last executing test programs: 11.912543902s ago: executing program 4 (id=999): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$vcsa(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a60800000f00510066b87a000f02d86161300f300fc79d53bf0000c4b961edc30101220f01c3", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffb000/0x3000)=nil) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffb000/0x4000)=nil) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x6a3, 0xccd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0xfe, 0xfe, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0x80, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x2, 0x3}}}}}]}}]}}, 0x0) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.752834321s ago: executing program 1 (id=1008): syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="14000000", 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f00000001c0)="9c", 0x1}], 0x1}, 0x1) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @local}}}, 0x84) 8.723899003s ago: executing program 4 (id=1010): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) epoll_create1(0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbfb, {0x2, 0x20, 0x56, 0xff, r4}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 8.640927396s ago: executing program 1 (id=1012): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902"], 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d0003", 0x23}], 0x1}, 0x48000) 8.318419044s ago: executing program 4 (id=1014): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000440)='7', 0x1, 0xb4, &(0x7f0000000000)={0x11, 0x3, r2, 0x1, 0x10, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000140)=0x81, 0x4) read(r0, &(0x7f0000000000)=""/149, 0xaa) 8.162476981s ago: executing program 4 (id=1017): socket$inet6_sctp(0xa, 0x5, 0x84) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknod$loop(0x0, 0x0, 0x1) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="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", 0xfc) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) 7.794675879s ago: executing program 1 (id=1018): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f000009df00)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0x17d, &(0x7f0000001500)="$eJzs28FqE0EYB/BvbdpEvfQsHhb04CmoT6BIBXFBUXLQk0L10krBgGy9uE/h2RcUpKfcRnQlsamRJCXZkP39LvnY/37JDEMyTGDf3PxwdHgyfH/y/Cx6WRadB5HHKIv9uBI7UasCANgmo5TiR0opdau4+i1SShdu+dLIwACAlZlj/wcAtoz9HwDax/4PAO3z8tXrpw+L4uBFnvcivlfloBzUr3X++ElxcDf/7dPtcddZWQ52xvm9Os/jXL4b1/7k9/+Z78WdW3X+K3v0rJjKr8fhGuYPAAAAbdDPx/YnVyfn+35/Vl5Xf/0/MHV+78SNztqmAQAsYHj6+ejt8fG7jwsVEct0DU+jili8a6OK3YhYwTvvLb0WcxXdSy13XUS2IUvQmuJrk5/e8A8TsHKTL/35692mBgQAAAAAAAAAAAAAAFww9/NAvf/fPEqz25ueIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEz7GQAA//9bWkj9") syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='.\x00', 0x19624bc, &(0x7f00000037c0)=ANY=[@ANYRES8, @ANYRES32, @ANYRESOCT, @ANYBLOB="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", @ANYRES32, @ANYRES64, @ANYBLOB="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", @ANYRES8, @ANYRES32, @ANYRESHEX], 0x0, 0x0, &(0x7f0000000000)) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x5) arch_prctl$ARCH_SET_GS(0x1001, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="a1ab000000000000000032"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) 6.629662068s ago: executing program 1 (id=1020): mkdirat(0xffffffffffffff9c, 0x0, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0xfffffffffffffed9, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 6.457585373s ago: executing program 4 (id=1022): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x2, "abe7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000011c0)={0x2c, &(0x7f0000001200)=ANY=[@ANYBLOB="00303d000000efa35b3d760d8534603c09c06a1987a4bf9c8911464a0a1e6e0e941f8ae0eb14cc34fae5eff7bf80a202e489ca819dd8af8607cb4c15aa47338942bd589253ed14cfaa5a7a390d63e9e63d7ef24ce61a7e1fdf5b786f00ec314d4b19f599721e9c3b84e54975b92dfc6a7405b8da"], &(0x7f00000010c0)={0x0, 0xa, 0x1, 0xe}, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000f00)={0x1c, &(0x7f0000000d80)={0x20, 0xe, 0x79, "2aecd4b421b079695fc7152219f5d44e69d296a3ccae7796d79dc0cb231c1d28aae9f8393c94425fdfb92b7638cbdcca09594193278e9c0cf77c189d863d9190d1f462ab974391eff2ae44f9fff1d1ca78523a742669f5438b0510ffec878811629f1f4085034256641023868c7d4bee3529100c6d40ccb1fd"}, 0x0, 0x0}) 4.252188903s ago: executing program 3 (id=1028): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$packet(0x11, 0x3, 0x300) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0) r1 = fanotify_init(0x8, 0x1) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x4) read$FUSE(r1, &(0x7f0000000b00)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4.246117597s ago: executing program 0 (id=1029): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x488, 0x2c, 0xd3f, 0x870bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x1, 0x7, 0xd988, 0x3, 0x3, 0xa08b, 0x1, 0x3ff, 0x5, 0x5, 0x6, 0x4, 0x3, 0x92c, 0x7, 0xffffffb2, 0xeaac, 0x2, 0xe13, 0x4, 0x10000, 0xded, 0x8, 0x10000000, 0x7, 0x10001, 0xc6d, 0x88000001, 0x8, 0x7, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x6, 0xffffff9a, 0x3, 0xd, 0x7, 0x5, 0x13f6, 0x81, 0x53, 0x17, 0x4, 0x1000001, 0x6, 0x4, 0x8, 0x800, 0x86e1, 0x8, 0xfffffff9, 0x5, 0x1, 0x3, 0x5, 0x5, 0x80000000, 0xf3, 0xd, 0x8, 0xfffffff9, 0x800, 0x2726a3ed, 0x6, 0x200004, 0x2, 0x6, 0x8, 0x2, 0x7ff, 0x100, 0x1ff, 0x7, 0x3, 0x8, 0x8, 0x5, 0x2, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0xc, 0x9, 0xb, 0x5, 0x8000, 0x5, 0x6, 0x8, 0xfa, 0x3, 0x0, 0x10, 0x1ff, 0x3, 0x4, 0x60000000, 0x8, 0x2, 0x5, 0x3, 0x2, 0x401, 0xa955, 0x5000, 0x1, 0xe6, 0x2, 0x3, 0x6e4, 0x1, 0x5, 0xe, 0xb, 0x6, 0x4, 0x80000001, 0x3, 0x99b, 0x9c4, 0x7f, 0x3, 0x70, 0xff800, 0x1, 0x7, 0x5, 0xff, 0x7, 0x6, 0xfff, 0x800, 0xa3, 0x10000, 0xff, 0x80000000, 0xc, 0x7, 0x8, 0xff, 0x0, 0x80, 0x8, 0x6, 0xe2f3, 0x4, 0x7f, 0x9, 0x1, 0xffff, 0x3, 0x9, 0x9, 0x8, 0x7, 0xfffffc00, 0x0, 0x40, 0x400, 0x64c, 0x8, 0x7, 0x8, 0x6, 0x0, 0x6, 0x5, 0x7ff, 0xc7, 0x7, 0xf30, 0x800, 0x0, 0xee3, 0x2005, 0x4, 0x8, 0x8, 0x1000, 0x8, 0x7, 0xa37f, 0x8, 0x9, 0x3, 0x1, 0xff, 0x8, 0x10000, 0xb, 0xcf9, 0x8, 0xfc, 0x40, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x4007, 0xc28, 0x2, 0x400, 0x7d75, 0x52, 0xd3, 0x8, 0x2, 0x4, 0xfffffff8, 0x200, 0x6, 0x6, 0x8, 0xe, 0xe459, 0x7ff, 0xc7, 0x81, 0x40, 0x0, 0x9, 0x3feb, 0x800, 0x100, 0x100, 0x7, 0xfffffb98, 0xfffffffb, 0x4, 0x20001, 0x3, 0x8, 0x1, 0x15b9, 0x7, 0x100, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0xffffffffffffffff, 0x1, 0x7, 0xb, {0x7, 0x2, 0x1, 0x80, 0x6572, 0x6}, {0x2, 0x1, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 4.224022127s ago: executing program 2 (id=1030): syz_mount_image$hfsplus(&(0x7f0000000340), &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000014, &(0x7f0000000000)=ANY=[], 0x1, 0x6eb, &(0x7f0000001240)="$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") r0 = io_uring_setup(0x497c, &(0x7f0000000280)={0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(&(0x7f00000007c0)) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000003c0)={{0x80, 0x2}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) close_range(r0, 0xffffffffffffffff, 0x0) 3.840627662s ago: executing program 3 (id=1031): socket$inet_udp(0x2, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) io_submit(0x0, 0x0, &(0x7f0000004200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$IPC_RMID(0x0, 0x0, 0x0) 3.084670737s ago: executing program 2 (id=1032): socket$inet6_sctp(0xa, 0x5, 0x84) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknod$loop(0x0, 0x0, 0x1) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="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", 0xfc) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) 2.978224608s ago: executing program 4 (id=1033): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3e, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x498, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x1c}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 2.960109423s ago: executing program 0 (id=1034): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1fc28}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) 2.832864757s ago: executing program 3 (id=1035): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20040000) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x11) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4}, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x11, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x2a}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x85}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xb, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "60000100", "9de66ebc3914c06f0f109088d190e700", '\x00', "f8dde5bf3eba23db"}, 0x28) 2.125236758s ago: executing program 0 (id=1036): syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="140000000900", 0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f00000001c0)="9c", 0x1}], 0x1}, 0x1) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @local}}}, 0x84) 1.862092953s ago: executing program 3 (id=1037): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x0, 0xf7c, 0x30, &(0x7f0000000540)="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", &(0x7f0000000180)=""/48, 0x5, 0x0, 0xff2, 0x7bd, &(0x7f0000001540)="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", &(0x7f0000002540)="c816d175acafe44b9c66257adeeb19a77f28d7146e70c0dfaf1fd7e1334d1a510d6ecc90335b53dbb0999b260591d933176a4ffc800643cf4174343b385eabddb7113893055a73cf19087e38410bb70f6371322fd2493f600e87ba6966e77dbdec3b62cc8405cf21d094d2a6fb13d0a42bf9909760a680ca3ff4e48c0593cd5a08faa2105f871cd0b2a329748937bb281115a8b06ab9c1b1795ba338c5de71e93f0bea0ad092d0cbaa1aa7cf972623c52869a1bcb9d3dafda17f26c234db9a0b94a35ab97d0783941a0a7952f3add36003b6b88fe61cddb556390d425a7385c40b00588ce6e50e9c690bb88d05fffe80886af2e3abf196ca3057a10fb87a193efe0640446bd952d5e54bed5057e5372741e83e342e4223e83241254c1bc8f57781aed5f6fd9985c44a5c28af45484dd1e84eab213954a9b7f327f87fa801a9e3afc70d3ce286e550aa78297ed792b51f5a1d47a161b36a872542a791650da0e9ef844266482cae49bac22aa46f3285a5f4a4499cab2f2a13d00975f770e5e478491c81914a81f0e9cb61bcead11bb7d4b5f83ed487fed266dd4768a5f5081b8f1c418b5a5dc6fde3199ed2dd288f05069c5b548d17353bae8d541d5adb66bc9d783e582c37af1692b89736fa94c0e4c7e3369a2ac1152c671f514e849bac0a4275aafd31dcfa3feac07a15353d35a8c030b806d9459a04ac4c823a343af46dc8b088cc4dfcc3ef55ecf06aa49ad5324f3c615dc4fcf1bf2d925aa3c1e2d182d5ddac807e66088c88154ff576a94bbeda0c750828f978a5fae7ecd25852de177fc947aa9d8b9bb2c5dd419d672fec42aa7b07d8b6132e9b723c3d4ccd51034d7e352c92f35045ff07ed4bbc867d7fb41f12c698b1d7080b5e6992a35ef189839214c1357df7fe0bdaad6b307b894919fbe3981802978e50315eff9df5497df96ee6ee8c432efaceeb6e5c80aab0ac177f004e705ea39d270b6ad30838c5a54cf241fe28d993e7560b425ffa186dab0ae89708d6b8d3b87956879c243c8e621aedc28547fab1dde6df0b49c6d8bc56d41b571d5b68ea9eabb84564b2da14ae1ee8cb1bc2d66c1665aec6f452d25b5eb9963151458621d6c091d412b29f7f34e0c6f2971adacb7f86da380cac966eb532858c963b679b43bee2c123924fea2e10cada6401ef0e08140f06a07ad857505e9fe9bc2b568f2165e31c7e5155e1492a40b0bc4c448f660380be2a8da3b2882a8f677460c136732d31491298d74e72f736cee8bc954a5ccd56ba9241e9a63f5b6ce1bfe26ed1a0b5fe01a6ebd87c322cc9c3f1d5fb897ddffaaa877e7487ff9c548b2d8fedf79981f32d16ede6b75196070343b5b98a52e7e2ce9577776b4a4b41968a9ad309bdfa2715b7576afd51245304189a2139c3a145b74387f6574536cfe5015acef88343c32674efbbe0d8e5f05ce378b92ee881c4571742db6919b5ba431fa8da0ca7c4f202e34e2d3817fc31d5897e7d35376979280b0c476063fcc3fd8dc1dbf0f8e7a62b8791474379f8a73089c71861da2e7f5dd658cf8492ee4082e13e468912b4609240d5b5ccc4190f28b60927197f7651d38723eb2a139867a10e8148354f9496db61eb6f75355e083be8f2c7c9c3fc43813f8941230d4c04abd610b60ef056b4428cea94c7bebe24b48c5d6d098366923f9e0d1ac4bedda8d19ba7e92924ef1b38f754cf78d57ed2811e21e033f6a16f3eea9c6a656c70a8cd9cf48cc296b1517472f36901eedd5f02cb0792d21497a8924532e0b3164d07ec1d1b31af89f5ff455539d07351b31cbe714589c9c66fb21fa61ea067f857e63fcd411c5656f3ec9860500881b60cf6b96bf83cc163b30652fcfbbcd843ff933aab425135af8df0154c479aa97a50be49458773b9d6d7f3eff15f4d9e179450c48bf1b2b60d9373e310b16c7ea37ab95b45b7aa5deec07a55e4123013855a4a606e3c2afeda104b638527a2200bda8bfebce84cc8bc29cca288f85a25a7baea9f764f8e0b87a6bd67138e736f33d72768acc61ebf23ff5c54bd6541e5265da8e0dfe2ec8f6e66831191f3ee63efff8d651ddf374f2da5ad46c59a0758a364e546e2df58546128ea81d6c2ebdc5da23f918a323fe88fec6be3b65b9aa95c5bbf1fe53ad9338712994e7e1eaf13e0e010f9c218a4af8e84a086c3cac1d00fa53f4a4e5f3c234bb99dc90d8dd6f1feff5b29f486cc6f3e38c28110d8bb53ccf8a381543f01fabc8ac8bea967f90efd9703abd4cd7b15d6f445349d439fe0df4a36bfa4137ff6fc9afe67dead3f258408f0333d44209b38d2ea8b26eb1b86335dbed9041fc45221e1c35da3114b470fb72fd4dfeb72626753385670cc87061cced819bf98d844af62555334cf3cd41d4fea73678eb06839060394bfe313065e745908a7f34f307384919d29723106fe35855fea07fc6b06c03a0a347c1d02fc57a09be6661586e3c3800f3135103cb6ac9fcd39a9a91b50a5a9290b17e6f928614d15a14141303e442ff8ce4b225868810f4b7c52435d991a52375c98e36df089b1aca0ab41c99faabc97db9342974ee1275e6b2e9333c4baf8886677f24262a7cdf81e804862208fad347479d9aa312cfa6e89e6111692651d0ef08a1b105b058421c7067c050bd63a9a6e6eb6f094fc08a8052edd4666afb9a5867e15377d6a47be75599b768e246a4adb2f6cd29329162ad241e027052833c0595fea8f47a2f1db16312121f05868859d0a760257da181da03251af1ca35147b2816e53686e1476641945bdfcadea13452c61b6", 0x8, 0x0, 0x3}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r5 = semget$private(0x0, 0x4, 0x29b) semop(r5, 0x0, 0x0) ioprio_get$uid(0x3, 0xffffffffffffffff) setresuid(0xee01, 0xee00, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') setfsuid(0x0) setresuid(0x0, 0xee00, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) 1.765385623s ago: executing program 2 (id=1038): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000004600070128bd700000000000017c000030000480"], 0x44}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000480)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x0, 0x100000, @loopback}, 0x1c) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00051400000000000000000000000800120000000200c06b6e000000000006000000000000000000000000000000e00000020000000000000000000000000000000000000000000000000000000105000500008000000a0000000000000000000000000000000000000000000001000000000000000005000600ff4700000a"], 0xa0}}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x2000c000, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f00000027c0)={0x2, 0x13, 0x3, 0x0, 0x7, 0x0, 0x70bd2c, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast1, 0x1e, 0x14, 0x2}]}, 0x38}}, 0xc010) 1.548407872s ago: executing program 1 (id=1039): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 1.533528259s ago: executing program 2 (id=1040): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r2}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000010000104000002000000000200000000", @ANYRES32=0x0, @ANYBLOB="0386010000000000140012800c0001006d61637674617000", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 601.950457ms ago: executing program 3 (id=1041): unshare(0x22020600) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000380)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)}], 0x1, 0x0, 0x0, 0x20000001}, 0x20008000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000006000000000a3c000000120a09000000000000000000020008030900020073797a310000000008000440000000000900010073797a30000000000800034000000007"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$AUDIT_GET(r0, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) 533.495001ms ago: executing program 0 (id=1042): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) 533.209857ms ago: executing program 1 (id=1043): semget$private(0x0, 0x4000, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8002, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_enter(0xffffffffffffffff, 0x1d39, 0xcec, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) semctl$SEM_STAT(0x0, 0x5, 0x12, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x4810) 467.27431ms ago: executing program 2 (id=1044): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x488, 0x2c, 0xd3f, 0x870bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x1, 0x7, 0xd988, 0x3, 0x3, 0xa08b, 0x1, 0x3ff, 0x5, 0x5, 0x6, 0x4, 0x3, 0x92c, 0x7, 0xffffffb2, 0xeaac, 0x2, 0xe13, 0x4, 0x10000, 0xded, 0x8, 0x10000000, 0x7, 0x10001, 0xc6d, 0x88000001, 0x8, 0x7, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x6, 0xffffff9a, 0x3, 0xd, 0x7, 0x5, 0x13f6, 0x81, 0x53, 0x17, 0x4, 0x1000001, 0x6, 0x4, 0x8, 0x800, 0x86e1, 0x8, 0xfffffff9, 0x5, 0x1, 0x3, 0x5, 0x5, 0x80000000, 0xf3, 0xd, 0x8, 0xfffffff9, 0x800, 0x2726a3ed, 0x6, 0x200004, 0x2, 0x6, 0x8, 0x2, 0x7ff, 0x100, 0x1ff, 0x7, 0x3, 0x8, 0x8, 0x5, 0x2, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0xc, 0x9, 0xb, 0x5, 0x8000, 0x5, 0x6, 0x8, 0xfa, 0x3, 0x0, 0x10, 0x1ff, 0x3, 0x4, 0x60000000, 0x8, 0x2, 0x5, 0x3, 0x2, 0x401, 0xa955, 0x5000, 0x1, 0xe6, 0x2, 0x3, 0x6e4, 0x1, 0x5, 0xe, 0xb, 0x6, 0x4, 0x80000001, 0x3, 0x99b, 0x9c4, 0x7f, 0x3, 0x70, 0xff800, 0x1, 0x7, 0x5, 0xff, 0x7, 0x6, 0xfff, 0x800, 0xa3, 0x10000, 0xff, 0x80000000, 0xc, 0x7, 0x8, 0xff, 0x0, 0x80, 0x8, 0x6, 0xe2f3, 0x4, 0x7f, 0x9, 0x1, 0xffff, 0x3, 0x9, 0x9, 0x8, 0x7, 0xfffffc00, 0x0, 0x40, 0x400, 0x64c, 0x8, 0x7, 0x8, 0x6, 0x0, 0x6, 0x5, 0x7ff, 0xc7, 0x7, 0xf30, 0x800, 0x0, 0xee3, 0x2005, 0x4, 0x8, 0x8, 0x1000, 0x8, 0x7, 0xa37f, 0x8, 0x9, 0x3, 0x1, 0xff, 0x8, 0x10000, 0xb, 0xcf9, 0x8, 0xfc, 0x40, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x4007, 0xc28, 0x2, 0x400, 0x7d75, 0x52, 0xd3, 0x8, 0x2, 0x4, 0xfffffff8, 0x200, 0x6, 0x6, 0x8, 0xe, 0xe459, 0x7ff, 0xc7, 0x81, 0x40, 0x0, 0x9, 0x3feb, 0x800, 0x100, 0x100, 0x7, 0xfffffb98, 0xfffffffb, 0x4, 0x20001, 0x3, 0x8, 0x1, 0x15b9, 0x7, 0x100, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0xffffffffffffffff, 