][ T5633] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 120.699057][ T5633] ? do_writepages+0x4b5/0x600 [ 120.699117][ T5633] ? do_writepages+0x4b5/0x600 [ 120.699173][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.699231][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.699276][ T5633] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 120.699329][ T5633] do_writepages+0x278/0x600 [ 120.699396][ T5633] ? __pfx_do_writepages+0x10/0x10 [ 120.699454][ T5633] ? do_raw_spin_unlock+0x145/0x1e0 [ 120.699506][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.699552][ T5633] ? _raw_spin_unlock+0x28/0x50 [ 120.699597][ T5633] filemap_writeback+0x22d/0x2e0 [ 120.699664][ T5633] ? __pfx_filemap_writeback+0x10/0x10 [ 120.699725][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.699831][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.699876][ T5633] ? find_held_lock+0x2b/0x80 [ 120.699931][ T5633] ? f2fs_sync_dirty_inodes+0x3a7/0x970 [ 120.699981][ T5633] ? f2fs_sync_dirty_inodes+0x3a7/0x970 [ 120.700028][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.700086][ T5633] f2fs_sync_dirty_inodes+0x46a/0x970 [ 120.700158][ T5633] block_operations+0x2a6/0xfc0 [ 120.700225][ T5633] ? __pfx_block_operations+0x10/0x10 [ 120.700336][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.700386][ T5633] ? ktime_get+0x22c/0x320 [ 120.700428][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.700472][ T5633] ? rcu_is_watching+0x12/0xc0 [ 120.700534][ T5633] f2fs_write_checkpoint+0x58b/0x53d0 [ 120.700586][ T5633] ? _raw_spin_unlock_irq+0x23/0x50 [ 120.700628][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.700673][ T5633] ? _raw_spin_unlock_irq+0x2e/0x50 [ 120.700711][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.700756][ T5633] ? __wait_for_common+0x1f3/0x4c0 [ 120.700800][ T5633] ? __pfx_schedule_timeout+0x10/0x10 [ 120.700871][ T5633] ? __pfx___wait_for_common+0x10/0x10 [ 120.700918][ T5633] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 120.700981][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.701026][ T5633] ? rcu_is_watching+0x12/0xc0 [ 120.701078][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.701124][ T5633] ? kthread_stop+0x280/0x630 [ 120.701194][ T5633] kill_f2fs_super+0x3f1/0x4a0 [ 120.701244][ T5633] ? __pfx_kill_f2fs_super+0x10/0x10 [ 120.701316][ T5633] ? lockdep_hardirqs_on+0x78/0x100 [ 120.701361][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.701407][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.701470][ T5633] deactivate_locked_super+0xc1/0x1b0 [ 120.701518][ T5633] deactivate_super+0xe7/0x110 [ 120.701566][ T5633] cleanup_mnt+0x21f/0x450 [ 120.701624][ T5633] task_work_run+0x150/0x240 [ 120.701663][ T5633] ? __pfx_task_work_run+0x10/0x10 [ 120.701705][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.701761][ T5633] exit_to_user_mode_loop+0x1d8/0x6f0 [ 120.701806][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.701850][ T5633] ? rcu_is_watching+0x12/0xc0 [ 120.701910][ T5633] do_syscall_64+0x666/0x870 [ 120.701964][ T5633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.702002][ T5633] RIP: 0033:0x7f613759f257 [ 120.702032][ T5633] Code: a2 c7 05 9c 44 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 120.702067][ T5633] RSP: 002b:00007ffd3b25f288 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 120.702101][ T5633] RAX: 0000000000000000 RBX: 00007f613763445c RCX: 00007f613759f257 [ 120.702125][ T5633] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd3b25f340 [ 120.702148][ T5633] RBP: 00007ffd3b25f340 R08: 00007ffd3b260340 R09: 00000000ffffffff [ 120.702172][ T5633] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd3b2603d0 [ 120.702201][ T5633] R13: 00007f613763445c R14: 000000000001d665 R15: 00007ffd3b260410 [ 120.702254][ T5633] [ 120.706462][ T988] ipheth 6-1:0.196: ipheth_enable_ncm: usb_control_msg: -71 [ 120.739934][ T6133] ipvlan2: entered promiscuous mode [ 120.777465][ T5633] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 120.780476][ T6133] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 121.268197][ T6122] loop0: detected capacity change from 0 to 32768 [ 121.282962][ T6133] batman_adv: batadv0: Adding interface: ipvlan2 [ 121.358984][ T6133] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.385232][ T6133] batman_adv: batadv0: Interface activated: ipvlan2 [ 121.480048][ T6139] loop3: detected capacity change from 0 to 2048 [ 121.578981][ T6137] netlink: 20 bytes leftover after parsing attributes in process `syz.2.97'. [ 121.588126][ T988] ipheth 6-1:0.196: Apple iPhone USB Ethernet device attached [ 121.659704][ T6139] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.692272][ T6139] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.697582][ T988] usb 6-1: USB disconnect, device number 2 [ 121.713892][ T6147] loop1: detected capacity change from 0 to 256 [ 121.969709][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.986172][ T988] ipheth 6-1:0.196: Apple iPhone USB Ethernet now disconnected [ 122.040419][ T5769] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 122.054211][ T6152] loop2: detected capacity change from 0 to 128 [ 122.230048][ T5769] usb 2-1: config 0 interface 0 has no altsetting 0 [ 122.247870][ T6152] syz.2.101: attempt to access beyond end of device [ 122.247870][ T6152] loop2: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 122.275436][ T5769] usb 2-1: New USB device found, idVendor=056a, idProduct=00de, bcdDevice= 0.00 [ 122.341154][ T5769] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.362542][ T6152] syz.2.101: attempt to access beyond end of device [ 122.362542][ T6152] loop2: rw=8390657, sector=138, nr_sectors = 2 limit=128 [ 122.400191][ T5769] usb 2-1: config 0 descriptor?? [ 122.488345][ T6152] buffer_io_error: 542 callbacks suppressed [ 122.488368][ T6152] Buffer I/O error on dev loop2, logical block 69, lost async page write [ 122.572069][ T6157] syz.2.101: attempt to access beyond end of device [ 122.572069][ T6157] loop2: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 122.598974][ T5871] libceph: connect (1)[c::]:6789 error -101 [ 122.598999][ T5617] libceph: connect (1)[c::]:6789 error -101 [ 122.626347][ T5871] libceph: mon0 (1)[c::]:6789 connect error [ 122.650238][ T5871] libceph: connect (1)[c::]:6789 error -101 [ 122.667946][ T5871] libceph: mon0 (1)[c::]:6789 connect error [ 122.686768][ T5617] libceph: mon0 (1)[c::]:6789 connect error [ 122.852830][ T5871] xhci_hcd 0000:00:01.0: init 0000:00:01.0 fail, -16 [ 122.878267][ T6169] xhci_hcd 0000:00:01.0: probe with driver xhci_hcd failed with error -16 [ 122.911634][ T5769] wacom 0003:056A:00DE.0002: ignoring exceeding usage max [ 122.944982][ T5769] wacom 0003:056A:00DE.0002: ignoring exceeding usage max [ 122.952046][ T5871] libceph: connect (1)[c::]:6789 error -101 [ 122.953838][ T5769] wacom 0003:056A:00DE.0002: unknown main item tag 0x5 [ 122.966417][ T5769] wacom 0003:056A:00DE.0002: collection stack underflow [ 122.981488][ T5617] libceph: connect (1)[c::]:6789 error -101 [ 122.988177][ T5871] libceph: mon0 (1)[c::]:6789 connect error [ 123.001804][ T5769] wacom 0003:056A:00DE.0002: item 0 1 0 12 parsing failed [ 123.009999][ T5617] libceph: mon0 (1)[c::]:6789 connect error [ 123.016158][ T6161] ceph: No mds server is up or the cluster is laggy [ 123.031908][ T5769] wacom 0003:056A:00DE.0002: parse failed [ 123.038520][ T6154] ceph: No mds server is up or the cluster is laggy [ 123.059759][ T5769] wacom 0003:056A:00DE.0002: probe with driver wacom failed with error -22 [ 123.121505][ T5769] usb 2-1: USB disconnect, device number 2 [ 123.275729][ T50] Bluetooth: hci1: unexpected cc 0x203e length: 2 > 1 [ 123.401577][ T29] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 123.582382][ T29] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 123.613543][ T29] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 123.636890][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.651609][ T29] usb 3-1: Product: syz [ 123.655806][ T29] usb 3-1: Manufacturer: syz [ 123.662195][ T29] usb 3-1: SerialNumber: syz [ 123.738069][ T6188] loop4: detected capacity change from 0 to 8 [ 123.804359][ T6188] SQUASHFS error: zlib decompression failed, data probably corrupt [ 123.836492][ T6188] SQUASHFS error: Failed to read block 0x9b: -5 [ 123.846309][ T6188] SQUASHFS error: Unable to read metadata cache entry [99] [ 123.853936][ T6188] SQUASHFS error: Unable to read inode 0x127 [ 124.132905][ T29] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 124.189006][ T6194] loop1: detected capacity change from 0 to 2048 [ 124.319470][ T6194] loop1: p1 < > p4 [ 124.319470][ T6194] p4: [ 124.350126][ T6194] loop1: p4 size 722688 extends beyond EOD, truncated [ 124.606995][ T6204] netlink: 'syz.4.117': attribute type 18 has an invalid length. [ 124.631987][ T6204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.117'. [ 124.727845][ T6204] netlink: 'syz.4.117': attribute type 18 has an invalid length. [ 124.746904][ T6204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.117'. [ 124.769772][ T34] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.782889][ T34] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.792289][ T1008] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.806544][ T6204] Zero length message leads to an empty skb [ 124.863899][ T1008] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.301391][ T6221] loop3: detected capacity change from 0 to 4096 [ 125.330571][ T6221] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 125.708648][ T6228] loop4: detected capacity change from 0 to 2048 [ 125.797352][ T6228] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.889390][ T6228] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.197653][ T6238] binder: 6237:6238 ioctl 5000943f 0 returned -22 [ 126.218737][ T5633] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.261900][ T5795] usb 3-1: USB disconnect, device number 4 [ 126.315882][ T5795] usblp0: removed [ 126.563712][ T6246] loop1: detected capacity change from 0 to 512 [ 126.592372][ T6245] loop4: detected capacity change from 0 to 512 [ 126.640816][ T6246] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.641616][ T6245] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 126.739492][ T6245] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 126.770722][ T6252] netlink: 'syz.3.134': attribute type 18 has an invalid length. [ 126.797813][ T6252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.134'. [ 126.819818][ T30] audit: type=1800 audit(1785448432.708:8): pid=6246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.132" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 126.867857][ T6245] EXT4-fs (loop4): 1 truncate cleaned up [ 126.885421][ T6246] EXT4-fs error (device loop1): ext4_validate_block_bitmap:423: comm syz.1.132: bg 0: bad block bitmap checksum [ 126.902993][ T6245] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.955064][ T6252] netlink: 'syz.3.134': attribute type 18 has an invalid length. [ 126.971474][ T6252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.134'. [ 126.989905][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.026412][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.073604][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.083030][ T6258] capability: warning: `syz.2.136' uses deprecated v2 capabilities in a way that may be insecure [ 127.093514][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.280853][ T5637] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.308588][ T50] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 127.318309][ T50] Bluetooth: hci1: Injecting HCI hardware error event [ 127.327049][ T5639] Bluetooth: hci1: hardware error 0x00 [ 127.828150][ T6270] warning: `syz.3.139' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 127.862512][ T6270] netlink: 28 bytes leftover after parsing attributes in process `syz.3.139'. [ 128.761474][ T5769] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 128.805407][ T6271] Illegal XDP return value 4294967262 on prog (id 6) dev syz_tun, expect packet loss! [ 128.937086][ T5769] usb 2-1: Using ep0 maxpacket: 16 [ 128.965406][ T5769] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.014253][ T5769] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.047704][ T5769] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 129.093972][ T5769] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 129.117680][ T5769] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.156645][ T5769] usb 2-1: config 0 descriptor?? [ 129.218102][ T5633] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.512614][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.543466][ T5639] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 129.576211][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.719320][ T5769] usbhid 2-1:0.0: can't add hid device: -71 [ 129.746936][ T5769] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 129.811881][ T5769] usb 2-1: USB disconnect, device number 3 [ 129.989642][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.028491][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.237109][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.282813][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.504577][ T6280] loop5: detected capacity change from 0 to 32768 [ 130.525362][ T6297] netlink: 'syz.0.152': attribute type 18 has an invalid length. [ 130.533579][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.553500][ T30] audit: type=1800 audit(1785448436.448:9): pid=6296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.154" name="idVendor" dev="configfs" ino=10820 res=0 errno=0 [ 130.572115][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.587733][ T6280] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.145 (6280) [ 130.597314][ T6297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.152'. [ 130.648959][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 130.661777][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 130.669964][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 130.678344][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 130.686640][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 130.801120][ T6280] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 130.810153][ T6305] loop3: detected capacity change from 0 to 128 [ 130.812701][ T6280] BTRFS info (device loop5): using sha256 checksum algorithm [ 130.833063][ T6280] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 130.895230][ T34] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.908340][ T6297] netlink: 'syz.0.152': attribute type 18 has an invalid length. [ 130.941679][ T34] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.953409][ T34] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.963090][ T34] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.974259][ T6297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.152'. [ 130.984080][ T6305] loop3: detected capacity change from 128 to 0 [ 131.028331][ T6280] BTRFS info (device loop5): rebuilding free space tree [ 131.050599][ T5795] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 131.063659][ T6319] loop1: detected capacity change from 0 to 1024 [ 131.083903][ T6321] FAT-fs (loop3): Directory bread(block 23) failed [ 131.172219][ T6321] FAT-fs (loop3): Directory bread(block 24) failed [ 131.174773][ T6280] BTRFS info (device loop5): disabling free space tree [ 131.205835][ T6321] FAT-fs (loop3): Directory bread(block 23) failed [ 131.208060][ T30] audit: type=1800 audit(1785448437.098:10): pid=6319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.157" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 131.232729][ T5795] usb 3-1: Using ep0 maxpacket: 8 [ 131.237885][ T6321] FAT-fs (loop3): Directory bread(block 24) failed [ 131.247237][ T6321] FAT-fs (loop3): Directory bread(block 23) failed [ 131.255561][ T5795] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 131.256705][ T6280] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 131.292899][ T6280] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 131.321367][ T6321] FAT-fs (loop3): Directory bread(block 24) failed [ 131.334335][ T5795] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 131.357206][ T6321] FAT-fs (loop3): FAT read failed (blocknr 5) [ 131.381079][ T6280] BTRFS info (device loop5): enabling ssd optimizations [ 131.388169][ T6280] BTRFS info (device loop5): enabling disk space caching [ 131.416660][ T5795] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.425116][ T6280] BTRFS info (device loop5): force clearing of disk cache [ 131.471741][ T6280] BTRFS info (device loop5): enabling auto defrag [ 131.473754][ T5795] usb 3-1: config 0 descriptor?? [ 131.518427][ T6280] BTRFS info (device loop5): max_inline set to 0 [ 131.576660][ T5631] FAT-fs (loop3): Directory bread(block 23) failed [ 131.603481][ T5617] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 131.616489][ T5631] FAT-fs (loop3): Directory bread(block 24) failed [ 131.736755][ T59] bridge_slave_1: left allmulticast mode [ 131.769701][ T59] bridge_slave_1: left promiscuous mode [ 131.772691][ T3358] FAT-fs (loop3): bread failed in fat_clusters_flush [ 131.786021][ T5795] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 131.801198][ T5617] usb 1-1: Using ep0 maxpacket: 32 [ 131.813669][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.829865][ T5631] FAT-fs (loop3): unable to read boot sector to mark fs as dirty [ 131.844941][ T5617] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 131.877057][ T5617] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.940232][ T59] bridge_slave_0: left allmulticast mode [ 131.955252][ T59] bridge_slave_0: left promiscuous mode [ 131.968053][ T5617] usb 1-1: config 0 descriptor?? [ 131.968260][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.113831][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.121411][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.201545][ T5617] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 132.246621][ T5617] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 132.267256][ T5617] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 132.287906][ T5617] usb 1-1: media controller created [ 132.329516][ T5630] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 132.364816][ T5617] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 132.380962][ T5782] usb 3-1: USB disconnect, device number 5 [ 132.746504][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.769801][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.785099][ T59] bond0 (unregistering): Released all slaves [ 132.830789][ T5639] Bluetooth: hci3: command tx timeout [ 132.840611][ T5769] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 133.021849][ T5769] usb 6-1: Using ep0 maxpacket: 32 [ 133.051979][ T5769] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.105434][ T5769] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.131654][ T5769] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 133.158752][ T5769] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.190680][ T5769] usb 6-1: config 0 descriptor?? [ 133.214944][ T5769] hub 6-1:0.0: USB hub found [ 133.370458][ T5617] stb0899_attach: Driver disabled by Kconfig [ 133.376563][ T5617] az6027: no front-end attached [ 133.376563][ T5617] [ 133.432135][ T5617] az6027: usb out operation failed. (-71) [ 133.444895][ T5769] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 133.461337][ T5617] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 133.537103][ T5617] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 133.627594][ T5617] dvb-usb: schedule remote query interval to 400 msecs. [ 133.661023][ T5617] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 133.750707][ T5617] usb 1-1: USB disconnect, device number 4 [ 133.860227][ T5769] hid-generic 0003:046D:C31C.0003: unknown main item tag 0x0 [ 134.032732][ T988] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 134.058543][ T59] hsr_slave_0: left promiscuous mode [ 134.071045][ T5769] hid-generic 0003:046D:C31C.0003: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.5-1/input0 [ 134.092895][ T59] hsr_slave_1: left promiscuous mode [ 134.113191][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.152354][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.160550][ T5617] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 134.196065][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.213580][ T988] usb 2-1: Using ep0 maxpacket: 8 [ 134.227818][ T988] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 134.240915][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.261558][ T988] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 134.308088][ T988] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 134.347902][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 134.351869][ T988] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.374125][ T59] veth1_macvtap: left promiscuous mode [ 134.374367][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 134.381669][ T59] veth0_macvtap: left promiscuous mode [ 134.396502][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 134.408473][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 134.409685][ T988] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 134.432389][ T59] veth1_vlan: left promiscuous mode [ 134.432467][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 134.448307][ T59] veth0_vlan: left promiscuous mode [ 134.457133][ T5617] usb 6-1: USB disconnect, device number 3 [ 134.493034][ T988] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.729716][ T988] usb 2-1: GET_CAPABILITIES returned 0 [ 134.737443][ T988] usbtmc 2-1:16.0: can't read capabilities [ 134.900615][ T5639] Bluetooth: hci3: command tx timeout [ 134.945765][ T5769] usb 2-1: USB disconnect, device number 4 [ 134.958894][ T59] team0 (unregistering): Port device team_slave_1 removed [ 135.007050][ T59] team0 (unregistering): Port device team_slave_0 removed [ 135.487653][ T5284] 8021q: adding VLAN 0 to HW filter on device eth1 [ 136.589792][ T5639] Bluetooth: hci1: command tx timeout [ 136.676730][ T6408] loop1: detected capacity change from 0 to 2048 [ 136.714987][ T6404] gadgetfs: bound to dummy_udc driver [ 136.767294][ T6408] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.963135][ T5795] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 136.978785][ T6408] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 137.000803][ T5639] Bluetooth: hci3: command tx timeout [ 137.002029][ C0] gadgetfs: connected [ 137.011425][ T5795] gadgetfs: disconnected [ 137.079276][ T6408] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 137.141272][ T6408] EXT4-fs (loop1): This should not happen!! Data will be lost [ 137.141272][ T6408] [ 137.174849][ C0] gadgetfs: connected [ 137.185140][ T5795] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 137.198028][ T6408] EXT4-fs (loop1): Total free blocks count 0 [ 137.222882][ T5795] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 137.224178][ T6408] EXT4-fs (loop1): Free/Dirty block details [ 137.257523][ T5795] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.257934][ T6408] EXT4-fs (loop1): free_blocks=4096 [ 137.278799][ T3358] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.321222][ T3358] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.336700][ T6408] EXT4-fs (loop1): dirty_blocks=32 [ 137.347674][ C0] gadgetfs: configuration #1 [ 137.424516][ T6402] gadgetfs: suspended from state 3 [ 137.439745][ T6408] EXT4-fs (loop1): Block reservation details [ 137.459220][ T6402] gadgetfs: disconnected [ 137.469930][ T5795] usb 2-1: USB disconnect, device number 5 [ 137.482694][ T6299] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.525194][ T6299] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.570469][ T6426] loop2: detected capacity change from 0 to 32768 [ 137.578751][ T6426] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.178 (6426) [ 137.586587][ T6299] bridge_slave_0: entered allmulticast mode [ 137.613598][ T6408] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 137.644126][ T6426] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 137.657020][ T6426] BTRFS info (device loop2): using sha256 checksum algorithm [ 137.681957][ T6299] bridge_slave_0: entered promiscuous mode [ 137.719233][ T6419] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 137.779876][ T6299] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.810935][ T6299] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.826063][ T6426] BTRFS info (device loop2): enabling ssd optimizations [ 137.833111][ T6426] BTRFS info (device loop2): turning on async discard [ 137.839933][ T6426] BTRFS info (device loop2): enabling free space tree [ 137.885675][ T6299] bridge_slave_1: entered allmulticast mode [ 137.974861][ T6299] bridge_slave_1: entered promiscuous mode [ 138.087288][ T5637] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #16: comm syz-executor: data will be lost [ 138.132794][ T5632] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 138.167479][ T6450] netlink: 44 bytes leftover after parsing attributes in process `syz.0.179'. [ 138.288941][ T3358] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.336454][ T3358] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.516278][ T6462] netlink: 'syz.5.184': attribute type 1 has an invalid length. [ 138.642374][ T5284] 8021q: adding VLAN 0 to HW filter on device eth2 [ 138.660815][ T5639] Bluetooth: hci1: command tx timeout [ 138.741408][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 138.769200][ T6467] bond1 (unregistering): Released all slaves [ 138.892473][ T6299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.914962][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.960554][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 139.014267][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 139.047764][ T3358] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.060541][ T5639] Bluetooth: hci3: command tx timeout [ 139.083455][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 139.100418][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.108488][ T3358] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.108504][ T9] usb 1-1: Product: syz [ 139.108536][ T9] usb 1-1: Manufacturer: syz [ 139.136345][ T9] usb 1-1: SerialNumber: syz [ 139.181384][ T9] cdc_mbim 1-1:1.0: skipping garbage [ 139.184337][ T6299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.199190][ T9] cdc_mbim 1-1:1.0: MBIM functional descriptor missing [ 139.219198][ T9] cdc_mbim 1-1:1.0: bind() failure [ 139.384528][ T6299] team0: Port device team_slave_0 added [ 139.407685][ T6299] team0: Port device team_slave_1 added [ 139.412444][ T9] usb 1-1: USB disconnect, device number 5 [ 139.497523][ T3358] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.513212][ T3358] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.595372][ T6476] overlayfs: statfs failed on './file0' [ 139.665903][ T6299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.681949][ T6299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.740316][ T6299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.768974][ T6299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.799663][ T6299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.849535][ T6299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.069415][ T6299] hsr_slave_0: entered promiscuous mode [ 140.088016][ T6299] hsr_slave_1: entered promiscuous mode [ 140.111377][ T6299] debugfs: 'hsr0' already exists in 'hsr' [ 140.124298][ T6299] Cannot create hsr debugfs directory [ 140.274431][ T6491] Mass Storage Function, version: 2009/09/11 [ 140.291303][ T6491] LUN: removable file: (no medium) [ 140.313828][ T6491] LUN: removable file: (no medium) [ 140.840571][ T5639] Bluetooth: hci1: command tx timeout [ 141.440735][ T6507] netlink: 28 bytes leftover after parsing attributes in process `syz.5.195'. [ 142.289279][ T6510] netlink: 28 bytes leftover after parsing attributes in process `syz.0.194'. [ 142.900485][ T5639] Bluetooth: hci1: command tx timeout [ 142.933045][ T3358] bridge_slave_1: left allmulticast mode [ 142.974507][ T3358] bridge_slave_1: left promiscuous mode [ 143.000543][ T3358] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.079378][ T3358] bridge_slave_0: left allmulticast mode [ 143.100532][ T3358] bridge_slave_0: left promiscuous mode [ 143.108235][ T3358] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.309073][ T6519] loop2: detected capacity change from 0 to 4096 [ 143.507516][ T6519] ntfs3(loop2): Failed to load $Extend (-22). [ 143.546300][ T6519] ntfs3(loop2): Failed to initialize $Extend. [ 144.106033][ T3358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.139944][ T3358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.154239][ T6548] netlink: 44 bytes leftover after parsing attributes in process `syz.2.204'. [ 144.178475][ T3358] bond0 (unregistering): Released all slaves [ 144.211768][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 144.322235][ T5284] 8021q: adding VLAN 0 to HW filter on device eth3 [ 144.377274][ T9] usb 2-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 144.396834][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.421666][ T9] usb 2-1: Product: syz [ 144.431461][ T9] usb 2-1: Manufacturer: syz [ 144.440839][ T9] usb 2-1: SerialNumber: syz [ 144.650401][ T801] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 144.775268][ T3358] hsr_slave_0: left promiscuous mode [ 144.781819][ T3358] hsr_slave_1: left promiscuous mode [ 144.787923][ T3358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.796143][ T3358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.801407][ T5795] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 144.812617][ T3358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.825261][ T3358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.833655][ T801] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.844900][ T3358] veth1_macvtap: left promiscuous mode [ 144.850679][ T3358] veth0_macvtap: left promiscuous mode [ 144.853315][ T801] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 144.856442][ T3358] veth1_vlan: left promiscuous mode [ 144.871227][ T3358] veth0_vlan: left promiscuous mode [ 144.881326][ T801] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 144.920155][ T801] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 144.937281][ T801] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.950577][ T801] usb 3-1: Product: syz [ 144.955066][ T801] usb 3-1: Manufacturer: syz [ 144.959755][ T801] usb 3-1: SerialNumber: syz [ 144.974374][ T801] cdc_mbim 3-1:1.0: skipping garbage [ 144.979801][ T5795] usb 1-1: Using ep0 maxpacket: 8 [ 144.987392][ T801] cdc_mbim 3-1:1.0: MBIM functional descriptor missing [ 145.009187][ T5795] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 145.022567][ T801] cdc_mbim 3-1:1.0: bind() failure [ 145.028286][ T5795] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 145.040213][ T5795] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 145.050869][ T5795] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.086284][ T5795] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 145.096796][ T5795] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.193295][ T801] usb 3-1: USB disconnect, device number 6 [ 145.325520][ T5795] usb 1-1: GET_CAPABILITIES returned 0 [ 145.346010][ T5795] usbtmc 1-1:16.0: can't read capabilities [ 145.557788][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 145.570904][ T801] usb 1-1: USB disconnect, device number 6 [ 145.673856][ T9] usb 2-1: usb_control_msg returned -71 [ 145.689759][ T9] usbtmc 2-1:1.0: can't read capabilities [ 145.755942][ T9] usb 2-1: USB disconnect, device number 6 [ 145.772878][ T3358] team0 (unregistering): Port device team_slave_1 removed [ 145.871943][ T3358] team0 (unregistering): Port device team_slave_0 removed [ 146.069037][ T6571] loop5: detected capacity change from 0 to 40427 [ 146.098214][ T6571] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x1f52010) [ 146.112676][ T6571] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 146.121131][ T6571] F2FS-fs (loop5): Image doesn't support compression [ 146.127840][ T6571] F2FS-fs (loop5): build fault injection type: 0x4 [ 146.138936][ T6571] F2FS-fs (loop5): invalid crc value [ 146.369764][ T6571] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 146.386252][ T6571] F2FS-fs (loop5): f2fs_disable_checkpoint starts, unusable: 0 [ 146.396474][ T6571] F2FS-fs (loop5): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 146.408622][ T6571] F2FS-fs (loop5): Start checkpoint disabled! [ 146.448250][ T6571] F2FS-fs (loop5): f2fs_disable_checkpoint finishes, err:0 [ 146.483594][ T6571] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 146.513862][ T6571] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 146.579869][ T6571] syz.5.207: attempt to access beyond end of device [ 146.579869][ T6571] loop5: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 146.646898][ T6571] overlayfs: Cannot mount volatile when upperdir has an unseen error. Sync upperdir fs to clear state. [ 146.847923][ T6590] netlink: 28 bytes leftover after parsing attributes in process `syz.0.208'. [ 147.393189][ T5284] 8021q: adding VLAN 0 to HW filter on device eth4 [ 147.406284][ T6592] input: syz1 as /devices/virtual/input/input7 [ 147.427921][ T6592] input: failed to attach handler leds to device input7, error: -6 [ 147.450928][ T59] kworker/u8:4: attempt to access beyond end of device [ 147.450928][ T59] loop5: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 147.552003][ T59] CPU: 1 UID: 0 PID: 59 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 147.552049][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 147.552079][ T59] Workqueue: writeback wb_workfn (flush-7:5) [ 147.552140][ T59] Call Trace: [ 147.552152][ T59] [ 147.552165][ T59] dump_stack_lvl+0x100/0x190 [ 147.552209][ T59] f2fs_stop_checkpoint+0x5e6/0xb30 [ 147.552274][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.552320][ T59] ? errseq_set+0xe3/0x150 [ 147.552376][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.552429][ T59] f2fs_write_end_bio+0xf53/0x1340 [ 147.552472][ T59] ? __pfx_f2fs_write_end_bio+0x10/0x10 [ 147.552517][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.552571][ T59] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 147.552609][ T59] bio_endio+0x778/0x8e0 [ 147.552655][ T59] submit_bio_noacct+0x64c/0x1ff0 [ 147.552725][ T59] f2fs_submit_write_bio+0x133/0x330 [ 147.552787][ T59] __submit_merged_bio+0x330/0x7b0 [ 147.552823][ T59] ? rcu_is_watching+0x12/0xc0 [ 147.552882][ T59] __submit_merged_write_cond+0x3fe/0x510 [ 147.552931][ T59] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 147.552982][ T59] ? __pfx___might_resched+0x10/0x10 [ 147.553021][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.553073][ T59] ? folio_clear_dirty_for_io+0x178/0x960 [ 147.553141][ T59] f2fs_write_cache_pages+0x20e9/0x2630 [ 147.553213][ T59] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 147.553270][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.553316][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.553360][ T59] ? find_held_lock+0x2b/0x80 [ 147.553415][ T59] ? nr_blockdev_pages+0xde/0x120 [ 147.553470][ T59] ? nr_blockdev_pages+0xde/0x120 [ 147.553523][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.553586][ T59] ? si_meminfo+0x118/0x230 [ 147.553628][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.553673][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.553781][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.553827][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.553871][ T59] ? rcu_is_watching+0x12/0xc0 [ 147.553930][ T59] f2fs_write_data_pages+0x799/0x16d0 [ 147.553976][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.554034][ T59] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 147.554106][ T59] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 147.554157][ T59] do_writepages+0x278/0x600 [ 147.554223][ T59] ? __pfx_do_writepages+0x10/0x10 [ 147.554285][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.554337][ T59] __writeback_single_inode+0x164/0x1300 [ 147.554386][ T59] ? find_held_lock+0x2b/0x80 [ 147.554444][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.554491][ T59] ? __pfx___writeback_single_inode+0x10/0x10 [ 147.554539][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.554583][ T59] ? do_raw_spin_unlock+0x145/0x1e0 [ 147.554633][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.554684][ T59] writeback_sb_inodes+0x766/0x1c50 [ 147.554755][ T59] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 147.554803][ T59] ? do_raw_spin_lock+0x128/0x260 [ 147.554853][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.554956][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.555001][ T59] ? rcu_is_watching+0x12/0xc0 [ 147.555054][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.555104][ T59] ? queue_io+0x287/0x530 [ 147.555148][ T59] wb_writeback+0x1c0/0xb50 [ 147.555195][ T59] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 147.555250][ T59] ? __pfx_wb_writeback+0x10/0x10 [ 147.555312][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.555356][ T59] ? mark_held_locks+0x40/0x70 [ 147.555396][ T59] ? _raw_spin_unlock_irq+0x23/0x50 [ 147.555440][ T59] wb_workfn+0x143/0xc80 [ 147.555493][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.555537][ T59] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 147.555579][ T59] ? __pfx_wb_workfn+0x10/0x10 [ 147.555632][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.555681][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.555729][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.555773][ T59] ? rcu_is_watching+0x12/0xc0 [ 147.555833][ T59] process_one_work+0xa23/0x1940 [ 147.555891][ T59] ? __pfx_process_one_work+0x10/0x10 [ 147.555925][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.555985][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.556037][ T59] worker_thread+0x5ef/0xe50 [ 147.556092][ T59] ? __pfx_worker_thread+0x10/0x10 [ 147.556131][ T59] ? kthread+0x13a/0x450 [ 147.556187][ T59] ? __pfx_worker_thread+0x10/0x10 [ 147.556221][ T59] kthread+0x370/0x450 [ 147.556278][ T59] ? __pfx_kthread+0x10/0x10 [ 147.556338][ T59] ret_from_fork+0x72b/0xd50 [ 147.556390][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 