last executing test programs:

11.966147037s ago: executing program 0 (id=3567):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000)

11.365910733s ago: executing program 2 (id=3570):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000014c0)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

10.48281522s ago: executing program 0 (id=3574):
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x304}, "ed197fbfb5c342b6", "28852cbbbeba35380ee5190047169f9d", "5f2307e0", "2ce6f8da8e55c427"}, 0x28)
r2 = syz_io_uring_setup(0xb5d, &(0x7f0000000640)={0x0, 0x9916, 0x0, 0x1000000, 0x164, 0x0, r1}, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000480)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r2, 0xf23, 0x0, 0xc, 0x0, 0x0)

8.305906442s ago: executing program 0 (id=3580):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)={0x154, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0xb0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_TUPLE={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, @CTA_EXPECT_NAT={0x80, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}, 0x154}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})

8.142322197s ago: executing program 2 (id=3581):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
socket$netlink(0x10, 0x3, 0x4)
socket(0x10, 0x803, 0x0)
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0)
fanotify_init(0x1, 0x101801)
openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1300, 0x1d)
socket$igmp6(0xa, 0x3, 0x2)
socket$packet(0x11, 0x3, 0x300)
r0 = socket(0x2, 0x3, 0x6)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d240600000308", @ANYRES8=r0, @ANYBLOB='\a'], 0x0)

8.025326471s ago: executing program 0 (id=3582):
syz_io_uring_setup(0xeab, 0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000085c, &(0x7f00000004c0)=ANY=[@ANYRES64, @ANYRES16=r0, @ANYBLOB=',discard,\x00', @ANYBLOB="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", @ANYBLOB="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", @ANYRES64=r0, @ANYBLOB="7586a035f55c6293d0f1b99c9b1885d532ab5c9f7209d3d9472bc4f6ae44ee7a08ce61001daaba6032a03b61fba7f6b0299550c27826218b7c1898ec7cb416ad734679ede2e5f49b3ef825c5f8f4441b01e9e4a78d86b9f7a56f4d2ce1c37c28d615601630e01709cfcf262367e0418aa422f760e4569bca22c7bf82b1f192a3e4f618e5978e7e8a188486fa2a380915715ef67da718b0037e943a2e8bbcd8265aef7abcca6f6e85d9d36ec4da2d8a8c1ddd4a0f9dcb5a717640ce47b6559045244e04e11052d376", @ANYRESHEX, @ANYRESHEX, @ANYRES32], 0xc1, 0x1521, &(0x7f0000003fc0)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000200)='./file0\x00', 0xe1c00, 0x0, 0x0, 0x0, &(0x7f0000000000))
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x1c0)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5524, &(0x7f00000108c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r5, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r5, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f0000000180)='./file1\x00', 0x4)

6.345990119s ago: executing program 3 (id=3587):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f"], 0x4b)

6.237343667s ago: executing program 2 (id=3588):
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="c4000000190001000000000000000000e0000002000000000000000000000000ff02000000000000000000000000000100000000200000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000082000000000000000000000fbffffffffffffff0000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000c00150059073500"], 0xc4}}, 0x2c000010)
sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@loopback, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x10}, {0x8, 0x1, 0x0, 0x0, 0x8, 0x0, 0xffffffff, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffa}, 0x4, 0x6e6bb5, 0x0, 0x1, 0x3, 0x3}}, 0xb8}}, 0x0)

5.758212561s ago: executing program 2 (id=3589):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r4)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000002c0)={'wg2\x00', <r6=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="240003"], 0x10e0}}, 0x0)

5.504899824s ago: executing program 1 (id=3590):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500010125bd7000fdffffff550000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x28000)
recvmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{&(0x7f0000000740)=@l2, 0x80, &(0x7f0000000900)=[{&(0x7f00000007c0)=""/184, 0xb8}, {&(0x7f0000000880)=""/67, 0x43}], 0x2, &(0x7f0000000940)=""/20, 0x14}, 0x1}, {{&(0x7f0000000980)=@alg, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000a00)=""/43, 0x2b}], 0x1, &(0x7f0000000a80)=""/86, 0x56}, 0x8}], 0x2, 0x2103, &(0x7f0000000bc0)={0x0, 0x989680})
sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000000007010100000000000400001e0000080c000640001fffe000000000080005"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=<r1=>0x0, @ANYBLOB="01002abd7400ffdbdf250c00000008000b00030000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c000600020000000000000008000b00c20d00000c00060000000000000000000800"], 0x60}, 0x1, 0x0, 0x0, 0x2001}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4048010)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000600)=0x1)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x37, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x8054)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=ANY=[@ANYRES64, @ANYRES8=r1, @ANYRESOCT=r0, @ANYRES64=r3], 0x64}, 0x1, 0x0, 0x0, 0x480d4}, 0x24000000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000680)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, 0x0, 0xf34, &(0x7f0000000640)='ipvlan1\x00', 0xbdbd, 0x1, 0x2})
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
write$tun(r2, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c)