0x1, 0x7, 0xb, {0x7, 0x2, 0x1, 0x80, 0x6572, 0x6}, {0x2, 0x1, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 419.756872ms ago: executing program 0 (id=1045): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x20004844}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000740)=""/221, 0xdd}], 0x2}, 0x40000101) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) 301.399219ms ago: executing program 3 (id=1046): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="000084000000c7316a"], 0x0, 0x0, 0x0, 0x0}) 264.530033ms ago: executing program 0 (id=1047): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 0s ago: executing program 2 (id=1048): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20040000) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x11) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4}, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x11, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x2a}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x85}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xb, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "60000100", "9de66ebc3914c06f0f109088d190e700", '\x00', "f8dde5bf3eba23db"}, 0x28) kernel console output (not intermixed with test programs): loop2: detected capacity change from 0 to 32768 [ 212.407984][ T7273] loop3: detected capacity change from 0 to 2048 [ 212.468266][ T7260] JBD2: Ignoring recovery information on journal [ 212.563120][ T7273] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.603473][ T7260] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 212.779342][ T5840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.237082][ T5845] ocfs2: Unmounting device (7,2) on (node local) [ 213.994929][ T7271] loop4: detected capacity change from 0 to 40427 [ 214.025814][ T7271] F2FS-fs (loop4): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 214.038898][ T7271] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 214.047784][ T7271] F2FS-fs (loop4): Image doesn't support compression [ 214.054861][ T7271] F2FS-fs (loop4): build fault injection rate: 690 [ 214.062882][ T7297] autofs: Unknown parameter '00000000000000000000' [ 214.070280][ T7271] F2FS-fs (loop4): build fault injection type: 0x35f7 [ 214.078521][ T7271] F2FS-fs (loop4): invalid crc value [ 214.213516][ T7271] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 214.236654][ T24] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 214.251691][ T7271] F2FS-fs (loop4): Start checkpoint disabled! [ 214.279344][ T7271] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 214.313310][ T7271] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 214.320921][ T7302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.322154][ T7302] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 214.395692][ T7271] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 214.426897][ T7302] bond0: (slave gre0): Error -95 calling set_mac_address [ 214.438113][ T24] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 214.457786][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 214.478938][ T7306] bond0: (slave rose0): Enslaving as an active interface with an up link [ 214.485788][ T30] audit: type=1800 audit(1769503829.136:5): pid=7271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.371" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 214.515977][ T24] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 214.552786][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 214.586729][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 214.762325][ T24] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 214.776534][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 215.329204][ T24] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 215.341508][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 215.354024][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 215.366562][ T3505] kworker/u8:9: attempt to access beyond end of device [ 215.366562][ T3505] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 215.387273][ T7283] loop0: detected capacity change from 0 to 40427 [ 215.434237][ T3505] CPU: 0 UID: 0 PID: 3505 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 215.434272][ T3505] Tainted: [L]=SOFTLOCKUP [ 215.434280][ T3505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 215.434293][ T3505] Workqueue: writeback wb_workfn (flush-7:4) [ 215.434335][ T3505] Call Trace: [ 215.434343][ T3505] [ 215.434352][ T3505] dump_stack_lvl+0xe8/0x150 [ 215.434385][ T3505] f2fs_handle_critical_error+0x37c/0x540 [ 215.434427][ T3505] f2fs_write_end_io+0xcdb/0xff0 [ 215.434475][ T3505] __submit_merged_bio+0x256/0x650 [ 215.434518][ T3505] __submit_merged_write_cond+0x3c3/0x4e0 [ 215.434561][ T3505] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 215.434625][ T3505] f2fs_write_data_pages+0x2970/0x35e0 [ 215.434695][ T3505] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 215.434736][ T3505] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 215.434807][ T3505] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 215.434860][ T3505] ? __lock_acquire+0x6b5/0x2cf0 [ 215.434911][ T3505] ? __lock_acquire+0x6b5/0x2cf0 [ 215.434940][ T3505] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 215.434965][ T3505] do_writepages+0x32e/0x550 [ 215.435000][ T3505] ? reacquire_held_locks+0x104/0x190 [ 215.435036][ T3505] ? writeback_sb_inodes+0x42a/0x1940 [ 215.435068][ T3505] __writeback_single_inode+0x133/0x1060 [ 215.435094][ T3505] ? do_raw_spin_unlock+0xf5/0x210 [ 215.435132][ T3505] writeback_sb_inodes+0x92e/0x1940 [ 215.435163][ T3505] ? ret_from_fork_asm+0x1a/0x30 [ 215.435217][ T3505] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 215.435238][ T3505] ? do_raw_spin_lock+0x12b/0x2f0 [ 215.435322][ T3505] ? rcu_is_watching+0x15/0xb0 [ 215.435363][ T3505] wb_writeback+0x445/0xad0 [ 215.435392][ T3505] ? queue_io+0x251/0x450 [ 215.435425][ T3505] ? __pfx_wb_writeback+0x10/0x10 [ 215.435446][ T3505] ? do_raw_spin_lock+0x12b/0x2f0 [ 215.435500][ T3505] wb_workfn+0x3f8/0xef0 [ 215.435529][ T3505] ? __lock_acquire+0x6b5/0x2cf0 [ 215.435551][ T3505] ? look_up_lock_class+0x57/0x110 [ 215.435599][ T3505] ? __pfx_wb_workfn+0x10/0x10 [ 215.435639][ T3505] ? do_raw_spin_lock+0x12b/0x2f0 [ 215.435669][ T3505] ? lock_acquire+0x106/0x330 [ 215.435695][ T3505] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 215.435732][ T3505] ? process_one_work+0x87c/0x15a0 [ 215.435759][ T3505] ? process_one_work+0x87c/0x15a0 [ 215.435799][ T3505] ? process_one_work+0x87c/0x15a0 [ 215.435823][ T3505] process_one_work+0x949/0x15a0 [ 215.435898][ T3505] ? __pfx_process_one_work+0x10/0x10 [ 215.435921][ T3505] ? do_raw_spin_lock+0x12b/0x2f0 [ 215.435988][ T3505] worker_thread+0xb46/0x1140 [ 215.436038][ T3505] kthread+0x388/0x470 [ 215.436064][ T3505] ? __pfx_worker_thread+0x10/0x10 [ 215.436082][ T3505] ? __pfx_kthread+0x10/0x10 [ 215.436107][ T3505] ret_from_fork+0x51b/0xa40 [ 215.436129][ T3505] ? __pfx_ret_from_fork+0x10/0x10 [ 215.436147][ T3505] ? __switch_to+0xc7d/0x1400 [ 215.436167][ T3505] ? __pfx_kthread+0x10/0x10 [ 215.436192][ T3505] ret_from_fork_asm+0x1a/0x30 [ 215.436230][ T3505] [ 215.728436][ T24] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 215.751773][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 215.788418][ T7283] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 215.810219][ T3505] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 215.846305][ T7283] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 215.856686][ T24] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 215.907489][ T7283] F2FS-fs (loop0): invalid crc value [ 215.912913][ T7283] F2FS-fs (loop0): Failed to start F2FS issue_checkpoint_thread (-4) [ 215.949087][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 215.985747][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 215.993795][ C0] lec:lec_tx_timeout: lec0 [ 215.998388][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 216.019775][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 216.116278][ T24] usb 4-1: string descriptor 0 read error: -22 [ 216.122732][ T24] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 216.163232][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.235287][ T24] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 216.778078][ T7337] loop2: detected capacity change from 0 to 2048 [ 217.599802][ T7341] loop4: detected capacity change from 0 to 128 [ 217.621272][ T7337] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.918447][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.965705][ T5981] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 218.825741][ T5981] usb 2-1: Using ep0 maxpacket: 32 [ 218.845195][ T5981] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 218.864833][ T5981] usb 2-1: config 0 has no interface number 0 [ 218.898151][ T5981] usb 2-1: config 0 interface 184 has no altsetting 0 [ 218.938968][ T5981] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 218.975155][ T7370] autofs: Unknown parameter '00000000000000000000' [ 219.073878][ T5981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.082462][ T5981] usb 2-1: Product: syz [ 219.086780][ T5981] usb 2-1: Manufacturer: syz [ 219.091400][ T5981] usb 2-1: SerialNumber: syz [ 219.099049][ T5981] usb 2-1: config 0 descriptor?? [ 219.107164][ T5981] smsc75xx v1.0.0 [ 219.405840][ T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 219.561003][ T24] usb 1-1: device descriptor read/64, error -71 [ 219.846043][ T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 220.060570][ T5981] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 220.144298][ T9] usb 4-1: USB disconnect, device number 6 [ 220.177206][ T5981] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 220.196036][ T24] usb 1-1: device descriptor read/64, error -71 [ 220.348501][ T24] usb usb1-port1: attempt power cycle [ 220.507202][ T5981] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 220.551883][ T5981] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 220.662974][ T5981] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 220.674237][ T5981] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 220.935945][ T24] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 221.005637][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 221.013701][ C0] lec:lec_tx_timeout: lec0 [ 221.025710][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 221.083596][ T24] usb 1-1: device descriptor read/8, error -71 [ 221.288222][ T5981] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 221.305966][ T5981] usb 2-1: USB disconnect, device number 6 [ 221.647379][ T7415] autofs: Unknown parameter '00000000000000000000' [ 221.716772][ T24] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 221.746446][ T24] usb 1-1: device descriptor read/8, error -71 [ 221.866380][ T24] usb usb1-port1: unable to enumerate USB device [ 223.302519][ T7450] autofs: Unknown parameter '00000000000000000000' [ 223.795866][ T5924] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 223.857858][ T5981] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 224.025936][ T5981] usb 3-1: Using ep0 maxpacket: 32 [ 224.051401][ T5981] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 224.076550][ T5924] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 224.084027][ T5924] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 224.101024][ T5981] usb 3-1: config 0 has no interface number 0 [ 224.121198][ T5981] usb 3-1: config 0 interface 184 has no altsetting 0 [ 224.136689][ T5924] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 224.161778][ T5981] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 224.174406][ T5924] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 224.190488][ T5981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.206214][ T5981] usb 3-1: Product: syz [ 224.212862][ T5924] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 224.224660][ T5981] usb 3-1: Manufacturer: syz [ 224.229545][ T5981] usb 3-1: SerialNumber: syz [ 224.249315][ T5981] usb 3-1: config 0 descriptor?? [ 224.269328][ T5981] smsc75xx v1.0.0 [ 224.275499][ T5924] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 224.283802][ T5924] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 224.295067][ T5924] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 224.307482][ T5924] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 224.319482][ T5924] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 224.333204][ T5924] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 224.341083][ T5924] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 224.352087][ T5924] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 224.366972][ T5924] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 224.384841][ T5924] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 224.427141][ T5924] usb 4-1: string descriptor 0 read error: -22 [ 224.440681][ T5924] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 224.462605][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.534083][ T5924] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 224.879120][ T5981] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 224.900417][ T5981] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 225.126091][ T5981] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 225.172871][ T5981] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 225.356469][ T5981] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 225.386613][ T5981] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 226.035666][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 226.043747][ C0] lec:lec_tx_timeout: lec0 [ 226.053536][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 226.136140][ T5981] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 226.178641][ T5981] usb 3-1: USB disconnect, device number 7 [ 226.625860][ T29] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 226.635768][ T5981] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 226.788717][ T5981] usb 1-1: device descriptor read/64, error -71 [ 227.081448][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 227.216296][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 227.239385][ T29] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 227.255770][ T29] usb 5-1: config 0 has no interface number 0 [ 227.269725][ T29] usb 5-1: config 0 interface 184 has no altsetting 0 [ 227.347085][ T5981] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 227.483189][ T29] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 227.494887][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.502970][ T29] usb 5-1: Product: syz [ 227.507200][ T29] usb 5-1: Manufacturer: syz [ 227.511949][ T29] usb 5-1: SerialNumber: syz [ 227.535911][ T5981] usb 1-1: device descriptor read/64, error -71 [ 227.538995][ T29] usb 5-1: config 0 descriptor?? [ 227.563631][ T29] smsc75xx v1.0.0 [ 227.669104][ T5981] usb usb1-port1: attempt power cycle [ 227.717274][ T7505] loop2: detected capacity change from 0 to 256 [ 228.046450][ T5981] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 228.286375][ T5981] usb 1-1: device descriptor read/8, error -71 [ 228.299043][ T24] usb 4-1: USB disconnect, device number 7 [ 228.379172][ T29] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 228.393752][ T29] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 228.460650][ T7511] tipc: Enabling of bearer rejected, failed to enable media [ 228.535708][ T5981] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 228.566326][ T5981] usb 1-1: device descriptor read/8, error -71 [ 228.616799][ T29] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 228.640534][ T29] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 228.651213][ T29] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 228.666706][ T29] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 228.682328][ T5981] usb usb1-port1: unable to enumerate USB device [ 228.692668][ T7517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.435'. [ 228.705895][ T5959] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 228.725432][ T7517] netlink: 12 bytes leftover after parsing attributes in process `syz.1.435'. [ 228.769700][ T3466] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.778890][ T7517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.435'. [ 228.788140][ T7517] netlink: 12 bytes leftover after parsing attributes in process `syz.1.435'. [ 228.790099][ T3466] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.807215][ T3466] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.823281][ T3466] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.888020][ T5959] usb 3-1: Using ep0 maxpacket: 32 [ 228.913636][ T5959] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 228.922451][ T5959] usb 3-1: config 0 has no interface number 0 [ 228.932591][ T5959] usb 3-1: config 0 interface 184 has no altsetting 0 [ 228.944872][ T5959] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 228.975155][ T5959] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.990115][ T5959] usb 3-1: Product: syz [ 228.994326][ T5959] usb 3-1: Manufacturer: syz [ 229.011927][ T5959] usb 3-1: SerialNumber: syz [ 229.023642][ T5959] usb 3-1: config 0 descriptor?? [ 229.039342][ T5959] smsc75xx v1.0.0 [ 229.593487][ T7540] loop0: detected capacity change from 0 to 1024 [ 229.653859][ T5959] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 229.691299][ T5959] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 229.918505][ T5959] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 230.425849][ T5959] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 230.439751][ T5959] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 230.450793][ T5959] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 