last executing test programs: 14m45.012935304s ago: executing program 4 (id=5): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0xfeffff, 0xc9, 0x0, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3ff07258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1", 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x0, 0xd, "0062007d82000000000000002240f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x17) 14m44.237663201s ago: executing program 4 (id=15): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000840)=0x4932, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1c, 0x3, &(0x7f00000002c0)=ANY=[@ANYRESOCT=0x0], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) ftruncate(r1, 0x1000006) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r7 = openat(r5, &(0x7f0000000080)='./bus\x00', 0x0, 0x10) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1c1002, 0x50) write(r8, &(0x7f0000004200)='t', 0x1) sendfile(r8, r7, 0x0, 0x7fffffff) ftruncate(r6, 0x2007ffb) sendfile(r6, r8, 0x0, 0x1000000201005) sendfile(r1, r1, 0x0, 0x100000000) fcntl$addseals(r1, 0x409, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400048000000000000000008500000096000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007e00000095"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0xfffff000}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000200)='dctcp', 0x5) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000000), 0x3) 14m40.54101861s ago: executing program 4 (id=21): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, 0x0, 0x0) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x40010) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) recvfrom(r2, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) 14m36.740764975s ago: executing program 4 (id=26): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x42, 0x5) io_setup(0x5, &(0x7f00000002c0)) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010326bd7000fbdbdf251c00000018000180140002006c6f0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0xa6) 14m30.822040764s ago: executing program 4 (id=31): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00'}) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040) 14m14.813947616s ago: executing program 32 (id=31): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00'}) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040) 11m53.029060177s ago: executing program 2 (id=284): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x9f9, &(0x7f0000000040)={0x0, 0x76be, 0xc000, 0x3, 0x20002f7}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xc260}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = openat$rtc(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) ioctl$RTC_SET_TIME(r4, 0x4024700a, 0x0) getpid() socket$inet(0x2, 0x6, 0x3) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4815}, 0x4) 11m49.830047649s ago: executing program 2 (id=287): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, 0x0) mount(0x0, 0x0, &(0x7f0000000200)='ext2\x00', 0x21000d, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'pcmmio\x00', [0x100, 0x80000000, 0x2, 0x400, 0xe, 0x800001, 0x75d, 0x3, 0x2, 0xfd, 0x2, 0x1, 0x1, 0x1, 0x10000b, 0xfd, 0x5, 0x7c, 0xfffffffe, 0x40000003, 0x1, 0x10, 0x0, 0x0, 0x0, 0xe66, 0x3, 0x8, 0x8, 0x0, 0x1]}) 11m47.986716049s ago: executing program 2 (id=292): socket$inet_udp(0x2, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1) getxattr(0x0, &(0x7f0000000100)=@known='user.incfs.metadata\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$MSR(0x0, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100000000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r2}, 0x0, &(0x7f0000000640)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r2, &(0x7f00000004c0)}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x6, 0x9, 0x0, 0x0) 11m43.371154195s ago: executing program 2 (id=294): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) socket$igmp6(0xa, 0x3, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11m41.599063563s ago: executing program 2 (id=298): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000"], 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) connect$inet6(r3, 0x0, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000002c0)={0xa, 0x4e20, 0x80000, @loopback, 0x7}, 0x1c, 0x0}, 0xc044) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000000040)={0x23, 0x2, 0xb, 0x5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x19, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xf}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r5, 0x21eae}}, 0x20}}, 0x0) 11m37.020724804s ago: executing program 2 (id=302): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004600)='/proc/slabinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2024) lseek(r0, 0xfffffffffffffff5, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) fcntl$getown(r2, 0x9) capset(0x0, &(0x7f0000000440)={0xffffff54, 0x4, 0x5, 0x6, 0x8, 0xfffffff9}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = fsopen(&(0x7f0000000040)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000021c0)='uid', &(0x7f0000002200)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?o9\x85\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f\x00'/316, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?o9\x85\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f\x00', &(0x7f00000001c0)='\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f00000002c0)={0x9, {0x6, 0x1ff, 0x9, 0x4, 0x8, 0x401}}) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48) 11m19.532424805s ago: executing program 33 (id=302): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004600)='/proc/slabinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2024) lseek(r0, 0xfffffffffffffff5, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) fcntl$getown(r2, 0x9) capset(0x0, &(0x7f0000000440)={0xffffff54, 0x4, 0x5, 0x6, 0x8, 0xfffffff9}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = fsopen(&(0x7f0000000040)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000021c0)='uid', &(0x7f0000002200)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?o9\x85\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f\x00'/316, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?o9\x85\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f\x00', &(0x7f00000001c0)='\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f00000002c0)={0x9, {0x6, 0x1ff, 0x9, 0x4, 0x8, 0x401}}) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48) 7m44.21436934s ago: executing program 1 (id=583): openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x805, 0x0) ptrace$setregs(0xd, r0, 0x7531, &(0x7f0000000300)) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001000010700000000000000000300002806000100"], 0x1c}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x123880, 0x0) ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f0000000300)) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703110000001f03000000080000040014000d000a000d0000009ee5", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) 7m41.147709009s ago: executing program 1 (id=588): r0 = syz_usb_connect(0x2, 0x68, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) socket$netlink(0x10, 0x3, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000180)={0xb, 0x83, 0xfffd, 0x9dff, 0xe, "96ca676bc0d8a891"}) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x7, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) read$FUSE(r3, &(0x7f00000008c0)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f0000000ac0)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000003c0)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="20c2a4000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="001ad8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x3, 0x854, &(0x7f0000000640)={{0x12, 0x1, 0x250, 0xe9, 0x99, 0x81, 0x28, 0x4ce, 0x2, 0xd1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x842, 0x3, 0x9, 0x1, 0x40, 0x9, "", [{{0x9, 0x4, 0x16, 0xc, 0xb, 0xd2, 0x30, 0x16, 0xff, [], [{{0x9, 0x5, 0x9, 0x0, 0x70, 0x2, 0xde, 0x31, [@uac_iso={0x7, 0x25, 0x1, 0xe1e7aced30e7064b, 0x2, 0x9}]}}, {{0x9, 0x5, 0x3, 0x4, 0x38b, 0x9, 0x9, 0xd4, [@generic={0x2, 0x6}, @generic={0x97, 0x21, "8c2e5793331354c1a5e252884caeb712fb741819a0d2d2acc1d6b0d1f7ce02ed4e28131012f368b3bfffe841db9aa8a75028cf91462ec6f173a5b03d88a3f1e45652f3ddf7f564a8ca969d305f54436bca8a6f0cd9ad31827368e6b22b01d9618dacd4382953c0a0f8d7ba5fadeacfd961a2eaadd5cf73f99a3e7b51aca08e5af95edf18b7f25b61e31c3a6a6dcc9c63b1bbc710cd"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x8, 0x1c, 0x66, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x3766}]}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x8a, 0xa1, 0x80}}, {{0x9, 0x5, 0x87, 0x0, 0x400, 0x1, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xe, 0xfb3b}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0xee}]}}, {{0x9, 0x5, 0x5, 0x4, 0x400, 0x7f, 0x9, 0x8}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x7, 0x4, 0x52, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x8}, @generic={0x2, 0x21}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x81, 0x9, 0xf4, [@generic={0x4b, 0x23, "9b3f4e338f0b41b2b36856bbd8c2a449d12a0daaa833c0259e2915cd1269d994b468b4254eb1a132e40de8393f4243c3cd16a8971eb37f6820d7fa3152f941062505694e3d33dcbdfd"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x81, 0xa2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x18, 0x1d, 0x10}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0x4}]}}, {{0x9, 0x5, 0xf, 0x4, 0x40, 0x7, 0x8, 0x3, [@generic={0x36, 0x5, "ff259c6854bf6710272e37302c52d941663ae9a3dbdd702c569bbb83c3d39b93d742d8301ad1dd51523cde9729cc821d7bf6a043"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x1, 0xd1, 0x6, [@generic={0xa3, 0x9, "fade5c48db89a8bbf17e5f265454300195398bfb84ce8768da8f939107f74a99b217ef09b0ab21b03209b270b9eec2dacb30bc1ed89d6127f5538a3af2e6a18891ac75690a1e7115f8c48a8da83e6b20dff3e6e2b2f8ea053e0817bec950f2aeeae9b220b989384e2529a3fce69145bea4153fc428519cfe2a0e837fdfb5904003fcb5aecded317d8f881fef23aa60f33b674a2da3336fbe055365113c1f02e3e5"}, @generic={0x8, 0xc, "255a5f5128fa"}]}}]}}, {{0x9, 0x4, 0x1b, 0x5, 0xd, 0x79, 0x69, 0xea, 0x9, [@generic={0xa0, 0xe, "1a997b0c88afffab2164789853bf08cc7b7c869016113ab78c908ff740dee0827f54ae66bd6e1098fcbe1eaa8640a81f153e67952f0523a38977c04b14778218f9a73fbf5c63236b2bf6b4b2771d3717fb8b0af9fd3e6f4830707c65f2a5f1bfec7dce1c7de32574947524cb3e25b4479c8fd449b74b9f7fd830dbef8d79f242ce8c1cc112d7f4cbeb382c4801d52e66606ea62d53098a1aebdc31902b4e"}, @cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "61122773"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x100, 0x3}, {0x6, 0x24, 0x1a, 0x8, 0x18}, [@mdlm_detail={0x4, 0x24, 0x13, 0xfd}]}], [{{0x9, 0x5, 0x8, 0x10, 0x3ff, 0x4, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xb9, 0x800}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xf, 0x7}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0xd, 0xfc, 0x3, [@generic={0xdd, 0xa, "9767d0ce22c3ccdd45e813bbf8d4d81c4a717105170334f51b27a6a232ee88bca16d1a63f9e5596ccc5731510a013f4014fd7a65d3742dd66aedf84f602e5f68115c16ddbf27f597e3d2784f14f8c71a2f9203259634a6b9b9c9a3b0a0e8df36d0d1ccc7efb28f7eb9707988b907068ad913aad8b1bbf41efb8ca4eaa6b80100df335af416f72c168c7df47f3af9ed2e041b294b6dbaa89c04aa94a0461ecddfc10c5c83ca79c375afce8fb1dc4df9a1da7896dc16a709a69ee917bb7564f13ed763a9146f0942ac0a31d23101abd5ce7bde072e2695829eb7b4b7"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0x4b, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x1}]}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0x7, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x10, 0x8}]}}, {{0x9, 0x5, 0xc, 0x0, 0x1ac4560f5d04c44c, 0xf1, 0x2b, 0x80, [@generic={0x74, 0xf, "b10d01157c4dab4e917056bfac9288da115a815c651a313613d3d0e704e916022fa75bfb39c46a99757114a85ebe5c4352ceea7d953d9ed383ef6ceef7dfd4cf9dcfe8d7121474f65bf76e4e9c2cd2bb3468771b928f54cf53eccf10830c91e206ef09d535b69e47d7376525035820535784"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x8}]}}, {{0x9, 0x5, 0xc, 0x4, 0x3ff, 0x0, 0x2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x6}, @generic={0xaa, 0x4, "702fe8c865e9186a15390b2a01b127183fdc72a4149f48ed5e564382e36b8881fd944be90c79e3e9df8f4f03cb5661b1a742c60b58857e6734d412ca50203f18217531a1421e8e59d9752aa836a8523848211019c3734871d5dfade896771ea55b4dbcfbe235f6670ba0c1f3cfb87bd514633f750fa5fc972bb29162cac381863a3378b2e788a5e0dab2ab7dec4ed23ca1c76f6c58314fa83cab730f8f200c183ea7ff04708e4ee1"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x40, 0x8, 0x9, 0xff}}, {{0x9, 0x5, 0x8, 0x0, 0x60, 0x1, 0x8, 0x10}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x0, 0x1, 0x40, [@generic={0x45, 0x3, "070608f57dc2e0f6c97a66651664cb7b81c15dbaa019eecd257004621e95691752ca70729800c4f24508b2a8547904c01773b5200eeb9594f6d61bbc05085801373e17"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x0, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x7}]}}, {{0x9, 0x5, 0x9, 0xc, 0x8, 0xe8, 0x3, 0x7}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x6b, 0x9, 0xf1, [@generic={0xff, 0x0, "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"}, @generic={0xe0, 0x5, "7991145cf6ace97c85bc76300e6313af3e2366001a004897ea3be3e95621475773c8fe0df040ed488e641d4b652dfc483def6685b5f36dfd34194ccafc1054b528de625d968aded538410c1a015bff0a2801d8cdf959a48926bf7434132032db74a83a66179d2ab7fe9d2f1d78020ad7917d7d4a2fcb81f250079aaba7557b9331f93e9e4a4bcddb1d3cebfa99217ae075b2c1f984756e68d991f5c341166eb605dab54eab506ae96450afbc08a80166d3756901ffae0de3b96e4ce214ea88fca49cbe4ec99046617c15f426bed24cbde9c741864962ee2b32c3cc622947"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x4, 0x95, 0x4}}]}}, {{0x9, 0x4, 0x23, 0x81, 0x0, 0xff, 0x2, 0x74, 0x12, [@hid_hid={0x9, 0x21, 0x7f, 0xe, 0x1, {0x22, 0x9f8}}, @uac_control={{0xa, 0x24, 0x1, 0x1a1a, 0x30}, [@selector_unit={0xa, 0x24, 0x5, 0x6, 0x5, "04908b0052"}, @mixer_unit={0x5, 0x24, 0x4, 0x3, 0xff}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x206, 0x3, 0x3, 0x7ff, 0x9, 0x7}, @processing_unit={0xb, 0x24, 0x7, 0x3, 0x2, 0x7, 'b97n'}]}]}}]}}]}}, &(0x7f0000001200)={0xa, &(0x7f0000001080)={0xa, 0x6, 0x310, 0x3, 0x3, 0x1, 0x40, 0x8}, 0x62, &(0x7f00000010c0)={0x5, 0xf, 0x62, 0x6, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "c79a29f73bf634a9202ee144fe4ed4d7"}, @ssp_cap={0x24, 0x10, 0xa, 0x3, 0x6, 0x10, 0xf, 0x7, [0xc0, 0xc0, 0x3f00, 0xc0c0, 0xff0000, 0x3f]}, @ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0x0, 0x0, 0x9, [0xc000, 0x3f, 0x1fe00c0]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x0, 0x2, 0xf4}]}, 0x3, [{0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x42f}}, {0x25, &(0x7f00000011c0)=@string={0x25, 0x3, "ff69f1c74d6c4a2ba2dfb3ff54bab489a3a19820af3f6fbc84b7ef604d9e3f802460a8"}}]}) 7m37.327152229s ago: executing program 1 (id=590): r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000000)=""/11) 7m36.999676978s ago: executing program 1 (id=591): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x1008810, &(0x7f0000002600)=ANY=[], 0x1, 0x5f4, &(0x7f000001f6c0)="$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") r1 = syz_open_dev$video4linux(0x0, 0x5, 0x200) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x88800, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)=ANY=[@ANYBLOB="280000001000010800000000", @ANYRES32=0x0, @ANYBLOB="880000000000000008001c00", @ANYRES32], 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r6 = syz_pidfd_open(0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0) r7 = pidfd_getfd(r6, r6, 0x0) setns(r7, 0x66020000) close_range(r0, 0xffffffffffffffff, 0x0) 7m35.536430966s ago: executing program 1 (id=593): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) ioctl$sock_bt_hci(r0, 0x400448e6, 0x0) 7m27.300498767s ago: executing program 1 (id=601): socket(0x2b, 0x80801, 0x1) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000180)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x4e22, 0x4, @mcast2}, 0x0, {[0x3, 0x0, 0x6a, 0x1, 0x89f, 0xb, 0x1]}}, 0x5c) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001b80)=""/71) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r4, 0x800448d7, &(0x7f0000000080)='|') setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000002c80)=@gcm_128={{0x304}, '\x00', "362574ad5924c0c5aedd72261081b10f", "0700d871", "d97ab19fbd9a8e17"}, 0x28) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) 7m26.211531746s ago: executing program 34 (id=601): socket(0x2b, 0x80801, 0x1) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000180)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x4e22, 0x4, @mcast2}, 0x0, {[0x3, 0x0, 0x6a, 0x1, 0x89f, 0xb, 0x1]}}, 0x5c) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001b80)=""/71) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r4, 0x800448d7, &(0x7f0000000080)='|') setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000002c80)=@gcm_128={{0x304}, '\x00', "362574ad5924c0c5aedd72261081b10f", "0700d871", "d97ab19fbd9a8e17"}, 0x28) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) 15.157014354s ago: executing program 3 (id=1130): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000080)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@clear_cache}, {@ssd_spread}, {@clear_cache}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@nospace_cache}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffb, 0x3, 0x0, 0x0, 0x17, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') fsopen(0x0, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) 11.804637049s ago: executing program 3 (id=1133): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32], 0x68}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) r0 = socket(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 11.40490658s ago: executing program 0 (id=1134): chdir(&(0x7f0000000400)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x1, 0x0, &(0x7f0000000080)) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5505, &(0x7f0000002480)="$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") r1 = open(&(0x7f0000000440)='./file1\x00', 0x84242, 0x1df2a23c5997fa7f) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0xfffffffffffffffe, 0x0, {{0x6, 0x0, 0x5, 0x81, 0x1, 0x1, {0x6, 0xff, 0x5, 0x8, 0xe, 0xd615, 0x9, 0x1, 0xfffffffe, 0x1000, 0x4000000, 0x0, 0xffffffffffffffff, 0x5, 0x2000000}}, {0x0, 0x19}}}, 0xa0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) semop(0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000640), r4) sendmsg$NET_DM_CMD_STOP(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r5, 0xb, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) madvise(&(0x7f0000568000/0x3000)=nil, 0x3000, 0x19) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x348, 0xffffffff, 0x0, 0x1a0, 0xd0, 0xfeffffff, 0xffffffff, 0x278, 0x278, 0x278, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x2, 0x6}}}, {{@ipv6={@private0, @loopback, [0xff, 0xff, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'tunl0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x32, 0x79, 0x4, 0x44}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x3898, 0x7fff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000003c0)={0x5f26}, 0x8) 8.147857606s ago: executing program 0 (id=1135): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000080)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@clear_cache}, {@ssd_spread}, {@clear_cache}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@nospace_cache}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffb, 