4.49851367s ago: executing program 0 (id=3591):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="b70000000000000007000000000000009500000000000000a9171809f8dcf159569d5475991f7de1a0d0c119cfcf6b98741c23fb7f8d3002ec85db75af955427e91496087a51a0a78f269a9e216a0d0177c4fe3552396a180330807a5b6e8c79aa92038c78d1f16c1323f0e0c8d45c641a21757847cb22230e4321cc3581e40c62c4defee8cffe359cfeef7f58fffdb48647d28ae810f6d22d20271e9e88e94aa6982bf48356652b08e2fbd404e41e0058aae0478fbe542b648421d1b4486a542a7d478fbe6b5e000000293853f9c68e235184b7ad5b6c4fe70ec8320500db0db7fda3da6171a05509ffecef2cb9802d4f36c9a1ce46d3b355fec188ccfc2f0fc89e164561fb06ee9a0153981a47b5de9edd3536d5534f9a699f73b2c9341d2d05043748ce1f4577ed76cdf5b3c697089daa4abda69a8c0c992404610a6be9e103c972459065dec0488e85a6a0418fc87dd8019ef7bb4ef4fa6ee08d81797570578f2e8198e687012f25a69a90e7515e35f8abbddfa96c3f0485f01f0e9e144a2bd31c1b594c50de7c9efd826f1e19b7bd89ca4052b1985287bd13957a48467e0eeddf564d175bf4340885b63976df609806c3b2a3667539dfd66a7400000000003be6026e60205f761ce85cdf75cdb95ca5d32b5bf87eed4184d49f8f48181ef2419efe82ebb18ee55772d562b3b49551714e805a5211a3f4e8e703c03e23b2074bc573dbb66d59e269b722637c4a2efb5241cae2f14774609ad91d66724c438455dc4fcf0b4c8fc235f6c190b4c82bb2556d1fbcd4468369e98e900c743162ce2c7e60610acf0c8e4ba94a7e7127c7de0e6c35acecee1b8434fdca4579f9ebc6a515f7d910b466eb583fb0a7e65fbecb2b8ee0e9da33afb88aa5da8da3a5e0e58fcb48de6f165826b046a8951a47e040bd419d0efa0f54e8e3694085a7bde6f6494968d8200000000000"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4)
setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f0000000040)=r3, 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48)
r6 = dup2(r5, r3)
setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f00000000c0)=r6, 0x4)

4.496991585s ago: executing program 3 (id=3592):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)={0x154, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0xb0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_TUPLE={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, @CTA_EXPECT_NAT={0x80, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}, 0x154}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})

3.174494277s ago: executing program 2 (id=3593):
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f00), r1)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan1\x00', <r4=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000140)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
r5 = socket(0x1e, 0x1, 0x0)
connect$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
recvmmsg(r5, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)=""/161, 0xa1}], 0x1}, 0x100}], 0x1, 0x400101a2, 0x0)

2.915122533s ago: executing program 4 (id=3594):
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001400)={0x44, 0x0, 0x200, 0x70bd28, 0x8, {}, [@HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000540)}, {0x0}, {0x0}, {&(0x7f0000000700)}, {0x0}], 0x6}}], 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"})
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