230.461787][ T5959] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 230.492616][ T5959] usb 3-1: USB disconnect, device number 8 [ 230.515224][ T5981] usb 5-1: USB disconnect, device number 8 [ 231.065633][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 231.073721][ C0] lec:lec_tx_timeout: lec0 [ 231.079699][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 231.581144][ T5981] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 231.752149][ T5981] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 231.765813][ T5981] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 231.782226][ T7561] tipc: Started in network mode [ 231.787500][ T7561] tipc: Node identity 46170d0708a5, cluster identity 4711 [ 231.798182][ T5981] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 231.816079][ T7561] tipc: Enabled bearer , priority 0 [ 231.832084][ T5981] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 231.845802][ T5959] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 231.853735][ T7561] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 231.872022][ T5981] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 231.895441][ T7561] tipc: Resetting bearer [ 231.912487][ T5981] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 231.920139][ T5981] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 231.939112][ T7560] scsi_nl_rcv_msg: discarding partial skb [ 231.949122][ T7558] tipc: Disabling bearer [ 231.954952][ T5981] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 231.968360][ T5981] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 231.983988][ T7560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.450'. [ 231.985559][ T7540] loop0: detected capacity change from 0 to 40427 [ 231.993206][ T7560] netlink: 12 bytes leftover after parsing attributes in process `syz.2.450'. [ 232.008982][ T5981] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 232.009973][ T7540] F2FS-fs (loop0): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 232.055696][ T5959] usb 4-1: Using ep0 maxpacket: 32 [ 232.063082][ T7560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.450'. [ 232.072096][ T7540] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 232.085815][ T5959] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 232.094651][ T5959] usb 4-1: config 0 has no interface number 0 [ 232.094757][ T5981] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 232.111407][ T5959] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 232.112677][ T7560] netlink: 12 bytes leftover after parsing attributes in process `syz.2.450'. [ 232.112701][ T5959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.131884][ T5981] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 232.131919][ T5981] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 232.131946][ T5981] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 232.131984][ T5981] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 232.149001][ T7540] F2FS-fs (loop0): Image doesn't support compression [ 232.218985][ T5981] usb 5-1: string descriptor 0 read error: -22 [ 232.225337][ T5981] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 232.247311][ T5959] usb 4-1: Product: syz [ 232.258748][ T5959] usb 4-1: Manufacturer: syz [ 232.273020][ T5981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.273707][ T5959] usb 4-1: SerialNumber: syz [ 232.282520][ T7540] F2FS-fs (loop0): build fault injection rate: 690 [ 232.310792][ T5959] usb 4-1: config 0 descriptor?? [ 232.326303][ T7540] F2FS-fs (loop0): build fault injection type: 0x35f7 [ 232.354625][ T5959] smsc95xx v2.0.0 [ 232.371733][ T5981] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 232.395776][ T7540] F2FS-fs (loop0): invalid crc value [ 232.438123][ T7572] loop2: detected capacity change from 0 to 136 [ 232.525277][ T7572] overlayfs: missing 'lowerdir' [ 232.608625][ T7540] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 232.630527][ T7540] F2FS-fs (loop0): Start checkpoint disabled! [ 232.652008][ T7540] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 232.680858][ T7540] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 232.689292][ T7540] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 232.749101][ T5959] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 232.804706][ T5959] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 233.041104][ T5959] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 233.080714][ T5959] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -61 [ 233.398477][ T7565] lec:lec_atm_close: lec0: Shut down! [ 233.798695][ T7597] tipc: Enabled bearer , priority 0 [ 233.808182][ T7597] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 233.819000][ T7597] tipc: Resetting bearer [ 233.834083][ T7595] tipc: Disabling bearer [ 233.986446][ T7608] netlink: 'syz.0.463': attribute type 13 has an invalid length. [ 234.068695][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.462'. [ 234.077715][ T7609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.462'. [ 234.105817][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.462'. [ 234.105882][ T3466] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.115143][ T7609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.462'. [ 234.123488][ T3466] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.145731][ T3466] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.162507][ T3466] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.227850][ T7612] loop0: detected capacity change from 0 to 136 [ 234.287717][ T7612] overlayfs: missing 'lowerdir' [ 234.300065][ T7614] netlink: 'syz.2.465': attribute type 10 has an invalid length. [ 234.316441][ T7614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.328530][ T7614] team0: Port device bond0 added [ 234.701359][ T5981] usb 4-1: USB disconnect, device number 8 [ 234.730557][ T7619] loop0: detected capacity change from 0 to 32768 [ 234.830682][ T7619] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 234.888068][ T7619] XFS (loop0): Ending clean mount [ 234.895973][ T7619] XFS (loop0): Quotacheck needed: Please wait. [ 235.008724][ T7619] XFS (loop0): Quotacheck: Done. [ 235.765984][ T5971] usb 5-1: USB disconnect, device number 9 [ 235.868286][ T7653] netlink: 'syz.3.474': attribute type 13 has an invalid length. [ 235.944257][ T5851] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 236.021221][ T7656] loop4: detected capacity change from 0 to 136 [ 236.133404][ T7656] overlayfs: missing 'lowerdir' [ 236.322464][ T7637] lec:lec_atm_close: lec0: Shut down! [ 236.586532][ T7667] loop0: detected capacity change from 0 to 512 [ 236.633952][ T7672] loop3: detected capacity change from 0 to 256 [ 236.657758][ T7648] loop1: detected capacity change from 0 to 32768 [ 236.669507][ T7667] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.724234][ T7667] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.770615][ T7648] JBD2: Ignoring recovery information on journal [ 237.025814][ T7648] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 237.047671][ T7681] netlink: 96 bytes leftover after parsing attributes in process `syz.3.482'. [ 237.779974][ T5851] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.094765][ T5841] ocfs2: Unmounting device (7,1) on (node local) [ 238.255180][ T7702] loop2: detected capacity change from 0 to 136 [ 238.284237][ T7702] overlayfs: missing 'lowerdir' [ 238.467186][ T7704] netlink: 'syz.4.488': attribute type 13 has an invalid length. [ 238.537886][ T7706] loop2: detected capacity change from 0 to 7 [ 238.572421][ T7649] Dev loop2: unable to read RDB block 7 [ 238.598923][ T7649] loop2: unable to read partition table [ 238.612194][ T7649] loop2: partition table beyond EOD, truncated [ 238.625428][ T7706] Dev loop2: unable to read RDB block 7 [ 238.637615][ T7706] loop2: unable to read partition table [ 238.643702][ T7706] loop2: partition table beyond EOD, truncated [ 238.664449][ T7709] netlink: 120 bytes leftover after parsing attributes in process `syz.1.486'. [ 238.674649][ T7709] netlink: 'syz.1.486': attribute type 1 has an invalid length. [ 238.689007][ T7706] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 238.703212][ T7709] netlink: 64 bytes leftover after parsing attributes in process `syz.1.486'. [ 238.721537][ T5211] Dev loop2: unable to read RDB block 7 [ 238.745282][ T5211] loop2: unable to read partition table [ 238.754564][ T5211] loop2: partition table beyond EOD, truncated [ 238.933662][ T7712] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 238.953244][ T7712] netlink: 12 bytes leftover after parsing attributes in process `syz.1.490'. [ 239.108327][ T7716] syzkaller0: entered promiscuous mode [ 239.126368][ T7716] syzkaller0: entered allmulticast mode [ 239.135494][ T7716] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 239.511524][ T7714] lec:lec_atm_close: lec0: Shut down! [ 240.518154][ T7747] netlink: 120 bytes leftover after parsing attributes in process `syz.2.500'. [ 240.550170][ T7742] loop1: detected capacity change from 0 to 136 [ 240.564888][ T7748] netlink: 'syz.3.501': attribute type 13 has an invalid length. [ 240.580604][ T7747] netlink: 'syz.2.500': attribute type 1 has an invalid length. [ 240.610657][ T7747] netlink: 64 bytes leftover after parsing attributes in process `syz.2.500'. [ 240.650906][ T7742] overlayfs: missing 'lowerdir' [ 240.833066][ T7757] loop4: detected capacity change from 0 to 256 [ 240.929093][ T7757] FAT-fs (loop4): Directory bread(block 64) failed [ 240.936076][ T7757] FAT-fs (loop4): Directory bread(block 65) failed [ 240.943167][ T7757] FAT-fs (loop4): Directory bread(block 66) failed [ 240.949925][ T7757] FAT-fs (loop4): Directory bread(block 67) failed [ 240.961163][ T7757] FAT-fs (loop4): Directory bread(block 68) failed [ 240.968139][ T7757] FAT-fs (loop4): Directory bread(block 69) failed [ 240.975229][ T7757] FAT-fs (loop4): Directory bread(block 70) failed [ 240.981921][ T7757] FAT-fs (loop4): Directory bread(block 71) failed [ 240.989011][ T7757] FAT-fs (loop4): Directory bread(block 72) failed [ 240.995794][ T7757] FAT-fs (loop4): Directory bread(block 73) failed [ 242.040911][ T7762] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 242.164493][ T7764] syzkaller0: entered promiscuous mode [ 242.194309][ T7764] syzkaller0: entered allmulticast mode [ 242.255823][ T7768] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 242.889442][ T7790] netlink: 120 bytes leftover after parsing attributes in process `syz.0.513'. [ 242.912198][ T7790] netlink: 'syz.0.513': attribute type 1 has an invalid length. [ 242.922878][ T7790] netlink: 64 bytes leftover after parsing attributes in process `syz.0.513'. [ 242.940027][ T7786] kvm: pic: non byte read [ 242.957278][ T7786] kvm: pic: non byte read [ 243.037175][ T7786] kvm: pic: single mode not supported [ 243.037346][ T7786] kvm: pic: level sensitive irq not supported [ 243.059073][ T7786] kvm: pic: non byte read [ 243.098837][ T29] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 243.150868][ T7786] kvm: pic: non byte read [ 243.168575][ T7786] kvm: pic: non byte read [ 243.178992][ T7795] loop0: detected capacity change from 0 to 136 [ 243.196332][ T7786] kvm: pic: single mode not supported [ 243.196397][ T7786] kvm: pic: non byte read [ 243.228077][ T7786] kvm: pic: level sensitive irq not supported [ 243.228153][ T7786] kvm: pic: non byte read [ 243.255816][ T29] usb 3-1: device descriptor read/64, error -71 [ 243.256610][ T7786] kvm: pic: non byte read [ 243.287035][ T7795] overlayfs: missing 'workdir' [ 243.540521][ T29] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 243.875951][ T29] usb 3-1: device descriptor read/64, error -71 [ 243.972990][ T7780] lec:lec_atm_close: lec0: Shut down! [ 244.032761][ T29] usb usb3-port1: attempt power cycle [ 244.239677][ T7812] kvm: pic: non byte write [ 244.275815][ T5959] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 244.395855][ T29] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 244.418885][ T29] usb 3-1: device descriptor read/8, error -71 [ 244.425720][ T5959] usb 1-1: Using ep0 maxpacket: 8 [ 244.431966][ T5959] usb 1-1: no configurations [ 244.437787][ T5959] usb 1-1: can't read configurations, error -22 [ 244.455726][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 244.562825][ T7822] syzkaller0: entered promiscuous mode [ 244.568467][ T7822] syzkaller0: entered allmulticast mode [ 244.575791][ T5959] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 244.586382][ T9] usb 2-1: device descriptor read/64, error -71 [ 244.656321][ T29] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 244.688058][ T29] usb 3-1: device descriptor read/8, error -71 [ 244.735837][ T5959] usb 1-1: Using ep0 maxpacket: 8 [ 244.742313][ T5959] usb 1-1: no configurations [ 244.748030][ T5959] usb 1-1: can't read configurations, error -22 [ 244.757640][ T5959] usb usb1-port1: attempt power cycle [ 244.796215][ T29] usb usb3-port1: unable to enumerate USB device [ 244.836405][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 244.946970][ T29] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 244.970040][ T7826] netlink: 120 bytes leftover after parsing attributes in process `syz.4.524'. [ 244.979415][ T7826] netlink: 'syz.4.524': attribute type 1 has an invalid length. [ 244.982731][ T9] usb 2-1: device descriptor read/64, error -71 [ 244.987268][ T7826] netlink: 64 bytes leftover after parsing attributes in process `syz.4.524'. [ 245.046264][ T7828] loop4: detected capacity change from 0 to 136 [ 245.089260][ T7828] overlayfs: missing 'workdir' [ 245.095806][ T5959] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 245.110948][ T9] usb usb2-port1: attempt power cycle [ 245.126748][ T29] usb 4-1: no configurations [ 245.131464][ T5959] usb 1-1: Using ep0 maxpacket: 8 [ 245.137656][ T29] usb 4-1: can't read configurations, error -22 [ 245.147941][ T5959] usb 1-1: no configurations [ 245.155011][ T5959] usb 1-1: can't read configurations, error -22 [ 245.285716][ T29] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 245.293415][ T5959] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 245.316696][ T5959] usb 1-1: Using ep0 maxpacket: 8 [ 245.322841][ T5959] usb 1-1: no configurations [ 245.327739][ T5959] usb 1-1: can't read configurations, error -22 [ 245.334646][ T5959] usb usb1-port1: unable to enumerate USB device [ 245.410690][ T7830] loop4: detected capacity change from 0 to 32768 [ 245.439578][ T7830] JBD2: Ignoring recovery information on journal [ 245.463073][ T29] usb 4-1: no configurations [ 245.467932][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 245.493166][ T7830] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 245.502885][ T29] usb 4-1: can't read configurations, error -22 [ 245.504413][ T9] usb 2-1: device descriptor read/8, error -71 [ 245.518094][ T29] usb usb4-port1: attempt power cycle [ 245.590491][ T5856] ocfs2: Unmounting device (7,4) on (node local) [ 245.765812][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 245.786426][ T9] usb 2-1: device descriptor read/8, error -71 [ 245.869136][ T29] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 245.887195][ T5924] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 245.902157][ T9] usb usb2-port1: unable to enumerate USB device [ 245.917494][ T29] usb 4-1: no configurations [ 245.922135][ T29] usb 4-1: can't read configurations, error -22 [ 246.055752][ T29] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 246.068990][ T5924] usb 5-1: Using ep0 maxpacket: 32 [ 246.081796][ T29] usb 4-1: no configurations [ 246.082051][ T5924] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 246.086916][ T29] usb 4-1: can't read configurations, error -22 [ 246.096155][ T5924] usb 5-1: config 0 has no interface number 0 [ 246.109288][ T5924] usb 5-1: config 0 interface 184 has no altsetting 0 [ 246.119352][ T5924] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 246.122762][ T29] usb usb4-port1: unable to enumerate USB device [ 246.131349][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.143235][ T5924] usb 5-1: Product: syz [ 246.148077][ T5924] usb 5-1: Manufacturer: syz [ 246.152926][ T5924] usb 5-1: SerialNumber: syz [ 246.160863][ T5924] usb 5-1: config 0 descriptor?? [ 246.177171][ T5924] smsc75xx v1.0.0 [ 246.438838][ T7843] loop2: detected capacity change from 0 to 512 [ 246.464462][ T7843] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.477594][ T7843] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.801304][ T5924] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 246.831053][ T5924] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 247.385179][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.461589][ T5924] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 247.488943][ T5924] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 247.502529][ T5924] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 247.515439][ T5924] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 247.532212][ T7854] syzkaller0: entered promiscuous mode [ 247.538356][ T7854] syzkaller0: entered allmulticast mode [ 247.716488][ T29] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 247.837149][ T7862] netlink: 'syz.2.536': attribute type 10 has an invalid length. [ 247.935850][ T29] usb 1-1: Using ep0 maxpacket: 32 [ 248.034906][ T29] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 248.129116][ T29] usb 1-1: config 0 has no interface number 0 [ 248.357277][ T29] usb 1-1: config 0 interface 184 has no altsetting 0 [ 248.386191][ T29] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 248.395302][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.406502][ T29] usb 1-1: Product: syz [ 248.410856][ T29] usb 1-1: Manufacturer: syz [ 248.417619][ T29] usb 1-1: SerialNumber: syz [ 