0x3, 0x0, 0x0, 0x17, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, 0x0, 0x0) 5.65564597s ago: executing program 0 (id=1136): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x8000, 0x1, 0x4, 0x9, 0xa4, 0x0, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x0, 0x9, 0x1, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x1100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x80000ff, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x0, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0xd, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x74e, 0xfffffffe, 0x3, 0x0, 0x8, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2c, 0x2, 0x2081, 0x100, 0x5, 0x6, 0x0, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0x9, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x3ff, 0x0, 0x4, 0x2, 0x7, 0x8, 0x5, 0x33c, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(0x0, 0x0, 0x9) 4.076545914s ago: executing program 0 (id=1137): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000040), 0x1800040, &(0x7f0000000c80)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, 0x0) fsopen(0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000000e280)={0x2020}, 0x205a) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f00000003c0)) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r4, &(0x7f0000000140)={0x90, 0x0, r5, {0x4000000000007, 0x0, 0x8, 0xe, 0x0, 0x1, {0x2000000002, 0x0, 0x6, 0x5, 0x8, 0x7, 0x7, 0x3, 0x7ff, 0x0, 0x7, r6, r7, 0x5, 0xfff}}}, 0x90) 2.736274911s ago: executing program 0 (id=1138): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f00000007c0)={@val={0x0, 0x800}, @val={0x1, 0x5, 0x7, 0xffff, 0x80, 0x6}, @mpls={[], @ipv6=@udp={0x7, 0x6, "b21358", 0x34, 0x11, 0x1, @rand_addr=' \x01\x00', @empty, {[@routing={0x3c, 0x0, 0x2, 0x1}], {0x4e24, 0x4e21, 0x2c, 0x0, @opaque="5c012022f78f2747cd6ec1de9cea4b333be8cab2b2498696d5032ffbddb186c9328e0613"}}}}}, 0x6a) r1 = socket(0xf, 0x4, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xd9, r2, 0x800000000000000}, 0x38) r3 = socket(0x2b, 0x80801, 0x1) shutdown(r3, 0x7ffffffe) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="380000005500e50226bd7000010000", @ANYRES32, @ANYBLOB, @ANYRES8], 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000150) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000010340)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044090}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$RDMA_NLDEV_CMD_RES_GET(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20044040}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff3, 0xc}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x84}, 0x40010) write(r1, &(0x7f0000000040)="0f03000019002551", 0x8) 2.734485054s ago: executing program 3 (id=1139): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x23b) write(r1, 0x0, 0x0) 2.162681529s ago: executing program 3 (id=1140): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.242721475s ago: executing program 0 (id=1141): syz_usb_connect(0x2, 0x68, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x7, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f00000008c0)={0x2020}, 0x2020) read$FUSE(r2, &(0x7f0000000ac0)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x949, &(0x7f0000000640)={{0x12, 0x1, 0x250, 0xe9, 0x99, 0x81, 0x28, 0x4ce, 0x2, 0xd1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x937, 0x3, 0x9, 0x1, 0x40, 0x9, "", [{{0x9, 0x4, 0x16, 0xc, 0xb, 0xd2, 0x30, 0x16, 0xff, [], [{{0x9, 0x5, 0x9, 0x0, 0x70, 0x2, 0xde, 0x31, [@uac_iso={0x7, 0x25, 0x1, 0xe1e7aced30e7064b, 0x2, 0x9}]}}, {{0x9, 0x5, 0x3, 0x4, 0x38b, 0x9, 0x9, 0xd4, [@generic={0x2, 0x6}, @generic={0x97, 0x21, "8c2e5793331354c1a5e252884caeb712fb741819a0d2d2acc1d6b0d1f7ce02ed4e28131012f368b3bfffe841db9aa8a75028cf91462ec6f173a5b03d88a3f1e45652f3ddf7f564a8ca969d305f54436bca8a6f0cd9ad31827368e6b22b01d9618dacd4382953c0a0f8d7ba5fadeacfd961a2eaadd5cf73f99a3e7b51aca08e5af95edf18b7f25b61e31c3a6a6dcc9c63b1bbc710cd"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x8, 0x1c, 0x66, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x3766}]}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x8a, 0xa1, 0x80}}, {{0x9, 0x5, 0x87, 0x0, 0x400, 0x1, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xe, 0xfb3b}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0xee}]}}, {{0x9, 0x5, 0x5, 0x4, 0x400, 0x7f, 0x9, 0x8}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x7, 0x4, 0x52, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x8}, @generic={0x2, 0x21}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x81, 0x9, 0xf4, [@generic={0x4b, 0x23, "9b3f4e338f0b41b2b36856bbd8c2a449d12a0daaa833c0259e2915cd1269d994b468b4254eb1a132e40de8393f4243c3cd16a8971eb37f6820d7fa3152f941062505694e3d33dcbdfd"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x81, 0xa2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x18, 0x1d, 0x10}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0x4}]}}, {{0x9, 0x5, 0xf, 0x4, 0x40, 0x7, 0x8, 0x3, [@generic={0x36, 0x5, "ff259c6854bf6710272e37302c52d941663ae9a3dbdd702c569bbb83c3d39b93d742d8301ad1dd51523cde9729cc821d7bf6a043"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x1, 0xd1, 0x6, [@generic={0xa3, 0x9, "fade5c48db89a8bbf17e5f265454300195398bfb84ce8768da8f939107f74a99b217ef09b0ab21b03209b270b9eec2dacb30bc1ed89d6127f5538a3af2e6a18891ac75690a1e7115f8c48a8da83e6b20dff3e6e2b2f8ea053e0817bec950f2aeeae9b220b989384e2529a3fce69145bea4153fc428519cfe2a0e837fdfb5904003fcb5aecded317d8f881fef23aa60f33b674a2da3336fbe055365113c1f02e3e5"}, @generic={0x8, 0xc, "255a5f5128fa"}]}}]}}, {{0x9, 0x4, 0x1b, 0x5, 0xd, 0x79, 0x69, 0xea, 0x9, [@generic={0xa0, 0xe, "1a997b0c88afffab2164789853bf08cc7b7c869016113ab78c908ff740dee0827f54ae66bd6e1098fcbe1eaa8640a81f153e67952f0523a38977c04b14778218f9a73fbf5c63236b2bf6b4b2771d3717fb8b0af9fd3e6f4830707c65f2a5f1bfec7dce1c7de32574947524cb3e25b4479c8fd449b74b9f7fd830dbef8d79f242ce8c1cc112d7f4cbeb382c4801d52e66606ea62d53098a1aebdc31902b4e"}, @cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "61122773"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x100, 0x3}, {0x6, 0x24, 0x1a, 0x8, 0x18}, [@mdlm_detail={0x100, 0x24, 0x13, 0xfd, "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"}]}], [{{0x9, 0x5, 0x8, 0x10, 0x3ff, 0x4, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xb9, 0x800}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xf, 0x7}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0xd, 0xfc, 0x3, [@generic={0xdd, 0xa, "9767d0ce22c3ccdd45e813bbf8d4d81c4a717105170334f51b27a6a232ee88bca16d1a63f9e5596ccc5731510a013f4014fd7a65d3742dd66aedf84f602e5f68115c16ddbf27f597e3d2784f14f8c71a2f9203259634a6b9b9c9a3b0a0e8df36d0d1ccc7efb28f7eb9707988b907068ad913aad8b1bbf41efb8ca4eaa6b80100df335af416f72c168c7df47f3af9ed2e041b294b6dbaa89c04aa94a0461ecddfc10c5c83ca79c375afce8fb1dc4df9a1da7896dc16a709a69ee917bb7564f13ed763a9146f0942ac0a31d23101abd5ce7bde072e2695829eb7b4b7"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0x4b, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x1}]}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0x7, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x10, 0x8}]}}, {{0x9, 0x5, 0xc, 0x0, 0x1ac4560f5d04c44c, 0xf1, 0x2b, 0x80, [@generic={0x74, 0xf, "b10d01157c4dab4e917056bfac9288da115a815c651a313613d3d0e704e916022fa75bfb39c46a99757114a85ebe5c4352ceea7d953d9ed383ef6ceef7dfd4cf9dcfe8d7121474f65bf76e4e9c2cd2bb3468771b928f54cf53eccf10830c91e206ef09d535b69e47d7376525035820535784"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x8}]}}, {{0x9, 0x5, 0xc, 0x4, 0x3ff, 0x0, 0x2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x6}, @generic={0xaa, 0x4, "702fe8c865e9186a15390b2a01b127183fdc72a4149f48ed5e564382e36b8881fd944be90c79e3e9df8f4f03cb5661b1a742c60b58857e6734d412ca50203f18217531a1421e8e59d9752aa836a8523848211019c3734871d5dfade896771ea55b4dbcfbe235f6670ba0c1f3cfb87bd514633f750fa5fc972bb29162cac381863a3378b2e788a5e0dab2ab7dec4ed23ca1c76f6c58314fa83cab730f8f200c183ea7ff04708e4ee1"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x40, 0x8, 0x9, 0xff}}, {{0x9, 0x5, 0x8, 0x0, 0x60, 0x1, 0x8, 0x10}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x0, 0x1, 0x40, [@generic={0x45, 0x3, "070608f57dc2e0f6c97a66651664cb7b81c15dbaa019eecd257004621e95691752ca70729800c4f24508b2a8547904c01773b5200eeb9594f6d61bbc05085801373e17"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x0, 0x1, 0x1}}, {{0x9, 0x5, 0x9, 0xc, 0x8, 0xe8, 0x3, 0x7}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x6b, 0x9, 0xf1, [@generic={0xff, 0x0, "24768ee7bda0de0aec997a52e6acb8a9c98a65c79b0125b0378415919abe97002845c4f2bf5a7c9e5532ea6a20140154b8d9b791e2f3a8b0ef5be288e4483a84e048b1d658ef09a6adb80434dab50166d29287a70897090c2eca5d46cbf2b1c7d86303d18887ff874ed4b877eaa28447dcd9fad2d33e9e845b7da86a18d9cc642f092716054029f8bf82286026e9a14a3c5556424fbaa76316bb74134993a9b4b0a6c927bb557d11edae83c988cb7e1244c871775f1db34a7317b581763c2e808b389415ed9c0a48f5b5e872c816c70fb14e7a79b34545d98d8a0f233a8699f25542e693678fbc320db79256fa8abb6428d7eba13cd4fde1f331844b64"}, @generic={0xe0, 0x5, "7991145cf6ace97c85bc76300e6313af3e2366001a004897ea3be3e95621475773c8fe0df040ed488e641d4b652dfc483def6685b5f36dfd34194ccafc1054b528de625d968aded538410c1a015bff0a2801d8cdf959a48926bf7434132032db74a83a66179d2ab7fe9d2f1d78020ad7917d7d4a2fcb81f250079aaba7557b9331f93e9e4a4bcddb1d3cebfa99217ae075b2c1f984756e68d991f5c341166eb605dab54eab506ae96450afbc08a80166d3756901ffae0de3b96e4ce214ea88fca49cbe4ec99046617c15f426bed24cbde9c741864962ee2b32c3cc622947"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x4, 0x95, 0x4}}]}}, {{0x9, 0x4, 0x23, 0x81, 0x0, 0xff, 0x2, 0x74, 0x12, [@hid_hid={0x9, 0x21, 0x7f, 0xe, 0x1, {0x22, 0x9f8}}, @uac_control={{0xa, 0x24, 0x1, 0x1a1a, 0x30}, [@selector_unit={0xa, 0x24, 0x5, 0x6, 0x5, "04908b0052"}, @mixer_unit={0x5, 0x24, 0x4, 0x3, 0xff}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x206, 0x3, 0x3, 0x7ff, 0x9, 0x7}, @processing_unit={0xb, 0x24, 0x7, 0x3, 0x2, 0x7, 'b97n'}]}]}}]}}]}}, &(0x7f0000001200)={0xa, &(0x7f0000001080)={0xa, 0x6, 0x310, 0x3, 0x3, 0x1, 0x40, 0x8}, 0x62, &(0x7f00000010c0)={0x5, 0xf, 0x62, 0x6, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "c79a29f73bf634a9202ee144fe4ed4d7"}, @ssp_cap={0x24, 0x10, 0xa, 0x3, 0x6, 0x10, 0xf, 0x7, [0xc0, 0xc0, 0x3f00, 0xc0c0, 0xff0000, 0x3f]}, @ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0x0, 0x0, 0x9, [0xc000, 0x3f, 0x1fe00c0]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x0, 0x2, 0xf4}]}, 0x3, [{0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x42f}}, {0x25, &(0x7f00000011c0)=@string={0x25, 0x3, "ff69f1c74d6c4a2ba2dfb3ff54bab489a3a19820af3f6fbc84b7ef604d9e3f802460a8"}}]}) 667.775273ms ago: executing program 3 (id=1142): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@newtfilter={0x24, 0x11, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x74, 0x0, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0x801, 0x70bd2a, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0xff4f}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 0s ago: executing program 3 (id=1143): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$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") write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x161442, 0xb6) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): T8098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 804.200153][ T8098] hsr_slave_0: left promiscuous mode [ 804.238212][ T8098] hsr_slave_1: left promiscuous mode [ 804.239416][ T8098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 804.298914][ T8098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 806.076806][ T5612] Bluetooth: hci1: command tx timeout [ 806.470961][ T8098] team0 (unregistering): Port device team_slave_1 removed [ 806.546967][ T8098] team0 (unregistering): Port device team_slave_0 removed [ 806.706511][T10683] netlink: 36 bytes leftover after parsing attributes in process `syz.3.919'. [ 807.206923][ T8098] team0 (unregistering): Port device team_slave_1 removed [ 807.247204][ T8098] team0 (unregistering): Port device team_slave_0 removed [ 807.467823][T10688] loop0: detected capacity change from 0 to 4096 [ 807.561046][T10688] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 807.948393][ T5268] 8021q: adding VLAN 0 to HW filter on device eth9 [ 808.156342][ T5612] Bluetooth: hci1: command tx timeout [ 808.577364][ T5607] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 809.283931][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.284048][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.244552][ T5612] Bluetooth: hci1: command tx timeout [ 811.305404][T10716] ±ÿþ€: renamed from team_slave_1 (while UP) [ 812.356160][ T5612] Bluetooth: hci1: command tx timeout [ 812.769438][T10741] netlink: 36 bytes leftover after parsing attributes in process `syz.3.928'. [ 813.674116][ T9115] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 813.771718][ T9115] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 813.795155][ T9115] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 813.828895][ T9115] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 813.831707][ T9115] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 816.172344][ T5612] Bluetooth: hci3: command tx timeout [ 816.836316][ T5766] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 817.023092][ T5766] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 817.023123][ T5766] usb 1-1: config 0 has no interface number 0 [ 817.043443][ T5766] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 817.043475][ T5766] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.043497][ T5766] usb 1-1: Product: syz [ 817.043513][ T5766] usb 1-1: Manufacturer: syz [ 817.043540][ T5766] usb 1-1: SerialNumber: syz [ 817.098445][ T5766] usb 1-1: config 0 descriptor?? [ 818.196298][ T8098] bridge_slave_1: left allmulticast mode [ 818.196336][ T8098] bridge_slave_1: left promiscuous mode [ 818.196632][ T8098] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.317784][ T5612] Bluetooth: hci3: command tx timeout [ 818.321125][ T8098] bridge_slave_0: left allmulticast mode [ 818.321161][ T8098] bridge_slave_0: left promiscuous mode [ 818.321456][ T8098] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.526274][ T8098] bridge_slave_1: left allmulticast mode [ 818.526311][ T8098] bridge_slave_1: left promiscuous mode [ 818.526638][ T8098] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.660885][ T8098] bridge_slave_0: left allmulticast mode [ 818.660926][ T8098] bridge_slave_0: left promiscuous mode [ 818.661215][ T8098] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.796285][ T8098] bridge_slave_1: left allmulticast mode [ 818.796325][ T8098] bridge_slave_1: left promiscuous mode [ 818.796761][ T8098] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.879183][ T8098] bridge_slave_0: left allmulticast mode [ 818.879223][ T8098] bridge_slave_0: left promiscuous mode [ 818.879503][ T8098] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.045387][T10769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 819.051799][T10769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 819.066162][ T5766] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 819.066195][ T5766] asix 1-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 819.066527][ T5766] asix 1-1:0.251: probe with driver asix failed with error -71 [ 819.121212][ T5766] usb 1-1: USB disconnect, device number 29 [ 819.366941][ T8098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 819.447039][ T8098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 819.508889][ T8098] bond0 (unregistering): Released all slaves [ 820.024758][T10803] loop0: detected capacity change from 0 to 40427 [ 820.058122][T10803] F2FS-fs (loop0): invalid crc value [ 820.161724][T10803] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 820.196489][T10803] F2FS-fs (loop0): Start checkpoint disabled! [ 820.244357][T10803] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 820.252641][T10803] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 820.278571][ T8098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 820.318174][ T38] audit: type=1800 audit(1777363517.273:25): pid=10803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.937" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 820.396234][ T5612] Bluetooth: hci3: command tx timeout [ 820.806199][T10807] syz.0.937: attempt to access beyond end of device [ 820.806199][T10807] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 820.819065][T10807] syz.0.937: attempt to access beyond end of device [ 820.819065][T10807] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 820.824114][T10807] syz.0.937: attempt to access beyond end of device [ 820.824114][T10807] loop0: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 820.828258][T10807] syz.0.937: attempt to access beyond end of device [ 820.828258][T10807] loop0: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 820.832133][T10807] syz.0.937: attempt to access beyond end of device [ 820.832133][T10807] loop0: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 820.838557][T10807] syz.0.937: attempt to access beyond end of device [ 820.838557][T10807] loop0: rw=2049, sector=45136, nr_sectors = 16 limit=40427 [ 820.842964][T10807] syz.0.937: attempt to access beyond end of device [ 820.842964][T10807] loop0: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 820.848297][T10807] syz.0.937: attempt to access beyond end of device [ 820.848297][T10807] loop0: rw=2049, sector=45160, nr_sectors = 8 limit=40427 [ 820.853046][T10807] syz.0.937: attempt to access beyond end of device [ 820.853046][T10807] loop0: rw=2049, sector=45168, nr_sectors = 8 limit=40427 [ 820.858003][T10807] syz.0.937: attempt to access beyond end of device [ 820.858003][T10807] loop0: rw=2049, sector=45176, nr_sectors = 8 limit=40427 [ 821.511699][ T8098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 821.793618][ T8098] bond0 (unregistering): Released all slaves [ 821.797560][ T1030] CPU: 1 UID: 0 PID: 1030 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 821.797641][ T1030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 821.797685][ T1030] Workqueue: writeback wb_workfn (flush-7:0) [ 821.797779][ T1030] Call Trace: [ 821.797811][ T1030] [ 821.797835][ T1030] dump_stack_lvl+0xe8/0x150 [ 821.797890][ T1030] f2fs_stop_checkpoint+0x383/0x540 [ 821.797952][ T1030] f2fs_write_end_io+0x1274/0x1740 [ 821.798136][ T1030] __submit_merged_bio+0x256/0x6a0 [ 821.798256][ T1030] __submit_merged_write_cond+0x3c9/0x4e0 [ 821.798370][ T1030] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 821.798685][ T1030] f2fs_write_data_pages+0x287e/0x34f0 [ 821.798961][ T1030] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 821.799101][ T1030] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 821.799334][ T1030] ? __lock_acquire+0x6b5/0x2cf0 [ 821.799418][ T1030] ? __lock_acquire+0x6b5/0x2cf0 [ 821.799607][ T1030] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 821.799721][ T1030] do_writepages+0x32e/0x550 [ 821.799840][ T1030] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 821.799925][ T1030] ? reacquire_held_locks+0x104/0x190 [ 821.799960][ T1030] ? rt_spin_lock+0x1e0/0x400 [ 821.800004][ T1030] __writeback_single_inode+0x133/0x10e0 [ 821.800053][ T1030] ? rt_spin_unlock+0x160/0x200 [ 821.800210][ T1030] writeback_sb_inodes+0x97f/0x1980 [ 821.800355][ T1030] ? lockdep_hardirqs_on+0x7a/0x110 [ 