2.847688759s ago: executing program 3 (id=3595):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), ""/16, <r0=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x8, 0x0, 0x0}}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1700000007000000c25e00000500000000200000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=r0, @ANYRES32, @ANYBLOB="01000000050000000100000000000000000000000000000000000000c25c904b13780666090e54c4055c98"], 0x50)
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001400)={0x64, 0x0, 0x200, 0x70bd28, 0x8, {}, [@HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)}, {0x0}, {&(0x7f00000005c0)="f2b3", 0x2}], 0x3}}], 0x1, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be", 0x8b}, {&(0x7f00000006c0)="138b9f8300af1d793c8e", 0xa}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5ede789aa995461e91d2", 0x24}, {&(0x7f0000000e80)="0e9129a2bae0d093a9c5091f0926391174e5aff7420b47b0cf1a8bbd7bb239460a6b26eb4f86fa48acdf54294bee3567a8ff0ed4f912a1aa059d62286db3e045dc31db292f5ab26a8f1466d90f0f98ff1a0e2b1018604ef19bc70a", 0x5b}], 0x5}}], 0x2, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/685], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r4, 0x2000012, 0x100e, 0x7ffe, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"373ab6e870bf64ef25ad87deef94c3b7350df627ea76a6efbd6c33a19e5dde0b3718dac0c2b8e833beb9e0347000fc7332c43a3128856f23df4628fb1e54b1745094c19bc88c190192f58dda884b3296f7cd6373842bff61047e0697c9af6e9f62b88fd21621b527902efdae6efd3516c7e5a36f4aaa12cd1b3ac0686db46783f45fe6aa2515ab6996b4807b0d9575a9061a775ef515a40b97c34035e8e412b9200000001000000062a07ab97f50ff5deb8a5978611317016887694245b363252230bbe17ed0f591f935d8e4ae7563eeff2fdfad8a775f0a4b15f63f5c4851df9aef747ace240cec55ce1659c08d38714245835e15291c4973ade3b2006d8870a1d739eb8e7a284e23f660b2061e31a70627be4acb16ecbe8a4edde1c5397c761a2fe0690f5d580ebf35b8640441ddf47d1f67a5e2d892f14a4f88412ce3cc8ec4d0580729c8638502410837253d6ac316ee9c6a24eb5d83463ff9bdf81f31c12b04adec97fe1377d2f29067e5f6f48cc123f2c4c02afe60d224c7d974a63c1aa9b110d2187f18de3753b57c630eab26238e8201501a007da99f1d07f76c4da113859ab55792049a15c5d83051f41ae951912eb81154f2398a729b6d6c51d6850bddcd4b35b24996e4ec707d1a744dff58ea5030fcd6b46a468ac029f86be30c7c3d5708e3871fed2e63b9c3ad265350e87e9fc44696eadeecc1ff67e30b64be27f480180d26218d031380149bcc31bd712063e9c09ed5329a530800000025d79eb9d4491d82d2b7a3d7d0cf9286396fcb8c2ccf1655b3ba420c36c3fb88d788308e947cc15e0957a98a843911c954c2a2feccd60d0000da8330cd1de951bcd767cf211a241c882b8d5e608fc0e796afead2a7b05018b4ae6c034c4c4997868343a5d064838dd0aca0d21b429665a0a1b4fd17cd34e711cee01d2348dc5871cca7ab4e4924f6f4bc29e7dbfae6788549e600000000271cd7ddfabd45803a6d1145734a82b2b9a6a87c8e118629840a027fd3f8e5a6a5dccee1a480d6cd0402a64db2263b1a9de61848b1eb31b51189f4caa2fdf0c3a38275386522137fe573ec27693a337c324952480c9ae476a694010aa22095c6d8bfceb5e024cbc21d6c1d1b17fae63dc627a948c4eca7dfa3f8a5e628531472e00ed28f2d2b7fcf03b5ba1975fcc010482a08c7800b3c87587a9fea37402ffafcc9cabc16a123164765d10dafe323ce33f197af8a3cf57332dbbee3f263a16cb565b61690b5804341630437ad2277be4ff82d1aa32c15b0cf99c88c7bca0ecf47a3be490bf6079f19acdf9a71f636fff612167c849b5c149cb32d8dd98d2aa8bb0606a1214fc1f0da04476cd8c3c056ec88eefca4d331ecbd5416c356466202cb97ddfc320b7594d5ab2e9102d549ffa72300"})
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r5 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

2.846043368s ago: executing program 1 (id=3596):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x6, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x10000000, 0x6, 0x6}, 0x68}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x240088c5}, 0x2004001a)
close(r1)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f14000e00003c0ff000000000ff840000000200000003125ce882cbf490d908f152", 0x27}], 0x1}, 0x8bb3a321efc09a)

2.475200952s ago: executing program 4 (id=3597):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0)
r2 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x2, &(0x7f0000000440)=[{0x6, 0x0, 0x0, 0x7fff8000}, {0x60, 0x7, 0x1, 0x6}]})
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r5=>0x0})
connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10)
sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000a5976ac6bcd41fd8"], 0x48}}, 0x410)
sendmsg$can_bcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x10, 0x1, {0x0, 0xea60}, {0x0, 0x2710}, {0x2, 0x1, 0x1}, 0x1, @can={{0x4, 0x1, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "6084d60f5b369079"}}, 0x48}, 0x1, 0x0, 0x0, 0x880}, 0x84844)
close_range(r3, 0xffffffffffffffff, 0x0)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r7, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc804}, 0x2)