248.975631][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 248.983702][ C0] lec:lec_tx_timeout: lec0 [ 248.989209][ T29] usb 1-1: config 0 descriptor?? [ 248.995900][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 249.004600][ T29] smsc75xx v1.0.0 [ 249.100474][ T5971] usb 5-1: USB disconnect, device number 10 [ 249.396428][ T5959] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 249.495812][ T5971] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 249.539356][ T7874] lec:lec_atm_close: lec0: Shut down! [ 249.546517][ T5959] usb 4-1: device descriptor read/64, error -71 [ 249.578240][ T5911] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 249.615691][ T29] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 249.627823][ T29] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 249.636034][ T5971] usb 5-1: device descriptor read/64, error -71 [ 249.736717][ T5911] usb 2-1: Using ep0 maxpacket: 8 [ 249.743853][ T5911] usb 2-1: no configurations [ 249.749352][ T5911] usb 2-1: can't read configurations, error -22 [ 249.785749][ T5959] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 249.885762][ T5911] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 249.915762][ T5959] usb 4-1: device descriptor read/64, error -71 [ 250.079352][ T7890] loop2: detected capacity change from 0 to 128 [ 250.089620][ T7890] EXT4-fs: Ignoring removed nobh option [ 250.099034][ T5971] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 250.255815][ T5971] usb 5-1: device descriptor read/64, error -71 [ 250.364831][ T7890] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 250.387499][ T7890] ext4 filesystem being mounted at /114/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 250.423593][ T5971] usb usb5-port1: attempt power cycle [ 250.635795][ T5959] usb usb4-port1: attempt power cycle [ 250.675480][ T5911] usb 2-1: Using ep0 maxpacket: 8 [ 250.693992][ T5911] usb 2-1: no configurations [ 250.705633][ T5911] usb 2-1: can't read configurations, error -22 [ 250.723903][ T5911] usb usb2-port1: attempt power cycle [ 250.752121][ T29] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 250.777626][ T29] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 250.788518][ T5845] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 250.789515][ T29] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 250.808156][ T29] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 250.985748][ T5959] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 250.997825][ T7899] netlink: 96 bytes leftover after parsing attributes in process `syz.2.544'. [ 251.025734][ T5971] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 251.038292][ T5959] usb 4-1: device descriptor read/8, error -71 [ 251.056405][ T5971] usb 5-1: device descriptor read/8, error -71 [ 251.115705][ T5911] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 251.146348][ T5911] usb 2-1: Using ep0 maxpacket: 8 [ 251.156983][ T5911] usb 2-1: no configurations [ 251.165540][ T5911] usb 2-1: can't read configurations, error -22 [ 251.275785][ T5959] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 251.316233][ T5971] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 251.316562][ T5959] usb 4-1: device descriptor read/8, error -71 [ 251.354605][ T5911] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 251.386316][ T5971] usb 5-1: device descriptor read/8, error -71 [ 251.386534][ T5911] usb 2-1: Using ep0 maxpacket: 8 [ 251.400356][ T5911] usb 2-1: no configurations [ 251.405055][ T5911] usb 2-1: can't read configurations, error -22 [ 251.412850][ T5911] usb usb2-port1: unable to enumerate USB device [ 251.478834][ T5959] usb usb4-port1: unable to enumerate USB device [ 251.496030][ T5971] usb usb5-port1: unable to enumerate USB device [ 251.894136][ T7902] syzkaller0: entered promiscuous mode [ 251.899882][ T7902] syzkaller0: entered allmulticast mode [ 252.000327][ T5971] usb 1-1: USB disconnect, device number 21 [ 252.174172][ T7908] netlink: 'syz.0.548': attribute type 10 has an invalid length. [ 252.204402][ T7908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.267574][ T7908] team0: Port device bond0 added [ 252.316305][ T5911] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 252.490703][ T5911] usb 3-1: device descriptor read/64, error -71 [ 252.779267][ T5911] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 252.847390][ T5959] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 253.025901][ T5911] usb 3-1: device descriptor read/64, error -71 [ 253.185679][ T5959] usb 1-1: Using ep0 maxpacket: 32 [ 253.237427][ T5911] usb usb3-port1: attempt power cycle [ 253.246449][ T5959] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 253.254703][ T5959] usb 1-1: config 0 has no interface number 0 [ 253.286204][ T5959] usb 1-1: config 0 interface 184 has no altsetting 0 [ 253.303878][ T5959] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 253.320423][ T5959] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.339655][ T5959] usb 1-1: Product: syz [ 253.348607][ T5959] usb 1-1: Manufacturer: syz [ 253.353258][ T5959] usb 1-1: SerialNumber: syz [ 253.377351][ T5959] usb 1-1: config 0 descriptor?? [ 253.388779][ T5959] smsc75xx v1.0.0 [ 253.458758][ T7929] netlink: 96 bytes leftover after parsing attributes in process `syz.1.555'. [ 253.573051][ T7914] lec:lec_atm_close: lec0: Shut down! [ 253.772956][ T5911] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 253.837943][ T5911] usb 3-1: device descriptor read/8, error -71 [ 254.080074][ T5959] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 254.091596][ T5959] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 254.885740][ T5911] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 254.919749][ T5911] usb 3-1: device descriptor read/8, error -71 [ 255.036000][ T5911] usb usb3-port1: unable to enumerate USB device [ 255.244915][ T5959] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 255.277300][ T5959] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 255.289184][ T5924] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 255.289548][ T5959] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 255.316995][ T5959] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 255.445737][ T5971] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 255.453533][ T5924] usb 5-1: device descriptor read/64, error -71 [ 255.585681][ T5971] usb 3-1: device descriptor read/64, error -71 [ 255.627845][ T7954] netlink: 'syz.1.563': attribute type 10 has an invalid length. [ 255.636160][ T7954] bond_slave_0: left promiscuous mode [ 255.641766][ T7954] bond_slave_1: left promiscuous mode [ 255.650456][ T7954] bond_slave_0: entered promiscuous mode [ 255.656300][ T7954] bond_slave_1: entered promiscuous mode [ 255.664677][ T7954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.671863][ T7954] team0: Device bond0 failed to register rx_handler [ 255.679050][ T7954] bond_slave_0: left promiscuous mode [ 255.684538][ T7954] bond_slave_1: left promiscuous mode [ 255.695735][ T5924] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 255.726520][ T5959] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 255.825997][ T5971] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 255.838726][ T5924] usb 5-1: device descriptor read/64, error -71 [ 255.915966][ T5959] usb 4-1: Using ep0 maxpacket: 8 [ 255.960096][ T5924] usb usb5-port1: attempt power cycle [ 255.971262][ T5959] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.981556][ T5959] usb 4-1: config 0 has no interfaces? [ 255.989705][ T5971] usb 3-1: device descriptor read/64, error -71 [ 256.006061][ T5959] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 256.023647][ T5959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.031949][ T5959] usb 4-1: Product: syz [ 256.037042][ T5959] usb 4-1: Manufacturer: syz [ 256.041989][ T5959] usb 4-1: SerialNumber: syz [ 256.107582][ T5959] usb 4-1: config 0 descriptor?? [ 256.173717][ T5971] usb usb3-port1: attempt power cycle [ 256.425714][ T5924] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 256.437715][ T5959] usb 1-1: USB disconnect, device number 22 [ 256.460704][ T5924] usb 5-1: device descriptor read/8, error -71 [ 256.595760][ T5971] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 256.627614][ T5971] usb 3-1: device descriptor read/8, error -71 [ 256.727041][ T5924] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 256.757604][ T5924] usb 5-1: device descriptor read/8, error -71 [ 257.037686][ T5971] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 257.046575][ T5924] usb usb5-port1: unable to enumerate USB device [ 257.066276][ T5971] usb 3-1: device descriptor read/8, error -71 [ 257.790855][ T5971] usb usb3-port1: unable to enumerate USB device [ 257.951482][ T7993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.575'. [ 257.987957][ T7994] netlink: 96 bytes leftover after parsing attributes in process `syz.1.574'. [ 258.457765][ T5924] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 258.496815][ T6001] usb 4-1: USB disconnect, device number 17 [ 258.615692][ T5924] usb 5-1: Using ep0 maxpacket: 32 [ 258.632924][ T5924] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 258.659450][ T5924] usb 5-1: config 0 has no interface number 0 [ 258.689769][ T5924] usb 5-1: config 0 interface 184 has no altsetting 0 [ 258.806081][ T5924] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 258.815150][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.833530][ T5924] usb 5-1: Product: syz [ 258.845745][ T5924] usb 5-1: Manufacturer: syz [ 258.852264][ T5924] usb 5-1: SerialNumber: syz [ 258.890334][ T5924] usb 5-1: config 0 descriptor?? [ 258.915740][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5350 ms [ 258.923850][ C0] lec:lec_tx_timeout: lec0 [ 258.928659][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 258.976122][ T5924] smsc75xx v1.0.0 [ 259.113683][ T8018] loop2: detected capacity change from 0 to 1024 [ 259.508313][ T5924] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 259.539652][ T5924] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 259.715742][ T5971] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 259.766764][ T8008] lec:lec_atm_close: lec0: Shut down! [ 259.866122][ T5971] usb 1-1: device descriptor read/64, error -71 [ 259.883418][ T8018] loop2: detected capacity change from 0 to 40427 [ 259.900154][ T8018] F2FS-fs (loop2): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 259.919392][ T8018] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 259.928412][ T8018] F2FS-fs (loop2): Image doesn't support compression [ 259.935539][ T8018] F2FS-fs (loop2): build fault injection rate: 690 [ 259.945457][ T8018] F2FS-fs (loop2): build fault injection type: 0x35f7 [ 259.957177][ T8018] F2FS-fs (loop2): invalid crc value [ 260.087240][ T8018] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 260.097549][ T8018] F2FS-fs (loop2): Start checkpoint disabled! [ 260.105699][ T5971] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 260.116211][ T8018] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 260.125711][ T8031] netlink: 'syz.3.588': attribute type 10 has an invalid length. [ 260.137801][ T8018] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 260.155133][ T8018] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 260.162321][ T5924] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 260.183904][ T5924] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 260.208302][ T30] audit: type=1800 audit(1769503874.856:6): pid=8018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.584" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 260.215017][ T5924] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 260.239660][ T5924] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 260.255703][ T5971] usb 1-1: device descriptor read/64, error -71 [ 260.367166][ T5971] usb usb1-port1: attempt power cycle [ 260.518562][ T8035] syz.2.584: attempt to access beyond end of device [ 260.518562][ T8035] loop2: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 260.731275][ T1322] kworker/u8:6: attempt to access beyond end of device [ 260.731275][ T1322] loop2: rw=1, sector=77824, nr_sectors = 8 limit=40427 [ 260.746152][ T1322] kworker/u8:6: attempt to access beyond end of device [ 260.746152][ T1322] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 260.760868][ T1322] CPU: 0 UID: 0 PID: 1322 Comm: kworker/u8:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 260.760901][ T1322] Tainted: [L]=SOFTLOCKUP [ 260.760909][ T1322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 260.760923][ T1322] Workqueue: writeback wb_workfn (flush-7:2) [ 260.760980][ T1322] Call Trace: [ 260.760989][ T1322] [ 260.760997][ T1322] dump_stack_lvl+0xe8/0x150 [ 260.761031][ T1322] f2fs_handle_critical_error+0x37c/0x540 [ 260.761074][ T1322] f2fs_write_end_io+0xcdb/0xff0 [ 260.761122][ T1322] __submit_merged_bio+0x256/0x650 [ 260.761164][ T1322] __submit_merged_write_cond+0x3c3/0x4e0 [ 260.761208][ T1322] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 260.761271][ T1322] f2fs_write_data_pages+0x2970/0x35e0 [ 260.761340][ T1322] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 260.761381][ T1322] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 260.761453][ T1322] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 260.761508][ T1322] ? __lock_acquire+0x6b5/0x2cf0 [ 260.761563][ T1322] ? update_cfs_rq_load_avg+0x3fb/0x4e0 [ 260.761589][ T1322] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 260.761613][ T1322] do_writepages+0x32e/0x550 [ 260.761649][ T1322] ? reacquire_held_locks+0x104/0x190 [ 260.761677][ T1322] ? writeback_sb_inodes+0x42a/0x1940 [ 260.761710][ T1322] __writeback_single_inode+0x133/0x1060 [ 260.761735][ T1322] ? do_raw_spin_unlock+0xf5/0x210 [ 260.761774][ T1322] writeback_sb_inodes+0x92e/0x1940 [ 260.761839][ T1322] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 260.761862][ T1322] ? do_raw_spin_lock+0x12b/0x2f0 [ 260.761945][ T1322] ? rcu_is_watching+0x15/0xb0 [ 260.761987][ T1322] wb_writeback+0x445/0xad0 [ 260.762016][ T1322] ? queue_io+0x251/0x450 [ 260.762050][ T1322] ? __pfx_wb_writeback+0x10/0x10 [ 260.762070][ T1322] ? do_raw_spin_lock+0x12b/0x2f0 [ 260.762125][ T1322] wb_workfn+0x3f8/0xef0 [ 260.762154][ T1322] ? __lock_acquire+0x6b5/0x2cf0 [ 260.762176][ T1322] ? look_up_lock_class+0x57/0x110 [ 260.762225][ T1322] ? __pfx_wb_workfn+0x10/0x10 [ 260.762262][ T1322] ? do_raw_spin_lock+0x12b/0x2f0 [ 260.762292][ T1322] ? lock_acquire+0x106/0x330 [ 260.762319][ T1322] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 260.762355][ T1322] ? process_one_work+0x87c/0x15a0 [ 260.762383][ T1322] ? process_one_work+0x87c/0x15a0 [ 260.762425][ T1322] ? process_one_work+0x87c/0x15a0 [ 260.762448][ T1322] process_one_work+0x949/0x15a0 [ 260.762503][ T1322] ? __pfx_process_one_work+0x10/0x10 [ 260.762526][ T1322] ? do_raw_spin_lock+0x12b/0x2f0 [ 260.762581][ T1322] worker_thread+0xb46/0x1140 [ 260.762620][ T1322] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 260.762663][ T1322] kthread+0x388/0x470 [ 260.762695][ T1322] ? __pfx_worker_thread+0x10/0x10 [ 260.762719][ T1322] ? __pfx_kthread+0x10/0x10 [ 260.762753][ T1322] ret_from_fork+0x51b/0xa40 [ 260.762785][ T1322] ? __pfx_ret_from_fork+0x10/0x10 [ 260.762816][ T1322] ? __switch_to+0xc7d/0x1400 [ 260.762845][ T1322] ? __pfx_kthread+0x10/0x10 [ 260.762879][ T1322] ret_from_fork_asm+0x1a/0x30 [ 260.762934][ T1322] [ 260.762942][ T1322] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 260.860437][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.864142][ T5971] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 260.870392][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.908732][ T5971] usb 1-1: device descriptor read/8, error -71 [ 261.262303][ T9] usb 5-1: USB disconnect, device number 19 [ 261.340832][ T5971] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 261.396910][ T5971] usb 1-1: device descriptor read/8, error -71 [ 261.506455][ T5971] usb usb1-port1: unable to enumerate USB device [ 261.540368][ T8057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.593'. [ 261.565715][ T5924] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 261.715992][ T5924] usb 4-1: Using ep0 maxpacket: 8 [ 261.728220][ T5924] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 261.754148][ T5924] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 261.778743][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.799570][ T5924] usb 4-1: Product: syz [ 261.811718][ T5924] usb 4-1: Manufacturer: syz [ 261.822916][ T5924] usb 4-1: SerialNumber: syz [ 261.848233][ T5924] usb 4-1: config 0 descriptor?? [ 261.868566][ T5924] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 261.923512][ T8048] loop1: detected capacity change from 0 to 40427 [ 261.951999][ T8048] F2FS-fs (loop1): invalid crc value [ 262.124576][ T8048] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 262.147139][ T8048] F2FS-fs (loop1): Start checkpoint disabled! [ 262.160138][ T8048] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 262.172278][ T8048] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 262.945927][ T5924] gspca_zc3xx: reg_w_i err -110 [ 262.969679][ T65] kworker/u8:4: attempt to access beyond end of device [ 262.969679][ T65] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 263.005755][ T65] CPU: 0 UID: 0 PID: 65 Comm: kworker/u8:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 263.005787][ T65] Tainted: [L]=SOFTLOCKUP [ 263.005795][ T65] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 263.005816][ T65] Workqueue: writeback wb_workfn (flush-7:1) [ 263.005856][ T65] Call Trace: [ 263.005865][ T65] [ 263.005873][ T65] dump_stack_lvl+0xe8/0x150 [ 263.005906][ T65] f2fs_handle_critical_error+0x37c/0x540 [ 263.005947][ T65] f2fs_write_end_io+0xcdb/0xff0 [ 