147.556440][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.556484][ T59] ? __switch_to+0x800/0x10f0 [ 147.556542][ T59] ? __switch_to_asm+0x39/0x70 [ 147.556593][ T59] ? __pfx_kthread+0x10/0x10 [ 147.556654][ T59] ret_from_fork_asm+0x1a/0x30 [ 147.556730][ T59] [ 148.045072][ T59] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 148.060392][ T59] CPU: 0 UID: 0 PID: 59 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 148.060437][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 148.060460][ T59] Workqueue: writeback wb_workfn (flush-7:5) [ 148.060520][ T59] Call Trace: [ 148.060531][ T59] [ 148.060544][ T59] dump_stack_lvl+0x100/0x190 [ 148.060594][ T59] f2fs_stop_checkpoint+0x5e6/0xb30 [ 148.060655][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.060699][ T59] ? errseq_set+0xe3/0x150 [ 148.060754][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.060805][ T59] f2fs_write_end_bio+0xf53/0x1340 [ 148.060848][ T59] ? __pfx_f2fs_write_end_bio+0x10/0x10 [ 148.060892][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.060945][ T59] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 148.060983][ T59] bio_endio+0x778/0x8e0 [ 148.061029][ T59] submit_bio_noacct+0x64c/0x1ff0 [ 148.061097][ T59] f2fs_submit_write_bio+0x133/0x330 [ 148.061162][ T59] __submit_merged_bio+0x330/0x7b0 [ 148.061198][ T59] ? rcu_is_watching+0x12/0xc0 [ 148.061257][ T59] __submit_merged_write_cond+0x3fe/0x510 [ 148.061306][ T59] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 148.061356][ T59] ? __pfx___might_resched+0x10/0x10 [ 148.061395][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.061439][ T59] ? folio_clear_dirty_for_io+0x178/0x960 [ 148.061505][ T59] f2fs_write_cache_pages+0x20e9/0x2630 [ 148.061581][ T59] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 148.061638][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.061682][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.061725][ T59] ? find_held_lock+0x2b/0x80 [ 148.061778][ T59] ? nr_blockdev_pages+0xde/0x120 [ 148.061832][ T59] ? nr_blockdev_pages+0xde/0x120 [ 148.061884][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.061948][ T59] ? si_meminfo+0x118/0x230 [ 148.061988][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.062034][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.062141][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.062186][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.062230][ T59] ? rcu_is_watching+0x12/0xc0 [ 148.062288][ T59] f2fs_write_data_pages+0x799/0x16d0 [ 148.062333][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.062391][ T59] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 148.062455][ T59] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 148.062505][ T59] do_writepages+0x278/0x600 [ 148.062575][ T59] ? __pfx_do_writepages+0x10/0x10 [ 148.062636][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.062687][ T59] __writeback_single_inode+0x164/0x1300 [ 148.062733][ T59] ? find_held_lock+0x2b/0x80 [ 148.062789][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.062836][ T59] ? __pfx___writeback_single_inode+0x10/0x10 [ 148.062884][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.062928][ T59] ? do_raw_spin_unlock+0x145/0x1e0 [ 148.062977][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.063028][ T59] writeback_sb_inodes+0x766/0x1c50 [ 148.063099][ T59] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 148.063146][ T59] ? do_raw_spin_lock+0x128/0x260 [ 148.063196][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.063311][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.063354][ T59] ? rcu_is_watching+0x12/0xc0 [ 148.063406][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.063449][ T59] ? queue_io+0x287/0x530 [ 148.063492][ T59] wb_writeback+0x1c0/0xb50 [ 148.063537][ T59] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 148.063598][ T59] ? __pfx_wb_writeback+0x10/0x10 [ 148.063659][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.063702][ T59] ? mark_held_locks+0x40/0x70 [ 148.063742][ T59] ? _raw_spin_unlock_irq+0x23/0x50 [ 148.063784][ T59] wb_workfn+0x143/0xc80 [ 148.063837][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.063881][ T59] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 148.063923][ T59] ? __pfx_wb_workfn+0x10/0x10 [ 148.063975][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.064023][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.064070][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.064114][ T59] ? rcu_is_watching+0x12/0xc0 [ 148.064174][ T59] process_one_work+0xa23/0x1940 [ 148.064231][ T59] ? __pfx_process_one_work+0x10/0x10 [ 148.064265][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.064324][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.064375][ T59] worker_thread+0x5ef/0xe50 [ 148.064423][ T59] ? __pfx_worker_thread+0x10/0x10 [ 148.064462][ T59] ? kthread+0x13a/0x450 [ 148.064516][ T59] ? __pfx_worker_thread+0x10/0x10 [ 148.064550][ T59] kthread+0x370/0x450 [ 148.064612][ T59] ? __pfx_kthread+0x10/0x10 [ 148.064672][ T59] ret_from_fork+0x72b/0xd50 [ 148.064723][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 148.064774][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.064817][ T59] ? __switch_to+0x800/0x10f0 [ 148.064874][ T59] ? __switch_to_asm+0x39/0x70 [ 148.064924][ T59] ? __pfx_kthread+0x10/0x10 [ 148.064984][ T59] ret_from_fork_asm+0x1a/0x30 [ 148.065060][ T59] [ 148.065272][ T59] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 148.288130][ T6362] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.539184][ T59] CPU: 0 UID: 0 PID: 59 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 148.539227][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 148.539250][ T59] Workqueue: writeback wb_workfn (flush-7:5) [ 148.539309][ T59] Call Trace: [ 148.539320][ T59] [ 148.539333][ T59] dump_stack_lvl+0x100/0x190 [ 148.539376][ T59] f2fs_stop_checkpoint+0x5e6/0xb30 [ 148.539435][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.539479][ T59] ? errseq_set+0xe3/0x150 [ 148.539533][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.539590][ T59] f2fs_write_end_bio+0xf53/0x1340 [ 148.539631][ T59] ? __pfx_f2fs_write_end_bio+0x10/0x10 [ 148.539675][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.539728][ T59] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 148.539765][ T59] bio_endio+0x778/0x8e0 [ 148.539811][ T59] submit_bio_noacct+0x64c/0x1ff0 [ 148.539878][ T59] f2fs_submit_write_bio+0x133/0x330 [ 148.539938][ T59] __submit_merged_bio+0x330/0x7b0 [ 148.539973][ T59] ? rcu_is_watching+0x12/0xc0 [ 148.540031][ T59] __submit_merged_write_cond+0x3fe/0x510 [ 148.540079][ T59] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 148.540129][ T59] ? __pfx___might_resched+0x10/0x10 [ 148.540167][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.540210][ T59] ? folio_clear_dirty_for_io+0x178/0x960 [ 148.540277][ T59] f2fs_write_cache_pages+0x20e9/0x2630 [ 148.540347][ T59] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 148.540403][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.540446][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.540488][ T59] ? find_held_lock+0x2b/0x80 [ 148.540541][ T59] ? nr_blockdev_pages+0xde/0x120 [ 148.540599][ T59] ? nr_blockdev_pages+0xde/0x120 [ 148.540650][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.540713][ T59] ? si_meminfo+0x118/0x230 [ 148.540753][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.540797][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.540905][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.540950][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.540992][ T59] ? rcu_is_watching+0x12/0xc0 [ 148.541051][ T59] f2fs_write_data_pages+0x799/0x16d0 [ 148.541097][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.541153][ T59] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 148.541216][ T59] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 148.541266][ T59] do_writepages+0x278/0x600 [ 148.541328][ T59] ? __pfx_do_writepages+0x10/0x10 [ 148.541388][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.541437][ T59] __writeback_single_inode+0x164/0x1300 [ 148.541485][ T59] ? find_held_lock+0x2b/0x80 [ 148.541540][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.541592][ T59] ? __pfx___writeback_single_inode+0x10/0x10 [ 148.541640][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.541682][ T59] ? do_raw_spin_unlock+0x145/0x1e0 [ 148.541731][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.541780][ T59] writeback_sb_inodes+0x766/0x1c50 [ 148.541851][ T59] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 148.541897][ T59] ? do_raw_spin_lock+0x128/0x260 [ 148.541945][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.542048][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.542090][ T59] ? rcu_is_watching+0x12/0xc0 [ 148.542140][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.542182][ T59] ? queue_io+0x287/0x530 [ 148.542225][ T59] wb_writeback+0x1c0/0xb50 [ 148.542270][ T59] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 148.542324][ T59] ? __pfx_wb_writeback+0x10/0x10 [ 148.542383][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.542426][ T59] ? mark_held_locks+0x40/0x70 [ 148.542465][ T59] ? _raw_spin_unlock_irq+0x23/0x50 [ 148.542508][ T59] wb_workfn+0x143/0xc80 [ 148.542560][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.542608][ T59] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 148.542650][ T59] ? __pfx_wb_workfn+0x10/0x10 [ 148.542701][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.542748][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.542795][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.542838][ T59] ? rcu_is_watching+0x12/0xc0 [ 148.542896][ T59] process_one_work+0xa23/0x1940 [ 148.542953][ T59] ? __pfx_process_one_work+0x10/0x10 [ 148.542986][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.543045][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.543096][ T59] worker_thread+0x5ef/0xe50 [ 148.543144][ T59] ? __pfx_worker_thread+0x10/0x10 [ 148.543182][ T59] ? kthread+0x13a/0x450 [ 148.543234][ T59] ? __pfx_worker_thread+0x10/0x10 [ 148.543278][ T59] kthread+0x370/0x450 [ 148.543332][ T59] ? __pfx_kthread+0x10/0x10 [ 148.543391][ T59] ret_from_fork+0x72b/0xd50 [ 148.543442][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 148.543491][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.543533][ T59] ? __switch_to+0x800/0x10f0 [ 148.543595][ T59] ? __switch_to_asm+0x39/0x70 [ 148.543644][ T59] ? __pfx_kthread+0x10/0x10 [ 148.543703][ T59] ret_from_fork_asm+0x1a/0x30 [ 148.543777][ T59] [ 148.550470][ T59] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 148.553666][ T6362] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.852678][ T801] loop5: lost filesystem error report for type 5 error -108 [ 148.927857][ T6362] bridge_slave_0: entered allmulticast mode [ 149.131012][ T6362] bridge_slave_0: entered promiscuous mode [ 149.171156][ T6362] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.178453][ T6362] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.209635][ T6362] bridge_slave_1: entered allmulticast mode [ 149.227166][ T6362] bridge_slave_1: entered promiscuous mode [ 150.487496][ T6362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.544191][ T6362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.555280][ T5871] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 150.700385][ T6606] loop2: detected capacity change from 0 to 131072 [ 150.713274][ T6606] F2FS-fs (loop2): invalid crc value [ 150.727844][ T5871] usb 6-1: not running at top speed; connect to a high speed hub [ 150.771076][ T5871] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 150.818470][ T5871] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 166, setting to 64 [ 150.819821][ T6606] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 150.854787][ T6606] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 150.887474][ T5871] usb 6-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 150.912605][ T6362] team0: Port device team_slave_0 added [ 150.921313][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.953961][ T6362] team0: Port device team_slave_1 added [ 150.961827][ T5871] usb 6-1: Product: syz [ 150.970466][ T5871] usb 6-1: Manufacturer: syz [ 150.988136][ T5871] usb 6-1: SerialNumber: syz [ 151.004235][ T6608] loop0: detected capacity change from 0 to 40427 [ 151.019043][ T6617] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 151.031981][ T6608] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 151.059532][ T6608] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 151.060202][ T5871] oti6858 6-1:1.0: oti6858 converter detected [ 151.108874][ T6608] F2FS-fs (loop0): invalid crc value [ 151.207468][ T5871] usb 6-1: oti6858 