821.800484][ T1030] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 821.800728][ T1030] ? rcu_is_watching+0x15/0xb0 [ 821.800838][ T1030] wb_writeback+0x445/0xb00 [ 821.800950][ T1030] ? queue_io+0x231/0x440 [ 821.801026][ T1030] ? __pfx_wb_writeback+0x10/0x10 [ 821.801174][ T1030] wb_workfn+0x3fd/0xf20 [ 821.801259][ T1030] ? __lock_acquire+0x6b5/0x2cf0 [ 821.801349][ T1030] ? look_up_lock_class+0x57/0x110 [ 821.801457][ T1030] ? __pfx_wb_workfn+0x10/0x10 [ 821.801501][ T1030] ? do_raw_spin_lock+0x12b/0x2f0 [ 821.801578][ T1030] ? lock_acquire+0x106/0x350 [ 821.801680][ T1030] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 821.801773][ T1030] ? process_one_work+0x8b7/0x1710 [ 821.801866][ T1030] ? process_one_work+0x8b7/0x1710 [ 821.801981][ T1030] ? process_one_work+0x8b7/0x1710 [ 821.802050][ T1030] process_one_work+0x9a3/0x1710 [ 821.802217][ T1030] ? __pfx_process_one_work+0x10/0x10 [ 821.802286][ T1030] ? do_raw_spin_lock+0x12b/0x2f0 [ 821.802416][ T1030] worker_thread+0xba8/0x11e0 [ 821.802540][ T1030] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 821.802630][ T1030] ? __kthread_parkme+0x7a/0x1f0 [ 821.802661][ T1030] ? __kthread_parkme+0x19c/0x1f0 [ 821.802696][ T1030] kthread+0x388/0x470 [ 821.802730][ T1030] ? __pfx_worker_thread+0x10/0x10 [ 821.802757][ T1030] ? __pfx_kthread+0x10/0x10 [ 821.802863][ T1030] ret_from_fork+0x514/0xb70 [ 821.802987][ T1030] ? __pfx_ret_from_fork+0x10/0x10 [ 821.803074][ T1030] ? __switch_to+0xc79/0x1410 [ 821.803145][ T1030] ? __pfx_kthread+0x10/0x10 [ 821.803261][ T1030] ret_from_fork_asm+0x1a/0x30 [ 821.803393][ T1030] [ 821.845673][ T1030] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 822.240189][ T9115] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 822.281275][ T9115] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 822.332056][ T9115] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 822.333317][ T9115] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 822.334108][ T9115] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 822.476240][ T9115] Bluetooth: hci3: command tx timeout [ 822.748602][ T8098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 822.866934][ T8098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 822.948474][ T8098] bond0 (unregistering): Released all slaves [ 822.967766][T10368] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 823.078478][T10368] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 823.587645][T10652] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.588069][T10652] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.588359][T10652] bridge_slave_0: entered allmulticast mode [ 823.591383][T10652] bridge_slave_0: entered promiscuous mode [ 823.731850][T10652] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.732307][T10652] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.732680][T10652] bridge_slave_1: entered allmulticast mode [ 823.761955][T10652] bridge_slave_1: entered promiscuous mode [ 823.889511][T10823] netlink: 12 bytes leftover after parsing attributes in process `syz.3.939'. [ 824.678661][ T5612] Bluetooth: hci5: command tx timeout [ 825.934342][T10652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 826.239710][T10652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 826.488975][ T8098] hsr_slave_0: left promiscuous mode [ 826.526298][ T8098] hsr_slave_1: left promiscuous mode [ 826.527260][ T8098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 826.567484][ T8098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 826.706387][ T8098] hsr_slave_0: left promiscuous mode [ 826.716685][ T37] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 826.718126][ T5612] Bluetooth: hci5: command tx timeout [ 826.726383][ T8098] hsr_slave_1: left promiscuous mode [ 826.729697][ T8098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 826.767181][ T8098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 826.885074][ T37] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 826.885106][ T37] usb 4-1: config 0 has no interface number 0 [ 826.908126][ T37] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 826.908160][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.908182][ T37] usb 4-1: Product: syz [ 826.908198][ T37] usb 4-1: Manufacturer: syz [ 826.908213][ T37] usb 4-1: SerialNumber: syz [ 826.983309][ T37] usb 4-1: config 0 descriptor?? [ 827.285838][T10842] loop0: detected capacity change from 0 to 40427 [ 827.301402][T10842] F2FS-fs (loop0): invalid crc value [ 827.310684][ T8098] hsr_slave_0: left promiscuous mode [ 827.440688][T10842] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 827.452047][T10842] F2FS-fs (loop0): Start checkpoint disabled! [ 827.511912][T10842] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 827.514302][T10842] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 827.524175][ T38] audit: type=1800 audit(1777363524.533:26): pid=10842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.945" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 827.813759][ T8098] hsr_slave_1: left promiscuous mode [ 827.814983][ T8098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 828.093993][T10848] bio_check_eod: 176 callbacks suppressed [ 828.094046][T10848] syz.0.945: attempt to access beyond end of device [ 828.094046][T10848] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 828.101216][T10848] syz.0.945: attempt to access beyond end of device [ 828.101216][T10848] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 828.107098][T10848] syz.0.945: attempt to access beyond end of device [ 828.107098][T10848] loop0: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 828.112419][T10848] syz.0.945: attempt to access beyond end of device [ 828.112419][T10848] loop0: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 828.117244][T10848] syz.0.945: attempt to access beyond end of device [ 828.117244][T10848] loop0: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 828.132185][T10848] syz.0.945: attempt to access beyond end of device [ 828.132185][T10848] loop0: rw=2049, sector=45136, nr_sectors = 16 limit=40427 [ 828.137158][T10848] syz.0.945: attempt to access beyond end of device [ 828.137158][T10848] loop0: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 828.141660][T10848] syz.0.945: attempt to access beyond end of device [ 828.141660][T10848] loop0: rw=2049, sector=45160, nr_sectors = 8 limit=40427 [ 828.145357][T10848] syz.0.945: attempt to access beyond end of device [ 828.145357][T10848] loop0: rw=2049, sector=45168, nr_sectors = 8 limit=40427 [ 828.149775][T10848] syz.0.945: attempt to access beyond end of device [ 828.149775][T10848] loop0: rw=2049, sector=45176, nr_sectors = 8 limit=40427 [ 828.485771][ T8098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 829.077132][ T5612] Bluetooth: hci5: command tx timeout [ 829.428344][ T8111] CPU: 0 UID: 0 PID: 8111 Comm: kworker/u8:23 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 829.428380][ T8111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 829.428396][ T8111] Workqueue: writeback wb_workfn (flush-7:0) [ 829.428434][ T8111] Call Trace: [ 829.428443][ T8111] [ 829.428452][ T8111] dump_stack_lvl+0xe8/0x150 [ 829.428487][ T8111] f2fs_stop_checkpoint+0x383/0x540 [ 829.428531][ T8111] f2fs_write_end_io+0x1274/0x1740 [ 829.428579][ T8111] __submit_merged_bio+0x256/0x6a0 [ 829.428619][ T8111] __submit_merged_write_cond+0x3c9/0x4e0 [ 829.428661][ T8111] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 829.428720][ T8111] f2fs_write_data_pages+0x287e/0x34f0 [ 829.428795][ T8111] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 829.428855][ T8111] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 829.428925][ T8111] ? __lock_acquire+0x6b5/0x2cf0 [ 829.429004][ T8111] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 829.429044][ T8111] do_writepages+0x32e/0x550 [ 829.429082][ T8111] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 829.429118][ T8111] ? reacquire_held_locks+0x104/0x190 [ 829.429142][ T8111] ? rt_spin_lock+0x1e0/0x400 [ 829.429185][ T8111] __writeback_single_inode+0x133/0x10e0 [ 829.429222][ T8111] ? rt_spin_unlock+0x160/0x200 [ 829.429256][ T8111] writeback_sb_inodes+0x97f/0x1980 [ 829.429308][ T8111] ? lockdep_hardirqs_on+0x7a/0x110 [ 829.429356][ T8111] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 829.429458][ T8111] ? rcu_is_watching+0x15/0xb0 [ 829.429494][ T8111] wb_writeback+0x445/0xb00 [ 829.429529][ T8111] ? queue_io+0x231/0x440 [ 829.429568][ T8111] ? __pfx_wb_writeback+0x10/0x10 [ 829.429617][ T8111] wb_workfn+0x3fd/0xf20 [ 829.429641][ T8111] ? __lock_acquire+0x6b5/0x2cf0 [ 829.429673][ T8111] ? look_up_lock_class+0x57/0x110 [ 829.429714][ T8111] ? __pfx_wb_workfn+0x10/0x10 [ 829.429744][ T8111] ? do_raw_spin_lock+0x12b/0x2f0 [ 829.429771][ T8111] ? lock_acquire+0x106/0x350 [ 829.429809][ T8111] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 829.429853][ T8111] ? process_one_work+0x8b7/0x1710 [ 829.429884][ T8111] ? process_one_work+0x8b7/0x1710 [ 829.429924][ T8111] ? process_one_work+0x8b7/0x1710 [ 829.429951][ T8111] process_one_work+0x9a3/0x1710 [ 829.430004][ T8111] ? __pfx_process_one_work+0x10/0x10 [ 829.430031][ T8111] ? do_raw_spin_lock+0x12b/0x2f0 [ 829.430079][ T8111] worker_thread+0xba8/0x11e0 [ 829.430139][ T8111] kthread+0x388/0x470 [ 829.430175][ T8111] ? __pfx_worker_thread+0x10/0x10 [ 829.430202][ T8111] ? __pfx_kthread+0x10/0x10 [ 829.430239][ T8111] ret_from_fork+0x514/0xb70 [ 829.430273][ T8111] ? __pfx_ret_from_fork+0x10/0x10 [ 829.430305][ T8111] ? __switch_to+0xc79/0x1410 [ 829.430331][ T8111] ? __pfx_kthread+0x10/0x10 [ 829.430366][ T8111] ret_from_fork_asm+0x1a/0x30 [ 829.430415][ T8111] [ 829.625249][ T8111] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 830.301896][ T37] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 830.301934][ T37] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 830.302238][ T37] asix 4-1:0.251: probe with driver asix failed with error -5 [ 830.387150][ T37] usb 4-1: USB disconnect, device number 24 [ 830.466893][T10852] netlink: 12 bytes leftover after parsing attributes in process `syz.3.947'. [ 831.116800][ T5612] Bluetooth: hci5: command tx timeout [ 831.598602][ T8098] team0 (unregistering): Port device team_slave_1 removed [ 831.677636][ T8098] team0 (unregistering): Port device team_slave_0 removed [ 832.136957][ T8098] team0 (unregistering): Port device team_slave_1 removed [ 832.187138][ T8098] team0 (unregistering): Port device team_slave_0 removed [ 832.617131][ T8098] team0 (unregistering): Port device team_slave_1 removed [ 832.652808][ T8098] team0 (unregistering): Port device team_slave_0 removed [ 832.858320][T10858] ±ÿþ€: renamed from team_slave_1 (while UP) [ 833.097504][T10652] team0: Port device team_slave_0 added [ 833.420409][T10652] team0: Port device team_slave_1 added [ 835.106780][T10652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 835.106793][T10652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 835.106815][T10652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 835.137624][T10652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 835.137644][T10652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 835.137677][T10652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 835.682725][T10652] hsr_slave_0: entered promiscuous mode [ 835.685467][T10652] hsr_slave_1: entered promiscuous mode [ 835.701392][T10652] debugfs: 'hsr0' already exists in 'hsr' [ 835.701423][T10652] Cannot create hsr debugfs directory [ 838.216964][T10898] netlink: 12 bytes leftover after parsing attributes in process `syz.3.955'. [ 838.419547][ T5766] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 838.525858][T10751] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.534488][T10751] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.534868][T10751] bridge_slave_0: entered allmulticast mode [ 838.552691][T10751] bridge_slave_0: entered promiscuous mode [ 838.568621][ T5766] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 838.568675][ T5766] usb 1-1: config 0 has no interface number 0 [ 838.571710][ T5766] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 838.571744][ T5766] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.571767][ T5766] usb 1-1: Product: syz [ 838.571784][ T5766] usb 1-1: Manufacturer: syz [ 838.571807][ T5766] usb 1-1: SerialNumber: syz [ 838.631909][ T5766] usb 1-1: config 0 descriptor?? [ 838.658948][T10751] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.659334][T10751] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.659704][T10751] bridge_slave_1: entered allmulticast mode [ 838.689066][T10751] bridge_slave_1: entered promiscuous mode [ 839.026308][T10751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 839.157550][T10751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 839.771232][T10751] team0: Port device team_slave_0 added [ 840.244364][T10751] team0: Port device team_slave_1 added [ 841.291784][T10906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 841.292338][T10906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 841.360470][ T5766] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 841.360507][ T5766] asix 1-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 841.360835][ T5766] asix 1-1:0.251: probe with driver asix failed with error -71 [ 841.499082][ T5766] usb 1-1: USB disconnect, device number 30 [ 841.617792][T10810] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.619484][T10810] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.619880][T10810] bridge_slave_0: entered allmulticast mode [ 841.649727][T10810] bridge_slave_0: entered promiscuous mode [ 841.667219][T10751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 841.667239][T10751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 841.667270][T10751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 841.723008][T10810] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.724174][T10810] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.725347][T10810] bridge_slave_1: entered allmulticast mode [ 841.747648][T10810] bridge_slave_1: entered promiscuous mode [ 841.801611][T10751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 841.801627][T10751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 841.801650][T10751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 843.152661][T10810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 843.255494][T10810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 843.261056][T10652] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 843.384819][T10652] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 843.536808][T10652] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 843.585701][T10652] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 843.672376][T10652] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 843.720068][T10652] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 843.744491][T10751] hsr_slave_0: entered promiscuous mode [ 843.747636][T10751] hsr_slave_1: entered promiscuous mode [ 843.750034][T10751] debugfs: 'hsr0' already exists in 'hsr' [ 843.750061][T10751] Cannot create hsr debugfs directory [ 843.782821][T10810] team0: Port device team_slave_0 added [ 843.784067][T10652] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 843.856817][T10652] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 843.884610][T10810] team0: Port device team_slave_1 added [ 844.147550][T10810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 844.147564][T10810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 844.147586][T10810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 844.252329][T10810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 844.252343][T10810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 844.252365][T10810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 844.405941][T10933] loop3: detected capacity change from 0 to 256 [ 844.409163][T10933] exfat: Deprecated parameter 'utf8' [ 844.409213][T10933] exfat: Deprecated parameter 'namecase' [ 844.409298][T10933] exfat: Deprecated parameter 'namecase' [ 844.409319][T10933] exfat: Deprecated parameter 'utf8' [ 844.457716][T10933] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 844.458156][T10933] exFAT-fs (loop3): failed to test first cluster bit of root dir(5) [ 844.752486][T10936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.963'. [ 845.822951][T10939] loop0: detected capacity change from 0 to 256 [ 845.838417][T10939] exfat: Deprecated parameter 'utf8' [ 845.838477][T10939] exfat: Deprecated parameter 'namecase' [ 845.838600][T10939] exfat: Deprecated parameter 'namecase' [ 845.838627][T10939] exfat: Deprecated parameter 'utf8' [ 845.923302][T10939] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 845.923774][T10939] exFAT-fs (loop0): failed to test first cluster bit of root dir(5) [ 847.640929][ T5339] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 847.799039][ T5339] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 847.799062][ T5339] usb 4-1: config 0 has no interface number 0 [ 847.802756][ T5339] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 847.802780][ T5339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.802795][ T5339] usb 4-1: Product: syz [ 847.802806][ T5339] usb 4-1: Manufacturer: syz [ 847.802816][ T5339] usb 4-1: SerialNumber: syz [ 847.856689][ T5339] usb 4-1: config 0 descriptor?? [ 848.745844][T10810] hsr_slave_0: entered promiscuous mode [ 848.751913][T10810] hsr_slave_1: entered promiscuous mode [ 848.755620][T10810] debugfs: 'hsr0' already exists in 'hsr' [ 848.755669][T10810] Cannot create hsr debugfs directory [ 850.115478][T10943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 850.116713][T10943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 850.322665][ T5339] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 850.322699][ T5339] asix 4-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 850.323000][ T5339] asix 4-1:0.251: probe with driver asix failed with error -71 [ 850.362191][ T5339] usb 4-1: USB disconnect, device number 25 [ 851.825289][T10965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.971'. [ 851.841056][T10965] netlink: 48 bytes leftover after parsing attributes in process `syz.0.971'. [ 853.926174][ T5623] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 854.043615][T10652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 854.084128][T10751] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 854.283377][ T5623] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 854.283407][ T5623] usb 4-1: config 0 has no interface number 0 [ 854.304693][ T5623] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 854.304727][ T5623] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.304750][ T5623] usb 4-1: Product: syz [ 854.304765][ T5623] usb 4-1: Manufacturer: syz [ 854.304782][ T5623] usb 4-1: SerialNumber: syz [ 855.051263][ T5623] usb 4-1: config 0 descriptor?? [ 855.088351][T10751] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 855.359739][T10990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.980'. [ 855.419402][T10991] netlink: 48 bytes leftover after parsing attributes in process `syz.0.980'. [ 855.659063][T10751] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 855.779172][T10751] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 855.857002][T10751] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 