263.005994][ T65] __submit_merged_bio+0x256/0x650 [ 263.006035][ T65] __submit_merged_write_cond+0x3c3/0x4e0 [ 263.006079][ T65] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 263.006137][ T65] f2fs_write_data_pages+0x2970/0x35e0 [ 263.006206][ T65] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 263.006243][ T65] ? unwind_next_frame+0xa5/0x23c0 [ 263.006314][ T65] ? ret_from_fork_asm+0x1a/0x30 [ 263.006367][ T65] ? unwind_next_frame+0xa5/0x23c0 [ 263.006400][ T65] ? unwind_next_frame+0xa5/0x23c0 [ 263.006448][ T65] ? __lock_acquire+0x6b5/0x2cf0 [ 263.006475][ T65] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 263.006498][ T65] do_writepages+0x32e/0x550 [ 263.006533][ T65] ? reacquire_held_locks+0x104/0x190 [ 263.006561][ T65] ? writeback_sb_inodes+0x42a/0x1940 [ 263.006592][ T65] __writeback_single_inode+0x133/0x1060 [ 263.006618][ T65] ? do_raw_spin_unlock+0xf5/0x210 [ 263.006657][ T65] writeback_sb_inodes+0x92e/0x1940 [ 263.006713][ T65] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 263.006734][ T65] ? do_raw_spin_lock+0x12b/0x2f0 [ 263.006822][ T65] ? rcu_is_watching+0x15/0xb0 [ 263.006862][ T65] wb_writeback+0x445/0xad0 [ 263.006891][ T65] ? queue_io+0x251/0x450 [ 263.006924][ T65] ? __pfx_wb_writeback+0x10/0x10 [ 263.006944][ T65] ? do_raw_spin_lock+0x12b/0x2f0 [ 263.006996][ T65] wb_workfn+0x3f8/0xef0 [ 263.007024][ T65] ? __lock_acquire+0x6b5/0x2cf0 [ 263.007064][ T65] ? look_up_lock_class+0x57/0x110 [ 263.007113][ T65] ? __pfx_wb_workfn+0x10/0x10 [ 263.007155][ T65] ? do_raw_spin_unlock+0xf5/0x210 [ 263.007195][ T65] ? process_one_work+0x87c/0x15a0 [ 263.007224][ T65] ? process_one_work+0x87c/0x15a0 [ 263.007266][ T65] ? process_one_work+0x87c/0x15a0 [ 263.007291][ T65] process_one_work+0x949/0x15a0 [ 263.007347][ T65] ? __pfx_process_one_work+0x10/0x10 [ 263.007371][ T65] ? do_raw_spin_lock+0x12b/0x2f0 [ 263.007428][ T65] worker_thread+0xb46/0x1140 [ 263.007490][ T65] kthread+0x388/0x470 [ 263.007524][ T65] ? __pfx_worker_thread+0x10/0x10 [ 263.007548][ T65] ? __pfx_kthread+0x10/0x10 [ 263.007583][ T65] ret_from_fork+0x51b/0xa40 [ 263.007615][ T65] ? __pfx_ret_from_fork+0x10/0x10 [ 263.007640][ T65] ? __switch_to+0xc7d/0x1400 [ 263.007669][ T65] ? __pfx_kthread+0x10/0x10 [ 263.007703][ T65] ret_from_fork_asm+0x1a/0x30 [ 263.007757][ T65] [ 263.007766][ T65] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 264.115783][ T5924] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 264.128562][ T5924] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 264.215369][ T8073] loop0: detected capacity change from 0 to 1024 [ 264.224758][ T8071] syzkaller0: entered promiscuous mode [ 264.230881][ T8071] syzkaller0: entered allmulticast mode [ 264.371879][ T5911] usb 4-1: USB disconnect, device number 18 [ 264.909670][ T8088] loop2: detected capacity change from 0 to 2048 [ 264.916112][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5150 ms [ 264.916163][ C0] lec:lec_tx_timeout: lec0 [ 264.926098][ T5911] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 264.930242][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 265.037345][ T8088] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.070391][ T8088] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.096148][ T5911] usb 4-1: Using ep0 maxpacket: 32 [ 265.103506][ T5911] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 265.115685][ T5911] usb 4-1: config 0 has no interface number 0 [ 265.129116][ T5911] usb 4-1: config 0 interface 184 has no altsetting 0 [ 265.147962][ T5911] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 265.165746][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.175921][ T5911] usb 4-1: Product: syz [ 265.180118][ T5911] usb 4-1: Manufacturer: syz [ 265.193580][ T8073] loop0: detected capacity change from 0 to 40427 [ 265.200213][ T5911] usb 4-1: SerialNumber: syz [ 265.214626][ T8073] F2FS-fs (loop0): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 265.226246][ T5911] usb 4-1: config 0 descriptor?? [ 265.248287][ T5911] smsc75xx v1.0.0 [ 265.254147][ T8073] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 265.349397][ T8084] lec:lec_atm_close: lec0: Shut down! [ 265.367332][ T8073] F2FS-fs (loop0): Image doesn't support compression [ 265.386086][ T8073] F2FS-fs (loop0): build fault injection rate: 690 [ 265.392656][ T8073] F2FS-fs (loop0): build fault injection type: 0x35f7 [ 265.417379][ T8073] F2FS-fs (loop0): invalid crc value [ 265.450761][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.669550][ T8073] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 265.702657][ T8073] F2FS-fs (loop0): Start checkpoint disabled! [ 265.735039][ T8073] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 265.766979][ T8073] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 265.788236][ T8073] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 265.818469][ T8091] loop4: detected capacity change from 0 to 40427 [ 265.844681][ T5911] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 265.857636][ T5911] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 265.888073][ T8091] F2FS-fs (loop4): invalid crc value [ 265.928649][ T30] audit: type=1800 audit(1769503880.566:7): pid=8073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.603" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 266.172752][ T8091] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 266.182777][ T8091] F2FS-fs (loop4): Start checkpoint disabled! [ 266.191161][ T8091] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 266.216895][ T8111] syz.0.603: attempt to access beyond end of device [ 266.216895][ T8111] loop0: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 266.279176][ T8091] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 266.453543][ T14] kworker/u8:1: attempt to access beyond end of device [ 266.453543][ T14] loop0: rw=1, sector=77824, nr_sectors = 8 limit=40427 [ 266.538521][ T5911] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 266.550455][ T5911] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 266.561245][ T5911] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 266.582000][ T5911] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 266.593314][ T14] kworker/u8:1: attempt to access beyond end of device [ 266.593314][ T14] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 267.092256][ T14] CPU: 0 UID: 0 PID: 14 Comm: kworker/u8:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 267.092300][ T14] Tainted: [L]=SOFTLOCKUP [ 267.092308][ T14] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 267.092321][ T14] Workqueue: writeback wb_workfn (flush-7:0) [ 267.092362][ T14] Call Trace: [ 267.092370][ T14] [ 267.092379][ T14] dump_stack_lvl+0xe8/0x150 [ 267.092411][ T14] f2fs_handle_critical_error+0x37c/0x540 [ 267.092452][ T14] f2fs_write_end_io+0xcdb/0xff0 [ 267.092497][ T14] __submit_merged_bio+0x256/0x650 [ 267.092537][ T14] __submit_merged_write_cond+0x3c3/0x4e0 [ 267.092579][ T14] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 267.092658][ T14] f2fs_write_data_pages+0x2970/0x35e0 [ 267.092726][ T14] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 267.092766][ T14] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 267.092834][ T14] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 267.092886][ T14] ? __lock_acquire+0x6b5/0x2cf0 [ 267.092932][ T14] ? f2fs_update_inode+0x13d9/0x2620 [ 267.092969][ T14] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 267.092994][ T14] do_writepages+0x32e/0x550 [ 267.093029][ T14] ? reacquire_held_locks+0x104/0x190 [ 267.093056][ T14] ? writeback_sb_inodes+0x42a/0x1940 [ 267.093088][ T14] __writeback_single_inode+0x133/0x1060 [ 267.093113][ T14] ? do_raw_spin_unlock+0xf5/0x210 [ 267.093152][ T14] writeback_sb_inodes+0x92e/0x1940 [ 267.093217][ T14] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 267.093237][ T14] ? do_raw_spin_lock+0x12b/0x2f0 [ 267.093321][ T14] ? rcu_is_watching+0x15/0xb0 [ 267.093362][ T14] wb_writeback+0x445/0xad0 [ 267.093403][ T14] ? queue_io+0x251/0x450 [ 267.093434][ T14] ? __pfx_wb_writeback+0x10/0x10 [ 267.093473][ T14] ? do_raw_spin_lock+0x12b/0x2f0 [ 267.093524][ T14] wb_workfn+0x3f8/0xef0 [ 267.093564][ T14] ? __lock_acquire+0x6b5/0x2cf0 [ 267.093585][ T14] ? look_up_lock_class+0x57/0x110 [ 267.093630][ T14] ? __pfx_wb_workfn+0x10/0x10 [ 267.093665][ T14] ? do_raw_spin_lock+0x12b/0x2f0 [ 267.093693][ T14] ? lock_acquire+0x106/0x330 [ 267.093719][ T14] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 267.093753][ T14] ? process_one_work+0x87c/0x15a0 [ 267.093779][ T14] ? process_one_work+0x87c/0x15a0 [ 267.093818][ T14] ? process_one_work+0x87c/0x15a0 [ 267.093841][ T14] process_one_work+0x949/0x15a0 [ 267.093888][ T14] ? __pfx_process_one_work+0x10/0x10 [ 267.093910][ T14] ? do_raw_spin_lock+0x12b/0x2f0 [ 267.093963][ T14] worker_thread+0xb46/0x1140 [ 267.094001][ T14] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 267.094040][ T14] kthread+0x388/0x470 [ 267.094071][ T14] ? __pfx_worker_thread+0x10/0x10 [ 267.094094][ T14] ? __pfx_kthread+0x10/0x10 [ 267.094125][ T14] ret_from_fork+0x51b/0xa40 [ 267.094154][ T14] ? __pfx_ret_from_fork+0x10/0x10 [ 267.094178][ T14] ? __switch_to+0xc7d/0x1400 [ 267.094218][ T14] ? __pfx_kthread+0x10/0x10 [ 267.094251][ T14] ret_from_fork_asm+0x1a/0x30 [ 267.094303][ T14] [ 267.094313][ T14] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 267.097820][ T3546] kworker/u8:11: attempt to access beyond end of device [ 267.097820][ T3546] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 267.426869][ T3546] CPU: 1 UID: 0 PID: 3546 Comm: kworker/u8:11 Tainted: G L syzkaller #0 PREEMPT(full) [ 267.426901][ T3546] Tainted: [L]=SOFTLOCKUP [ 267.426907][ T3546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 267.426918][ T3546] Workqueue: writeback wb_workfn (flush-7:4) [ 267.426951][ T3546] Call Trace: [ 267.426957][ T3546] [ 267.426964][ T3546] dump_stack_lvl+0xe8/0x150 [ 267.426989][ T3546] f2fs_handle_critical_error+0x37c/0x540 [ 267.427022][ T3546] f2fs_write_end_io+0xcdb/0xff0 [ 267.427055][ T3546] __submit_merged_bio+0x256/0x650 [ 267.427086][ T3546] __submit_merged_write_cond+0x3c3/0x4e0 [ 267.427117][ T3546] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 267.427162][ T3546] f2fs_write_data_pages+0x2970/0x35e0 [ 267.427218][ T3546] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 267.427247][ T3546] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 267.427296][ T3546] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 267.427336][ T3546] ? __lock_acquire+0x6b5/0x2cf0 [ 267.427371][ T3546] ? set_shrinker_bit+0x7c/0x350 [ 267.427392][ T3546] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 267.427410][ T3546] do_writepages+0x32e/0x550 [ 267.427438][ T3546] ? reacquire_held_locks+0x104/0x190 [ 267.427458][ T3546] ? writeback_sb_inodes+0x42a/0x1940 [ 267.427482][ T3546] __writeback_single_inode+0x133/0x1060 [ 267.427501][ T3546] ? do_raw_spin_unlock+0xf5/0x210 [ 267.427530][ T3546] writeback_sb_inodes+0x92e/0x1940 [ 267.427570][ T3546] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 267.427586][ T3546] ? do_raw_spin_lock+0x12b/0x2f0 [ 267.427646][ T3546] ? rcu_is_watching+0x15/0xb0 [ 267.427676][ T3546] wb_writeback+0x445/0xad0 [ 267.427696][ T3546] ? queue_io+0x251/0x450 [ 267.427720][ T3546] ? __pfx_wb_writeback+0x10/0x10 [ 267.427734][ T3546] ? do_raw_spin_lock+0x12b/0x2f0 [ 267.427774][ T3546] wb_workfn+0x3f8/0xef0 [ 267.427795][ T3546] ? __lock_acquire+0x6b5/0x2cf0 [ 267.427812][ T3546] ? look_up_lock_class+0x57/0x110 [ 267.427846][ T3546] ? __pfx_wb_workfn+0x10/0x10 [ 267.427873][ T3546] ? do_raw_spin_lock+0x12b/0x2f0 [ 267.427895][ T3546] ? lock_acquire+0x106/0x330 [ 267.427916][ T3546] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 267.427943][ T3546] ? process_one_work+0x87c/0x15a0 [ 267.427964][ T3546] ? process_one_work+0x87c/0x15a0 [ 267.427994][ T3546] ? process_one_work+0x87c/0x15a0 [ 267.428011][ T3546] process_one_work+0x949/0x15a0 [ 267.428049][ T3546] ? __pfx_process_one_work+0x10/0x10 [ 267.428066][ T3546] ? do_raw_spin_lock+0x12b/0x2f0 [ 267.428106][ T3546] worker_thread+0xb46/0x1140 [ 267.428149][ T3546] kthread+0x388/0x470 [ 267.428173][ T3546] ? __pfx_worker_thread+0x10/0x10 [ 267.428197][ T3546] ? __pfx_kthread+0x10/0x10 [ 267.428222][ T3546] ret_from_fork+0x51b/0xa40 [ 267.428245][ T3546] ? __pfx_ret_from_fork+0x10/0x10 [ 267.428263][ T3546] ? __switch_to+0xc7d/0x1400 [ 267.428284][ T3546] ? __pfx_kthread+0x10/0x10 [ 267.428309][ T3546] ret_from_fork_asm+0x1a/0x30 [ 267.428348][ T3546] [ 267.428613][ T3546] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 268.145204][ T5924] usb 4-1: USB disconnect, device number 19 [ 268.273183][ T8123] syzkaller0: entered promiscuous mode [ 268.285705][ T8123] syzkaller0: entered allmulticast mode [ 268.620027][ T8117] lec:lec_atm_close: lec0: Shut down! [ 269.003680][ T8143] netlink: 'syz.2.622': attribute type 10 has an invalid length. [ 269.248386][ T8146] netlink: 96 bytes leftover after parsing attributes in process `syz.4.619'. [ 269.837487][ T8140] lec:lec_atm_close: lec0: Shut down! [ 270.458574][ T8167] syzkaller0: entered promiscuous mode [ 270.464191][ T8167] syzkaller0: entered allmulticast mode [ 270.485858][ T5911] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 270.527650][ T8159] loop1: detected capacity change from 0 to 32768 [ 270.638289][ T8159] JBD2: Ignoring recovery information on journal [ 270.655710][ T5911] usb 4-1: Using ep0 maxpacket: 32 [ 270.666794][ T5911] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 270.686624][ T5911] usb 4-1: config 0 has no interface number 0 [ 270.703247][ T8170] netlink: 120 bytes leftover after parsing attributes in process `syz.0.629'. [ 270.716175][ T5911] usb 4-1: config 0 interface 184 has no altsetting 0 [ 270.726781][ T5911] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 270.735986][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.748832][ T5911] usb 4-1: Product: syz [ 270.753560][ T5911] usb 4-1: Manufacturer: syz [ 270.758356][ T5911] usb 4-1: SerialNumber: syz [ 270.769364][ T8159] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 270.782392][ T5911] usb 4-1: config 0 descriptor?? [ 270.787594][ T8170] netlink: 'syz.0.629': attribute type 1 has an invalid length. [ 270.805744][ T8170] netlink: 64 bytes leftover after parsing attributes in process `syz.0.629'. [ 270.834723][ T5911] smsc75xx v1.0.0 [ 271.898837][ T5911] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 271.921875][ T5911] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 272.028697][ T5841] ocfs2: Unmounting device (7,1) on (node local) [ 272.086311][ T8179] netlink: 'syz.4.633': attribute type 10 has an invalid length. [ 272.124871][ T8179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.169375][ T8179] team0: Port device bond0 added [ 272.546855][ T5911] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 272.567692][ T5911] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 272.584188][ T5911] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 272.611669][ T5911] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 273.544348][ T8206] netlink: 96 bytes leftover after parsing attributes in process `syz.0.638'. [ 273.591081][ T8191] lec:lec_atm_close: lec0: Shut down! [ 273.789135][ T5911] usb 4-1: USB disconnect, device number 20 [ 273.885821][ T5924] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 273.904953][ T8210] syzkaller0: entered promiscuous mode [ 273.922426][ T8210] syzkaller0: entered allmulticast mode [ 274.046899][ T5924] usb 2-1: Using ep0 maxpacket: 32 [ 274.054314][ T5924] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 274.064731][ T5924] usb 2-1: config 0 has no interface number 0 [ 274.084576][ T5924] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 274.098524][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.122574][ T5924] usb 2-1: Product: syz [ 274.130368][ T5924] usb 2-1: Manufacturer: syz [ 274.144228][ T5924] usb 2-1: SerialNumber: syz [ 274.168681][ T5924] usb 2-1: config 0 descriptor?? [ 274.187542][ T5924] smsc95xx v2.0.0 [ 274.592147][ T5924] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 274.605697][ T5924] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 275.755287][ T5924] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 275.952047][ T5924] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 276.255762][ T5971] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 276.319666][ T8215] loop3: detected capacity change from 0 to 32768 [ 276.408307][ T8215] JBD2: Ignoring recovery information on journal [ 276.416313][ T5971] usb 3-1: Using ep0 maxpacket: 32 [ 276.424109][ T5971] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 276.440009][ T5971] usb 3-1: config 0 has no interface number 0 [ 276.453438][ T5971] usb 3-1: config 0 interface 184 has no altsetting 0 [ 276.470153][ T5971] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 276.484242][ T5971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.503912][ T5971] usb 3-1: Product: syz [ 276.512313][ T5971] usb 3-1: Manufacturer: syz [ 276.522206][ T5971] usb 3-1: SerialNumber: syz [ 276.590027][ T8215] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 276.603169][ T5971] usb 3-1: config 0 descriptor?? [ 276.628150][ T5971] smsc75xx v1.0.0 [ 276.632050][ T5971] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 276.664485][ T5971] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 276.771003][ T5840] ocfs2: Unmounting device (7,3) on (node local) [ 276.809491][ T5971] usb 2-1: USB disconnect, device number 15 [ 277.608929][ T8239] lec:lec_atm_send: lec0: Unknown message type 808525940 [ 277.620026][ T8238] lec:lec_atm_close: lec0: Shut down! [ 277.633842][ T8257] syzkaller0: entered promiscuous mode [ 277.647166][ T8257] syzkaller0: entered allmulticast