converter now attached to ttyUSB0 [ 151.225190][ T6362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.272293][ T6362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.350827][ T6362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.374994][ T6299] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 151.469741][ T6299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 151.516026][ T6299] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 151.589081][ T6299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 151.601027][ T6608] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 151.623571][ T6362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.642761][ T6362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.705776][ T6608] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 151.729710][ T6362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.740357][ T6608] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 151.762280][ T29] usb 6-1: USB disconnect, device number 4 [ 151.772905][ T30] audit: type=1800 audit(1785448457.668:11): pid=6608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.216" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 151.783494][ T5284] 8021q: adding VLAN 0 to HW filter on device eth5 [ 151.822492][ T6299] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 151.850098][ T6299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 151.858023][ T29] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 151.868527][ T6299] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 151.906075][ T29] oti6858 6-1:1.0: device disconnected [ 151.922276][ T6299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 151.948781][ T5634] syz-executor: attempt to access beyond end of device [ 151.948781][ T5634] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 151.968961][ T5634] CPU: 0 UID: 0 PID: 5634 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 151.969008][ T5634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 151.969029][ T5634] Call Trace: [ 151.969040][ T5634] [ 151.969053][ T5634] dump_stack_lvl+0x100/0x190 [ 151.969106][ T5634] f2fs_stop_checkpoint+0x5e6/0xb30 [ 151.969170][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.969216][ T5634] ? errseq_set+0xe3/0x150 [ 151.969273][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.969325][ T5634] f2fs_write_end_bio+0xf53/0x1340 [ 151.969368][ T5634] ? __pfx_f2fs_write_end_bio+0x10/0x10 [ 151.969413][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.969467][ T5634] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 151.969505][ T5634] bio_endio+0x778/0x8e0 [ 151.969552][ T5634] submit_bio_noacct+0x64c/0x1ff0 [ 151.969620][ T5634] f2fs_submit_write_bio+0x133/0x330 [ 151.969682][ T5634] __submit_merged_bio+0x330/0x7b0 [ 151.969718][ T5634] ? rcu_is_watching+0x12/0xc0 [ 151.969778][ T5634] __submit_merged_write_cond+0x3fe/0x510 [ 151.969827][ T5634] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 151.969877][ T5634] ? __pfx___might_resched+0x10/0x10 [ 151.969917][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.969961][ T5634] ? folio_clear_dirty_for_io+0x178/0x960 [ 151.970028][ T5634] f2fs_write_cache_pages+0x20e9/0x2630 [ 151.970104][ T5634] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 151.970157][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.970214][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.970345][ T5634] ? check_noncircular+0x97/0x160 [ 151.970386][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.970430][ T5634] ? rcu_is_watching+0x12/0xc0 [ 151.970488][ T5634] f2fs_write_data_pages+0x799/0x16d0 [ 151.970534][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.970578][ T5634] ? check_prev_add+0xfe/0xe60 [ 151.970626][ T5634] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 151.970693][ T5634] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 151.970744][ T5634] do_writepages+0x278/0x600 [ 151.970808][ T5634] ? __pfx_do_writepages+0x10/0x10 [ 151.970866][ T5634] ? do_raw_spin_unlock+0x145/0x1e0 [ 151.970915][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.970959][ T5634] ? _raw_spin_unlock+0x28/0x50 [ 151.971002][ T5634] filemap_writeback+0x22d/0x2e0 [ 151.971073][ T5634] ? __pfx_filemap_writeback+0x10/0x10 [ 151.971133][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.971229][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.971272][ T5634] ? find_held_lock+0x2b/0x80 [ 151.971326][ T5634] ? f2fs_sync_dirty_inodes+0x3a7/0x970 [ 151.971374][ T5634] ? f2fs_sync_dirty_inodes+0x3a7/0x970 [ 151.971420][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.971476][ T5634] f2fs_sync_dirty_inodes+0x46a/0x970 [ 151.971543][ T5634] block_operations+0x2a6/0xfc0 [ 151.971601][ T5634] ? __pfx_block_operations+0x10/0x10 [ 151.971702][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.971749][ T5634] ? ktime_get+0x22c/0x320 [ 151.971790][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.971834][ T5634] ? rcu_is_watching+0x12/0xc0 [ 151.971894][ T5634] f2fs_write_checkpoint+0x58b/0x53d0 [ 151.971944][ T5634] ? _raw_spin_unlock_irq+0x23/0x50 [ 151.971985][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.972027][ T5634] ? _raw_spin_unlock_irq+0x2e/0x50 [ 151.972064][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.972112][ T5634] ? __wait_for_common+0x1f3/0x4c0 [ 151.972156][ T5634] ? __pfx_schedule_timeout+0x10/0x10 [ 151.972224][ T5634] ? __pfx___wait_for_common+0x10/0x10 [ 151.972270][ T5634] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 151.972319][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.972373][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.972417][ T5634] ? rcu_is_watching+0x12/0xc0 [ 151.972469][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.972516][ T5634] ? kthread_stop+0x280/0x630 [ 151.972578][ T5634] kill_f2fs_super+0x3f1/0x4a0 [ 151.972625][ T5634] ? __pfx_kill_f2fs_super+0x10/0x10 [ 151.972693][ T5634] ? lockdep_hardirqs_on+0x78/0x100 [ 151.972738][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.972783][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.972842][ T5634] deactivate_locked_super+0xc1/0x1b0 [ 151.972889][ T5634] deactivate_super+0xe7/0x110 [ 151.972935][ T5634] cleanup_mnt+0x21f/0x450 [ 151.972991][ T5634] task_work_run+0x150/0x240 [ 151.973029][ T5634] ? __pfx_task_work_run+0x10/0x10 [ 151.973076][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.973129][ T5634] exit_to_user_mode_loop+0x1d8/0x6f0 [ 151.973173][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.973217][ T5634] ? rcu_is_watching+0x12/0xc0 [ 151.973275][ T5634] do_syscall_64+0x666/0x870 [ 151.973327][ T5634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.973364][ T5634] RIP: 0033:0x7ff30139f257 [ 151.973393][ T5634] Code: a2 c7 05 9c 44 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 151.973427][ T5634] RSP: 002b:00007ffd9dd6e978 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 151.973461][ T5634] RAX: 0000000000000000 RBX: 00007ff30143445c RCX: 00007ff30139f257 [ 151.973485][ T5634] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd9dd6ea30 [ 151.973507][ T5634] RBP: 00007ffd9dd6ea30 R08: 00007ffd9dd6fa30 R09: 00000000ffffffff [ 151.973531][ T5634] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd9dd6fac0 [ 151.973553][ T5634] R13: 00007ff30143445c R14: 00000000000250f0 R15: 00007ffd9dd6fb00 [ 151.973602][ T5634] [ 152.557792][ T6632] loop1: detected capacity change from 0 to 32768 [ 152.584365][ T6632] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.228 (6632) [ 152.621832][ T5634] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 152.647554][ T6632] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 152.657725][ T6632] BTRFS info (device loop1): using sha256 checksum algorithm [ 152.760170][ T6645] loop5: detected capacity change from 0 to 4096 [ 152.770560][ T6645] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 152.861269][ T6362] hsr_slave_0: entered promiscuous mode [ 152.873613][ T6362] hsr_slave_1: entered promiscuous mode [ 152.915563][ T6632] BTRFS info (device loop1): rebuilding free space tree [ 153.045875][ T6632] BTRFS info (device loop1): enabling ssd optimizations [ 153.052963][ T6632] BTRFS info (device loop1): using spread ssd allocation scheme [ 153.060802][ T6632] BTRFS info (device loop1): turning on async discard [ 153.067780][ T6632] BTRFS info (device loop1): enabling free space tree [ 153.074876][ T6632] BTRFS info (device loop1): force clearing of disk cache [ 153.307684][ T6632] BTRFS info (device loop1): setting compat-ro feature flag for VERITY (0x4) [ 153.832407][ T5637] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 154.243695][ T6673] loop1: detected capacity change from 0 to 512 [ 154.315083][ T6673] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 154.524144][ T6679] netlink: 28 bytes leftover after parsing attributes in process `syz.5.223'. [ 155.083173][ T6673] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.100791][ T6684] loop5: detected capacity change from 0 to 7 [ 155.164049][ T6684] Dev loop5: unable to read RDB block 7 [ 155.190978][ T6684] loop5: AHDI p1 p3 p4 [ 155.197250][ T6299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.201390][ T6673] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 155.207202][ T6684] loop5: partition table partially beyond EOD, truncated [ 155.278052][ T6676] loop2: detected capacity change from 0 to 4096 [ 155.286865][ T6684] loop5: p1 size 100663296 extends beyond EOD, truncated [ 155.349824][ T6684] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 155.402968][ T30] audit: type=1800 audit(1785448461.288:12): pid=6690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.222" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 155.419497][ T6362] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 155.442519][ T6676] ntfs3(loop2): Failed to load $Extend (-22). [ 155.476638][ T6676] ntfs3(loop2): Failed to initialize $Extend. [ 155.480858][ T6688] Dev loop5: unable to read RDB block 7 [ 155.505966][ T6688] loop5: AHDI p1 p3 p4 [ 155.515947][ T6362] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 155.533875][ T6688] loop5: partition table partially beyond EOD, truncated [ 155.563953][ T6688] loop5: p1 size 100663296 extends beyond EOD, truncated [ 155.571111][ T6299] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.589554][ T6362] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 155.609748][ T30] audit: type=1800 audit(1785448461.498:13): pid=6676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.218" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 155.645333][ T6688] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 155.658551][ T6362] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 155.679855][ T6362] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 155.692702][ T5637] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.741325][ T6362] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 155.799938][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.807160][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.823013][ T6676] ntfs3(loop2): ino=5, "/" mi_enum_attr [ 155.845294][ T6676] ntfs3(loop2): ino=5, "/" mi_enum_attr [ 155.867722][ T6676] ntfs3(loop2): ino=5, "/" mi_enum_attr [ 155.891259][ T6362] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 155.895999][ T6676] ntfs3(loop2): ino=5, "/" mi_enum_attr [ 155.905015][ T6693] loop5: detected capacity change from 0 to 4096 [ 155.955204][ T6058] udevd[6058]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 155.960364][ T6362] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 155.971533][ T5933] udevd[5933]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 156.007598][ T6693] ntfs3(loop5): Failed to load $Extend (-22). [ 156.046460][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.053673][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.074761][ T6693] ntfs3(loop5): Failed to initialize $Extend. [ 156.090301][ T6676] ntfs3(loop2): ino=5, "/" mi_enum_attr [ 156.231942][ T6693] ntfs3(loop5): ino=5, "/" mi_enum_attr [ 156.294829][ T6693] ntfs3(loop5): ino=5, "/" ntfs_readdir [ 156.308730][ T12] ntfs3(loop2): ino=5, mi_enum_attr [ 156.329553][ T12] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 156.355734][ T6299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 156.481727][ T29] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 156.528697][ T5284] 8021q: adding VLAN 0 to HW filter on device eth6 [ 156.646348][ T6059] udevd[6059]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 156.666142][ T5933] udevd[5933]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 156.689692][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.724919][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.756297][ T29] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 