2.425704871s ago: executing program 1 (id=3598):
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001400)={0x4c, 0x0, 0x200, 0x70bd28, 0x8, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)}, {0x0}, {&(0x7f00000005c0)="f2b3", 0x2}], 0x3}}], 0x1, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000034000000040000000000000014000000000000002900000034000000fdffffff0000000000010000000000002900000004000000041c000000000000fe72f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc00f3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5801409e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad0738000000010c7a0180050000000000000009000000000000000400000000000000060000000000000000040000000000000b0000000000000005020a7e00010005020bf4c910fc0200000000000000000000780e000000000000000000140000000000000029000000340000000000000000000000700100000000000029000000360000005e2a000000000000ff4150d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70000100000100010800000000000000000708000000030000ff0f07100000000002070600ff7f00000000000008c6c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab3030700008000000000000001082bdb86d1ce6a20c2000000000020000000000000002900000037000000730000000000"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, 0x0}}], 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"})
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

2.198891064s ago: executing program 3 (id=3599):
r0 = syz_open_dev$MSR(&(0x7f0000000740), 0x33, 0x0)
dup(r0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48)
syz_io_uring_setup(0x7b5f, &(0x7f0000000380)={0x0, 0x8aa8, 0x400, 0x1, 0x141}, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000200)='uid_map\x00')
pipe2$9p(&(0x7f0000000240), 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f00000012c0)=ANY=[@ANYRES8=r1], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000))

1.605275221s ago: executing program 3 (id=3600):
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="c4000000190001000000000000000000e0000002000000000000000000000000ff02000000000000000000000000000100000000200000000a00000087000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000082000000000000000000000fbffffffffffffff0000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000c0015005907350082"], 0xc4}}, 0x2c000010)
sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@loopback, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x10}, {0x8, 0x1, 0x0, 0x0, 0x8, 0x0, 0xffffffff, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffa}, 0x4, 0x6e6bb5, 0x0, 0x1, 0x3, 0x3}}, 0xb8}}, 0x0)

1.02240782s ago: executing program 4 (id=3601):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(r0, 0x0, 0x4014)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001400070010000800130008000300080012"], 0x44}}, 0x0)

815.05206ms ago: executing program 4 (id=3602):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e"], 0x4b)

801.373356ms ago: executing program 3 (id=3603):
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x304}, "ed197fbfb5c342b6", "28852cbbbeba35380ee5190047169f9d", "5f2307e0", "2ce6f8da8e55c427"}, 0x28)
r2 = syz_io_uring_setup(0xb5d, &(0x7f0000000640)={0x0, 0x9916, 0x0, 0x1000000, 0x164, 0x0, r1}, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000480)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r2, 0xf23, 0x0, 0xc, 0x0, 0x0)

624.959114ms ago: executing program 0 (id=3604):
socket(0x10, 0x803, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
r3 = getpgid(r0)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x120)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000180))
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newrule={0x24, 0x20, 0x2d2c6d60ea1da725, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e23, 0x4e23}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008081}, 0x0)

607.368648ms ago: executing program 1 (id=3605):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)={0x154, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0xb0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_TUPLE={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, @CTA_EXPECT_NAT={0x80, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}, 0x154}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})

402.43692ms ago: executing program 1 (id=3606):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500010125bd7000fdffffff550000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x28000)
recvmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000240)=""/7, 0x7}, {&(0x7f0000000340)=""/27, 0x1b}, {&(0x7f0000000380)=""/70, 0x46}, {0x0}, {&(0x7f0000000440)=""/67, 0x43}, {&(0x7f0000000540)=""/11, 0xb}, {&(0x7f0000000600)=""/6, 0x6}], 0x8, &(0x7f00000006c0)=""/111, 0x6f}, 0x1}, {{&(0x7f0000000740)=@l2, 0x80, &(0x7f0000000900)=[{&(0x7f00000007c0)=""/184, 0xb8}, {&(0x7f0000000880)=""/67, 0x43}], 0x2, &(0x7f0000000940)=""/20, 0x14}, 0x1}, {{&(0x7f0000000980)=@alg, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000a00)=""/43, 0x2b}], 0x1, &(0x7f0000000a80)=""/86, 0x56}, 0x8}], 0x3, 0x2103, &(0x7f0000000bc0)={0x0, 0x989680})
sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000000007010100000000000400001e0000080c000640001fffe000000000080005"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=<r1=>0x0, @ANYBLOB="01002abd7400ffdbdf250c00000008000b00030000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c000600020000000000000008000b00c20d00000c00060000000000000000000800"], 0x60}, 0x1, 0x0, 0x0, 0x2001}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4048010)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000600)=0x1)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x37, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x8054)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=ANY=[@ANYRES64, @ANYRES8=r1, @ANYRESOCT=r0, @ANYRES64=r3], 0x64}, 0x1, 0x0, 0x0, 0x480d4}, 0x24000000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000680)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, 0x0, 0xf34, &(0x7f0000000640)='ipvlan1\x00', 0xbdbd, 0x1, 0x2})
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
write$tun(r2, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c)