mode [ 277.672213][ T8242] lec:lec_atm_close: lec0: Shut down! [ 279.195918][ T5971] usb 3-1: USB disconnect, device number 21 [ 279.207890][ T8277] loop1: detected capacity change from 0 to 128 [ 279.215857][ T8277] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 279.230673][ T8277] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 279.542811][ T8286] netlink: 96 bytes leftover after parsing attributes in process `syz.2.658'. [ 280.286148][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 280.494196][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 280.515526][ T9] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 280.540978][ T9] usb 4-1: config 0 has no interface number 0 [ 280.565966][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 280.575947][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.599198][ T9] usb 4-1: Product: syz [ 280.611054][ T9] usb 4-1: Manufacturer: syz [ 280.623471][ T9] usb 4-1: SerialNumber: syz [ 280.651603][ T9] usb 4-1: config 0 descriptor?? [ 280.668675][ T9] smsc95xx v2.0.0 [ 281.074515][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 281.101619][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 281.249424][ T8306] syzkaller0: entered promiscuous mode [ 281.274669][ T8306] syzkaller0: entered allmulticast mode [ 281.924144][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 281.937165][ T9] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 282.042045][ T8308] lec:lec_atm_close: lec0: Shut down! [ 282.675782][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 282.855678][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 282.863805][ T9] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 282.875783][ T9] usb 3-1: config 0 has no interface number 0 [ 282.881996][ T9] usb 3-1: config 0 interface 184 has no altsetting 0 [ 282.893329][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 282.902692][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.910787][ T9] usb 3-1: Product: syz [ 282.915191][ T9] usb 3-1: Manufacturer: syz [ 282.920076][ T9] usb 3-1: SerialNumber: syz [ 282.932470][ T9] usb 3-1: config 0 descriptor?? [ 282.948018][ T9] smsc75xx v1.0.0 [ 282.951894][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 282.962901][ T9] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 282.994311][ T5911] usb 4-1: USB disconnect, device number 21 [ 283.994499][ T8332] ipip0: entered promiscuous mode [ 284.455776][ T5924] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 284.504677][ T8367] syzkaller0: entered promiscuous mode [ 284.510412][ T8367] syzkaller0: entered allmulticast mode [ 284.535797][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 284.645872][ T5924] usb 4-1: Using ep0 maxpacket: 32 [ 284.670769][ T5924] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 284.855761][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 284.861628][ T5924] usb 4-1: config 0 has no interface number 0 [ 284.873733][ T9] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 284.885366][ T9] usb 5-1: config 0 has no interface number 0 [ 284.891790][ T5924] usb 4-1: config 0 interface 184 has no altsetting 0 [ 284.904794][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 284.914295][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.922595][ T9] usb 5-1: Product: syz [ 284.927220][ T9] usb 5-1: Manufacturer: syz [ 284.932056][ T5924] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 284.941475][ T9] usb 5-1: SerialNumber: syz [ 284.946132][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.962862][ T9] usb 5-1: config 0 descriptor?? [ 284.976811][ T5924] usb 4-1: Product: syz [ 284.985323][ T5924] usb 4-1: Manufacturer: syz [ 284.990206][ T5924] usb 4-1: SerialNumber: syz [ 285.002931][ T9] smsc95xx v2.0.0 [ 285.018755][ T5924] usb 4-1: config 0 descriptor?? [ 285.034976][ T5924] smsc75xx v1.0.0 [ 285.405855][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 285.418855][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 285.462979][ T5911] usb 3-1: USB disconnect, device number 22 [ 285.638071][ T5924] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 285.651378][ T5924] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 286.996234][ T5924] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 287.007308][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 287.045648][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 287.053732][ C0] lec:lec_tx_timeout: lec0 [ 287.065722][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 287.102422][ T5924] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 287.112391][ T9] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32 [ 287.124293][ T5924] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 287.137749][ T5924] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 287.163216][ T5971] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 287.379387][ T5971] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 287.395779][ T5971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.412793][ T5971] usb 1-1: Product: syz [ 287.435864][ T5971] usb 1-1: Manufacturer: syz [ 287.451080][ T5971] usb 1-1: SerialNumber: syz [ 287.681224][ T5971] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 287.701395][ T5971] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 287.730309][ T5971] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 287.750369][ T5971] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 287.923331][ T5911] usb 5-1: USB disconnect, device number 20 [ 288.122474][ T9] usb 4-1: USB disconnect, device number 22 [ 289.359121][ T8441] capability: warning: `syz.4.703' uses deprecated v2 capabilities in a way that may be insecure [ 289.478088][ T9] usb 1-1: USB disconnect, device number 27 [ 291.455712][ T5924] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 291.526172][ T5971] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 291.621374][ T5924] usb 3-1: Using ep0 maxpacket: 32 [ 291.645011][ T5924] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 291.653951][ T5924] usb 3-1: config 0 has no interface number 0 [ 291.688248][ T5924] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 291.699166][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.710351][ T5924] usb 3-1: Product: syz [ 291.714603][ T5924] usb 3-1: Manufacturer: syz [ 291.721360][ T5924] usb 3-1: SerialNumber: syz [ 291.726512][ T5971] usb 1-1: Using ep0 maxpacket: 32 [ 291.740113][ T5971] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 292.075639][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 292.083721][ C0] lec:lec_tx_timeout: lec0 [ 292.095690][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 292.407006][ T5971] usb 1-1: config 0 has no interface number 0 [ 292.414589][ T5924] usb 3-1: config 0 descriptor?? [ 292.516043][ T5971] usb 1-1: config 0 interface 184 has no altsetting 0 [ 292.526806][ T5924] smsc95xx v2.0.0 [ 292.532348][ T5971] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 292.543073][ T5971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.551263][ T5971] usb 1-1: Product: syz [ 292.555553][ T5971] usb 1-1: Manufacturer: syz [ 292.560354][ T5971] usb 1-1: SerialNumber: syz [ 292.572303][ T5971] usb 1-1: config 0 descriptor?? [ 292.582772][ T5971] smsc75xx v1.0.0 [ 292.774418][ T8462] loop1: detected capacity change from 0 to 32768 [ 292.796329][ T8462] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.710 (8462) [ 292.843382][ T8462] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 292.863378][ T8462] BTRFS info (device loop1): using crc32c checksum algorithm [ 292.994248][ T5924] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 293.035295][ T5924] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 293.216024][ T5971] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 293.228381][ T5971] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 293.673095][ T8462] BTRFS info (device loop1): checking UUID tree [ 293.702921][ T8462] BTRFS info (device loop1): enabling ssd optimizations [ 293.731975][ T8462] BTRFS info (device loop1): turning on async discard [ 293.759381][ T8462] BTRFS info (device loop1): enabling free space tree [ 293.886663][ T5924] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 293.919651][ T5924] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 293.939675][ T5841] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 294.001385][ T5971] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 294.034203][ T5971] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 294.073141][ T5971] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 294.104207][ T5971] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 294.112814][ T5935] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 294.289617][ T5935] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 294.311648][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.322465][ T5935] usb 5-1: Product: syz [ 294.327139][ T5935] usb 5-1: Manufacturer: syz [ 294.331969][ T5935] usb 5-1: SerialNumber: syz [ 294.420385][ T8506] syzkaller0: entered promiscuous mode [ 294.426129][ T8506] syzkaller0: entered allmulticast mode [ 294.551561][ T5935] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 294.563943][ T5935] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 294.576683][ T5935] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 294.600913][ T5935] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 294.923673][ T5924] usb 3-1: USB disconnect, device number 23 [ 295.265464][ T5924] usb 1-1: USB disconnect, device number 28 [ 295.714659][ T8524] loop0: detected capacity change from 0 to 32768 [ 295.909457][ T8524] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 295.978174][ T8524] XFS (loop0): Ending clean mount [ 295.994140][ T8524] XFS (loop0): Quotacheck needed: Please wait. [ 296.045307][ T8524] XFS (loop0): Quotacheck: Done. [ 297.152398][ T6001] usb 5-1: USB disconnect, device number 21 [ 297.447804][ T5851] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 297.825724][ T6001] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 297.999636][ T6001] usb 5-1: Using ep0 maxpacket: 32 [ 298.007624][ T6001] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 298.018848][ T6001] usb 5-1: config 0 has no interface number 0 [ 298.029673][ T6001] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 298.046843][ T6001] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.054984][ T6001] usb 5-1: Product: syz [ 298.059912][ T6001] usb 5-1: Manufacturer: syz [ 298.064545][ T6001] usb 5-1: SerialNumber: syz [ 298.073233][ T6001] usb 5-1: config 0 descriptor?? [ 298.087851][ T6001] smsc95xx v2.0.0 [ 298.147831][ T8556] loop0: detected capacity change from 0 to 32768 [ 298.176041][ T8556] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.727 (8556) [ 298.199093][ T8556] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 298.211089][ T8556] BTRFS info (device loop0): using crc32c checksum algorithm [ 298.229073][ T8548] lec:lec_atm_close: lec0: Shut down! [ 298.271153][ T8556] BTRFS info (device loop0): checking UUID tree [ 298.278173][ T8556] BTRFS info (device loop0): enabling ssd optimizations [ 298.296574][ T8556] BTRFS info (device loop0): turning on async discard [ 298.313068][ T8556] BTRFS info (device loop0): enabling free space tree [ 298.443375][ T5851] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 298.492825][ T6001] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 298.521630][ T6001] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 298.945712][ T950] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 299.158484][ T950] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.206113][ T950] usb 1-1: config 0 has no interfaces? [ 299.221407][ T950] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 299.241138][ T950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.283511][ T950] usb 1-1: Product: syz [ 299.306087][ T950] usb 1-1: Manufacturer: syz [ 299.313629][ T950] usb 1-1: SerialNumber: syz [ 299.321562][ T8579] loop2: detected capacity change from 0 to 136 [ 299.335035][ T6001] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 299.361675][ T6001] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32 [ 299.373011][ T950] usb 1-1: config 0 descriptor?? [ 300.693184][ T5971] usb 5-1: USB disconnect, device number 22 [ 300.840504][ T8618] syzkaller0: entered promiscuous mode [ 300.846341][ T8618] syzkaller0: entered allmulticast mode [ 301.046349][ T8622] syzkaller0: entered promiscuous mode [ 301.067333][ T8622] syzkaller0: entered allmulticast mode [ 301.082859][ T8624] ipip0: entered promiscuous mode [ 301.369028][ T8635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.744'. [ 301.528113][ T8629] syzkaller0: entered promiscuous mode [ 301.539964][ T8629] syzkaller0: entered allmulticast mode [ 301.585898][ T8635] team_slave_0: entered promiscuous mode [ 301.591639][ T8635] team_slave_1: entered promiscuous mode [ 301.598102][ T8635] macvtap1: entered allmulticast mode [ 301.603556][ T8635] team0: entered allmulticast mode [ 301.618063][ T8635] team_slave_0: entered allmulticast mode [ 301.623921][ T8635] team_slave_1: entered allmulticast mode [ 301.632878][ T8635] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 301.742869][ T950] usb 1-1: USB disconnect, device number 29 [ 303.875617][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5650 ms [ 303.883773][ C0] lec:lec_tx_timeout: lec0 [ 303.895687][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 305.359611][ T8699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.757'. [ 305.622303][ T8699] macvtap2: entered allmulticast mode [ 305.656048][ T8699] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 306.685696][ T6001] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 306.791857][ T8729] syzkaller0: entered promiscuous mode [ 306.802419][ T8729] syzkaller0: entered allmulticast mode [ 306.891825][ T6001] usb 4-1: config 0 has an invalid descriptor of length 95, skipping remainder of the config [ 306.930078][ T6001] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 306.996297][ T6001] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 307.034419][ T6001] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.100175][ T8735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.772'. [ 307.107876][ T6001] usb 4-1: config 0 descriptor?? [ 307.603204][ T6001] usb 4-1: string descriptor 0 read error: -71 [ 307.736220][ T6001] ath6kl: Failed to submit usb control message: -71 [ 307.753067][ T6001] ath6kl: unable to send the bmi data to the device: -71 [ 307.767253][ T6001] ath6kl: Unable to send get target info: -71 [ 307.788321][ T6001] ath6kl: Failed to init ath6kl core: -71 [ 307.808630][ T6001] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 307.832416][ T6001] usb 4-1: USB disconnect, device number 23 [ 308.725677][ T950] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 308.895488][ T950] usb 4-1: config 1 interface 0 has no altsetting 0 [ 308.916841][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 308.924945][ C0] lec:lec_tx_timeout: lec0 [ 308.929250][ T950] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 308.929924][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 308.946270][ T950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.969644][ T950] usb 4-1: Product: syz [ 308.974719][ T950] usb 4-1: Manufacturer: syz [ 308.988428][ T950] usb 4-1: SerialNumber: syz [ 309.446449][ T950] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 309.766312][ T8735] team_slave_0: entered promiscuous mode [ 309.772413][ T8735] team_slave_1: entered promiscuous mode [ 309.784770][ T8735] macvtap1: entered allmulticast mode [ 309.790956][ T8735] team0: entered allmulticast mode [ 309.797278][ T8735] team_slave_0: entered allmulticast mode [ 309.803166][ T8735] team_slave_1: entered allmulticast mode [ 309.821308][ T8735] bond0: entered allmulticast mode [ 309.832356][ T8735] bond_slave_0: entered allmulticast mode [ 309.843855][ T8735] bond_slave_1: entered allmulticast mode [ 309.856760][ T8735] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 310.018369][ T8758] overlayfs: failed to clone upperpath [ 311.340869][ T5935] usb 4-1: USB disconnect, device number 24 [ 311.381024][ T5935] usblp0: removed [ 311.482193][ T8783] team_slave_0: entered promiscuous mode [ 311.487984][ T8783] team_slave_1: entered promiscuous mode [ 311.493756][ T8783] bond_slave_0: entered promiscuous mode [ 311.499525][ T8783] bond_slave_1: entered promiscuous mode [ 311.544997][ T8783] macvtap1: entered allmulticast mode [ 311.550569][ T8783] team0: entered allmulticast mode [ 311.558563][ T8783] team_slave_0: entered allmulticast mode [ 311.564452][ T8783] team_slave_1: entered allmulticast mode [ 311.570720][ T8783] bond0: entered allmulticast mode [ 311.576467][ T8783] bond_slave_0: entered allmulticast mode [ 311.582335][ T8783] bond_slave_1: entered allmulticast mode [ 311.590663][ T8783] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 312.762961][ T8813] lec:lec_atm_send: lec0: Unknown message type 808525940 [ 312.829135][ T8786] lec:lec_atm_close: lec0: Shut down! [ 315.615730][ T5924] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 315.807419][ T5924] usb 5-1: Using ep0 maxpacket: 32 [ 315.820434][ T5924] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 315.829876][ T5924] usb 5-1: config 0 has no interface number 0 [ 315.836162][ T5924] usb 5-1: config 0 interface 184 has no altsetting 0 [ 315.846221][ T5924] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 315.855550][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.863774][ T5924] usb 5-1: Product: syz [ 315.887179][ T5924] usb 5-1: Manufacturer: syz [ 315.895894][ T5924] usb 5-1: SerialNumber: syz [ 315.914826][ T5924] usb 5-1: config 0 descriptor?? [ 