856.064225][T10751] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 856.226278][ T8098] bridge_slave_1: left allmulticast mode [ 856.226318][ T8098] bridge_slave_1: left promiscuous mode [ 856.226620][ T8098] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.297948][ T8098] bridge_slave_0: left allmulticast mode [ 856.297988][ T8098] bridge_slave_0: left promiscuous mode [ 856.298293][ T8098] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.148348][T10980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 857.175549][T10980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 857.190297][ T8098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 857.193334][ T5623] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 857.193375][ T5623] asix 4-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 857.223703][ T5623] asix 4-1:0.251: probe with driver asix failed with error -71 [ 857.249567][ T5623] usb 4-1: USB disconnect, device number 26 [ 857.287159][ T8098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 857.378061][ T8098] bond0 (unregistering): Released all slaves [ 857.412791][T10751] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 857.584884][T10751] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 858.188656][T10652] 8021q: adding VLAN 0 to HW filter on device team0 [ 858.638514][ T8098] hsr_slave_0: left promiscuous mode [ 858.676225][ T8098] hsr_slave_1: left promiscuous mode [ 858.677458][ T8098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 858.729975][ T8098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 859.189023][ T8098] team0 (unregistering): Port device team_slave_1 removed [ 859.246925][ T8098] team0 (unregistering): Port device team_slave_0 removed [ 859.491837][T11020] netlink: 16 bytes leftover after parsing attributes in process `syz.0.986'. [ 859.613918][T11022] netlink: 12 bytes leftover after parsing attributes in process `syz.3.988'. [ 859.615867][T11022] netlink: 48 bytes leftover after parsing attributes in process `syz.3.988'. [ 861.408618][T11029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.989'. [ 861.492678][T11028] vlan0: entered promiscuous mode [ 861.555932][T11028] team0: Port device vlan0 added [ 861.788368][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.788552][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 861.983975][T11034] netlink: 24 bytes leftover after parsing attributes in process `syz.3.990'. [ 862.271835][T11036] kAFS: unable to lookup cell '(,c¾Ì' [ 862.468652][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 862.468851][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 864.011039][T10751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 864.358854][T10751] 8021q: adding VLAN 0 to HW filter on device team0 [ 864.404640][ T6008] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.404824][ T6008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 864.838013][ T8102] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.848766][ T8102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 864.922206][ T9115] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 864.990247][ T9115] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 865.039194][ T9115] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 865.067696][ T9115] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 865.109976][ T9115] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 866.427190][T11055] netlink: 16 bytes leftover after parsing attributes in process `syz.3.994'. [ 867.286365][ T5612] Bluetooth: hci4: command tx timeout [ 867.889224][ T5873] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 868.046304][ T5873] usb 4-1: Using ep0 maxpacket: 32 [ 868.063197][ T5873] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 868.063231][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.063254][ T5873] usb 4-1: Product: syz [ 868.063270][ T5873] usb 4-1: Manufacturer: syz [ 868.063285][ T5873] usb 4-1: SerialNumber: syz [ 868.156698][ T5873] usb 4-1: config 0 descriptor?? [ 868.162906][ T5873] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 869.392367][ T5612] Bluetooth: hci4: command tx timeout [ 869.393665][ T5873] gspca_ov534_9: reg_w failed -110 [ 870.066064][ T5873] gspca_ov534_9: Unknown sensor 0000 [ 870.066168][ T5873] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 870.073970][ T5873] usb 4-1: USB disconnect, device number 27 [ 870.617279][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.640747][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.448065][ T5612] Bluetooth: hci4: command tx timeout [ 873.521683][ T5612] Bluetooth: hci4: command tx timeout [ 873.695434][T10810] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 873.750857][T10810] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 873.753763][T10810] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 873.806617][T10810] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 874.126659][T10810] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 874.171757][T10810] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 874.187587][T10810] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 874.220450][T10810] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 874.733218][ T9115] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 874.776212][ T9115] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 874.794008][ T9115] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 874.796457][ T9115] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 874.836310][ T9115] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 874.958384][T11130] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1001'. [ 874.964759][T11130] kAFS: unable to lookup cell '(,c¾Ì' [ 875.526606][T11125] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1002'. [ 877.116387][ T5612] Bluetooth: hci1: command tx timeout [ 879.206212][ T5612] Bluetooth: hci1: command tx timeout [ 879.956357][ T6008] bridge_slave_1: left allmulticast mode [ 879.956399][ T6008] bridge_slave_1: left promiscuous mode [ 879.956786][ T6008] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.020037][ T6008] bridge_slave_0: left allmulticast mode [ 880.020078][ T6008] bridge_slave_0: left promiscuous mode [ 880.020321][ T6008] bridge0: port 1(bridge_slave_0) entered disabled state [ 880.176140][T11002] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 880.427310][T11002] usb 1-1: Using ep0 maxpacket: 32 [ 880.434925][T11002] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 880.434960][T11002] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.434983][T11002] usb 1-1: Product: syz [ 880.434999][T11002] usb 1-1: Manufacturer: syz [ 880.435015][T11002] usb 1-1: SerialNumber: syz [ 880.461349][T11002] usb 1-1: config 0 descriptor?? [ 880.747917][T11002] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 881.285933][ T5612] Bluetooth: hci1: command tx timeout [ 881.639422][T11002] gspca_ov534_9: reg_w failed -110 [ 881.969877][ T6008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 882.027269][ T6008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 882.046188][T11002] gspca_ov534_9: Unknown sensor 0000 [ 882.046299][T11002] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 882.066209][T11002] usb 1-1: USB disconnect, device number 31 [ 882.095640][ T6008] bond0 (unregistering): Released all slaves [ 882.355313][T11047] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.356743][T11047] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.357111][T11047] bridge_slave_0: entered allmulticast mode [ 882.500086][T11047] bridge_slave_0: entered promiscuous mode [ 882.523914][T11047] bridge0: port 2(bridge_slave_1) entered blocking state [ 882.529258][T11047] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.532525][T11047] bridge_slave_1: entered allmulticast mode [ 882.552651][T11047] bridge_slave_1: entered promiscuous mode [ 882.817465][T11047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 882.863446][T11047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 883.769599][ T5612] Bluetooth: hci1: command tx timeout [ 884.042449][ T6008] hsr_slave_0: left promiscuous mode [ 884.225261][ T6008] hsr_slave_1: left promiscuous mode [ 884.227668][ T6008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 884.261434][ T6008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 884.613734][T11211] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1012'. [ 884.813382][T11211] kAFS: unable to lookup cell '(,c¾Ì' [ 884.860795][ T9115] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 884.956403][ T9115] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 884.980749][ T9115] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 885.006333][ T9115] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 885.041318][ T9115] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 885.846912][ T6008] team0 (unregistering): Port device team_slave_1 removed [ 885.916844][ T6008] team0 (unregistering): Port device team_slave_0 removed [ 886.658583][T11180] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1010'. [ 886.812114][T10615] IPVS: starting estimator thread 0... [ 887.016890][T11226] IPVS: using max 9 ests per chain, 21600 per kthread [ 887.096187][ T5720] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 888.677419][ T5612] Bluetooth: hci3: command tx timeout [ 888.948730][ T5720] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 888.948788][ T5720] usb 4-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 888.948814][ T5720] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.035326][ T5720] usb 4-1: config 0 descriptor?? [ 889.036784][T11228] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 889.166182][T11047] team0: Port device team_slave_0 added [ 889.286949][T11047] team0: Port device team_slave_1 added [ 889.652289][ T5720] usbhid 4-1:0.0: can't add hid device: -71 [ 889.652436][ T5720] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 889.683954][ T5720] usb 4-1: USB disconnect, device number 28 [ 890.247327][T11047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 890.247346][T11047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 890.247377][T11047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 890.322827][T11047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 890.322846][T11047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 890.322878][T11047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 890.754847][T11047] hsr_slave_0: entered promiscuous mode [ 890.797430][T11047] hsr_slave_1: entered promiscuous mode [ 890.799684][T11047] debugfs: 'hsr0' already exists in 'hsr' [ 890.799719][T11047] Cannot create hsr debugfs directory [ 890.933624][ T5612] Bluetooth: hci3: command tx timeout [ 891.768623][T11291] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1020'. [ 891.997548][T11291] kAFS: unable to lookup cell '(,c¾Ì' [ 892.966484][ T9115] Bluetooth: hci3: command tx timeout [ 893.578860][T11297] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1024'. [ 893.677636][T11128] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.678107][T11128] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.678461][T11128] bridge_slave_0: entered allmulticast mode [ 893.730894][T11128] bridge_slave_0: entered promiscuous mode [ 893.847296][T11128] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.849956][T11128] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.850347][T11128] bridge_slave_1: entered allmulticast mode [ 893.907272][T11128] bridge_slave_1: entered promiscuous mode [ 895.048135][ T9115] Bluetooth: hci3: command tx timeout [ 897.388313][ T5720] IPVS: starting estimator thread 0... [ 897.478206][T11324] IPVS: using max 11 ests per chain, 26400 per kthread [ 897.654497][ T5268] 8021q: adding VLAN 0 to HW filter on device eth9 [ 897.914007][T11128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 897.918007][ T5720] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 898.111480][ T5720] usb 1-1: config 0 has no interfaces? [ 898.114065][ T5720] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 898.114097][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 898.114120][ T5720] usb 1-1: Product: syz [ 898.114141][ T5720] usb 1-1: Manufacturer: syz [ 898.114158][ T5720] usb 1-1: SerialNumber: syz [ 898.135578][ T5720] usb 1-1: config 0 descriptor?? [ 898.250783][T11128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 898.557779][T11128] team0: Port device team_slave_0 added [ 898.801344][T11128] team0: Port device team_slave_1 added [ 900.070132][T11128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 900.070146][T11128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 900.070167][T11128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 900.133544][T11128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 900.133563][T11128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 900.133590][T11128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 900.705258][ T5593] usb 1-1: USB disconnect, device number 32 [ 900.906391][T11128] hsr_slave_0: entered promiscuous mode [ 900.909054][T11128] hsr_slave_1: entered promiscuous mode [ 900.911076][T11128] debugfs: 'hsr0' already exists in 'hsr' [ 900.911100][T11128] Cannot create hsr debugfs directory [ 904.886414][ T821] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 905.051222][ T821] usb 4-1: config 0 has no interfaces? [ 905.070385][ T821] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 905.070417][ T821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 905.070437][ T821] usb 4-1: Product: syz [ 905.070450][ T821] usb 4-1: Manufacturer: syz [ 905.070463][ T821] usb 4-1: SerialNumber: syz [ 905.109200][ T821] usb 4-1: config 0 descriptor?? [ 905.421678][T11212] bridge0: port 1(bridge_slave_0) entered blocking state [ 905.422039][T11212] bridge0: port 1(bridge_slave_0) entered disabled state [ 905.422409][T11212] bridge_slave_0: entered allmulticast mode [ 905.435327][T11212] bridge_slave_0: entered promiscuous mode [ 905.464789][T11212] bridge0: port 2(bridge_slave_1) entered blocking state [ 905.469368][T11212] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.473258][T11212] bridge_slave_1: entered allmulticast mode [ 905.533828][T11212] bridge_slave_1: entered promiscuous mode [ 905.778163][T11047] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 905.854199][T11047] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 905.952527][T11047] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 905.991513][T11047] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 906.052748][T11047] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 906.108028][T11047] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 906.140591][T11212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 906.144184][T11047] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 906.224067][T11047] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 906.253930][T11212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 906.514041][T11212] team0: Port device team_slave_0 added [ 906.594041][T11212] team0: Port device team_slave_1 added [ 906.836711][T11212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 906.836731][T11212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 906.836763][T11212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 906.988323][T11212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 906.988345][T11212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 906.988377][T11212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 907.459465][ T5268] 8021q: adding VLAN 0 to HW filter on device eth10 [ 907.694178][T11212] hsr_slave_0: entered promiscuous mode [ 907.705432][T11212] hsr_slave_1: entered promiscuous mode [ 907.715664][T11212] debugfs: 'hsr0' already exists in 'hsr' [ 907.715694][T11212] Cannot create hsr debugfs directory [ 907.736775][T10615] usb 4-1: USB disconnect, device number 29 [ 909.736226][ T6008] bridge_slave_1: left allmulticast mode [ 909.736265][ T6008] bridge_slave_1: left promiscuous mode [ 909.736738][ T6008] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.848853][ T6008] bridge_slave_0: left allmulticast mode [ 909.848894][ T6008] bridge_slave_0: left promiscuous mode [ 909.849204][ T6008] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.013908][ T6008] bridge_slave_1: left allmulticast mode [ 910.013947][ T6008] bridge_slave_1: left promiscuous mode [ 910.014229][ T6008] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.099952][ T6008] bridge_slave_0: left allmulticast mode [ 910.099995][ T6008] bridge_slave_0: left promiscuous mode [ 910.100301][ T6008] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.796176][ T37] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 910.955842][ T37] usb 4-1: config 0 has no interfaces? [ 910.971288][ T37] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 910.971324][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 910.971347][ T37] usb 4-1: Product: syz [ 910.971363][ T37] usb 4-1: Manufacturer: syz [ 910.971379][ T37] usb 4-1: SerialNumber: syz [ 911.010092][ T37] usb 4-1: config 0 descriptor?? [ 911.057515][ T6008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 911.136905][ T6008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 911.220238][ T6008] bond0 (unregistering): Released all slaves [ 912.114114][ T6008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 912.225600][T11437] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1056'. [ 912.244789][ T6008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 912.261047][T11437] kAFS: unable to lookup cell '(,c¾Ì' [ 912.286288][ T6008] bond0 (unregistering): Released all slaves [ 913.631162][ T6008] hsr_slave_0: left promiscuous mode [ 913.643951][T11002] usb 4-1: USB disconnect, device number 30 [ 913.725137][ T6008] hsr_slave_1: left promiscuous mode [ 913.740798][ T6008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 913.979725][ T6008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 915.177372][ T6008] hsr_slave_0: left promiscuous mode [ 915.216177][ T6008] hsr_slave_1: left promiscuous mode [ 915.230970][ T6008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 915.256875][ T6008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 915.706821][T11450] loop3: detected capacity change from 0 to 40427 [ 915.809930][T11450] F2FS-fs (loop3): invalid crc value [ 915.920131][T11450] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 915.934235][T11450] F2FS-fs (loop3): Start checkpoint disabled! [ 916.057073][T11450] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 916.062807][T11450] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 916.075904][ T38] audit: type=1800 audit(1777363613.083:27): pid=11450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1060" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 917.190079][ T1836] bio_check_eod: 176 callbacks suppressed [ 917.190100][ T1836] kworker/u8:11: attempt to access beyond end of device [ 917.190100][ T1836] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 917.190163][ T1836] CPU: 0 UID: 0 PID: 1836 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 917.190189][ T1836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 917.190204][ T1836] Workqueue: writeback wb_workfn (flush-7:3) [ 917.190242][ T1836] Call Trace: [ 917.190251][ T1836] [ 917.190260][ T1836] dump_stack_lvl+0xe8/0x150 [ 917.190294][ T1836] f2fs_stop_checkpoint+0x383/0x540 [ 