301.876946ms ago: executing program 4 (id=3607):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0)

115.810302ms ago: executing program 4 (id=3608):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x6, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x10000000, 0x6, 0x6}, 0x68}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x240088c5}, 0x2004001a)
close(r1)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f14000e00003c0ff000000000ff840000000200000003125ce882cbf490d908f152", 0x27}], 0x1}, 0x8bb3a321efc09a)

114.352679ms ago: executing program 2 (id=3609):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000200)={[{@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@nombcache}, {@nobarrier}, {@init_itable}, {@errors_remount}]}, 0x1, 0x569, &(0x7f00000002c0)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000840), &(0x7f0000000940)=ANY=[], 0x361, 0x0)
setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f00000001c0)=ANY=[], 0xfe37, 0x0)

0s ago: executing program 1 (id=3610):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c)
setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0)

kernel console output (not intermixed with test programs):

0]  ? __lock_acquire+0x6b5/0x2cf0
[  826.793119][ T6050]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  826.793146][ T6050]  do_writepages+0x32e/0x550
[  826.793176][ T6050]  ? reacquire_held_locks+0x104/0x190
[  826.793195][ T6050]  ? writeback_sb_inodes+0x477/0x1a20
[  826.793225][ T6050]  __writeback_single_inode+0x133/0x11a0
[  826.793250][ T6050]  ? do_raw_spin_unlock+0xf5/0x210
[  826.793278][ T6050]  writeback_sb_inodes+0x992/0x1a20
[  826.793329][ T6050]  ? __lock_acquire+0x6b5/0x2cf0
[  826.793362][ T6050]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  826.793383][ T6050]  ? do_raw_spin_lock+0x12b/0x2f0
[  826.793447][ T6050]  ? rcu_is_watching+0x15/0xb0
[  826.793476][ T6050]  wb_writeback+0x456/0xb70
[  826.793503][ T6050]  ? queue_io+0x251/0x4a0
[  826.793535][ T6050]  ? __pfx_wb_writeback+0x10/0x10
[  826.793555][ T6050]  ? do_raw_spin_lock+0x12b/0x2f0
[  826.793596][ T6050]  wb_workfn+0x414/0xf50
[  826.793617][ T6050]  ? look_up_lock_class+0x57/0x110
[  826.793654][ T6050]  ? __pfx_wb_workfn+0x10/0x10
[  826.793678][ T6050]  ? do_raw_spin_lock+0x12b/0x2f0
[  826.793703][ T6050]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  826.793749][ T6050]  ? process_one_work+0x8bb/0x1780
[  826.793774][ T6050]  process_one_work+0x9ab/0x1780
[  826.793824][ T6050]  ? __pfx_process_one_work+0x10/0x10
[  826.793847][ T6050]  ? do_raw_spin_lock+0x12b/0x2f0
[  826.793894][ T6050]  worker_thread+0xba8/0x11e0
[  826.793922][ T6050]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  826.793943][ T6050]  ? __kthread_parkme+0x7a/0x1f0
[  826.793961][ T6050]  ? __kthread_parkme+0x19c/0x1f0
[  826.793985][ T6050]  kthread+0x388/0x470
[  826.794004][ T6050]  ? __pfx_worker_thread+0x10/0x10
[  826.794017][ T6050]  ? __pfx_kthread+0x10/0x10
[  826.794040][ T6050]  ret_from_fork+0x51e/0xb90
[  826.794066][ T6050]  ? __pfx_ret_from_fork+0x10/0x10
[  826.794090][ T6050]  ? __switch_to+0xc7d/0x1450
[  826.794116][ T6050]  ? __pfx_kthread+0x10/0x10
[  826.794139][ T6050]  ret_from_fork_asm+0x1a/0x30
[  826.794176][ T6050]  </TASK>
[  826.841113][T16988] lo speed is unknown, defaulting to 1000
[  826.851324][ T6050] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  827.105399][   T10] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  827.114659][ T6050] CPU: 0 UID: 0 PID: 6050 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) 
[  827.114684][ T6050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  827.114696][ T6050] Workqueue: writeback wb_workfn (flush-7:1)
[  827.114722][ T6050] Call Trace:
[  827.114730][ T6050]  <TASK>
[  827.114737][ T6050]  dump_stack_lvl+0xe8/0x150
[  827.114768][ T6050]  f2fs_handle_critical_error+0x37c/0x540
[  827.114797][ T6050]  f2fs_write_end_io+0x1274/0x1740
[  827.114843][ T6050]  __submit_merged_bio+0x256/0x700
[  827.114874][ T6050]  __submit_merged_write_cond+0x3c9/0x4e0