315.939481][ T5924] smsc75xx v1.0.0 [ 316.538066][ T5971] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 316.729587][ T5971] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.744138][ T5971] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 316.772109][ T5971] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 316.790206][ T5971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.808637][ T5971] usb 1-1: Product: syz [ 316.821720][ T5971] usb 1-1: Manufacturer: syz [ 316.834019][ T5971] usb 1-1: SerialNumber: syz [ 316.868023][ T5971] usb 1-1: config 0 descriptor?? [ 317.396500][ T5924] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 317.537987][ T5924] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 317.875816][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5050 ms [ 317.884043][ C0] lec:lec_tx_timeout: lec0 [ 317.889040][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 318.425714][ T5924] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 318.559907][ T5924] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 318.706275][ T5924] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 318.716584][ T5924] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 319.096630][ T5981] usb 1-1: USB disconnect, device number 30 [ 319.529478][ T8917] loop0: detected capacity change from 0 to 256 [ 319.546930][ T950] usb 5-1: USB disconnect, device number 23 [ 319.625820][ T30] audit: type=1326 audit(1769503934.276:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8915 comm="syz.0.823" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8de299aeb9 code=0x0 [ 320.208119][ T8921] ipip1: entered promiscuous mode [ 322.378614][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.384987][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.401476][ T5981] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 322.684422][ T5981] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 322.699731][ T5981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.733446][ T5981] usb 5-1: Product: syz [ 322.746474][ T5981] usb 5-1: Manufacturer: syz [ 322.766147][ T5981] usb 5-1: SerialNumber: syz [ 322.807183][ T5981] usb 5-1: config 0 descriptor?? [ 322.915641][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 322.923727][ C0] lec:lec_tx_timeout: lec0 [ 322.928406][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 322.965962][ T5911] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 323.165864][ T5911] usb 1-1: Using ep0 maxpacket: 32 [ 323.194324][ T5911] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 323.225697][ T5911] usb 1-1: config 0 has no interface number 0 [ 323.266480][ T5911] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 323.306994][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.327756][ T5911] usb 1-1: Product: syz [ 323.338706][ T5911] usb 1-1: Manufacturer: syz [ 323.351983][ T5911] usb 1-1: SerialNumber: syz [ 323.381344][ T5911] usb 1-1: config 0 descriptor?? [ 323.417199][ T5911] smsc95xx v2.0.0 [ 323.872006][ T8945] lec:lec_atm_close: lec0: Shut down! [ 324.025648][ T5981] usb 5-1: can't set config #0, error -71 [ 324.056725][ T5981] usb 5-1: USB disconnect, device number 24 [ 324.127994][ T5911] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 324.148165][ T5911] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 324.364278][ T8978] loop4: detected capacity change from 0 to 128 [ 325.734861][ T5911] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 325.747707][ T5911] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 325.763813][ T5911] usb 1-1: USB disconnect, device number 31 [ 326.336352][ T8993] loop4: detected capacity change from 0 to 128 [ 326.406644][ T8993] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 327.192599][ T9026] netlink: 96 bytes leftover after parsing attributes in process `syz.4.846'. [ 327.394198][ T9023] loop0: detected capacity change from 0 to 4096 [ 328.915778][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5050 ms [ 328.924106][ C0] lec:lec_tx_timeout: lec0 [ 328.929010][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 330.015776][ T5981] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 330.116035][ T5924] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 330.133637][ T9066] macvtap3: entered allmulticast mode [ 330.141271][ T9066] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 330.225678][ T5981] usb 1-1: Using ep0 maxpacket: 32 [ 330.235801][ T5981] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 330.249643][ T5981] usb 1-1: config 0 has no interface number 0 [ 330.259108][ T5981] usb 1-1: config 0 interface 184 has no altsetting 0 [ 330.278084][ T5981] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 330.305383][ T5924] usb 5-1: Using ep0 maxpacket: 32 [ 330.310851][ T5981] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.319698][ T5981] usb 1-1: Product: syz [ 330.325401][ T5981] usb 1-1: Manufacturer: syz [ 330.330349][ T5981] usb 1-1: SerialNumber: syz [ 330.335197][ T5924] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 330.345505][ T5924] usb 5-1: config 0 has no interface number 0 [ 330.355392][ T5924] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 330.364964][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.373035][ T5924] usb 5-1: Product: syz [ 330.446440][ T5981] usb 1-1: config 0 descriptor?? [ 330.459498][ T5924] usb 5-1: Manufacturer: syz [ 330.479922][ T5924] usb 5-1: SerialNumber: syz [ 330.486230][ T5981] smsc75xx v1.0.0 [ 330.504335][ T5924] usb 5-1: config 0 descriptor?? [ 330.520935][ T5924] smsc95xx v2.0.0 [ 330.935666][ T5924] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 330.947122][ T5924] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 331.102767][ T5981] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 331.117821][ T5981] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 332.140825][ T5981] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 332.162127][ T5981] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 332.191911][ T5981] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 332.373304][ T5924] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 332.384343][ T5981] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 332.393355][ T5924] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -61 [ 332.585186][ T9102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.877'. [ 333.619169][ T5924] usb 1-1: USB disconnect, device number 32 [ 333.725024][ T5971] usb 5-1: USB disconnect, device number 25 [ 333.935595][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 333.943732][ C0] lec:lec_tx_timeout: lec0 [ 333.948557][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 334.615819][ T5935] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 335.045923][ T9127] overlayfs: failed to clone upperpath [ 335.105780][ T5935] usb 1-1: device descriptor read/64, error -71 [ 335.811786][ T9134] netlink: 12 bytes leftover after parsing attributes in process `syz.4.881'. [ 335.865945][ T5935] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 336.075946][ T5935] usb 1-1: device descriptor read/64, error -71 [ 336.196995][ T5935] usb usb1-port1: attempt power cycle [ 336.236393][ T9142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.889'. [ 336.845692][ T5935] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 337.093261][ T5935] usb 1-1: device descriptor read/8, error -71 [ 337.541825][ T9156] loop0: detected capacity change from 0 to 32768 [ 337.650005][ T9156] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 337.861149][ T9156] XFS (loop0): Ending clean mount [ 337.871725][ T9156] XFS (loop0): Quotacheck needed: Please wait. [ 337.931785][ T9156] XFS (loop0): Quotacheck: Done. [ 338.644611][ T5851] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 338.955664][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 338.963728][ C0] lec:lec_tx_timeout: lec0 [ 338.975847][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 342.585707][ T5959] usb 1-1: new low-speed USB device number 37 using dummy_hcd [ 343.453771][ T5959] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 343.587353][ T5959] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 343.631106][ T5959] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 343.674640][ T5959] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 343.726636][ T5959] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 343.995599][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 344.003702][ C0] lec:lec_tx_timeout: lec0 [ 344.015724][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 344.523617][ T5959] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 344.557106][ T5959] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 344.706570][ T5959] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 344.762247][ T5959] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 344.797615][ T5959] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 344.831277][ T5959] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 344.839827][ T5959] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 344.865628][ T5959] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 344.878101][ T9247] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 344.896002][ T9247] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 344.909442][ T5959] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 345.008121][ T9247] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 345.021062][ T5959] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 345.191984][ T9253] netlink: 36 bytes leftover after parsing attributes in process `syz.2.919'. [ 345.272094][ T5959] usb 1-1: string descriptor 0 read error: -71 [ 345.280515][ T5959] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 345.305125][ T5959] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.353370][ T5959] usb 1-1: can't set config #168, error -71 [ 345.379744][ T5959] usb 1-1: USB disconnect, device number 37 [ 346.635033][ T5848] Bluetooth: hci4: command 0x0406 tx timeout [ 347.920202][ T9257] loop4: detected capacity change from 0 to 40427 [ 348.001469][ T9257] F2FS-fs (loop4): invalid crc value [ 348.227479][ T9257] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 348.270736][ T5981] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 348.367545][ T9257] F2FS-fs (loop4): Start checkpoint disabled! [ 348.393397][ T9257] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 348.448175][ T5981] usb 1-1: Using ep0 maxpacket: 32 [ 348.529083][ T5981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.545650][ T5981] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 348.570082][ T5981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.910935][ T5981] usb 1-1: config 0 descriptor?? [ 349.025625][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 349.033749][ C0] lec:lec_tx_timeout: lec0 [ 349.038417][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 349.136613][ T5981] hub 1-1:0.0: bad descriptor, ignoring hub [ 349.142590][ T5981] hub 1-1:0.0: probe with driver hub failed with error -5 [ 349.152302][ T5981] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 349.919465][ T9335] netlink: 96 bytes leftover after parsing attributes in process `syz.3.938'. [ 350.181057][ T9341] netlink: 'syz.4.940': attribute type 1 has an invalid length. [ 350.433333][ T9345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.941'. [ 350.462988][ T9345] netlink: 12 bytes leftover after parsing attributes in process `syz.1.941'. [ 350.489938][ T9345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.941'. [ 350.512032][ T9345] netlink: 12 bytes leftover after parsing attributes in process `syz.1.941'. [ 351.021662][ T9358] netlink: 96 bytes leftover after parsing attributes in process `syz.1.945'. [ 351.108861][ T5911] usb 1-1: USB disconnect, device number 38 [ 352.117367][ T9377] netlink: 'syz.3.949': attribute type 13 has an invalid length. [ 354.055580][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 354.063674][ C0] lec:lec_tx_timeout: lec0 [ 354.075665][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 354.430262][ T9408] loop0: detected capacity change from 0 to 8 [ 355.221968][ T9418] SQUASHFS error: lzo decompression failed, data probably corrupt [ 355.230626][ T9418] SQUASHFS error: Failed to read block 0x0: -5 [ 355.238575][ T9418] SQUASHFS error: Failed to read block 0xff: -5 [ 355.246903][ T9418] SQUASHFS error: lzo decompression failed, data probably corrupt [ 355.254993][ T9418] SQUASHFS error: Failed to read block 0x0: -5 [ 355.605992][ T30] audit: type=1800 audit(2000000019.160:9): pid=9418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.954" name="file2" dev="loop0" ino=3 res=0 errno=0 [ 355.848588][ T5981] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 356.365659][ T5981] usb 5-1: Using ep0 maxpacket: 32 [ 356.373411][ T5981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.384696][ T5981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.397735][ T5981] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 356.466868][ T9423] overlayfs: failed to clone upperpath [ 356.875685][ T5981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.886731][ T5981] usb 5-1: config 0 descriptor?? [ 356.896238][ T5981] hub 5-1:0.0: USB hub found [ 357.109895][ T9436] netlink: 96 bytes leftover after parsing attributes in process `syz.3.959'. [ 357.152022][ T5981] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 357.422929][ T5981] usbhid 5-1:0.0: can't add hid device: -71 [ 357.443223][ T5981] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 357.506489][ T5981] usb 5-1: USB disconnect, device number 26 [ 358.413612][ T9450] netlink: 36 bytes leftover after parsing attributes in process `syz.1.964'. [ 359.085584][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 359.093639][ C0] lec:lec_tx_timeout: lec0 [ 359.105654][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 359.403637][ T9430] loop0: detected capacity change from 0 to 40427 [ 359.428342][ T9430] F2FS-fs (loop0): invalid crc value [ 360.001818][ T9430] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 360.038660][ T9430] F2FS-fs (loop0): Start checkpoint disabled! [ 360.075391][ T9430] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 360.924449][ T9471] netlink: 'syz.4.972': attribute type 13 has an invalid length. [ 361.468655][ T9492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.976'. [ 361.478517][ T9492] netlink: 12 bytes leftover after parsing attributes in process `syz.2.976'. [ 361.491703][ T9492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.976'. [ 361.685253][ T9492] netlink: 12 bytes leftover after parsing attributes in process `syz.2.976'. [ 363.198677][ T9515] loop4: detected capacity change from 0 to 512 [ 363.238901][ T9515] EXT4-fs: Ignoring removed nobh option [ 363.263327][ T9517] netlink: 96 bytes leftover after parsing attributes in process `syz.2.984'. [ 363.349781][ T9515] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 363.397923][ T9505] loop0: detected capacity change from 0 to 40427 [ 363.555147][ T9515] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 363.601361][ T9505] F2FS-fs (loop0): invalid crc value [ 363.636831][ T9515] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.985: Corrupt directory, running e2fsck is recommended [ 363.730260][ T9515] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 363.762602][ T9515] EXT4-fs error (device loop4): ext4_iget_extra_inode:5052: inode #15: comm syz.4.985: corrupted in-inode xattr: invalid ea_ino [ 363.808915][ T9515] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 363.813519][ T9515] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.985: couldn't read orphan inode 15 (err -117) [ 363.822810][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 363.822835][ C1] EXT4-fs (loop4): initial error at time 2000000027: ext4_iget_extra_inode:5052: inode 15 [ 363.822871][ C1] EXT4-fs (loop4): last error at time 2000000027: ext4_iget_extra_inode:5052: inode 15 [ 363.932590][ T9515] loop4: lost filesystem error report for type 5 error -117 [ 363.939130][ T9515] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.952286][ T9505] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 363.970615][ T9505] F2FS-fs (loop0): Start checkpoint disabled! [ 363.982719][ T9505] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 363.991847][ T9505] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 364.341418][ T9515] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 364.361951][ T9515] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 364.372220][ T9515] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.985: Corrupt directory, running e2fsck is recommended [ 364.573276][ T49] kworker/u8:3: attempt to access beyond end of device [ 364.573276][ T49] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 364.591528][ T9515] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 364.672716][ T9543] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 365.105637][ T49] CPU: 1 UID: 0 PID: 49 Comm: kworker/u8:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 365.105672][ T49] Tainted: [L]=SOFTLOCKUP [ 365.105681][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 365.105694][ T49] Workqueue: writeback wb_workfn (flush-7:0) [ 365.105736][ T49] Call Trace: [ 365.105745][ T49] [ 365.105754][ T49] dump_stack_lvl+0xe8/0x150 [ 365.105787][ T49] f2fs_handle_critical_error+0x37c/0x540 [ 365.105830][ T49] f2fs_write_end_io+0xcdb/0xff0 [ 365.105876][ T49] __submit_merged_bio+0x256/0x650 [ 365.105913][ T49] __submit_merged_write_cond+0x3c3/0x4e0 [ 365.105951][ T49] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 365.106004][ T49] f2fs_write_data_pages+0x2970/0x35e0 [ 365.106062][ T49] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 