917.190332][ T1836] f2fs_write_end_io+0x1274/0x1740 [ 917.190379][ T1836] __submit_merged_bio+0x256/0x6a0 [ 917.190419][ T1836] __submit_merged_write_cond+0x3c9/0x4e0 [ 917.190461][ T1836] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 917.190518][ T1836] f2fs_write_data_pages+0x287e/0x34f0 [ 917.190593][ T1836] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 917.190638][ T1836] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 917.190700][ T1836] ? __lock_acquire+0x6b5/0x2cf0 [ 917.190759][ T1836] ? __lock_acquire+0x6b5/0x2cf0 [ 917.190822][ T1836] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 917.190859][ T1836] do_writepages+0x32e/0x550 [ 917.190897][ T1836] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 917.190926][ T1836] ? reacquire_held_locks+0x104/0x190 [ 917.190950][ T1836] ? rt_spin_lock+0x1e0/0x400 [ 917.190988][ T1836] __writeback_single_inode+0x133/0x10e0 [ 917.191023][ T1836] ? rt_spin_unlock+0x160/0x200 [ 917.191054][ T1836] writeback_sb_inodes+0x97f/0x1980 [ 917.191100][ T1836] ? lockdep_hardirqs_on+0x7a/0x110 [ 917.191139][ T1836] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 917.191213][ T1836] ? rcu_is_watching+0x15/0xb0 [ 917.191247][ T1836] wb_writeback+0x445/0xb00 [ 917.191282][ T1836] ? queue_io+0x231/0x440 [ 917.191319][ T1836] ? __pfx_wb_writeback+0x10/0x10 [ 917.191367][ T1836] wb_workfn+0x3fd/0xf20 [ 917.191390][ T1836] ? __lock_acquire+0x6b5/0x2cf0 [ 917.191422][ T1836] ? look_up_lock_class+0x57/0x110 [ 917.191463][ T1836] ? __pfx_wb_workfn+0x10/0x10 [ 917.191493][ T1836] ? do_raw_spin_lock+0x12b/0x2f0 [ 917.191521][ T1836] ? lock_acquire+0x106/0x350 [ 917.191557][ T1836] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 917.191590][ T1836] ? process_one_work+0x8b7/0x1710 [ 917.191619][ T1836] ? process_one_work+0x8b7/0x1710 [ 917.191662][ T1836] ? process_one_work+0x8b7/0x1710 [ 917.191688][ T1836] process_one_work+0x9a3/0x1710 [ 917.191748][ T1836] ? __pfx_process_one_work+0x10/0x10 [ 917.191775][ T1836] ? do_raw_spin_lock+0x12b/0x2f0 [ 917.191824][ T1836] worker_thread+0xba8/0x11e0 [ 917.191865][ T1836] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 917.191903][ T1836] ? __kthread_parkme+0x7a/0x1f0 [ 917.191934][ T1836] ? __kthread_parkme+0x19c/0x1f0 [ 917.191973][ T1836] kthread+0x388/0x470 [ 917.192009][ T1836] ? __pfx_worker_thread+0x10/0x10 [ 917.192037][ T1836] ? __pfx_kthread+0x10/0x10 [ 917.192074][ T1836] ret_from_fork+0x514/0xb70 [ 917.192109][ T1836] ? __pfx_ret_from_fork+0x10/0x10 [ 917.192139][ T1836] ? __switch_to+0xc79/0x1410 [ 917.192167][ T1836] ? __pfx_kthread+0x10/0x10 [ 917.192203][ T1836] ret_from_fork_asm+0x1a/0x30 [ 917.192254][ T1836] [ 917.205919][ T1836] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 918.224186][T11460] loop3: detected capacity change from 0 to 512 [ 918.290905][T11460] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 918.291076][T11460] ext4 filesystem being mounted at /408/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 918.417124][ T6008] team0 (unregistering): Port device team_slave_1 removed [ 918.521733][ T6008] team0 (unregistering): Port device team_slave_0 removed [ 919.363778][ T5609] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 919.578578][ T6008] team0 (unregistering): Port device team_slave_1 removed [ 919.639556][ T6008] team0 (unregistering): Port device team_slave_0 removed [ 919.769731][T11476] loop3: detected capacity change from 0 to 256 [ 919.771615][T11476] exfat: Deprecated parameter 'utf8' [ 919.771678][T11476] exfat: Deprecated parameter 'namecase' [ 919.771783][T11476] exfat: Deprecated parameter 'namecase' [ 919.771809][T11476] exfat: Deprecated parameter 'utf8' [ 919.814653][T11476] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 919.815079][T11476] exFAT-fs (loop3): failed to test first cluster bit of root dir(5) [ 921.163070][T11481] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1068'. [ 921.164437][T11481] kAFS: unable to lookup cell '(,c¾Ì' [ 921.633672][T11484] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1069'. [ 921.766507][T11047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 922.584692][T11047] 8021q: adding VLAN 0 to HW filter on device team0 [ 922.621242][ T8111] bridge0: port 1(bridge_slave_0) entered blocking state [ 922.621435][ T8111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 922.744798][ T825] bridge0: port 2(bridge_slave_1) entered blocking state [ 922.745037][ T825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 924.665314][ T5268] 8021q: adding VLAN 0 to HW filter on device eth11 [ 925.268288][T11512] loop3: detected capacity change from 0 to 4096 [ 925.495499][T11512] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 925.938285][ T5612] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 926.026589][ T5612] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 926.030450][ T5612] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 926.041464][ T5612] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 926.052561][ T5612] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 926.512763][T11514] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1072'. [ 926.792324][ T5609] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 927.900593][T11532] loop3: detected capacity change from 0 to 512 [ 928.272294][ T9115] Bluetooth: hci5: command tx timeout [ 928.417436][T11532] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.1075: inode has both inline data and extents flags [ 928.417527][T11532] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 928.425586][T11532] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1075: couldn't read orphan inode 15 (err -117) [ 928.425652][T11532] loop3: lost filesystem error report for type 5 error -117 [ 928.431952][T11532] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 928.446126][T11532] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1075'. [ 930.400133][ T9115] Bluetooth: hci5: command tx timeout [ 930.449240][ T5609] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 931.849907][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.850027][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.477606][ T9115] Bluetooth: hci5: command tx timeout [ 933.859065][T11573] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1080'. [ 933.860521][T11573] kAFS: unable to lookup cell '(,c¾Ì' [ 934.556167][ T9115] Bluetooth: hci5: command tx timeout [ 937.520841][ T5612] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 937.656774][ T5612] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 937.658886][ T5612] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 937.660267][ T5612] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 937.705112][ T5612] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 937.905326][T11609] loop3: detected capacity change from 0 to 4096 [ 938.182739][T11609] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 939.380602][ T5609] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 939.848080][ T5612] Bluetooth: hci4: command tx timeout [ 940.935776][T11517] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.954013][T11517] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.954404][T11517] bridge_slave_0: entered allmulticast mode [ 940.975734][T11517] bridge_slave_0: entered promiscuous mode [ 941.918668][ T5612] Bluetooth: hci4: command tx timeout [ 942.322096][T11517] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.322389][T11517] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.322718][T11517] bridge_slave_1: entered allmulticast mode [ 942.713283][T11517] bridge_slave_1: entered promiscuous mode [ 943.513128][T11517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 943.828970][T11517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 944.008979][ T5612] Bluetooth: hci4: command tx timeout [ 944.076703][T11517] team0: Port device team_slave_0 added [ 944.167074][T11517] team0: Port device team_slave_1 added [ 944.474931][T11517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 944.474948][T11517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 944.474972][T11517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 944.542652][T11517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 944.542671][T11517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 944.542703][T11517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 944.798419][T11662] loop0: detected capacity change from 0 to 64 [ 944.931350][ T9115] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 945.002893][ T9115] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 945.029014][T11668] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1088'. [ 945.030071][T11668] kAFS: unable to lookup cell '(,c¾Ì' [ 945.061029][ T9115] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 945.100340][ T9115] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 945.169973][ T9115] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 945.621138][ T6008] bridge_slave_1: left allmulticast mode [ 945.621180][ T6008] bridge_slave_1: left promiscuous mode [ 945.621506][ T6008] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.817872][ T6008] bridge_slave_0: left allmulticast mode [ 945.817913][ T6008] bridge_slave_0: left promiscuous mode [ 945.818214][ T6008] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.076170][ T5612] Bluetooth: hci4: command tx timeout [ 947.356997][ T5612] Bluetooth: hci1: command tx timeout [ 947.535166][T11682] loop0: detected capacity change from 0 to 4096 [ 947.785892][T11684] loop3: detected capacity change from 0 to 32768 [ 947.789371][T11684] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1091 (11684) [ 947.842880][T11684] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 947.842919][T11684] BTRFS info (device loop3): using sha256 checksum algorithm [ 947.945710][T11682] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 948.086516][T11684] BTRFS info (device loop3): rebuilding free space tree [ 948.327516][ T6008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 948.946734][T11684] BTRFS info (device loop3): disabling free space tree [ 948.946913][T11684] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 948.946943][T11684] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 948.993277][T11684] BTRFS info (device loop3): setting nodatasum [ 948.993309][T11684] BTRFS info (device loop3): setting nodatacow [ 948.993329][T11684] BTRFS info (device loop3): turning off barriers [ 948.993349][T11684] BTRFS info (device loop3): force clearing of disk cache [ 949.207969][ T6008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 949.249836][ T6008] bond0 (unregistering): Released all slaves [ 949.281835][T11684] loop3: detected capacity change from 32768 to 0 [ 949.449439][ T5612] Bluetooth: hci1: command tx timeout [ 949.536379][ T5607] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 950.075292][T11706] BTRFS error (device loop3): bdev /dev/loop3 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0 [ 951.412737][T11717] loop0: detected capacity change from 0 to 16 [ 951.775046][T11717] erofs (device loop0): mounted with root inode @ nid 36. [ 951.808653][T11717] syz.0.1093: attempt to access beyond end of device [ 951.808653][T11717] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 951.894201][T11717] syz.0.1093: attempt to access beyond end of device [ 951.894201][T11717] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 951.904165][T11717] erofs (device loop0): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 951.904292][T11717] erofs (device loop0): read error -117 @ 1 of nid 89 [ 952.075906][ T38] audit: type=1800 audit(1777363648.923:28): pid=11717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1093" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 952.408264][ T5612] Bluetooth: hci1: command tx timeout [ 952.563749][T11517] hsr_slave_0: entered promiscuous mode [ 952.572760][T11517] hsr_slave_1: entered promiscuous mode [ 952.575022][T11517] debugfs: 'hsr0' already exists in 'hsr' [ 952.575058][T11517] Cannot create hsr debugfs directory [ 953.813729][T11729] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1096'. [ 953.823089][T11729] kAFS: unable to lookup cell '(,c¾Ì' [ 954.338066][ T6008] hsr_slave_0: left promiscuous mode [ 954.362197][ T6008] hsr_slave_1: left promiscuous mode [ 954.363457][ T6008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 954.408937][ T6008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 954.448116][ T1432] BTRFS error (device loop3): bdev /dev/loop3 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0 [ 954.448640][ T1432] BTRFS error (device loop3): bdev /dev/loop3 errs: wr 3, rd 0, flush 0, corrupt 0, gen 0 [ 954.449924][ T5609] BTRFS error (device loop3 state A): Transaction aborted (error -5) [ 954.454418][ T5609] BTRFS: error (device loop3 state A) in __btrfs_free_extent:3425: errno=-5 IO failure [ 954.454531][ T5609] BTRFS info (device loop3 state EA): forced readonly [ 954.486201][ T5612] Bluetooth: hci1: command tx timeout [ 954.518740][ T5609] BTRFS error (device loop3 state EA): failed to run delayed ref for logical 5296128 num_bytes 12288 type 178 action 2 ref_mod 1: -5 [ 954.583605][ T5609] BTRFS: error (device loop3 state EA) in btrfs_run_delayed_refs:2247: errno=-5 IO failure [ 954.585594][ T5609] BTRFS info (device loop3 state EA): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 956.807431][ T6008] team0 (unregistering): Port device team_slave_1 removed [ 957.098404][T11752] loop0: detected capacity change from 0 to 40427 [ 957.115281][T11752] F2FS-fs (loop0): invalid crc value [ 957.238651][T11752] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 957.254998][T11752] F2FS-fs (loop0): Start checkpoint disabled! [ 957.307017][T11752] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 957.308537][T11752] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 957.329672][ T6008] team0 (unregistering): Port device team_slave_0 removed [ 957.613863][ T38] audit: type=1800 audit(1777363654.343:29): pid=11752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1097" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 957.881174][T11756] syz.0.1097: attempt to access beyond end of device [ 957.881174][T11756] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 957.891563][T11756] syz.0.1097: attempt to access beyond end of device [ 957.891563][T11756] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 957.896837][T11756] syz.0.1097: attempt to access beyond end of device [ 957.896837][T11756] loop0: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 957.901832][T11756] syz.0.1097: attempt to access beyond end of device [ 957.901832][T11756] loop0: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 957.906327][T11756] syz.0.1097: attempt to access beyond end of device [ 957.906327][T11756] loop0: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 957.916454][T11756] syz.0.1097: attempt to access beyond end of device [ 957.916454][T11756] loop0: rw=2049, sector=45136, nr_sectors = 16 limit=40427 [ 957.921218][T11756] syz.0.1097: attempt to access beyond end of device [ 957.921218][T11756] loop0: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 957.925852][T11756] syz.0.1097: attempt to access beyond end of device [ 957.925852][T11756] loop0: rw=2049, sector=45160, nr_sectors = 8 limit=40427 [ 957.930105][T11756] syz.0.1097: attempt to access beyond end of device [ 957.930105][T11756] loop0: rw=2049, sector=45168, nr_sectors = 8 limit=40427 [ 957.933936][T11756] syz.0.1097: attempt to access beyond end of device [ 957.933936][T11756] loop0: rw=2049, sector=45176, nr_sectors = 8 limit=40427 [ 958.914995][ T1836] CPU: 0 UID: 0 PID: 1836 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 958.915028][ T1836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 958.915043][ T1836] Workqueue: writeback wb_workfn (flush-7:0) [ 958.915081][ T1836] Call Trace: [ 958.915089][ T1836] [ 958.915099][ T1836] dump_stack_lvl+0xe8/0x150 [ 958.915132][ T1836] f2fs_stop_checkpoint+0x383/0x540 [ 958.915170][ T1836] f2fs_write_end_io+0x1274/0x1740 [ 958.915217][ T1836] __submit_merged_bio+0x256/0x6a0 [ 958.915258][ T1836] __submit_merged_write_cond+0x3c9/0x4e0 [ 958.915300][ T1836] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 958.915358][ T1836] f2fs_write_data_pages+0x287e/0x34f0 [ 958.915441][ T1836] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 958.915536][ T1836] ? __lock_acquire+0x6b5/0x2cf0 [ 958.915585][ T1836] ? ktime_get+0x45/0x220 [ 958.915616][ T1836] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 958.915672][ T1836] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 958.915711][ T1836] do_writepages+0x32e/0x550 [ 958.915748][ T1836] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 958.915777][ T1836] ? reacquire_held_locks+0x104/0x190 [ 958.915799][ T1836] ? rt_spin_lock+0x1e0/0x400 [ 958.915839][ T1836] __writeback_single_inode+0x133/0x10e0 [ 958.915874][ T1836] ? rt_spin_unlock+0x160/0x200 [ 958.915905][ T1836] writeback_sb_inodes+0x97f/0x1980 [ 958.915956][ T1836] ? lockdep_hardirqs_on+0x7a/0x110 [ 958.916000][ T1836] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 958.916073][ T1836] ? rcu_is_watching+0x15/0xb0 [ 958.916107][ T1836] wb_writeback+0x445/0xb00 [ 958.916142][ T1836] ? queue_io+0x231/0x440 [ 958.916179][ T1836] ? __pfx_wb_writeback+0x10/0x10 [ 958.916226][ T1836] wb_workfn+0x3fd/0xf20 [ 958.916248][ T1836] ? look_up_lock_class+0x57/0x110 [ 958.916288][ T1836] ? __pfx_wb_workfn+0x10/0x10 [ 958.916321][ T1836] ? do_raw_spin_unlock+0xf5/0x210 [ 958.916357][ T1836] ? process_one_work+0x8b7/0x1710 [ 958.916387][ T1836] ? process_one_work+0x8b7/0x1710 [ 958.916437][ T1836] ? process_one_work+0x8b7/0x1710 [ 958.916463][ T1836] process_one_work+0x9a3/0x1710 [ 958.916516][ T1836] ? __pfx_process_one_work+0x10/0x10 [ 958.916537][ T1836] ? do_raw_spin_lock+0x12b/0x2f0 [ 958.916575][ T1836] worker_thread+0xba8/0x11e0 [ 958.916606][ T1836] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 958.916638][ T1836] ? __kthread_parkme+0x7a/0x1f0 [ 958.916663][ T1836] ? __kthread_parkme+0x19c/0x1f0 [ 958.916694][ T1836] kthread+0x388/0x470 [ 958.916722][ T1836] ? __pfx_worker_thread+0x10/0x10 [ 958.916743][ T1836] ? __pfx_kthread+0x10/0x10 [ 958.916772][ T1836] ret_from_fork+0x514/0xb70 [ 958.916798][ T1836] ? __pfx_ret_from_fork+0x10/0x10 [ 958.916821][ T1836] ? __switch_to+0xc79/0x1410 [ 958.916843][ T1836] ? __pfx_kthread+0x10/0x10 [ 958.916872][ T1836] ret_from_fork_asm+0x1a/0x30 [ 958.916912][ T1836] [ 958.917120][ T1836] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 959.284224][T11750] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1094'. [ 959.288529][ T5268] 8021q: adding VLAN 0 to HW filter on device eth11 [ 959.741820][T11603] bridge0: port 1(bridge_slave_0) entered blocking state [ 959.742137][T11603] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.742505][T11603] bridge_slave_0: entered allmulticast mode [ 959.748719][T11603] bridge_slave_0: entered promiscuous mode [ 959.819007][T11603] bridge0: port 2(bridge_slave_1) entered blocking state [ 959.819276][T11603] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.819563][T11603] bridge_slave_1: entered allmulticast mode [ 959.822384][T11603] bridge_slave_1: entered promiscuous mode [ 960.019626][T11764] loop3: detected capacity change from 0 to 4096 [ 960.192409][T11764] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 