[  827.114906][ T6050]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  827.114949][ T6050]  f2fs_write_data_pages+0x287e/0x34f0
[  827.115011][ T6050]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  827.115049][ T6050]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  827.115101][ T6050]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  827.115147][ T6050]  ? __lock_acquire+0x6b5/0x2cf0
[  827.115190][ T6050]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  827.115217][ T6050]  do_writepages+0x32e/0x550
[  827.115246][ T6050]  ? reacquire_held_locks+0x104/0x190
[  827.115264][ T6050]  ? writeback_sb_inodes+0x477/0x1a20
[  827.115293][ T6050]  __writeback_single_inode+0x133/0x11a0
[  827.115318][ T6050]  ? do_raw_spin_unlock+0xf5/0x210
[  827.115345][ T6050]  writeback_sb_inodes+0x992/0x1a20
[  827.115387][ T6050]  ? __lock_acquire+0x6b5/0x2cf0
[  827.115419][ T6050]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  827.115441][ T6050]  ? do_raw_spin_lock+0x12b/0x2f0
[  827.115509][ T6050]  ? rcu_is_watching+0x15/0xb0
[  827.115538][ T6050]  wb_writeback+0x456/0xb70
[  827.115563][ T6050]  ? queue_io+0x251/0x4a0
[  827.115592][ T6050]  ? __pfx_wb_writeback+0x10/0x10
[  827.115612][ T6050]  ? do_raw_spin_lock+0x12b/0x2f0
[  827.115651][ T6050]  wb_workfn+0x414/0xf50
[  827.115674][ T6050]  ? look_up_lock_class+0x57/0x110
[  827.115709][ T6050]  ? __pfx_wb_workfn+0x10/0x10
[  827.115731][ T6050]  ? do_raw_spin_lock+0x12b/0x2f0
[  827.115756][ T6050]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  827.115800][ T6050]  ? process_one_work+0x8bb/0x1780
[  827.115826][ T6050]  process_one_work+0x9ab/0x1780
[  827.115873][ T6050]  ? __pfx_process_one_work+0x10/0x10
[  827.115898][ T6050]  ? do_raw_spin_lock+0x12b/0x2f0
[  827.115937][ T6050]  worker_thread+0xba8/0x11e0
[  827.115963][ T6050]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  827.115984][ T6050]  ? __kthread_parkme+0x7a/0x1f0
[  827.116003][ T6050]  ? __kthread_parkme+0x19c/0x1f0
[  827.116028][ T6050]  kthread+0x388/0x470
[  827.116050][ T6050]  ? __pfx_worker_thread+0x10/0x10
[  827.116066][ T6050]  ? __pfx_kthread+0x10/0x10
[  827.116089][ T6050]  ret_from_fork+0x51e/0xb90
[  827.116117][ T6050]  ? __pfx_ret_from_fork+0x10/0x10
[  827.116141][ T6050]  ? __switch_to+0xc7d/0x1450
[  827.116167][ T6050]  ? __pfx_kthread+0x10/0x10
[  827.116190][ T6050]  ret_from_fork_asm+0x1a/0x30
[  827.116223][ T6050]  </TASK>
[  827.116264][ T6050] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  827.409281][ T6050] CPU: 0 UID: 0 PID: 6050 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) 
[  827.409304][ T6050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  827.409316][ T6050] Workqueue: writeback wb_workfn (flush-7:1)
[  827.409343][ T6050] Call Trace:
[  827.409351][ T6050]  <TASK>
[  827.409359][ T6050]  dump_stack_lvl+0xe8/0x150
[  827.409393][ T6050]  f2fs_handle_critical_error+0x37c/0x540
[  827.409434][ T6050]  f2fs_write_end_io+0x1274/0x1740
[  827.409481][ T6050]  __submit_merged_bio+0x256/0x700
[  827.409510][ T6050]  __submit_merged_write_cond+0x3c9/0x4e0
[  827.409542][ T6050]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  827.409586][ T6050]  f2fs_write_data_pages+0x287e/0x34f0
[  827.409644][ T6050]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  827.409675][ T6050]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  827.409715][ T6050]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  827.409753][ T6050]  ? __lock_acquire+0x6b5/0x2cf0
[  827.409790][ T6050]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  827.409811][ T6050]  do_writepages+0x32e/0x550
[  827.409835][ T6050]  ? reacquire_held_locks+0x104/0x190
[  827.409850][ T6050]  ? writeback_sb_inodes+0x477/0x1a20
[  827.409873][ T6050]  __writeback_single_inode+0x133/0x11a0
[  827.409893][ T6050]  ? do_raw_spin_unlock+0xf5/0x210
[  827.409914][ T6050]  writeback_sb_inodes+0x992/0x1a20
[  827.409949][ T6050]  ? __lock_acquire+0x6b5/0x2cf0
[  827.409973][ T6050]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  827.409990][ T6050]  ? do_raw_spin_lock+0x12b/0x2f0