365.106094][ T49] ? unwind_next_frame+0xa5/0x23c0 [ 365.106160][ T49] ? ret_from_fork_asm+0x1a/0x30 [ 365.106209][ T49] ? unwind_next_frame+0xa5/0x23c0 [ 365.106242][ T49] ? unwind_next_frame+0xa5/0x23c0 [ 365.106286][ T49] ? __lock_acquire+0x6b5/0x2cf0 [ 365.106318][ T49] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 365.106343][ T49] do_writepages+0x32e/0x550 [ 365.106388][ T49] ? reacquire_held_locks+0x104/0x190 [ 365.106414][ T49] ? writeback_sb_inodes+0x42a/0x1940 [ 365.106446][ T49] __writeback_single_inode+0x133/0x1060 [ 365.106471][ T49] ? do_raw_spin_unlock+0xf5/0x210 [ 365.106509][ T49] writeback_sb_inodes+0x92e/0x1940 [ 365.106565][ T49] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 365.106585][ T49] ? do_raw_spin_lock+0x12b/0x2f0 [ 365.106666][ T49] ? rcu_is_watching+0x15/0xb0 [ 365.106705][ T49] wb_writeback+0x445/0xad0 [ 365.106733][ T49] ? queue_io+0x251/0x450 [ 365.106765][ T49] ? __pfx_wb_writeback+0x10/0x10 [ 365.106785][ T49] ? do_raw_spin_lock+0x12b/0x2f0 [ 365.106835][ T49] wb_workfn+0x3f8/0xef0 [ 365.106864][ T49] ? __lock_acquire+0x6b5/0x2cf0 [ 365.106886][ T49] ? look_up_lock_class+0x57/0x110 [ 365.106934][ T49] ? __pfx_wb_workfn+0x10/0x10 [ 365.106971][ T49] ? do_raw_spin_lock+0x12b/0x2f0 [ 365.107000][ T49] ? lock_acquire+0x106/0x330 [ 365.107026][ T49] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 365.107061][ T49] ? process_one_work+0x87c/0x15a0 [ 365.107084][ T49] ? process_one_work+0x87c/0x15a0 [ 365.107118][ T49] ? process_one_work+0x87c/0x15a0 [ 365.107138][ T49] process_one_work+0x949/0x15a0 [ 365.107182][ T49] ? __pfx_process_one_work+0x10/0x10 [ 365.107201][ T49] ? do_raw_spin_lock+0x12b/0x2f0 [ 365.107245][ T49] worker_thread+0xb46/0x1140 [ 365.107278][ T49] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 365.107311][ T49] kthread+0x388/0x470 [ 365.107338][ T49] ? __pfx_worker_thread+0x10/0x10 [ 365.107365][ T49] ? __pfx_kthread+0x10/0x10 [ 365.107393][ T49] ret_from_fork+0x51b/0xa40 [ 365.107419][ T49] ? __pfx_ret_from_fork+0x10/0x10 [ 365.107439][ T49] ? __switch_to+0xc7d/0x1400 [ 365.107462][ T49] ? __pfx_kthread+0x10/0x10 [ 365.107490][ T49] ret_from_fork_asm+0x1a/0x30 [ 365.107534][ T49] [ 365.107943][ T49] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 365.155719][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6050 ms [ 365.417080][ C0] lec:lec_tx_timeout: lec0 [ 365.425695][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 365.507867][ T9515] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 365.556901][ T9543] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 365.560564][ T9544] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 365.635773][ T9544] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 365.744397][ T9543] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.985: Corrupt directory, running e2fsck is recommended [ 366.012420][ T5856] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.385952][ T5981] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 368.501968][ T9599] netlink: 'syz.0.1002': attribute type 12 has an invalid length. [ 369.165649][ T5981] usb 5-1: Using ep0 maxpacket: 16 [ 369.172537][ T5981] usb 5-1: too many endpoints for config 0 interface 0 altsetting 254: 254, using maximum allowed: 30 [ 369.184382][ T5981] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.194803][ T5981] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 369.208342][ T5981] usb 5-1: config 0 interface 0 has no altsetting 0 [ 369.214997][ T5981] usb 5-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 369.224557][ T5981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.297689][ T5981] usb 5-1: config 0 descriptor?? [ 369.405144][ T9604] 9p: Bad value for 'rfdno' [ 369.585160][ T9579] kvm_pr_unimpl_wrmsr: 112 callbacks suppressed [ 369.585186][ T9579] kvm: kvm [9576]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 369.657598][ T9579] kvm: kvm [9576]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 369.969798][ T5981] usbhid 5-1:0.0: can't add hid device: -71 [ 370.004996][ T5981] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 370.041824][ T5981] usb 5-1: USB disconnect, device number 27 [ 370.915644][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5490 ms [ 370.923739][ C0] lec:lec_tx_timeout: lec0 [ 370.929015][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 371.235001][ T9635] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1013'. [ 371.257082][ T9635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1013'. [ 371.797001][ T9656] netlink: 'syz.4.1017': attribute type 12 has an invalid length. [ 372.383819][ T9663] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1018'. [ 373.575703][ T5959] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 373.746377][ T5959] usb 5-1: Using ep0 maxpacket: 32 [ 373.827999][ T5959] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 373.925293][ T5959] usb 5-1: config 0 has no interface number 0 [ 374.050998][ T5959] usb 5-1: config 0 interface 184 has no altsetting 0 [ 374.078380][ T5959] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 374.127685][ T5959] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.168842][ T5959] usb 5-1: Product: syz [ 374.173069][ T5959] usb 5-1: Manufacturer: syz [ 374.224959][ T5959] usb 5-1: SerialNumber: syz [ 374.402260][ T9689] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1026'. [ 374.425672][ T9689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1026'. [ 374.454859][ T5959] usb 5-1: config 0 descriptor?? [ 374.467206][ T5959] smsc75xx v1.0.0 [ 375.465746][ T5959] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 375.485786][ T5959] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 375.512194][ T5959] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 375.543350][ T5959] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 375.935648][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 375.943725][ C0] lec:lec_tx_timeout: lec0 [ 375.953104][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 376.713126][ T5981] usb 5-1: USB disconnect, device number 28 [ 376.888550][ T9728] netlink: 'syz.2.1032': attribute type 12 has an invalid length. [ 379.098916][ T9760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1040'. [ 379.138631][ T9760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1040'. [ 379.250252][ T9763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1041'. [ 380.428528][ T9790] node ffff888058c25b80 offset 0 parent ffff888058c27440 shift 0 count 64 values 0 array ffff88802b029098 list ffff888058c25b98 ffff888058c25b98 marks 0 0 0 [ 380.444833][ T9790] ------------[ cut here ]------------ [ 380.450371][ T9790] kernel BUG at ./include/linux/xarray.h:1441! [ 380.456639][ T9790] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 380.462920][ T9790] CPU: 1 UID: 0 PID: 9790 Comm: syz.0.1047 Tainted: G L syzkaller #0 PREEMPT(full) [ 380.473816][ T9790] Tainted: [L]=SOFTLOCKUP [ 380.478036][ T9783] node ffff8880561a4b00 offset 8 parent ffff888058c27440 shift 0 count 64 values 0 array ffff88802b029098 list ffff8880561a4b18 ffff8880561a4b18 marks [ 380.478157][ T9790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 380.478161][ T9783] 0 [ 380.478177][ T9790] RIP: 0010:hpage_collapse_scan_file+0x4e0c/0x50e0 [ 380.512460][ T9790] Code: ff 48 89 df 48 c7 c6 60 6b dc 8b e8 4e f4 f2 fe 90 0f 0b 48 85 db 0f 84 29 01 00 00 e8 bd ba 8f ff 48 89 df e8 45 98 67 09 90 <0f> 0b e8 ad ba 8f ff 48 89 df 48 c7 c6 60 6b dc 8b e8 1e f4 f2 fe [ 380.532270][ T9790] RSP: 0018:ffffc9000c1a7120 EFLAGS: 00010246 [ 380.538368][ T9790] RAX: 0000000000000000 RBX: ffff888058c25b80 RCX: eda90951e3224700 [ 380.546356][ T9790] RDX: ffffc9000f27b000 RSI: 00000000000073e5 RDI: 00000000000073e6 [ 380.554343][ T9790] RBP: ffffc9000c1a7428 R08: 0000000000000003 R09: 0000000000000004 [ 380.562328][ T9790] R10: dffffc0000000000 R11: fffffbfff1cbd5ec R12: 00000003fffffffc [ 380.570321][ T9790] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 380.578406][ T9790] FS: 00007f8de377b6c0(0000) GS:ffff8881253b4000(0000) knlGS:0000000000000000 [ 380.587346][ T9790] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 380.593940][ T9790] CR2: 0000200001000000 CR3: 000000005a27e000 CR4: 00000000003526f0 [ 380.601940][ T9790] Call Trace: [ 380.605279][ T9790] [ 380.608231][ T9790] ? hpage_collapse_scan_file+0x1cd/0x50e0 [ 380.614090][ T9790] ? __pfx_hpage_collapse_scan_file+0x10/0x10 [ 380.620171][ T9790] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 380.626003][ T9790] ? lockdep_hardirqs_on+0x7a/0x110 [ 380.631242][ T9790] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 380.637109][ T9790] ? try_to_wake_up+0x7fc/0x1390 [ 380.642073][ T9790] ? __up_read+0x291/0x6b0 [ 380.646514][ T9790] ? __pfx___up_read+0x10/0x10 [ 380.651304][ T9790] ? madvise_collapse+0x3fc/0xb30 [ 380.656348][ T9790] madvise_collapse+0x42f/0xb30 [ 380.661218][ T9790] madvise_vma_behavior+0x15a1/0x4270 [ 380.666616][ T9790] ? __lock_acquire+0x6b5/0x2cf0 [ 380.671578][ T9790] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 380.677311][ T9790] ? __lock_acquire+0x6b5/0x2cf0 [ 380.682272][ T9790] ? unwind_next_frame+0xa5/0x23c0 [ 380.687414][ T9790] ? unwind_next_frame+0xa5/0x23c0 [ 380.692547][ T9790] ? is_bpf_text_address+0x26/0x2b0 [ 380.697778][ T9790] ? is_bpf_text_address+0x26/0x2b0 [ 380.703006][ T9790] ? is_bpf_text_address+0x292/0x2b0 [ 380.708343][ T9790] ? is_bpf_text_address+0x26/0x2b0 [ 380.713596][ T9790] ? kernel_text_address+0xa5/0xe0 [ 380.718724][ T9790] ? __kernel_text_address+0xd/0x30 [ 380.723940][ T9790] ? unwind_get_return_address+0x4d/0x90 [ 380.729605][ T9790] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 380.735795][ T9790] ? arch_stack_walk+0xfb/0x150 [ 380.740723][ T9790] ? mas_prev_slot+0xb7b/0xbf0 [ 380.745520][ T9790] ? find_vma_prev+0x123/0x1b0 [ 380.750310][ T9790] ? __pfx_find_vma_prev+0x10/0x10 [ 380.755452][ T9790] ? file_ioctl+0x273/0x860 [ 380.759974][ T9790] madvise_walk_vmas+0x573/0xae0 [ 380.764928][ T9790] ? __lock_acquire+0x6b5/0x2cf0 [ 380.769893][ T9790] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 380.775407][ T9790] ? blk_start_plug+0x6e/0x1b0 [ 380.780200][ T9790] madvise_do_behavior+0x386/0x540 [ 380.785332][ T9790] ? __pfx_madvise_do_behavior+0x10/0x10 [ 380.790981][ T9790] ? down_read+0x272/0x2e0 [ 380.795414][ T9790] ? madvise_lock+0x146/0x2e0 [ 380.800119][ T9790] do_madvise+0x1fa/0x2e0 [ 380.804475][ T9790] ? __pfx_do_madvise+0x10/0x10 [ 380.809361][ T9790] ? rcu_is_watching+0x15/0xb0 [ 380.814153][ T9790] ? __pfx_kcov_ioctl+0x10/0x10 [ 380.819032][ T9790] __x64_sys_madvise+0xa6/0xc0 [ 380.823812][ T9790] do_syscall_64+0xe2/0xf80 [ 380.828335][ T9790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.834416][ T9790] ? trace_irq_disable+0x37/0x100 [ 380.839470][ T9790] ? clear_bhb_loop+0x40/0x90 [ 380.844171][ T9790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.850087][ T9790] RIP: 0033:0x7f8de299aeb9 [ 380.854545][ T9790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.874177][ T9790] RSP: 002b:00007f8de377b028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 380.882661][ T9790] RAX: ffffffffffffffda RBX: 00007f8de2c16180 RCX: 00007f8de299aeb9 [ 380.890678][ T9790] RDX: 0000000000000019 RSI: 0000000000600003 RDI: 0000200000000000 [ 380.898668][ T9790] RBP: 00007f8de2a08c1f R08: 0000000000000000 R09: 0000000000000000 [ 380.906678][ T9790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 380.914681][ T9790] R13: 00007f8de2c16218 R14: 00007f8de2c16180 R15: 00007ffcea1a89b8 [ 380.922680][ T9790] [ 380.925715][ T9790] Modules linked in: [ 380.930447][ T9790] ---[ end trace 0000000000000000 ]--- [ 380.944037][ T9790] RIP: 0010:hpage_collapse_scan_file+0x4e0c/0x50e0 [ 380.950705][ T9790] Code: ff 48 89 df 48 c7 c6 60 6b dc 8b e8 4e f4 f2 fe 90 0f 0b 48 85 db 0f 84 29 01 00 00 e8 bd ba 8f ff 48 89 df e8 45 98 67 09 90 <0f> 0b e8 ad ba 8f ff 48 89 df 48 c7 c6 60 6b dc 8b e8 1e f4 f2 fe [ 380.970389][ T9790] RSP: 0018:ffffc9000c1a7120 EFLAGS: 00010246 [ 380.975618][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 380.976541][ T9790] RAX: 0000000000000000 RBX: ffff888058c25b80 RCX: eda90951e3224700 [ 380.984491][ C0] lec:lec_tx_timeout: lec0 [ 380.992571][ T9790] RDX: ffffc9000f27b000 RSI: 00000000000073e5 RDI: 00000000000073e6 [ 381.004959][ T9790] RBP: ffffc9000c1a7428 R08: 0000000000000003 R09: 0000000000000004 [ 381.005837][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 381.013234][ T9790] R10: dffffc0000000000 R11: fffffbfff1cbd5ec R12: 00000003fffffffc [ 381.027088][ T9790] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 381.037066][ T9790] FS: 00007f8de377b6c0(0000) GS:ffff8881253b4000(0000) knlGS:0000000000000000 [ 381.051089][ T9783] 0 0 [ 381.054513][ T9783] ------------[ cut here ]------------ [ 381.060048][ T9783] kernel BUG at ./include/linux/xarray.h:1441! [ 381.066373][ T9783] Oops: invalid opcode: 0000 [#2] SMP KASAN PTI [ 381.072658][ T9783] CPU: 1 UID: 0 PID: 9783 Comm: syz.0.1047 Tainted: G D L syzkaller #0 PREEMPT(full) [ 381.083548][ T9783] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 381.088691][ T9783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 381.098784][ T9783] RIP: 0010:hpage_collapse_scan_file+0x4e0c/0x50e0 [ 381.105325][ T9783] Code: ff 48 89 df 48 c7 c6 60 6b dc 8b e8 4e f4 f2 fe 90 0f 0b 48 85 db 0f 84 29 01 00 00 e8 bd ba 8f ff 48 89 df e8 45 98 67 09 90 <0f> 0b e8 ad ba 8f ff 48 89 df 48 c7 c6 60 6b dc 8b e8 1e f4 f2 fe [ 381.124958][ T9783] RSP: 0018:ffffc9000c1df120 EFLAGS: 00010246 [ 381.131067][ T9783] RAX: 0000000000000000 RBX: ffff8880561a4b00 RCX: fa0dcba5e3c83800 [ 381.139074][ T9783] RDX: ffffc9000c291000 RSI: 0000000000007aef RDI: 0000000000007af0 [ 381.147080][ T9783] RBP: ffffc9000c1df428 R08: 0000000000000003 R09: 0000000000000004 [ 381.155090][ T9783] R10: dffffc0000000000 R11: fffffbfff1cbd5ec R12: 00000003fffffffc [ 381.163098][ T9783] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000200 [ 381.171105][ T9783] FS: 00007f8de37bd6c0(0000) GS:ffff8881253b4000(0000) knlGS:0000000000000000 [ 381.180070][ T9783] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 381.186691][ T9783] CR2: 0000200001000000 CR3: 000000005a27e000 CR4: 00000000003526f0 [ 381.194703][ T9783] Call Trace: [ 381.198016][ T9783] [ 381.200983][ T9783] ? hpage_collapse_scan_file+0x1cd/0x50e0 [ 381.206828][ T9783] ? mt_find+0x186/0x630 [ 381.211112][ T9783] ? __pfx_hpage_collapse_scan_file+0x10/0x10 [ 381.217220][ T9783] ? mt_find+0x186/0x630 [ 381.221501][ T9783] ? __pfx_mt_find+0x10/0x10 [ 381.226140][ T9783] ? shmem_allowable_huge_orders+0x5de/0x690 [ 381.232168][ T9783] ? __up_read+0x291/0x6b0 [ 381.236633][ T9783] ? __pfx___up_read+0x10/0x10 [ 381.241437][ T9783] ? madvise_collapse+0x3fc/0xb30 [ 381.246500][ T9783] madvise_collapse+0x42f/0xb30 [ 381.251385][ T9783] madvise_vma_behavior+0x15a1/0x4270 [ 381.256799][ T9783] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 381.262547][ T9783] ? __lock_acquire+0x6b5/0x2cf0 [ 381.267520][ T9783] ? pick_next_task_fair+0x16d3/0x1710 [ 381.273012][ T9783] ? update_load_avg+0x1b0/0x1e70 [ 381.278067][ T9783] ? finish_task_switch+0x161/0x920 [ 381.283290][ T9783] ? lock_acquire+0x106/0x330 [ 381.288003][ T9783] ? finish_task_switch+0x240/0x920 [ 381.293221][ T9783] ? lockdep_hardirqs_on+0x7a/0x110 [ 381.298442][ T9783] ? finish_task_switch+0x240/0x920 [ 381.303661][ T9783] ? rcu_is_watching+0x15/0xb0 [ 381.308551][ T9783] ? trace_sched_exit_tp+0x36/0xf0 [ 381.313710][ T9783] ? __lock_acquire+0x6b5/0x2cf0 [ 381.318682][ T9783] ? mas_prev_slot+0xb7b/0xbf0 [ 381.323472][ T9783] ? find_vma_prev+0x123/0x1b0 [ 381.328362][ T9783] ? __pfx_find_vma_prev+0x10/0x10 [ 381.333535][ T9783] ? futex_unqueue+0x22/0x240 [ 381.338344][ T9783] ? __futex_wait+0x371/0x420 [ 381.343086][ T9783] madvise_walk_vmas+0x573/0xae0 [ 381.348058][ T9783] ? __lock_acquire+0x6b5/0x2cf0 [ 381.353026][ T9783] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 381.358512][ T9783] ? blk_start_plug+0x6e/0x1b0 [ 381.363313][ T9783] madvise_do_behavior+0x386/0x540 [ 381.368448][ T9783] ? __pfx_madvise_do_behavior+0x10/0x10 [ 381.374103][ T9783] ? down_read+0x272/0x2e0 [ 381.378543][ T9783] ? madvise_lock+0x146/0x2e0 [ 381.383257][ T9783] do_madvise+0x1fa/0x2e0 [ 381.387614][ T9783] ? __pfx_do_madvise+0x10/0x10 [ 381.392505][ T9783] ? __se_sys_futex+0x3a8/0x450 [ 381.397401][ T9783] ? rcu_is_watching+0x15/0xb0 [ 381.402211][ T9783] __x64_sys_madvise+0xa6/0xc0 [ 381.407026][ T9783] do_syscall_64+0xe2/0xf80 [ 381.411553][ T9783] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.417642][ T9783] ? trace_irq_disable+0x37/0x100 [ 381.422696][ T9783] ? clear_bhb_loop+0x40/0x90 [ 381.427400][ T9783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.433316][ T9783] RIP: 0033:0x7f8de299aeb9 [ 381.437757][ T9783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.457390][ T9783] RSP: 002b:00007f8de37bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 381.465957][ T9783] RAX: ffffffffffffffda RBX: 00007f8de2c15fa0 RCX: 00007f8de299aeb9 [ 381.473975][ T9783] RDX: 0000000000000019 RSI: 0000000000c00000 RDI: 0000200000000000 [ 381.481978][ T9783] RBP: 00007f8de2a08c1f R08: 0000000000000000 R09: 0000000000000000 [ 381.489980][ T9783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.498056][ T9783] R13: 00007f8de2c16038 R14: 00007f8de2c15fa0 R15: 00007ffcea1a89b8 [ 381.506057][ T9783] [ 381.509097][ T9783] Modules linked in: [ 381.514129][ T9783] ---[ end trace 0000000000000000 ]--- [ 381.521305][ T9790] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 381.528194][ T9790] CR2: 0000200001000000 CR3: 000000005a27e000 CR4: 00000000003526f0 [ 381.536254][ T9790] Kernel panic - not syncing: Fatal exception [ 381.542951][ T9790] Kernel Offset: disabled [ 381.547282][ T9790] Rebooting in 86400 seconds..