961.244119][T11603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 961.382629][T11603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 961.455461][ T5609] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 961.481088][T11772] team0: Device vlan0 failed to change mtu [ 961.564729][T11603] team0: Port device team_slave_0 added [ 962.043412][T11603] team0: Port device team_slave_1 added [ 964.480504][T11603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 964.480522][T11603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 964.480554][T11603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 964.945151][T11786] loop3: detected capacity change from 0 to 40427 [ 964.955155][T11786] F2FS-fs (loop3): build fault injection rate: 19 [ 964.955179][T11786] F2FS-fs (loop3): build fault injection type: 0x3bfe8c [ 964.957125][T11786] F2FS-fs (loop3): invalid crc value [ 965.005883][T11786] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0x9d8/0x1810 [ 965.188359][T11795] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1104'. [ 965.208941][T11795] kAFS: unable to lookup cell '(,c¾Ì' [ 965.320277][T11786] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x221/0x410 [ 965.442698][T11786] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 965.753980][T11786] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 965.905447][T11786] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0x911/0x2060 [ 966.170297][T11603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 966.170312][T11603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 966.170334][T11603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 966.228246][T11798] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_new_inode_folio+0xed/0x140 [ 967.359155][T11603] hsr_slave_0: entered promiscuous mode [ 967.362122][T11603] hsr_slave_1: entered promiscuous mode [ 967.380212][T11603] debugfs: 'hsr0' already exists in 'hsr' [ 967.380234][T11603] Cannot create hsr debugfs directory [ 968.248186][T11804] loop0: detected capacity change from 0 to 40427 [ 968.282015][T11804] F2FS-fs (loop0): invalid crc value [ 968.398218][T11804] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 968.405583][T11804] F2FS-fs (loop0): Start checkpoint disabled! [ 968.449366][T11804] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 968.468222][T11804] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 968.474813][ T38] audit: type=1800 audit(1777363665.483:30): pid=11804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1105" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 968.895034][T11808] bio_check_eod: 176 callbacks suppressed [ 968.895059][T11808] syz.0.1105: attempt to access beyond end of device [ 968.895059][T11808] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 968.895675][T11808] syz.0.1105: attempt to access beyond end of device [ 968.895675][T11808] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 968.897263][T11808] syz.0.1105: attempt to access beyond end of device [ 968.897263][T11808] loop0: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 968.897728][T11808] syz.0.1105: attempt to access beyond end of device [ 968.897728][T11808] loop0: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 968.898174][T11808] syz.0.1105: attempt to access beyond end of device [ 968.898174][T11808] loop0: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 968.898873][T11808] syz.0.1105: attempt to access beyond end of device [ 968.898873][T11808] loop0: rw=2049, sector=45136, nr_sectors = 16 limit=40427 [ 968.899338][T11808] syz.0.1105: attempt to access beyond end of device [ 968.899338][T11808] loop0: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 968.899791][T11808] syz.0.1105: attempt to access beyond end of device [ 968.899791][T11808] loop0: rw=2049, sector=45160, nr_sectors = 8 limit=40427 [ 968.900248][T11808] syz.0.1105: attempt to access beyond end of device [ 968.900248][T11808] loop0: rw=2049, sector=45168, nr_sectors = 8 limit=40427 [ 968.900747][T11808] syz.0.1105: attempt to access beyond end of device [ 968.900747][T11808] loop0: rw=2049, sector=45176, nr_sectors = 8 limit=40427 [ 970.014092][ T3345] CPU: 0 UID: 0 PID: 3345 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 970.014120][ T3345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 970.014135][ T3345] Workqueue: writeback wb_workfn (flush-7:0) [ 970.014166][ T3345] Call Trace: [ 970.014173][ T3345] [ 970.014181][ T3345] dump_stack_lvl+0xe8/0x150 [ 970.014212][ T3345] f2fs_stop_checkpoint+0x383/0x540 [ 970.014243][ T3345] f2fs_write_end_io+0x1274/0x1740 [ 970.014278][ T3345] __submit_merged_bio+0x256/0x6a0 [ 970.014310][ T3345] __submit_merged_write_cond+0x3c9/0x4e0 [ 970.014343][ T3345] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 970.014387][ T3345] f2fs_write_data_pages+0x287e/0x34f0 [ 970.014454][ T3345] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 970.014505][ T3345] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 970.014573][ T3345] ? __lock_acquire+0x6b5/0x2cf0 [ 970.014617][ T3345] ? __lock_acquire+0x6b5/0x2cf0 [ 970.014664][ T3345] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 970.014695][ T3345] do_writepages+0x32e/0x550 [ 970.014726][ T3345] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 970.014751][ T3345] ? reacquire_held_locks+0x104/0x190 [ 970.014771][ T3345] ? rt_spin_lock+0x1e0/0x400 [ 970.014804][ T3345] __writeback_single_inode+0x133/0x10e0 [ 970.014840][ T3345] ? rt_spin_unlock+0x160/0x200 [ 970.014866][ T3345] writeback_sb_inodes+0x97f/0x1980 [ 970.014905][ T3345] ? lockdep_hardirqs_on+0x7a/0x110 [ 970.014939][ T3345] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 970.014996][ T3345] ? rcu_is_watching+0x15/0xb0 [ 970.015022][ T3345] wb_writeback+0x445/0xb00 [ 970.015049][ T3345] ? queue_io+0x231/0x440 [ 970.015079][ T3345] ? __pfx_wb_writeback+0x10/0x10 [ 970.015116][ T3345] wb_workfn+0x3fd/0xf20 [ 970.015134][ T3345] ? __lock_acquire+0x6b5/0x2cf0 [ 970.015160][ T3345] ? look_up_lock_class+0x57/0x110 [ 970.015198][ T3345] ? __pfx_wb_workfn+0x10/0x10 [ 970.015227][ T3345] ? do_raw_spin_lock+0x12b/0x2f0 [ 970.015252][ T3345] ? lock_acquire+0x106/0x350 [ 970.015279][ T3345] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 970.015305][ T3345] ? process_one_work+0x8b7/0x1710 [ 970.015328][ T3345] ? process_one_work+0x8b7/0x1710 [ 970.015359][ T3345] ? process_one_work+0x8b7/0x1710 [ 970.015380][ T3345] process_one_work+0x9a3/0x1710 [ 970.015420][ T3345] ? __pfx_process_one_work+0x10/0x10 [ 970.015440][ T3345] ? do_raw_spin_lock+0x12b/0x2f0 [ 970.015478][ T3345] worker_thread+0xba8/0x11e0 [ 970.015525][ T3345] kthread+0x388/0x470 [ 970.015557][ T3345] ? __pfx_worker_thread+0x10/0x10 [ 970.015588][ T3345] ? __pfx_kthread+0x10/0x10 [ 970.015619][ T3345] ret_from_fork+0x514/0xb70 [ 970.015648][ T3345] ? __pfx_ret_from_fork+0x10/0x10 [ 970.015674][ T3345] ? __switch_to+0xc79/0x1410 [ 970.015697][ T3345] ? __pfx_kthread+0x10/0x10 [ 970.015726][ T3345] ret_from_fork_asm+0x1a/0x30 [ 970.015767][ T3345] [ 970.044949][ C0] F2FS-fs (loop3): inject write IO error in f2fs_write_end_io of blk_update_request+0x57e/0xe60 [ 970.111080][ T3345] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 970.257026][ C0] CPU: 0 UID: 0 PID: 4962 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 970.257116][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 970.257160][ C0] Call Trace: [ 970.257184][ C0] [ 970.257218][ C0] dump_stack_lvl+0xe8/0x150 [ 970.257317][ C0] f2fs_stop_checkpoint+0x383/0x540 [ 970.257418][ C0] f2fs_write_end_io+0x1274/0x1740 [ 970.257549][ C0] blk_update_request+0x57e/0xe60 [ 970.257648][ C0] blk_mq_end_request+0x3e/0x70 [ 970.257714][ C0] blk_done_softirq+0x10a/0x160 [ 970.257800][ C0] handle_softirqs+0x1de/0x6d0 [ 970.257910][ C0] __local_bh_enable_ip+0x170/0x2b0 [ 970.257981][ C0] ? __alloc_skb+0x186/0x7d0 [ 970.258086][ C0] __alloc_skb+0x1aa/0x7d0 [ 970.258215][ C0] alloc_skb_with_frags+0xc8/0x760 [ 970.258340][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 970.258460][ C0] sock_alloc_send_pskb+0x884/0x9a0 [ 970.258527][ C0] ? reacquire_held_locks+0x104/0x190 [ 970.258607][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 970.258720][ C0] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 970.258801][ C0] ? sock_def_readable+0xae/0x550 [ 970.258883][ C0] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 970.258981][ C0] unix_dgram_sendmsg+0x460/0x18d0 [ 970.259040][ C0] ? __pfx_clockevents_program_event+0x10/0x10 [ 970.259175][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 970.259250][ C0] ? __schedule+0x16b4/0x54f0 [ 970.259338][ C0] ? aa_sock_msg_perm+0x107/0x200 [ 970.259362][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 970.259401][ C0] sock_sendmsg_nosec+0x112/0x150 [ 970.259506][ C0] __sys_sendto+0x402/0x590 [ 970.259637][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 970.259809][ C0] ? rcu_is_watching+0x15/0xb0 [ 970.259889][ C0] __x64_sys_sendto+0xde/0x100 [ 970.259979][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.260046][ C0] do_syscall_64+0x15f/0xf80 [ 970.260113][ C0] ? clear_bhb_loop+0x40/0x90 [ 970.260192][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.260260][ C0] RIP: 0033:0x7f50ea0ee407 [ 970.260326][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 970.260382][ C0] RSP: 002b:00007ffd7b951270 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 970.260443][ C0] RAX: ffffffffffffffda RBX: 00007f50e9f9ec80 RCX: 00007f50ea0ee407 [ 970.260488][ C0] RDX: 000000000000005a RSI: 00007ffd7b9513b0 RDI: 0000000000000003 [ 970.260532][ C0] RBP: 00007ffd7b9517e0 R08: 0000000000000000 R09: 0000000000000000 [ 970.260611][ C0] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffd7b9517f8 [ 970.260631][ C0] R13: 00007ffd7b9513b0 R14: 000000000000003f R15: 00007ffd7b9513b0 [ 970.260721][ C0] [ 970.260838][ C0] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 970.261044][ C0] CPU: 0 UID: 0 PID: 4962 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 970.261114][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 970.261157][ C0] Call Trace: [ 970.261181][ C0] [ 970.261204][ C0] dump_stack_lvl+0xe8/0x150 [ 970.261293][ C0] f2fs_stop_checkpoint+0x383/0x540 [ 970.261386][ C0] f2fs_write_end_io+0x1274/0x1740 [ 970.261507][ C0] blk_update_request+0x57e/0xe60 [ 970.261606][ C0] blk_mq_end_request+0x3e/0x70 [ 970.261710][ C0] blk_done_softirq+0x10a/0x160 [ 970.261802][ C0] handle_softirqs+0x1de/0x6d0 [ 970.261903][ C0] __local_bh_enable_ip+0x170/0x2b0 [ 970.261981][ C0] ? __alloc_skb+0x186/0x7d0 [ 970.262069][ C0] __alloc_skb+0x1aa/0x7d0 [ 970.262170][ C0] alloc_skb_with_frags+0xc8/0x760 [ 970.262279][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 970.262420][ C0] sock_alloc_send_pskb+0x884/0x9a0 [ 970.262503][ C0] ? reacquire_held_locks+0x104/0x190 [ 970.262600][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 970.262718][ C0] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 970.262801][ C0] ? sock_def_readable+0xae/0x550 [ 970.262890][ C0] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 970.262978][ C0] unix_dgram_sendmsg+0x460/0x18d0 [ 970.263043][ C0] ? __pfx_clockevents_program_event+0x10/0x10 [ 970.263176][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 970.263232][ C0] ? __schedule+0x16b4/0x54f0 [ 970.263351][ C0] ? aa_sock_msg_perm+0x107/0x200 [ 970.263411][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 970.263476][ C0] sock_sendmsg_nosec+0x112/0x150 [ 970.263567][ C0] __sys_sendto+0x402/0x590 [ 970.263674][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 970.263876][ C0] ? rcu_is_watching+0x15/0xb0 [ 970.263954][ C0] __x64_sys_sendto+0xde/0x100 [ 970.264045][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.264119][ C0] do_syscall_64+0x15f/0xf80 [ 970.264180][ C0] ? clear_bhb_loop+0x40/0x90 [ 970.264259][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.264325][ C0] RIP: 0033:0x7f50ea0ee407 [ 970.264381][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 970.264436][ C0] RSP: 002b:00007ffd7b951270 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 970.264502][ C0] RAX: ffffffffffffffda RBX: 00007f50e9f9ec80 RCX: 00007f50ea0ee407 [ 970.264548][ C0] RDX: 000000000000005a RSI: 00007ffd7b9513b0 RDI: 0000000000000003 [ 970.264585][ C0] RBP: 00007ffd7b9517e0 R08: 0000000000000000 R09: 0000000000000000 [ 970.264600][ C0] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffd7b9517f8 [ 970.264637][ C0] R13: 00007ffd7b9513b0 R14: 000000000000003f R15: 00007ffd7b9513b0 [ 970.264760][ C0] [ 970.264790][ C0] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 970.264893][ C0] CPU: 0 UID: 0 PID: 4962 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 970.264971][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 970.265006][ C0] Call Trace: [ 970.265037][ C0] [ 970.265063][ C0] dump_stack_lvl+0xe8/0x150 [ 970.265147][ C0] f2fs_stop_checkpoint+0x383/0x540 [ 970.265259][ C0] f2fs_write_end_io+0x1274/0x1740 [ 970.265374][ C0] blk_update_request+0x57e/0xe60 [ 970.265474][ C0] blk_mq_end_request+0x3e/0x70 [ 970.265550][ C0] blk_done_softirq+0x10a/0x160 [ 970.265649][ C0] handle_softirqs+0x1de/0x6d0 [ 970.265760][ C0] __local_bh_enable_ip+0x170/0x2b0 [ 970.265843][ C0] ? __alloc_skb+0x186/0x7d0 [ 970.265919][ C0] __alloc_skb+0x1aa/0x7d0 [ 970.265954][ C0] alloc_skb_with_frags+0xc8/0x760 [ 970.265991][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 970.266030][ C0] sock_alloc_send_pskb+0x884/0x9a0 [ 970.266054][ C0] ? reacquire_held_locks+0x104/0x190 [ 970.266163][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 970.266289][ C0] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 970.266369][ C0] ? sock_def_readable+0xae/0x550 [ 970.266461][ C0] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 970.266559][ C0] unix_dgram_sendmsg+0x460/0x18d0 [ 970.266617][ C0] ? __pfx_clockevents_program_event+0x10/0x10 [ 970.266750][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 970.266812][ C0] ? __schedule+0x16b4/0x54f0 [ 970.266938][ C0] ? aa_sock_msg_perm+0x107/0x200 [ 970.267005][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 970.267069][ C0] sock_sendmsg_nosec+0x112/0x150 [ 970.267150][ C0] __sys_sendto+0x402/0x590 [ 970.267259][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 970.267408][ C0] ? rcu_is_watching+0x15/0xb0 [ 970.267461][ C0] __x64_sys_sendto+0xde/0x100 [ 970.267584][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.267659][ C0] do_syscall_64+0x15f/0xf80 [ 970.267726][ C0] ? clear_bhb_loop+0x40/0x90 [ 970.267799][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.267865][ C0] RIP: 0033:0x7f50ea0ee407 [ 970.267919][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 970.267978][ C0] RSP: 002b:00007ffd7b951270 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 970.268037][ C0] RAX: ffffffffffffffda RBX: 00007f50e9f9ec80 RCX: 00007f50ea0ee407 [ 970.268083][ C0] RDX: 000000000000005a RSI: 00007ffd7b9513b0 RDI: 0000000000000003 [ 970.268126][ C0] RBP: 00007ffd7b9517e0 R08: 0000000000000000 R09: 0000000000000000 [ 970.268169][ C0] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffd7b9517f8 [ 970.268205][ C0] R13: 00007ffd7b9513b0 R14: 000000000000003f R15: 00007ffd7b9513b0 [ 970.268295][ C0] [ 970.268972][ C0] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 970.269095][ C0] CPU: 0 UID: 0 PID: 4962 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 970.269147][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 970.269192][ C0] Call Trace: [ 970.269200][ C0] [ 970.269208][ C0] dump_stack_lvl+0xe8/0x150 [ 970.269265][ C0] f2fs_stop_checkpoint+0x383/0x540 [ 970.269381][ C0] f2fs_write_end_io+0x1274/0x1740 [ 970.269516][ C0] blk_update_request+0x57e/0xe60 [ 970.269627][ C0] blk_mq_end_request+0x3e/0x70 [ 970.269686][ C0] blk_done_softirq+0x10a/0x160 [ 970.269770][ C0] handle_softirqs+0x1de/0x6d0 [ 970.269865][ C0] __local_bh_enable_ip+0x170/0x2b0 [ 970.269942][ C0] ? __alloc_skb+0x186/0x7d0 [ 970.270030][ C0] __alloc_skb+0x1aa/0x7d0 [ 970.270129][ C0] alloc_skb_with_frags+0xc8/0x760 [ 970.270233][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 970.270344][ C0] sock_alloc_send_pskb+0x884/0x9a0 [ 970.270411][ C0] ? reacquire_held_locks+0x104/0x190 [ 970.270497][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 970.270610][ C0] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 970.270694][ C0] ? sock_def_readable+0xae/0x550 [ 970.270795][ C0] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 970.270891][ C0] unix_dgram_sendmsg+0x460/0x18d0 [ 970.270956][ C0] ? __pfx_clockevents_program_event+0x10/0x10 [ 970.271089][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 970.271145][ C0] ? __schedule+0x16b4/0x54f0 [ 970.271268][ C0] ? aa_sock_msg_perm+0x107/0x200 [ 970.271335][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 970.271391][ C0] sock_sendmsg_nosec+0x112/0x150 [ 970.271478][ C0] __sys_sendto+0x402/0x590 [ 970.271582][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 970.271758][ C0] ? rcu_is_watching+0x15/0xb0 [ 970.271823][ C0] __x64_sys_sendto+0xde/0x100 [ 970.271912][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.271978][ C0] do_syscall_64+0x15f/0xf80 [ 970.272044][ C0] ? clear_bhb_loop+0x40/0x90 [ 970.272136][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.272214][ C0] RIP: 0033:0x7f50ea0ee407 [ 970.272270][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 970.272324][ C0] RSP: 002b:00007ffd7b951270 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 970.272381][ C0] RAX: ffffffffffffffda RBX: 00007f50e9f9ec80 RCX: 00007f50ea0ee407 [ 970.272426][ C0] RDX: 000000000000005a RSI: 00007ffd7b9513b0 RDI: 0000000000000003 [ 970.272469][ C0] RBP: 00007ffd7b9517e0 R08: 0000000000000000 R09: 0000000000000000 [ 970.272504][ C0] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffd7b9517f8 [ 970.272547][ C0] R13: 00007ffd7b9513b0 R14: 000000000000003f R15: 00007ffd7b9513b0 [ 970.272636][ C0] [ 970.272659][ C0] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 970.272766][ C0] CPU: 0 UID: 0 PID: 4962 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 970.272825][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 970.272858][ C0] Call Trace: [ 970.272880][ C0] [ 970.272902][ C0] dump_stack_lvl+0xe8/0x150 [ 970.272978][ C0] f2fs_stop_checkpoint+0x383/0x540 [ 970.273076][ C0] f2fs_write_end_io+0x1274/0x1740 [ 970.273197][ C0] blk_update_request+0x57e/0xe60 [ 970.273297][ C0] blk_mq_end_request+0x3e/0x70 [ 970.273353][ C0] blk_done_softirq+0x10a/0x160 [ 970.273473][ C0] handle_softirqs+0x1de/0x6d0 [ 970.273584][ C0] __local_bh_enable_ip+0x170/0x2b0 [ 970.273662][ C0] ? __alloc_skb+0x186/0x7d0 [ 970.273749][ C0] __alloc_skb+0x1aa/0x7d0 [ 970.273831][ C0] alloc_skb_with_frags+0xc8/0x760 [ 970.273945][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 970.274081][ C0] sock_alloc_send_pskb+0x884/0x9a0 [ 970.274146][ C0] ? reacquire_held_locks+0x104/0x190 [ 970.274227][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 970.274376][ C0] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 970.274446][ C0] ? sock_def_readable+0xae/0x550 [ 970.274534][ C0] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 970.274641][ C0] unix_dgram_sendmsg+0x460/0x18d0 [ 970.274700][ C0] ? __pfx_clockevents_program_event+0x10/0x10 [ 970.274826][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 970.274882][ C0] ? __schedule+0x16b4/0x54f0 [ 970.275003][ C0] ? aa_sock_msg_perm+0x107/0x200 [ 970.275081][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 