[  827.410037][ T6050]  ? rcu_is_watching+0x15/0xb0
[  827.410060][ T6050]  wb_writeback+0x456/0xb70
[  827.410080][ T6050]  ? queue_io+0x251/0x4a0
[  827.410104][ T6050]  ? __pfx_wb_writeback+0x10/0x10
[  827.410120][ T6050]  ? do_raw_spin_lock+0x12b/0x2f0
[  827.410150][ T6050]  wb_workfn+0x414/0xf50
[  827.410167][ T6050]  ? look_up_lock_class+0x57/0x110
[  827.410194][ T6050]  ? __pfx_wb_workfn+0x10/0x10
[  827.410212][ T6050]  ? do_raw_spin_lock+0x12b/0x2f0
[  827.410232][ T6050]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  827.410266][ T6050]  ? process_one_work+0x8bb/0x1780
[  827.410286][ T6050]  process_one_work+0x9ab/0x1780
[  827.410323][ T6050]  ? __pfx_process_one_work+0x10/0x10
[  827.410342][ T6050]  ? do_raw_spin_lock+0x12b/0x2f0
[  827.410372][ T6050]  worker_thread+0xba8/0x11e0
[  827.410394][ T6050]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  827.410411][ T6050]  ? __kthread_parkme+0x7a/0x1f0
[  827.410438][ T6050]  ? __kthread_parkme+0x19c/0x1f0
[  827.410458][ T6050]  kthread+0x388/0x470
[  827.410475][ T6050]  ? __pfx_worker_thread+0x10/0x10
[  827.410488][ T6050]  ? __pfx_kthread+0x10/0x10
[  827.410506][ T6050]  ret_from_fork+0x51e/0xb90
[  827.410529][ T6050]  ? __pfx_ret_from_fork+0x10/0x10
[  827.410564][ T6050]  ? __switch_to+0xc7d/0x1450
[  827.410586][ T6050]  ? __pfx_kthread+0x10/0x10
[  827.410604][ T6050]  ret_from_fork_asm+0x1a/0x30
[  827.410635][ T6050]  </TASK>
[  827.410874][ T6050] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  827.567371][ T6020] usb 3-1: new high-speed USB device number 106 using dummy_hcd
[  827.777394][ T1222] usb 5-1: new high-speed USB device number 126 using dummy_hcd
[  827.937706][ T1222] usb 5-1: Using ep0 maxpacket: 32
[  827.945934][ T1222] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  827.960218][ T1222] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  827.977570][ T6020] usb 3-1: Using ep0 maxpacket: 16
[  827.985452][ T6020] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  828.002947][ T1222] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  828.012060][ T1222] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  828.020843][ T6020] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  828.031552][ T1222] usb 5-1: Product: syz
[  828.046711][ T1222] usb 5-1: Manufacturer: syz
[  828.054273][ T6020] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  828.065106][ T1222] usb 5-1: SerialNumber: syz
[  828.069846][ T6020] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  828.079555][ T6020] usb 3-1: Product: syz
[  828.231059][ T1222] usb 5-1: config 0 descriptor??
[  828.237268][ T6020] usb 3-1: Manufacturer: syz
[  828.241989][ T6020] usb 3-1: SerialNumber: syz
[  828.271941][ T6020] usb 3-1: 0:2 : does not exist
[  828.483486][T17003] 9pnet_virtio: no channels available for device syz
[  828.505211][ T6020] usb 3-1: USB disconnect, device number 106
[  828.527991][T17003] overlayfs: missing 'lowerdir'
[  828.584309][   T10] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  828.627599][   T10] usb 1-1: USB disconnect, device number 103
[  830.303028][T17021] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3322'.
[  830.559805][   T10] usb 5-1: USB disconnect, device number 126
[  831.177083][ T5855] Bluetooth: hci1: command 0x0406 tx timeout
[  831.291121][ T1222] usb 4-1: new full-speed USB device number 97 using dummy_hcd
[  831.459604][T17032] syzkaller0: entered promiscuous mode
[  831.477771][T17032] syzkaller0: entered allmulticast mode
[  831.495688][ T1222] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1120, setting to 64
[  831.528261][ T1222] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64
[  831.583246][ T1222] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  831.603168][ T1222] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  831.619296][ T1222] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  831.628802][ T1222] usb 4-1: Product: 蛻뽂崮㽰❶ퟝ뭊ᙲ펋졳⥲꠫畠ഗ炰溯臻襧ᜢ燰擎銅᪸ᬑ翛鲞㰸顸釡ִ㯻驄虨醇噕ِ騴篐⃽ꀐ♄녛뾐Ⲧ諷쵰帟⾋☥嶚钖包閤