156.780419][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.836420][ T29] usb 1-1: config 0 descriptor?? [ 156.865486][ T6362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.951399][ T801] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 156.993987][ T6362] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.064026][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.071257][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.092697][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.099883][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.131746][ T801] usb 3-1: Using ep0 maxpacket: 8 [ 157.139752][ T801] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 157.159868][ T801] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 157.178371][ T801] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 157.209556][ T801] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 157.239557][ T801] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.286552][ T801] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 157.327504][ T801] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.339027][ T29] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 157.369028][ T29] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 157.394871][ T29] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 157.434257][ T29] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 157.473344][ T29] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 157.529745][ T29] playstation 0003:054C:0DF2.0004: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 157.597826][ T29] playstation 0003:054C:0DF2.0004: Invalid byte count transferred, expected 20 got 3 [ 157.608160][ T801] usb 3-1: usb_control_msg returned -32 [ 157.614398][ T29] playstation 0003:054C:0DF2.0004: Failed to retrieve DualSense pairing info: -22 [ 157.639542][ T801] usbtmc 3-1:16.0: can't read capabilities [ 157.649445][ T29] playstation 0003:054C:0DF2.0004: Failed to get MAC address from DualSense [ 157.689612][ T29] playstation 0003:054C:0DF2.0004: Failed to create dualsense. [ 157.788740][ T29] playstation 0003:054C:0DF2.0004: probe with driver playstation failed with error -22 [ 157.852226][ T29] usb 1-1: USB disconnect, device number 7 [ 157.939849][ T6716] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 157.970570][ T801] usb 3-1: USB disconnect, device number 7 [ 158.362752][ T6728] loop5: detected capacity change from 0 to 32768 [ 158.577554][ T6299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.622139][ T6728] JBD2: Ignoring recovery information on journal [ 158.759008][ T6728] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 159.124961][ T5284] 8021q: adding VLAN 0 to HW filter on device eth7 [ 159.501270][ T6784] netlink: 28 bytes leftover after parsing attributes in process `syz.2.235'. [ 160.313425][ T6362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.547326][ T5630] ocfs2: Unmounting device (7,5) on (node local) [ 161.159686][ T6299] veth0_vlan: entered promiscuous mode [ 161.227939][ T6299] veth1_vlan: entered promiscuous mode [ 161.388953][ T6299] veth0_macvtap: entered promiscuous mode [ 161.454464][ T6299] veth1_macvtap: entered promiscuous mode [ 161.496345][ T6823] loop5: detected capacity change from 0 to 128 [ 161.536214][ T6823] EXT4-fs (loop5): Test dummy encryption mode enabled [ 161.546880][ T6299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.595261][ T6823] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 161.657256][ T6823] System zones: 1-3, 19-19, 35-36 [ 161.661807][ T6299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.725816][ T6823] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 161.764452][ T1008] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.776073][ T6823] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.802581][ T1008] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.844827][ T1008] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.857267][ T6795] loop0: detected capacity change from 0 to 32768 [ 161.873261][ T1008] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.932019][ T6795] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 161.954769][ T6823] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 162.159677][ T6362] veth0_vlan: entered promiscuous mode [ 162.307763][ T6362] veth1_vlan: entered promiscuous mode [ 162.334295][ T6795] XFS (loop0): Ending clean mount [ 162.403195][ T5630] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 162.420009][ T6795] XFS (loop0): Quotacheck needed: Please wait. [ 162.433394][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.433423][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.511738][ T6846] trusted_key: syz.2.246 sent an empty control message without MSG_MORE. [ 162.642320][ T5284] 8021q: adding VLAN 0 to HW filter on device eth8 [ 162.738465][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.772206][ T6795] XFS (loop0): Quotacheck: Done. [ 162.782040][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.845536][ T6362] veth0_macvtap: entered promiscuous mode [ 162.866665][ T6853] netlink: 12 bytes leftover after parsing attributes in process `syz.2.249'. [ 162.912639][ T6362] veth1_macvtap: entered promiscuous mode [ 163.001706][ T29] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 163.036660][ T6362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.104459][ T6362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.159999][ T6856] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22) [ 163.174593][ T59] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.209718][ T59] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.229838][ T29] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 163.267628][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 163.316015][ T6860] loop6: detected capacity change from 0 to 256 [ 163.331888][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 163.356302][ T6860] exfat: Deprecated parameter 'utf8' [ 163.405649][ T59] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.428525][ T6860] exfat: Deprecated parameter 'namecase' [ 163.436445][ T29] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 163.472052][ T59] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.611648][ T6864] netlink: 28 bytes leftover after parsing attributes in process `syz.2.251'. [ 164.203669][ T29] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 164.230701][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.253122][ T29] usb 2-1: config 0 descriptor?? [ 164.271328][ T6850] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 164.436298][ T6860] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 164.634070][ T6873] netlink: 256 bytes leftover after parsing attributes in process `syz.2.253'. [ 164.686794][ T5634] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 164.688154][ T6873] unsupported nlmsg_type 40 [ 164.710042][ T3358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.739368][ T3358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.797732][ T29] plantronics 0003:047F:FFFF.0005: reserved main item tag 0xd [ 164.955480][ T29] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 165.064590][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.110156][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.283311][ T5769] usb 2-1: USB disconnect, device number 7 [ 165.311311][ T6881] netlink: 'syz.2.256': attribute type 1 has an invalid length. [ 165.420666][ T6875] fido_id[6875]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 165.789299][ T6887] netlink: 28 bytes leftover after parsing attributes in process `syz.6.255'. [ 166.339123][ T6881] 8021q: adding VLAN 0 to HW filter on device bond1 [ 166.358501][ T6892] loop0: detected capacity change from 0 to 128 [ 166.374150][ T6883] bond1: (slave geneve2): making interface the new active one [ 166.386480][ T6883] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 166.453269][ T6892] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 167.111138][ T6903] loop6: detected capacity change from 0 to 4096 [ 167.228867][ T6913] netlink: 44 bytes leftover after parsing attributes in process `syz.7.261'. [ 167.278234][ T6903] ntfs3(loop6): Failed to load $Extend (-22). [ 167.296103][ T6903] ntfs3(loop6): Failed to initialize $Extend. [ 167.440387][ T30] audit: type=1800 audit(1785448473.328:14): pid=6903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.257" name="file1" dev="loop6" ino=30 res=0 errno=0 [ 167.531011][ T5769] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 167.630434][ T5871] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 167.648805][ T6903] ntfs3(loop6): ino=5, "/" mi_enum_attr [ 167.686040][ T6903] ntfs3(loop6): ino=5, "/" mi_enum_attr [ 167.732212][ T5769] usb 3-1: not running at top speed; connect to a high speed hub [ 167.769011][ T5769] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 167.783302][ T6903] ntfs3(loop6): ino=5, "/" mi_enum_attr [ 167.792228][ T5769] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 167.815253][ T5871] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.824708][ T5769] usb 3-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 167.860447][ T5871] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 167.867454][ T5769] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.902050][ T6929] loop0: detected capacity change from 0 to 256 [ 167.905919][ T5769] usb 3-1: Product: syz [ 167.920622][ T5871] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 167.931478][ T5769] usb 3-1: Manufacturer: syz [ 167.969068][ T6929] exfat: Deprecated parameter 'utf8' [ 167.984959][ T5769] usb 3-1: SerialNumber: syz [ 167.999400][ T6890] ntfs3(loop6): ino=5, mi_enum_attr [ 168.001120][ T6929] exfat: Deprecated parameter 'namecase' [ 168.027071][ T5871] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 168.052294][ T5871] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.053964][ T6890] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 168.076502][ T5871] usb 8-1: Product: syz [ 168.076621][ T5769] oti6858 3-1:1.0: oti6858 converter detected [ 168.080804][ T5871] usb 8-1: Manufacturer: syz [ 168.126009][ T6929] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 168.139337][ T5871] usb 8-1: SerialNumber: syz [ 168.148156][ T5769] usb 3-1: oti6858 converter now attached to ttyUSB0 [ 168.184893][ T5871] cdc_mbim 8-1:1.0: skipping garbage [ 168.216384][ T5871] cdc_mbim 8-1:1.0: skipping garbage [ 168.241768][ T5871] usb 8-1: selecting invalid altsetting 1 [ 168.360635][ T6915] oti6858 ttyUSB0: oti6858_open(): usb_submit_urb() failed with error -90 [ 168.362676][ T5754] usb 3-1: USB disconnect, device number 8 [ 168.392358][ T5871] cdc_mbim 8-1:1.0: bind() failure [ 168.492572][ T5871] usb 8-1: USB disconnect, device number 2 [ 168.516957][ T5754] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 168.557289][ T5754] oti6858 3-1:1.0: device disconnected [ 168.800545][ T5795] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 168.990620][ T5795] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 169.123066][ T6944] netlink: 28 bytes leftover after parsing attributes in process `syz.0.268'. [ 169.726217][ T5795] usb 7-1: config 0 has no interface number 0 [ 169.740350][ T5795] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 169.901622][ T5795] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 169.917244][ T5795] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 169.938963][ T5795] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 169.970320][ T5795] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 170.025033][ T5795] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 170.086343][ T5795] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.131517][ T5795] usb 7-1: config 0 descriptor?? [ 170.170785][ T6938] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 170.229364][ T5795] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 170.490787][ T5795] usb 7-1: USB disconnect, device number 2 [ 170.491963][ C1] ldusb 7-1:0.55: usb_submit_urb failed (-19) [ 170.510644][ T5795] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 170.660226][ T6962] netlink: 28 bytes leftover after parsing attributes in process `syz.5.273'. [ 171.542914][ T5795] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 171.712434][ T5795] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.742031][ T5795] usb 1-1: config 0 has no interfaces? [ 171.765028][ T5795] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 171.788344][ T5795] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.819699][ T5795] usb 1-1: config 0 descriptor?? [ 171.824824][ T801] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 171.968568][ T6952] loop7: detected capacity change from 0 to 32768 [ 172.003812][ T801] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.056713][ T801] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 172.107395][ T801] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 172.125947][ T6955] loop2: detected capacity change from 0 to 32768 [ 172.146045][ T801] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.185182][ T801] usb 6-1: Product: syz [ 172.206313][ T801] usb 6-1: Manufacturer: syz [ 172.211207][ T801] usb 6-1: SerialNumber: syz [ 172.214135][ T6955] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 172.341863][ T6955] XFS (loop2): Ending clean mount [ 172.424169][ T30] audit: type=1800 audit(1785448478.318:15): pid=6955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.271" name="file1" dev="loop2" ino=6150 res=0 errno=0 [ 172.546544][ T5769] usb 1-1: USB disconnect, device number 8 [ 172.729693][ T6955] XFS (loop2): User initiated shutdown received. [ 172.759983][ T6955] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x139/0x1a0 (fs/xfs/xfs_fsops.c:467). Shutting down filesystem. [ 172.839217][ T6955] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 172.901467][ T6968] loop5: detected capacity change from 0 to 32768 [ 172.910178][ T6968] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.275 (6968) [ 172.931437][ T6968] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 172.941615][ T6968] BTRFS info (device loop5): using sha256 checksum algorithm [ 173.017485][ T6968] BTRFS info (device loop5): rebuilding free space tree [ 173.062490][ T5782] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 173.084935][ T6968] BTRFS info (device loop5): setting nodatasum [ 173.091175][ T6968] BTRFS info (device loop5): setting nodatacow [ 173.097339][ T6968] BTRFS info (device loop5): turning off barriers [ 173.103862][ T6968] BTRFS info (device loop5): turning on sync discard [ 173.110600][ T6968] BTRFS info (device loop5): enabling free space tree [ 173.117378][ T6968] BTRFS info (device loop5): force clearing of disk cache [ 173.212828][ T5632] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 173.241398][ T5769] usb 6-1: USB disconnect, device number 5 [ 173.318558][ T5782] usb 7-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 173.375447][ T5782] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.477154][ T5782] emi26 - firmware loader 7-1:1.0: emi26_probe start [ 173.542697][ T7016] loop0: detected capacity change from 0 to 2048 [ 173.606859][ T5782] usb 7-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 173.645191][ T7019] netlink: 44 bytes leftover after parsing attributes in process `syz.7.284'. [ 173.661331][ T5782] usb 7-1: Falling back to sysfs fallback for: emi26/loader.fw [ 173.837396][ T7016] NILFS (loop0): invalid segment: Magic number mismatch [ 173.882937][ T7016] NILFS (loop0): trying rollback from an earlier position [ 174.003836][ T5795] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 174.013477][ T7016] NILFS (loop0): recovery complete [ 174.045385][ T7024] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 174.160163][ T5630] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 174.205239][ T5795] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.244333][ T5795] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 174.254036][ T7027] loop2: detected capacity change from 0 to 64 [ 174.262561][ T5795] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 174.284380][ T5795] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 174.318943][ T5795] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.374974][ T5795] usb 8-1: Product: syz [ 174.414987][ T5795] usb 8-1: Manufacturer: syz [ 174.442335][ T5795] usb 8-1: SerialNumber: syz [ 174.499465][ T5795] cdc_mbim 8-1:1.0: skipping garbage [ 174.537513][ T5795] cdc_mbim 8-1:1.0: skipping garbage [ 174.576941][ T5795] usb 8-1: selecting invalid altsetting 1 [ 174.655158][ T7031] loop6: detected capacity change from 0 to 512 [ 174.673493][ T5795] cdc_mbim 8-1:1.0: bind() failure [ 174.783992][ T5795] usb 8-1: USB disconnect, device number 3 [ 174.793030][ T7031] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.100564][ T30] audit: type=1800 audit(1785448480.988:16): pid=7042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.286" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 175.196640][ T7042] EXT4-fs error (device loop6): ext4_validate_block_bitmap:423: comm syz.6.286: bg 0: bad block bitmap checksum [ 175.214267][ T7044] evm: overlay not supported [ 175.324083][ T7047] netlink: 28 bytes leftover after parsing attributes in process `syz.5.285'. [ 176.299023][ T6299] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.563513][ T7052] loop7: detected capacity change from 0 to 32768 [ 176.589116][ T7052] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 176.598010][ T7052] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 176.638614][ T7063] binder: 7055:7063 ioctl c0306201 200000000000 returned -14 [ 176.664769][ T7052] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 1ms [ 176.679826][ T5769] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 176.703879][ T7058] loop0: detected capacity change from 0 to 256 [ 176.721330][ T5769] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 176.729184][ T7058] exfat: Deprecated parameter 'utf8' [ 176.747678][ T7058] exfat: Deprecated parameter 'namecase' [ 176.801714][ T7058] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 177.242220][ T5769] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 520ms [ 177.256841][ T5769] gfs2: fsid=syz:syz.0: jid=0: Done [ 177.263209][ T7052] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 177.494593][ T7086] netlink: 'syz.0.299': attribute type 1 has an invalid length. [ 177.673715][ T7086] 8021q: adding VLAN 0 to HW filter on device bond1 [ 177.917324][ T30] audit: type=1804 audit(1785448483.808:17): pid=7052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.290" name="/newroot/5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop7" ino=9378 res=1 errno=0 [ 178.336663][ T7106] netlink: 28 bytes leftover after parsing attributes in process `syz.6.303'. [ 178.364512][ T1983] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 178.958521][ T1983] usb 3-1: unable to get BOS descriptor or descriptor too short [ 179.005371][ T1983] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 179.099951][ T1983] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 179.169007][ T1983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.242189][ T1983] usb 3-1: Product: syz [ 179.279939][ T1983] usb 3-1: Manufacturer: syz [ 179.314151][ T1983] usb 3-1: SerialNumber: syz [ 179.682008][ T1983] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 179.761226][ T7126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.814522][ T1983] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 179.845080][ T1983] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 180.065940][ T7131] loop5: detected capacity change from 0 to 256 [ 180.087660][ T7131] exfat: Deprecated parameter 'utf8' [ 180.113260][ T7131] exfat: Deprecated parameter 'namecase' [ 180.194398][ T7131] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 180.216706][ T1983] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 180.254359][ T1983] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 180.428302][ T1983] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 180.562219][ T7145] loop5: detected capacity change from 0 to 512 [ 180.590791][ T7147] netlink: 'syz.1.326': attribute type 1 has an invalid length. [ 180.629514][ T7145] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 180.789180][ T7145] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.854789][ T7145] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 180.888531][ T7147] 8021q: adding VLAN 0 to HW filter on device bond1 [ 180.911063][ T1983] usb 3-1: USB disconnect, device number 9 [ 181.018392][ T7155] bond1: (slave geneve2): making interface the new active one [ 181.051193][ T30] audit: type=1800 audit(1785448486.938:18): pid=7145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.314" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 181.077893][ T7155] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 181.305049][ T5899] udevd[5899]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 181.419416][ T5630] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.027929][ T7181] netlink: 28 bytes leftover after parsing attributes in process `syz.1.321'. [ 183.038922][ T801] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 183.469374][ T7182] netlink: 28 bytes leftover after parsing attributes in process `syz.5.320'. [ 183.812081][ T801] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 183.850667][ T5871] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 183.869637][ T801] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.888236][ T801] usb 8-1: config 0 has no interfaces? [ 183.905802][ T801] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 183.962843][ T801] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.992562][ T7195] netlink: 9 bytes leftover after parsing attributes in process `syz.6.328'. [ 184.011194][ T7193] loop5: detected capacity change from 0 to 256 [ 184.012537][ T801] usb 8-1: config 0 descriptor?? [ 184.037866][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.043583][ T7193] exfat: Deprecated parameter 'utf8' [ 184.066545][ T7197] netlink: 5 bytes leftover after parsing attributes in process `syz.6.328'. [ 184.078715][ T7195] gretap0: entered promiscuous mode [ 184.094981][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.108123][ T7193] exfat: Deprecated parameter 'namecase' [ 184.154137][ T5871] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 184.154751][ T7193] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 184.188259][ T7197] 0ªî{X¹¦: renamed from gretap0 [ 184.199732][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.250069][ T7197] 0ªî{X¹¦: left promiscuous mode [ 184.260137][ T5871] usb 1-1: config 0 descriptor?? [ 184.289519][ T7197] 0ªî{X¹¦: entered allmulticast mode [ 184.336100][ T7197] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 184.378275][ T801] usb 8-1: USB disconnect, device number 4 [ 184.625739][ T7206] netlink: 12 bytes leftover after parsing attributes in process `syz.5.329'. [ 185.011592][ T7194] loop1: detected capacity change from 0 to 32768 [ 185.088111][ T7194] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 185.233546][ T7194] XFS (loop1): Ending clean mount [ 185.551331][ T5871] uclogic 0003:256C:006D.0006: v1 frame probing failed: -71 [ 185.576826][ T5871] uclogic 0003:256C:006D.0006: failed probing parameters: -71 [ 185.607428][ T5871] uclogic 0003:256C:006D.0006: probe with driver uclogic failed with error -71 [ 185.642263][ T30] audit: type=1800 audit(1785448491.538:19): pid=7194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.325" name="file1" dev="loop1" ino=4426 res=0 errno=0 [ 185.662151][ T5871] usb 1-1: USB disconnect, device number 9 [ 185.825875][ T5637] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 186.149369][ T7238] netlink: 'syz.6.335': attribute type 1 has an invalid length. [ 188.228341][ T7266] netlink: 28 bytes leftover after parsing attributes in process `syz.7.340'. [ 188.907743][ T7269] loop2: detected capacity change from 0 to 256 [ 188.938074][ T7269] exfat: Deprecated parameter 'utf8' [ 188.970895][ T7269] exfat: Deprecated parameter 'namecase' [ 189.117382][ T7269] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 189.266806][ T7275] netlink: 32 bytes leftover after parsing attributes in process `syz.5.346'. [ 189.329634][ T7275] netlink: 32 bytes leftover after parsing attributes in process `syz.5.346'. [ 190.517167][ T7306] netlink: 28 bytes leftover after parsing attributes in process `syz.2.352'. [ 191.258989][ T7311] syz_tun: entered allmulticast mode [ 191.367949][ T7310] syz_tun: left allmulticast mode [ 191.736782][ T7283] loop0: detected capacity change from 0 to 32768 [ 191.791763][ T5795] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 191.815203][ T7283] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 191.990952][ T5795] usb 2-1: Using ep0 maxpacket: 16 [ 192.033900][ T5795] usb 2-1: config 1 has no interfaces? [ 192.039735][ T7283] XFS (loop0): Ending clean mount [ 192.066961][ T5795] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 192.116397][ T5795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.163809][ T5795] usb 2-1: Product: syz [ 192.178267][ T5795] usb 2-1: Manufacturer: syz [ 192.197154][ T5795] usb 2-1: SerialNumber: syz [ 192.220368][ T5769] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 192.300371][ T1983] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 192.375945][ T30] audit: type=1800 audit(1785448498.268:20): pid=7283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.347" name="file1" dev="loop0" ino=4426 res=0 errno=0 [ 192.431128][ T5769] usb 8-1: Using ep0 maxpacket: 8 [ 192.450880][ T5769] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 192.463531][ T5769] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 192.486426][ T1983] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.490444][ T5634] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 192.499753][ T5769] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 192.510362][ T5795] usb 2-1: USB disconnect, device number 8 [ 192.544843][ T1983] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.563071][ T1983] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 192.576572][ T5769] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 192.590418][ T1983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.598674][ T5769] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 192.620236][ T1983] usb 3-1: config 0 descriptor?? [ 192.632748][ T5769] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 192.673397][ T5769] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.929065][ T5769] usb 8-1: usb_control_msg returned -32 [ 192.960022][ T5769] usbtmc 8-1:16.0: can't read capabilities [ 193.057132][ T7353] netlink: 'syz.5.364': attribute type 10 has an invalid length. [ 193.078134][ T1983] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 193.146032][ T1983] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 193.176124][ T7348] 8021q: adding VLAN 0 to HW filter on device bond1 [ 193.210505][ T1983] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 193.255860][ T1983] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 193.305281][ T1983] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 193.361338][ T1983] playstation 0003:054C:0DF2.0007: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 193.401843][ T7332] usbtmc 8-1:16.0: usb_control_msg returned -71 [ 193.433755][ T5790] usb 8-1: USB disconnect, device number 5 [ 193.472767][ T1983] playstation 0003:054C:0DF2.0007: Invalid byte count transferred, expected 20 got 3 [ 193.534763][ T1983] playstation 0003:054C:0DF2.0007: Failed to retrieve DualSense pairing info: -22 [ 193.547136][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.555862][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.596321][ T1983] playstation 0003:054C:0DF2.0007: Failed to get MAC address from DualSense [ 193.630040][ T1983] playstation 0003:054C:0DF2.0007: Failed to create dualsense. [ 193.703494][ T1983] playstation 0003:054C:0DF2.0007: probe with driver playstation failed with error -22 [ 193.724071][ T7350] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 193.767144][ T1983] usb 3-1: USB disconnect, device number 10 [ 194.107761][ T7383] loop1: detected capacity change from 0 to 512 [ 194.136357][ T7383] EXT4-fs: inline encryption not supported [ 194.177314][ T7383] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 194.285495][ T7383] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2859: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 194.396930][ T7383] EXT4-fs (loop1): 1 truncate cleaned up [ 194.437842][ T7383] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.466852][ T5769] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 194.682543][ T7383] EXT4-fs error (device loop1): __ext4_expand_extra_isize:6453: inode #15: comm syz.1.367: bad extra_isize 62 (inode size 256) [ 194.694926][ T7405] EXT4-fs (loop1): shut down requested (1) [ 194.698734][ T7404] netlink: 28 bytes leftover after parsing attributes in process `syz.2.372'. [ 194.725897][ T5769] usb 1-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 194.742601][ T7404] netlink: 'syz.2.372': attribute type 7 has an invalid length. [ 194.752023][ T5769] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.768573][ T7404] netlink: 'syz.2.372': attribute type 8 has an invalid length. [ 194.796020][ T7404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.372'. [ 194.805444][ T7408] ubi31: attaching mtd0 [ 194.805498][ T7408] ubi31 error: ubi_attach_mtd_dev: bad VID header (5) or data offsets (69) [ 194.833018][ T5769] emi26 - firmware loader 1-1:1.0: emi26_probe start [ 195.036965][ T5637] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.079538][ T5769] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 195.091620][ T5769] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 195.100034][ T5769] CPU: 1 UID: 0 PID: 5769 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT(full) [ 195.109418][ T5769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 195.119474][ T5769] Workqueue: usb_hub_wq hub_event [ 195.124523][ T5769] RIP: 0010:request_ihex_firmware.constprop.0+0x11e/0x250 [ 195.131654][ T5769] Code: 48 89 04 24 e8 f3 0b b8 00 4c 39 24 24 0f 82 94 00 00 00 e8 e4 0b b8 00 49 8d 7c 24 04 48 89 f8 48 89 fe 48 c1 e8 03 83 e6 07 <42> 8a 0c 38 49 8d 44 24 05 48 89 c2 48 c1 ea 03 40 38 f1 40 0f 9e [ 195.151268][ T5769] RSP: 0018:ffffc90004bceec8 EFLAGS: 00010202 [ 195.157338][ T5769] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffc9001d0ae000 [ 195.165307][ T5769] RDX: 0000000000100000 RSI: 0000000000000004 RDI: 0000000000000004 [ 195.173276][ T5769] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 195.181245][ T5769] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 195.189212][ T5769] R13: ffff888035ac6280 R14: ffffc90004bcefe8 R15: dffffc0000000000 [ 195.197184][ T5769] FS: 0000000000000000(0000) GS:ffff888123edc000(0000) knlGS:0000000000000000 [ 195.206119][ T5769] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 195.212703][ T5769] CR2: 00007f12075556c8 CR3: 00000000740aa000 CR4: 0000000000350ef0 [ 195.220674][ T5769] Call Trace: [ 195.223945][ T5769] [ 195.226870][ T5769] ? __pfx_request_ihex_firmware.constprop.0+0x10/0x10 [ 195.233744][ T5769] ? emi26_probe+0x114/0xe30 [ 195.238377][ T5769] emi26_probe+0x13c/0xe30 [ 195.242807][ T5769] ? _raw_spin_lock_irqsave+0x52/0x60 [ 195.248188][ T5769] ? find_held_lock+0x2b/0x80 [ 195.252888][ T5769] ? __pfx_emi26_probe+0x10/0x10 [ 195.257836][ T5769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.263483][ T5769] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 195.269297][ T5769] ? lockdep_hardirqs_on+0x78/0x100 [ 195.274507][ T5769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.280151][ T5769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.285794][ T5769] ? __pm_runtime_set_status+0x13c/0x970 [ 195.291452][ T5769] usb_probe_interface+0x303/0x8f0 [ 195.296590][ T5769] ? __pfx_usb_probe_interface+0x10/0x10 [ 195.302248][ T5769] really_probe+0x241/0xa60 [ 195.306771][ T5769] __driver_probe_device+0x20e/0x450 [ 195.312072][ T5769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.317725][ T5769] driver_probe_device+0x4a/0x140 [ 195.322766][ T5769] __device_attach_driver+0x1df/0x320 [ 195.328157][ T5769] ? __pfx___device_attach_driver+0x10/0x10 [ 195.334066][ T5769] bus_for_each_drv+0x159/0x1e0 [ 195.338930][ T5769] ? __pfx_bus_for_each_drv+0x10/0x10 [ 195.344309][ T5769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.349951][ T5769] ? lockdep_hardirqs_on+0x78/0x100 [ 195.355160][ T5769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.360803][ T5769] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 195.366619][ T5769] __device_attach+0x1e4/0x4d0 [ 195.371399][ T5769] ? __pfx___device_attach+0x10/0x10 [ 195.376702][ T5769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.382344][ T5769] ? do_raw_spin_unlock+0x145/0x1e0 [ 195.387562][ T5769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.393210][ T5769] device_initial_probe+0xaf/0xd0 [ 195.398254][ T5769] bus_probe_device+0x64/0x160 [ 195.403031][ T5769] device_add+0x121d/0x1970 [ 195.407568][ T5769] ? __pfx_device_add+0x10/0x10 [ 195.412442][ T5769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.418089][ T5769] ? mark_held_locks+0x40/0x70 [ 195.422860][ T5769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.428509][ T5769] usb_set_configuration+0xd97/0x1c60 [ 195.433910][ T5769] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 195.439984][ T5769] usb_generic_driver_probe+0xa1/0xe0 [ 195.445363][ T5769] usb_probe_device+0xef/0x400 [ 195.450143][ T5769] ? __pfx_usb_probe_device+0x10/0x10 [ 195.455531][ T5769] really_probe+0x241/0xa60 [ 195.460052][ T5769] __driver_probe_device+0x20e/0x450 [ 195.465358][ T5769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.471007][ T5769] driver_probe_device+0x4a/0x140 [ 195.476049][ T5769] __device_attach_driver+0x1df/0x320 [ 195.481443][ T5769] ? __pfx___device_attach_driver+0x10/0x10 [ 195.487382][ T5769] bus_for_each_drv+0x159/0x1e0 [ 195.492239][ T5769] ? __pfx_bus_for_each_drv+0x10/0x10 [ 195.497648][ T5769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.503302][ T5769] ? lockdep_hardirqs_on+0x78/0x100 [ 195.508512][ T5769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.514155][ T5769] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 195.520003][ T5769] __device_attach+0x1e4/0x4d0 [ 195.524783][ T5769] ? __pfx___device_attach+0x10/0x10 [ 195.530089][ T5769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.535732][ T5769] ? do_raw_spin_unlock+0x145/0x1e0 [ 195.540954][ T5769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.546602][ T5769] device_initial_probe+0xaf/0xd0 [ 195.551646][ T5769] bus_probe_device+0x64/0x160 [ 195.556421][ T5769] device_add+0x121d/0x1970 [ 195.560949][ T5769] ? __pfx_device_add+0x10/0x10 [ 195.565821][ T5769] ? usb_detect_static_quirks+0x335/0x3e0 [ 195.571553][ T5769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.577202][ T5769] usb_new_device.cold+0x685/0x115c [ 195.582415][ T5769] ? _mutex_trylock_nest_lock+0x241/0x310 [ 195.588149][ T5769] ? do_raw_spin_lock+0x128/0x260 [ 195.593189][ T5769] ? __pfx_usb_new_device+0x10/0x10 [ 195.598403][ T5769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.604047][ T5769] ? mark_held_locks+0x40/0x70 [ 195.608828][ T5769] hub_event+0x30a3/0x4a60 [ 195.613285][ T5769] ? __pfx_hub_event+0x10/0x10 [ 195.618066][ T5769] ? debug_object_deactivate+0x2e4/0x3b0 [ 195.623734][ T5769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.629381][ T5769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.635024][ T5769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.640668][ T5769] ? rcu_is_watching+0x12/0xc0 [ 195.645458][ T5769] process_one_work+0xa23/0x1940 [ 195.650409][ T5769] ? __pfx_process_one_work+0x10/0x10 [ 195.655782][ T5769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.661432][ T5769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.667078][ T5769] worker_thread+0x5ef/0xe50 [ 195.671683][ T5769] ? kthread+0x13a/0x450 [ 195.675945][ T5769] ? __pfx_worker_thread+0x10/0x10 [ 195.681056][ T5769] kthread+0x370/0x450 [ 195.685151][ T5769] ? __pfx_kthread+0x10/0x10 [ 195.689853][ T5769] ret_from_fork+0x72b/0xd50 [ 195.694460][ T5769] ? __pfx_ret_from_fork+0x10/0x10 [ 195.699586][ T5769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.705229][ T5769] ? __switch_to+0x800/0x10f0 [ 195.709932][ T5769] ? __switch_to_asm+0x39/0x70 [ 195.714714][ T5769] ? __pfx_kthread+0x10/0x10 [ 195.719332][ T5769] ret_from_fork_asm+0x1a/0x30 [ 195.724122][ T5769] [ 195.727131][ T5769] Modules linked in: [ 195.732907][ T5769] ---[ end trace 0000000000000000 ]--- [ 195.742445][ T5782] usb 7-1: emi26_load_firmware - request_firmware() failed [ 195.769285][ T5782] usb 7-1: emi26_load_firmware - error loading firmware: error = -12 [ 195.777484][ T5782] emi26 - firmware loader 7-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 195.800459][ T5782] usb 7-1: USB disconnect, device number 3 [ 195.811393][ T5769] RIP: 0010:request_ihex_firmware.constprop.0+0x11e/0x250 [ 195.818615][ T5769] Code: 48 89 04 24 e8 f3 0b b8 00 4c 39 24 24 0f 82 94 00 00 00 e8 e4 0b b8 00 49 8d 7c 24 04 48 89 f8 48 89 fe 48 c1 e8 03 83 e6 07 <42> 8a 0c 38 49 8d 44 24 05 48 89 c2 48 c1 ea 03 40 38 f1 40 0f 9e [ 195.838862][ T5769] RSP: 0018:ffffc90004bceec8 EFLAGS: 00010202 [ 195.847550][ T5769] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffc9001d0ae000 [ 195.855951][ T5769] RDX: 0000000000100000 RSI: 0000000000000004 RDI: 0000000000000004 [ 195.865326][ T5769] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 195.873545][ T5769] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 195.881972][ T5769] R13: ffff888035ac6280 R14: ffffc90004bcefe8 R15: dffffc0000000000 [ 195.891788][ T5769] FS: 0000000000000000(0000) GS:ffff888123edc000(0000) knlGS:0000000000000000 [ 195.922433][ T5769] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 195.931709][ T5769] CR2: 000055e6eb984180 CR3: 0000000036b19000 CR4: 0000000000350ef0 [ 195.957835][ T7421] syzkaller1: entered promiscuous mode [ 195.979285][ T7421] syzkaller1: entered allmulticast mode [ 195.993428][ T5769] Kernel panic - not syncing: Fatal exception [ 195.999761][ T5769] Kernel Offset: disabled [ 196.004096][ T5769] Rebooting in 86400 seconds..