970.275146][ C0] sock_sendmsg_nosec+0x112/0x150 [ 970.275239][ C0] __sys_sendto+0x402/0x590 [ 970.275363][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 970.275564][ C0] ? rcu_is_watching+0x15/0xb0 [ 970.275646][ C0] __x64_sys_sendto+0xde/0x100 [ 970.275743][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.275797][ C0] do_syscall_64+0x15f/0xf80 [ 970.275862][ C0] ? clear_bhb_loop+0x40/0x90 [ 970.275917][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.275938][ C0] RIP: 0033:0x7f50ea0ee407 [ 970.275956][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 970.275974][ C0] RSP: 002b:00007ffd7b951270 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 970.275994][ C0] RAX: ffffffffffffffda RBX: 00007f50e9f9ec80 RCX: 00007f50ea0ee407 [ 970.276011][ C0] RDX: 000000000000005a RSI: 00007ffd7b9513b0 RDI: 0000000000000003 [ 970.276024][ C0] RBP: 00007ffd7b9517e0 R08: 0000000000000000 R09: 0000000000000000 [ 970.276038][ C0] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffd7b9517f8 [ 970.276052][ C0] R13: 00007ffd7b9513b0 R14: 000000000000003f R15: 00007ffd7b9513b0 [ 970.276128][ C0] [ 970.356153][ C0] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 971.687149][ T5609] F2FS-fs (loop3): do_checkpoint failed err:-5, stop checkpoint [ 972.953718][T11819] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1106'. [ 973.347616][T11664] bridge0: port 1(bridge_slave_0) entered blocking state [ 973.347994][T11664] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.348393][T11664] bridge_slave_0: entered allmulticast mode [ 973.351866][T11664] bridge_slave_0: entered promiscuous mode [ 973.555216][T11664] bridge0: port 2(bridge_slave_1) entered blocking state [ 973.555611][T11664] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.572584][T11664] bridge_slave_1: entered allmulticast mode [ 973.586804][T11664] bridge_slave_1: entered promiscuous mode [ 974.025550][T11836] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1112'. [ 974.039392][T11836] kAFS: unable to lookup cell '(,c¾Ì' [ 974.067350][T11664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 974.184074][T11664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 974.460137][T11517] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 974.570339][T11517] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 974.658982][T11664] team0: Port device team_slave_0 added [ 974.758424][T11517] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 974.953461][T11517] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 975.023556][T11840] CUSE: unknown device info "" [ 975.023603][T11840] CUSE: unknown device info "" [ 975.023639][T11840] CUSE: unknown device info "" [ 975.023674][T11840] CUSE: unknown device info "" [ 975.023709][T11840] CUSE: unknown device info "ÿ" [ 975.023745][T11840] CUSE: unknown device info "" [ 975.023780][T11840] CUSE: unknown device info "" [ 975.023816][T11840] CUSE: unknown device info "ÿ" [ 975.023851][T11840] CUSE: DEVNAME unspecified [ 975.761472][T11664] team0: Port device team_slave_1 added [ 976.318018][T11842] loop0: detected capacity change from 0 to 40427 [ 976.341414][T11842] F2FS-fs (loop0): invalid crc value [ 976.414148][T11842] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 976.442729][T11842] F2FS-fs (loop0): Start checkpoint disabled! [ 976.484091][T11842] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 976.490161][T11842] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 976.604763][ T38] audit: type=1800 audit(1777363673.513:31): pid=11842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1114" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 976.986938][T11846] bio_check_eod: 176 callbacks suppressed [ 976.986990][T11846] syz.0.1114: attempt to access beyond end of device [ 976.986990][T11846] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 976.997617][T11846] syz.0.1114: attempt to access beyond end of device [ 976.997617][T11846] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 977.007385][T11846] syz.0.1114: attempt to access beyond end of device [ 977.007385][T11846] loop0: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 977.011933][T11846] syz.0.1114: attempt to access beyond end of device [ 977.011933][T11846] loop0: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 977.016348][T11846] syz.0.1114: attempt to access beyond end of device [ 977.016348][T11846] loop0: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 977.027731][T11846] syz.0.1114: attempt to access beyond end of device [ 977.027731][T11846] loop0: rw=2049, sector=45136, nr_sectors = 16 limit=40427 [ 977.032476][T11846] syz.0.1114: attempt to access beyond end of device [ 977.032476][T11846] loop0: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 977.036782][T11846] syz.0.1114: attempt to access beyond end of device [ 977.036782][T11846] loop0: rw=2049, sector=45160, nr_sectors = 8 limit=40427 [ 977.041166][T11846] syz.0.1114: attempt to access beyond end of device [ 977.041166][T11846] loop0: rw=2049, sector=45168, nr_sectors = 8 limit=40427 [ 977.045978][T11846] syz.0.1114: attempt to access beyond end of device [ 977.045978][T11846] loop0: rw=2049, sector=45176, nr_sectors = 8 limit=40427 [ 977.883936][ T8100] CPU: 0 UID: 0 PID: 8100 Comm: kworker/u8:17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 977.883969][ T8100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 977.883985][ T8100] Workqueue: writeback wb_workfn (flush-7:0) [ 977.884021][ T8100] Call Trace: [ 977.884029][ T8100] [ 977.884039][ T8100] dump_stack_lvl+0xe8/0x150 [ 977.884071][ T8100] f2fs_stop_checkpoint+0x383/0x540 [ 977.884107][ T8100] f2fs_write_end_io+0x1274/0x1740 [ 977.884153][ T8100] __submit_merged_bio+0x256/0x6a0 [ 977.884208][ T8100] __submit_merged_write_cond+0x3c9/0x4e0 [ 977.884248][ T8100] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 977.884303][ T8100] f2fs_write_data_pages+0x287e/0x34f0 [ 977.884376][ T8100] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 977.884426][ T8100] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 977.884494][ T8100] ? __lock_acquire+0x6b5/0x2cf0 [ 977.884569][ T8100] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 977.884609][ T8100] do_writepages+0x32e/0x550 [ 977.884649][ T8100] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 977.884679][ T8100] ? reacquire_held_locks+0x104/0x190 [ 977.884703][ T8100] ? rt_spin_lock+0x1e0/0x400 [ 977.884744][ T8100] __writeback_single_inode+0x133/0x10e0 [ 977.884780][ T8100] ? rt_spin_unlock+0x160/0x200 [ 977.884814][ T8100] writeback_sb_inodes+0x97f/0x1980 [ 977.884866][ T8100] ? lockdep_hardirqs_on+0x7a/0x110 [ 977.884910][ T8100] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 977.884984][ T8100] ? rcu_is_watching+0x15/0xb0 [ 977.885019][ T8100] wb_writeback+0x445/0xb00 [ 977.885054][ T8100] ? queue_io+0x231/0x440 [ 977.885094][ T8100] ? __pfx_wb_writeback+0x10/0x10 [ 977.885145][ T8100] wb_workfn+0x3fd/0xf20 [ 977.885168][ T8100] ? __lock_acquire+0x6b5/0x2cf0 [ 977.885207][ T8100] ? look_up_lock_class+0x57/0x110 [ 977.885249][ T8100] ? __pfx_wb_workfn+0x10/0x10 [ 977.885278][ T8100] ? do_raw_spin_lock+0x12b/0x2f0 [ 977.885306][ T8100] ? lock_acquire+0x106/0x350 [ 977.885342][ T8100] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 977.885376][ T8100] ? process_one_work+0x8b7/0x1710 [ 977.885407][ T8100] ? process_one_work+0x8b7/0x1710 [ 977.885448][ T8100] ? process_one_work+0x8b7/0x1710 [ 977.885474][ T8100] process_one_work+0x9a3/0x1710 [ 977.885527][ T8100] ? __pfx_process_one_work+0x10/0x10 [ 977.885553][ T8100] ? do_raw_spin_lock+0x12b/0x2f0 [ 977.885603][ T8100] worker_thread+0xba8/0x11e0 [ 977.885662][ T8100] kthread+0x388/0x470 [ 977.885697][ T8100] ? __pfx_worker_thread+0x10/0x10 [ 977.885725][ T8100] ? __pfx_kthread+0x10/0x10 [ 977.885763][ T8100] ret_from_fork+0x514/0xb70 [ 977.885796][ T8100] ? __pfx_ret_from_fork+0x10/0x10 [ 977.885826][ T8100] ? __switch_to+0xc79/0x1410 [ 977.885853][ T8100] ? __pfx_kthread+0x10/0x10 [ 977.885889][ T8100] ret_from_fork_asm+0x1a/0x30 [ 977.885938][ T8100] [ 978.225190][ T8100] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 978.762484][T11517] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 978.846985][T11517] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 979.266168][T11517] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 979.310642][T11517] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 979.311062][T11850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1115'. [ 980.987652][T11664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 980.987667][T11664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 980.987689][T11664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 981.202578][T11664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 981.202597][T11664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 981.202629][T11664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 981.282524][T11868] loop0: detected capacity change from 0 to 4096 [ 982.033364][T11664] hsr_slave_0: entered promiscuous mode [ 982.035267][T11664] hsr_slave_1: entered promiscuous mode [ 982.103684][T11876] CUSE: unknown device info "" [ 982.103725][T11876] CUSE: unknown device info "" [ 982.103761][T11876] CUSE: unknown device info "" [ 982.103796][T11876] CUSE: unknown device info "" [ 982.103831][T11876] CUSE: unknown device info "ÿ" [ 982.103896][T11876] CUSE: unknown device info "" [ 982.103931][T11876] CUSE: unknown device info "" [ 982.103965][T11876] CUSE: unknown device info "ÿ" [ 982.104000][T11876] CUSE: DEVNAME unspecified [ 982.402022][T11664] debugfs: 'hsr0' already exists in 'hsr' [ 982.507777][T11664] Cannot create hsr debugfs directory [ 983.327767][T11878] loop0: detected capacity change from 0 to 40427 [ 983.343575][T11878] F2FS-fs (loop0): invalid crc value [ 983.440894][T11878] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 983.467568][T11878] F2FS-fs (loop0): Start checkpoint disabled! [ 983.514131][T11878] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 983.523686][T11878] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 983.534768][ T38] audit: type=1800 audit(1777363680.543:32): pid=11878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1122" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 983.618109][ T6008] bridge_slave_1: left allmulticast mode [ 983.618150][ T6008] bridge_slave_1: left promiscuous mode [ 983.618447][ T6008] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.818904][ T6008] bridge_slave_0: left allmulticast mode [ 983.818943][ T6008] bridge_slave_0: left promiscuous mode [ 983.822323][ T6008] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.033369][T11884] bio_check_eod: 176 callbacks suppressed [ 984.033434][T11884] syz.0.1122: attempt to access beyond end of device [ 984.033434][T11884] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 984.044526][T11884] syz.0.1122: attempt to access beyond end of device [ 984.044526][T11884] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 984.049889][T11884] syz.0.1122: attempt to access beyond end of device [ 984.049889][T11884] loop0: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 984.054369][T11884] syz.0.1122: attempt to access beyond end of device [ 984.054369][T11884] loop0: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 984.059310][T11884] syz.0.1122: attempt to access beyond end of device [ 984.059310][T11884] loop0: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 984.067218][T11884] syz.0.1122: attempt to access beyond end of device [ 984.067218][T11884] loop0: rw=2049, sector=45136, nr_sectors = 16 limit=40427 [ 984.072103][T11884] syz.0.1122: attempt to access beyond end of device [ 984.072103][T11884] loop0: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 984.076429][T11884] syz.0.1122: attempt to access beyond end of device [ 984.076429][T11884] loop0: rw=2049, sector=45160, nr_sectors = 8 limit=40427 [ 984.081428][T11884] syz.0.1122: attempt to access beyond end of device [ 984.081428][T11884] loop0: rw=2049, sector=45168, nr_sectors = 8 limit=40427 [ 984.085737][T11884] syz.0.1122: attempt to access beyond end of device [ 984.085737][T11884] loop0: rw=2049, sector=45176, nr_sectors = 8 limit=40427 [ 985.137218][ T1836] CPU: 1 UID: 0 PID: 1836 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 985.137253][ T1836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 985.137269][ T1836] Workqueue: writeback wb_workfn (flush-7:0) [ 985.137306][ T1836] Call Trace: [ 985.137315][ T1836] [ 985.137325][ T1836] dump_stack_lvl+0xe8/0x150 [ 985.137360][ T1836] f2fs_stop_checkpoint+0x383/0x540 [ 985.137410][ T1836] f2fs_write_end_io+0x1274/0x1740 [ 985.137460][ T1836] __submit_merged_bio+0x256/0x6a0 [ 985.137504][ T1836] __submit_merged_write_cond+0x3c9/0x4e0 [ 985.137548][ T1836] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 985.137618][ T1836] f2fs_write_data_pages+0x287e/0x34f0 [ 985.137703][ T1836] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 985.137739][ T1836] ? clockevents_program_event+0x491/0x630 [ 985.137834][ T1836] ? __lock_acquire+0x6b5/0x2cf0 [ 985.137936][ T1836] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 985.137976][ T1836] do_writepages+0x32e/0x550 [ 985.138016][ T1836] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 985.138047][ T1836] ? reacquire_held_locks+0x104/0x190 [ 985.138071][ T1836] ? rt_spin_lock+0x1e0/0x400 [ 985.138115][ T1836] __writeback_single_inode+0x133/0x10e0 [ 985.138151][ T1836] ? rt_spin_unlock+0x160/0x200 [ 985.138187][ T1836] writeback_sb_inodes+0x97f/0x1980 [ 985.138243][ T1836] ? lockdep_hardirqs_on+0x7a/0x110 [ 985.138292][ T1836] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 985.138390][ T1836] ? rcu_is_watching+0x15/0xb0 [ 985.138428][ T1836] wb_writeback+0x445/0xb00 [ 985.138465][ T1836] ? queue_io+0x231/0x440 [ 985.138521][ T1836] ? __pfx_wb_writeback+0x10/0x10 [ 985.138575][ T1836] wb_workfn+0x3fd/0xf20 [ 985.138598][ T1836] ? __lock_acquire+0x6b5/0x2cf0 [ 985.138631][ T1836] ? look_up_lock_class+0x57/0x110 [ 985.138675][ T1836] ? __pfx_wb_workfn+0x10/0x10 [ 985.138707][ T1836] ? do_raw_spin_lock+0x12b/0x2f0 [ 985.138735][ T1836] ? lock_acquire+0x106/0x350 [ 985.138771][ T1836] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 985.138806][ T1836] ? process_one_work+0x8b7/0x1710 [ 985.138837][ T1836] ? process_one_work+0x8b7/0x1710 [ 985.138881][ T1836] ? process_one_work+0x8b7/0x1710 [ 985.138908][ T1836] process_one_work+0x9a3/0x1710 [ 985.138965][ T1836] ? __pfx_process_one_work+0x10/0x10 [ 985.138992][ T1836] ? do_raw_spin_lock+0x12b/0x2f0 [ 985.139045][ T1836] worker_thread+0xba8/0x11e0 [ 985.139088][ T1836] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 985.139128][ T1836] ? __kthread_parkme+0x7a/0x1f0 [ 985.139160][ T1836] ? __kthread_parkme+0x19c/0x1f0 [ 985.139201][ T1836] kthread+0x388/0x470 [ 985.139238][ T1836] ? __pfx_worker_thread+0x10/0x10 [ 985.139265][ T1836] ? __pfx_kthread+0x10/0x10 [ 985.139304][ T1836] ret_from_fork+0x514/0xb70 [ 985.139339][ T1836] ? __pfx_ret_from_fork+0x10/0x10 [ 985.139370][ T1836] ? __switch_to+0xc79/0x1410 [ 985.139406][ T1836] ? __pfx_kthread+0x10/0x10 [ 985.139444][ T1836] ret_from_fork_asm+0x1a/0x30 [ 985.139499][ T1836] [ 985.376105][ T1836] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 986.504937][T11892] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1126'. [ 986.515321][ T6008] bridge_slave_1: left allmulticast mode [ 986.515357][ T6008] bridge_slave_1: left promiscuous mode [ 986.515659][ T6008] bridge0: port 2(bridge_slave_1) entered disabled state [ 986.590139][ T6008] bridge_slave_0: left allmulticast mode [ 986.590180][ T6008] bridge_slave_0: left promiscuous mode [ 986.590472][ T6008] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.751543][ T9115] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 986.855376][ T9115] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 986.884596][ T9115] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 986.891522][ T9115] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 986.901495][ T9115] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 987.407485][ T6008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 987.531733][ T6008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 987.609226][ T6008] bond0 (unregistering): Released all slaves [ 988.057732][T11911] CUSE: unknown device info "" [ 988.057777][T11911] CUSE: unknown device info "" [ 988.057812][T11911] CUSE: unknown device info "" [ 988.057848][T11911] CUSE: unknown device info "" [ 988.057893][T11911] CUSE: unknown device info "ÿ" [ 988.057929][T11911] CUSE: unknown device info "" [ 988.057964][T11911] CUSE: unknown device info "" [ 988.058008][T11911] CUSE: unknown device info "ÿ" [ 988.058041][T11911] CUSE: DEVNAME unspecified [ 989.057334][T11913] loop3: detected capacity change from 0 to 32768 [ 989.070108][T11913] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1130 (11913) [ 989.096399][T11913] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 989.096437][T11913] BTRFS info (device loop3): using sha256 checksum algorithm [ 989.116279][ T5612] Bluetooth: hci3: command tx timeout [ 989.188263][ T6008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 989.251067][T11913] BTRFS info (device loop3): rebuilding free space tree [ 989.307280][ T6008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 989.378618][ T6008] bond0 (unregistering): Released all slaves [ 989.606820][T11913] BTRFS info (device loop3): disabling free space tree [ 989.606908][T11913] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 989.606936][T11913] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 989.750744][T11913] BTRFS info (device loop3): setting nodatasum [ 989.750777][T11913] BTRFS info (device loop3): setting nodatacow [ 989.750795][T11913] BTRFS info (device loop3): turning off barriers [ 989.750815][T11913] BTRFS info (device loop3): force clearing of disk cache [ 990.087009][T11913] loop3: detected capacity change from 32768 to 0 [ 990.203013][T11931] BTRFS error (device loop3): bdev /dev/loop3 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0 [ 991.201987][ T5612] Bluetooth: hci3: command tx timeout [ 991.493931][T11931] BTRFS error (device loop3): bdev /dev/loop3 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0 [ 991.828718][T11931] BTRFS error (device loop3): bdev /dev/loop3 errs: wr 3, rd 0, flush 0, corrupt 0, gen 0 [ 991.974051][T11954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1132'. [ 992.352641][ T8102] BTRFS error (device loop3): bdev /dev/loop3 errs: wr 4, rd 0, flush 0, corrupt 0, gen 0 [ 992.401952][T11956] team0: Device vlan0 failed to change mtu [ 992.651987][ T5609] BTRFS error (device loop3 state A): Transaction aborted (error -5) [ 992.652211][ T5609] BTRFS: error (device loop3 state A) in __btrfs_run_delayed_items:1161: errno=-5 IO failure [ 992.652236][ T5609] BTRFS info (device loop3 state EA): forced readonly [ 992.652533][ T5609] BTRFS warning (device loop3 state EA): Skipping commit of aborted transaction. [ 992.652893][ T5609] BTRFS: error (device loop3 state EA) in cleanup_transaction:2068: errno=-5 IO failure [ 992.658983][ T5609] BTRFS info (device loop3 state EA): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 992.663135][ T5609] BTRFS: error (device loop3 state EA) in process_one_buffer:447: errno=-5 IO failure [ 992.672509][ T5609] BTRFS: error (device loop3 state EA) in free_log_tree:3670: errno=-5 IO failure [ 992.672607][ T5609] BTRFS: error (device loop3 state EA) in process_one_buffer:447: errno=-5 IO failure [ 992.672728][ T5609] BTRFS: error (device loop3 state EA) in free_log_tree:3670: errno=-5 IO failure [ 992.983194][T11959] loop0: detected capacity change from 0 to 40427 [ 992.998580][T11959] F2FS-fs (loop0): invalid crc value [ 993.136116][T11959] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 993.147226][T11959] F2FS-fs (loop0): Start checkpoint disabled! [ 993.257971][T11959] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 993.280378][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.280497][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.282807][ T5612] Bluetooth: hci3: command tx timeout [ 993.354942][T11959] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 993.354964][ T6008] hsr_slave_0: left promiscuous mode [ 993.388046][ T38] audit: type=1800 audit(1777363690.373:33): pid=11959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1134" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 994.744244][T11965] bio_check_eod: 176 callbacks suppressed [ 994.744337][T11965] syz.0.1134: attempt to access beyond end of device [ 994.744337][T11965] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 994.769695][T11965] syz.0.1134: attempt to access beyond end of device [ 994.769695][T11965] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 995.155102][T11965] syz.0.1134: attempt to access beyond end of device [ 995.155102][T11965] loop0: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 995.179579][T11965] syz.0.1134: attempt to access beyond end of device [ 995.179579][T11965] loop0: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 995.204329][T11965] syz.0.1134: attempt to access beyond end of device [ 995.204329][T11965] loop0: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 995.246361][T11965] syz.0.1134: attempt to access beyond end of device [ 995.246361][T11965] loop0: rw=2049, sector=45136, nr_sectors = 16 limit=40427 [ 995.276265][T11965] syz.0.1134: attempt to access beyond end of device [ 995.276265][T11965] loop0: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 995.299586][T11965] syz.0.1134: attempt to access beyond end of device [ 995.299586][T11965] loop0: rw=2049, sector=45160, nr_sectors = 8 limit=40427 [ 995.323697][T11965] syz.0.1134: attempt to access beyond end of device [ 995.323697][T11965] loop0: rw=2049, sector=45168, nr_sectors = 8 limit=40427 [ 995.346691][T11965] syz.0.1134: attempt to access beyond end of device [ 995.346691][T11965] loop0: rw=2049, sector=45176, nr_sectors = 8 limit=40427 [ 995.563773][ T5612] Bluetooth: hci3: command tx timeout [ 995.648441][ T6008] hsr_slave_1: left promiscuous mode [ 995.654071][ T6008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 995.873527][ T6008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 995.891849][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 995.891873][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 995.891885][ T13] Workqueue: writeback wb_workfn (flush-7:0) [ 995.891912][ T13] Call Trace: [ 995.891918][ T13] [ 995.891925][ T13] dump_stack_lvl+0xe8/0x150 [ 995.891949][ T13] f2fs_stop_checkpoint+0x383/0x540 [ 995.891975][ T13] f2fs_write_end_io+0x1274/0x1740 [ 995.892007][ T13] __submit_merged_bio+0x256/0x6a0 [ 995.892035][ T13] __submit_merged_write_cond+0x3c9/0x4e0 [ 995.892064][ T13] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 995.892104][ T13] f2fs_write_data_pages+0x287e/0x34f0 [ 995.892161][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 995.892197][ T13] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 995.892242][ T13] ? __lock_acquire+0x6b5/0x2cf0 [ 995.892278][ T13] ? __lock_acquire+0x6b5/0x2cf0 [ 995.892318][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 995.892345][ T13] do_writepages+0x32e/0x550 [ 995.892371][ T13] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 995.892393][ T13] ? reacquire_held_locks+0x104/0x190 [ 995.892409][ T13] ? rt_spin_lock+0x1e0/0x400 [ 995.892437][ T13] __writeback_single_inode+0x133/0x10e0 [ 995.892462][ T13] ? rt_spin_unlock+0x160/0x200 [ 995.892492][ T13] writeback_sb_inodes+0x97f/0x1980 [ 995.892527][ T13] ? lockdep_hardirqs_on+0x7a/0x110 [ 995.892559][ T13] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 995.892610][ T13] ? rcu_is_watching+0x15/0xb0 [ 995.892634][ T13] wb_writeback+0x445/0xb00 [ 995.892658][ T13] ? queue_io+0x231/0x440 [ 995.892685][ T13] ? __pfx_wb_writeback+0x10/0x10 [ 995.892718][ T13] wb_workfn+0x3fd/0xf20 [ 995.892736][ T13] ? __lock_acquire+0x6b5/0x2cf0 [ 995.892759][ T13] ? look_up_lock_class+0x57/0x110 [ 995.892786][ T13] ? __pfx_wb_workfn+0x10/0x10 [ 995.892806][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 995.892825][ T13] ? lock_acquire+0x106/0x350 [ 995.892851][ T13] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 995.892873][ T13] ? process_one_work+0x8b7/0x1710 [ 995.892894][ T13] ? process_one_work+0x8b7/0x1710 [ 995.892922][ T13] ? process_one_work+0x8b7/0x1710 [ 995.892940][ T13] process_one_work+0x9a3/0x1710 [ 995.892975][ T13] ? __pfx_process_one_work+0x10/0x10 [ 995.892993][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 995.893026][ T13] worker_thread+0xba8/0x11e0 [ 995.893066][ T13] kthread+0x388/0x470 [ 995.893090][ T13] ? __pfx_worker_thread+0x10/0x10 [ 995.893109][ T13] ? __pfx_kthread+0x10/0x10 [ 995.893134][ T13] ret_from_fork+0x514/0xb70 [ 995.893157][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 995.893178][ T13] ? __switch_to+0xc79/0x1410 [ 995.893197][ T13] ? __pfx_kthread+0x10/0x10 [ 995.893222][ T13] ret_from_fork_asm+0x1a/0x30 [ 995.893257][ T13] [ 995.893911][ T13] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 996.368793][ T6008] hsr_slave_0: left promiscuous mode [ 996.406270][ T6008] hsr_slave_1: left promiscuous mode [ 996.407435][ T6008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 996.527270][ T6008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 997.207801][T11969] loop0: detected capacity change from 0 to 32768 [ 997.226083][T11969] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1135 (11969) [ 997.265866][T11969] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 997.265962][T11969] BTRFS info (device loop0): using sha256 checksum algorithm [ 997.451461][T11969] BTRFS info (device loop0): rebuilding free space tree [ 997.598738][T11969] BTRFS info (device loop0): disabling free space tree [ 997.598826][T11969] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 997.598855][T11969] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 997.627562][T11969] BTRFS info (device loop0): setting nodatasum [ 997.627630][T11969] BTRFS info (device loop0): setting nodatacow [ 997.627688][T11969] BTRFS info (device loop0): turning off barriers [ 997.627736][T11969] BTRFS info (device loop0): force clearing of disk cache [ 997.717707][ T6008] team0 (unregistering): Port device team_slave_1 removed [ 997.787540][T11969] loop0: detected capacity change from 32768 to 0 [ 997.798685][ T6008] team0 (unregistering): Port device team_slave_0 removed [ 997.847926][T11986] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0 [ 998.037456][T11986] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0 [ 998.040520][T11986] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 3, rd 0, flush 0, corrupt 0, gen 0 [ 998.434152][ T9115] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 998.481624][ T9115] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 998.487292][ T9115] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 998.521827][ T9115] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 998.522626][ T9115] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 999.032507][ T1836] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 4, rd 0, flush 0, corrupt 0, gen 0 [ 999.088184][ T5607] BTRFS error (device loop0 state A): Transaction aborted (error -5) [ 999.101307][ T5607] BTRFS: error (device loop0 state A) in __btrfs_run_delayed_items:1161: errno=-5 IO failure [ 999.101386][ T5607] BTRFS info (device loop0 state EA): forced readonly [ 999.101544][ T5607] BTRFS warning (device loop0 state EA): Skipping commit of aborted transaction. [ 999.101612][ T5607] BTRFS: error (device loop0 state EA) in cleanup_transaction:2068: errno=-5 IO failure [ 999.151751][ T5607] BTRFS info (device loop0 state EA): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 999.179651][ T5607] BTRFS: error (device loop0 state EA) in process_one_buffer:447: errno=-5 IO failure [ 999.179713][ T5607] BTRFS: error (device loop0 state EA) in free_log_tree:3670: errno=-5 IO failure [ 999.179786][ T5607] BTRFS: error (device loop0 state EA) in process_one_buffer:447: errno=-5 IO failure [ 999.179900][ T5607] BTRFS: error (device loop0 state EA) in free_log_tree:3670: errno=-5 IO failure [ 999.475147][ T6008] team0 (unregistering): Port device team_slave_1 removed [ 999.627182][ T6008] team0 (unregistering): Port device team_slave_0 removed [ 1000.350016][T11999] CUSE: unknown device info "" [ 1000.350174][T11999] CUSE: unknown device info "" [ 1000.350314][T11999] CUSE: unknown device info "" [ 1000.350459][T11999] CUSE: unknown device info "" [ 1000.350600][T11999] CUSE: unknown device info "ÿ" [ 1000.350739][T11999] CUSE: unknown device info "" [ 1000.350884][T11999] CUSE: unknown device info "" [ 1000.351024][T11999] CUSE: unknown device info "ÿ" [ 1000.351173][T11999] CUSE: DEVNAME unspecified [ 1001.196315][ T5612] Bluetooth: hci5: command tx timeout [ 1003.136465][ T37] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 1003.282511][ T5612] Bluetooth: hci5: command tx timeout [ 1003.289900][ T37] usb 1-1: device descriptor read/64, error -71 [ 1003.416566][T12037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1142'. [ 1003.526382][ T37] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 1003.677245][ T37] usb 1-1: device descriptor read/64, error -71 [ 1003.786985][ T37] usb usb1-port1: attempt power cycle [ 1003.843349][ T5268] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1003.985235][T12041] loop3: detected capacity change from 0 to 64 [ 1004.289339][ T37] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 1004.307331][ T37] usb 1-1: device descriptor read/8, error -71 [ 1004.530048][T12041] ------------[ cut here ]------------ [ 1004.530063][T12041] !buffer_uptodate(bh) [ 1004.530075][T12041] WARNING: fs/buffer.c:1087 at mark_buffer_dirty+0x299/0x410, CPU#1: syz.3.1143/12041 [ 1004.530124][T12041] Modules linked in: [ 1004.530144][T12041] CPU: 1 UID: 0 PID: 12041 Comm: syz.3.1143 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1004.530166][T12041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1004.530201][T12041] RIP: 0010:mark_buffer_dirty+0x299/0x410 [ 1004.530224][T12041] Code: 4c 89 f7 e8 d9 06 df ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 34 63 fb ff e8 8f 8a 75 ff eb 8c e8 88 8a 75 ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 7a 8a 75 ff 90 0f 0b 90 e9 cf fd ff ff [ 1004.530240][T12041] RSP: 0018:ffffc90004477608 EFLAGS: 00010287 [ 1004.530257][T12041] RAX: ffffffff824f0a98 RBX: ffff888062d6b940 RCX: 0000000000080000 [ 1004.530271][T12041] RDX: ffffc9000f809000 RSI: 0000000000002116 RDI: 0000000000002117 [ 1004.530284][T12041] RBP: ffff888063f9a001 R08: 0000000000000000 R09: 0000000000000000 [ 1004.530298][T12041] R10: dffffc0000000000 R11: ffffed100c5ad729 R12: ffff88804ce0d600 [ 1004.530313][T12041] R13: ffff888062fde940 R14: ffff888062d6b940 R15: 000000000000000a [ 1004.530327][T12041] FS: 00007f90dc6166c0(0000) GS:ffff888126036000(0000) knlGS:0000000000000000 [ 1004.530343][T12041] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1004.530356][T12041] CR2: 0000200000003000 CR3: 00000000339c0000 CR4: 00000000003526f0 [ 1004.530374][T12041] Call Trace: [ 1004.530383][T12041] [ 1004.530396][T12041] bfs_get_block+0x5e6/0xaf0 [ 1004.530437][T12041] __block_write_begin_int+0x6c6/0x1910 [ 1004.530477][T12041] ? __pfx_bfs_get_block+0x10/0x10 [ 1004.530503][T12041] ? __pfx___block_write_begin_int+0x10/0x10 [ 1004.530536][T12041] ? __pfx_bfs_get_block+0x10/0x10 [ 1004.530558][T12041] block_write_begin+0x8d/0x120 [ 1004.530579][T12041] ? bfs_write_begin+0x1e/0xd0 [ 1004.530604][T12041] bfs_write_begin+0x35/0xd0 [ 1004.530630][T12041] generic_perform_write+0x2af/0x8b0 [ 1004.530668][T12041] ? __pfx_generic_perform_write+0x10/0x10 [ 1004.530695][T12041] ? file_update_time_flags+0x21f/0x4b0 [ 1004.530721][T12041] ? __generic_file_write_iter+0xfc/0x240 [ 1004.530750][T12041] ? generic_file_write_iter+0x137/0x690 [ 1004.530780][T12041] generic_file_write_iter+0x14b/0x690 [ 1004.530806][T12041] ? add_lock_to_list+0xc7/0x100 [ 1004.530835][T12041] ? __pfx_generic_file_write_iter+0x10/0x10 [ 1004.535733][T12041] ? lockdep_unlock+0x5d/0xd0 [ 1004.535783][T12041] ? __lock_acquire+0x146e/0x2cf0 [ 1004.535817][T12041] ? __pfx_aa_file_perm+0x10/0x10 [ 1004.535856][T12041] ? vfs_write+0x22d/0xba0 [ 1004.535878][T12041] ? vfs_write+0x22d/0xba0 [ 1004.535975][T12041] vfs_write+0x629/0xba0 [ 1004.536011][T12041] ? __pfx_vfs_write+0x10/0x10 [ 1004.536038][T12041] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1004.536076][T12041] ? lockdep_hardirqs_on+0x7a/0x110 [ 1004.536114][T12041] ? mutex_lock_nested+0x152/0x1d0 [ 1004.536138][T12041] ? fdget_pos+0x252/0x320 [ 1004.536173][T12041] ksys_write+0x156/0x270 [ 1004.536194][T12041] ? __pfx_ksys_write+0x10/0x10 [ 1004.536221][T12041] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.536242][T12041] do_syscall_64+0x15f/0xf80 [ 1004.536260][T12041] ? trace_irq_disable+0x3b/0x140 [ 1004.536286][T12041] ? clear_bhb_loop+0x40/0x90 [ 1004.536310][T12041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.536330][T12041] RIP: 0033:0x7f90de3bcdd9 [ 1004.536350][T12041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1004.536366][T12041] RSP: 002b:00007f90dc616028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1004.536388][T12041] RAX: ffffffffffffffda RBX: 00007f90de635fa0 RCX: 00007f90de3bcdd9 [ 1004.536402][T12041] RDX: 000000000000fecc RSI: 00002000000008c0 RDI: 0000000000000007 [ 1004.536414][T12041] RBP: 00007f90de452d69 R08: 0000000000000000 R09: 0000000000000000 [ 1004.536426][T12041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1004.536438][T12041] R13: 00007f90de636038 R14: 00007f90de635fa0 R15: 00007ffca5fe3368 [ 1004.536469][T12041] [ 1004.536496][T12041] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1004.536513][T12041] CPU: 1 UID: 0 PID: 12041 Comm: syz.3.1143 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1004.536536][T12041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1004.536549][T12041] Call Trace: [ 1004.536558][T12041] [ 1004.536566][T12041] vpanic+0x56c/0xa60 [ 1004.536595][T12041] ? __pfx__printk+0x10/0x10 [ 1004.536614][T12041] ? __pfx_vpanic+0x10/0x10 [ 1004.536639][T12041] ? is_bpf_text_address+0x292/0x2b0 [ 1004.536668][T12041] ? is_bpf_text_address+0x26/0x2b0 [ 1004.536706][T12041] panic+0xc5/0xd0 [ 1004.536732][T12041] ? __pfx_panic+0x10/0x10 [ 1004.536788][T12041] __warn+0x315/0x4c0 [ 1004.536814][T12041] ? mark_buffer_dirty+0x299/0x410 [ 1004.536837][T12041] ? mark_buffer_dirty+0x299/0x410 [ 1004.536859][T12041] __report_bug+0x29a/0x540 [ 1004.536890][T12041] ? filemap_get_entry+0xcd/0x3f0 [ 1004.536917][T12041] ? mark_buffer_dirty+0x299/0x410 [ 1004.536938][T12041] ? __pfx___report_bug+0x10/0x10 [ 1004.536966][T12041] ? folio_mark_accessed+0x42e/0x8c0 [ 1004.536997][T12041] ? __pfx_folio_mark_accessed+0x10/0x10 [ 1004.537025][T12041] ? lockdep_hardirqs_on+0x7a/0x110 [ 1004.537062][T12041] ? mark_buffer_dirty+0x299/0x410 [ 1004.537082][T12041] report_bug+0x16a/0x220 [ 1004.537112][T12041] ? mark_buffer_dirty+0x299/0x410 [ 1004.537131][T12041] ? mark_buffer_dirty+0x29b/0x410 [ 1004.537151][T12041] handle_bug+0x9c/0x200 [ 1004.537174][T12041] exc_invalid_op+0x1a/0x50 [ 1004.537195][T12041] asm_exc_invalid_op+0x1a/0x20 [ 1004.537214][T12041] RIP: 0010:mark_buffer_dirty+0x299/0x410 [ 1004.537236][T12041] Code: 4c 89 f7 e8 d9 06 df ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 34 63 fb ff e8 8f 8a 75 ff eb 8c e8 88 8a 75 ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 7a 8a 75 ff 90 0f 0b 90 e9 cf fd ff ff [ 1004.537253][T12041] RSP: 0018:ffffc90004477608 EFLAGS: 00010287 [ 1004.537270][T12041] RAX: ffffffff824f0a98 RBX: ffff888062d6b940 RCX: 0000000000080000 [ 1004.537284][T12041] RDX: ffffc9000f809000 RSI: 0000000000002116 RDI: 0000000000002117 [ 1004.537297][T12041] RBP: ffff888063f9a001 R08: 0000000000000000 R09: 0000000000000000 [ 1004.537310][T12041] R10: dffffc0000000000 R11: ffffed100c5ad729 R12: ffff88804ce0d600 [ 1004.537325][T12041] R13: ffff888062fde940 R14: ffff888062d6b940 R15: 000000000000000a [ 1004.537346][T12041] ? mark_buffer_dirty+0x298/0x410 [ 1004.537372][T12041] ? mark_buffer_dirty+0x298/0x410 [ 1004.537395][T12041] bfs_get_block+0x5e6/0xaf0 [ 1004.537434][T12041] __block_write_begin_int+0x6c6/0x1910 [ 1004.537473][T12041] ? __pfx_bfs_get_block+0x10/0x10 [ 1004.537499][T12041] ? __pfx___block_write_begin_int+0x10/0x10 [ 1004.537533][T12041] ? __pfx_bfs_get_block+0x10/0x10 [ 1004.537555][T12041] block_write_begin+0x8d/0x120 [ 1004.537578][T12041] ? bfs_write_begin+0x1e/0xd0 [ 1004.537603][T12041] bfs_write_begin+0x35/0xd0 [ 1004.537629][T12041] generic_perform_write+0x2af/0x8b0 [ 1004.537667][T12041] ? __pfx_generic_perform_write+0x10/0x10 [ 1004.537696][T12041] ? file_update_time_flags+0x21f/0x4b0 [ 1004.537722][T12041] ? __generic_file_write_iter+0xfc/0x240 [ 1004.537757][T12041] ? generic_file_write_iter+0x137/0x690 [ 1004.537786][T12041] generic_file_write_iter+0x14b/0x690 [ 1004.537814][T12041] ? add_lock_to_list+0xc7/0x100 [ 1004.537836][T12041] ? __pfx_generic_file_write_iter+0x10/0x10 [ 1004.537862][T12041] ? lockdep_unlock+0x5d/0xd0 [ 1004.537893][T12041] ? __lock_acquire+0x146e/0x2cf0 [ 1004.537926][T12041] ? __pfx_aa_file_perm+0x10/0x10 [ 1004.537963][T12041] ? vfs_write+0x22d/0xba0 [ 1004.537983][T12041] ? vfs_write+0x22d/0xba0 [ 1004.538017][T12041] vfs_write+0x629/0xba0 [ 1004.538044][T12041] ? __pfx_vfs_write+0x10/0x10 [ 1004.538066][T12041] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1004.538098][T12041] ? lockdep_hardirqs_on+0x7a/0x110 [ 1004.538131][T12041] ? mutex_lock_nested+0x152/0x1d0 [ 1004.538154][T12041] ? fdget_pos+0x252/0x320 [ 1004.538190][T12041] ksys_write+0x156/0x270 [ 1004.538212][T12041] ? __pfx_ksys_write+0x10/0x10 [ 1004.538239][T12041] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.538260][T12041] do_syscall_64+0x15f/0xf80 [ 1004.538279][T12041] ? trace_irq_disable+0x3b/0x140 [ 1004.538305][T12041] ? clear_bhb_loop+0x40/0x90 [ 1004.538329][T12041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.538348][T12041] RIP: 0033:0x7f90de3bcdd9 [ 1004.538365][T12041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1004.538382][T12041] RSP: 002b:00007f90dc616028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1004.538400][T12041] RAX: ffffffffffffffda RBX: 00007f90de635fa0 RCX: 00007f90de3bcdd9 [ 1004.538415][T12041] RDX: 000000000000fecc RSI: 00002000000008c0 RDI: 0000000000000007 [ 1004.538427][T12041] RBP: 00007f90de452d69 R08: 0000000000000000 R09: 0000000000000000 [ 1004.538440][T12041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1004.538452][T12041] R13: 00007f90de636038 R14: 00007f90de635fa0 R15: 00007ffca5fe3368 [ 1004.538481][T12041] [ 1004.539140][T12041] Kernel Offset: disabled