[  831.649495][ T1222] usb 4-1: Manufacturer: ю
[  831.654134][ T1222] usb 4-1: SerialNumber: ࠧ
[  831.682312][T17028] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  831.870387][T17036] loop0: detected capacity change from 0 to 128
[  831.933675][ T1222] cdc_ncm 4-1:1.0: bind() failure
[  831.940102][T17038] gretap0: entered promiscuous mode
[  831.978058][T17038] gretap0: left promiscuous mode
[  831.997408][ T1222] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  832.005174][ T1222] cdc_ncm 4-1:1.1: bind() failure
[  832.074113][ T1222] usb 4-1: USB disconnect, device number 97
[  832.521857][T17047] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3331'.
[  832.537618][ T1222] usb 3-1: new high-speed USB device number 107 using dummy_hcd
[  832.549081][T17047] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3331'.
[  832.718923][ T1222] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  832.746000][ T1222] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  832.773743][ T1222] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  832.803455][ T1222] usb 3-1: config 0 descriptor??
[  832.824315][ T1222] pwc: Askey VC010 type 2 USB webcam detected.
[  832.895873][T17045] loop4: detected capacity change from 0 to 40427
[  832.924580][T17045] F2FS-fs (loop4): invalid crc value
[  833.200487][T17045] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  833.210238][T17045] F2FS-fs (loop4): Start checkpoint disabled!
[  833.218745][T17045] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0
[  833.227668][T17045] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  833.256606][ T1222] pwc: recv_control_msg error -32 req 02 val 2b00
[  833.294145][ T1222] pwc: recv_control_msg error -32 req 02 val 2700
[  833.336943][ T1222] pwc: recv_control_msg error -32 req 02 val 2c00
[  833.364072][ T1222] pwc: recv_control_msg error -32 req 04 val 1000
[  833.397222][ T1222] pwc: recv_control_msg error -32 req 04 val 1300
[  833.649099][ T1222] pwc: recv_control_msg error -32 req 04 val 1400
[  833.667972][ T1222] pwc: recv_control_msg error -32 req 02 val 2000
[  833.682234][ T1222] pwc: recv_control_msg error -32 req 02 val 2100
[  833.734448][T17066] syz.4.3330: attempt to access beyond end of device
[  833.734448][T17066] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  833.954210][ T1222] pwc: recv_control_msg error -32 req 04 val 1500
[  834.288333][ T1222] pwc: recv_control_msg error -32 req 02 val 2500
[  834.290610][   T35] kworker/u8:2: attempt to access beyond end of device
[  834.290610][   T35] loop4: rw=2049, sector=45104, nr_sectors = 24 limit=40427
[  834.317414][ T1222] pwc: recv_control_msg error -32 req 02 val 2400
[  834.329472][ T1222] pwc: recv_control_msg error -32 req 02 val 2600
[  834.340263][   T35] CPU: 0 UID: 0 PID: 35 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
[  834.340288][   T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  834.340300][   T35] Workqueue: writeback wb_workfn (flush-7:4)
[  834.340328][   T35] Call Trace:
[  834.340336][   T35]  <TASK>
[  834.340344][   T35]  dump_stack_lvl+0xe8/0x150
[  834.340375][   T35]  f2fs_handle_critical_error+0x37c/0x540
[  834.340406][   T35]  f2fs_write_end_io+0x1274/0x1740
[  834.340456][   T35]  __submit_merged_bio+0x256/0x700
[  834.340486][   T35]  __submit_merged_write_cond+0x3c9/0x4e0
[  834.340518][   T35]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  834.340563][   T35]  f2fs_write_data_pages+0x287e/0x34f0
[  834.340634][   T35]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  834.340673][   T35]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  834.340726][   T35]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  834.340775][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  834.340822][   T35]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  834.340849][   T35]  do_writepages+0x32e/0x550
[  834.340880][   T35]  ? reacquire_held_locks+0x104/0x190
[  834.340898][   T35]  ? writeback_sb_inodes+0x477/0x1a20
[  834.340928][   T35]  __writeback_single_inode+0x133/0x11a0
[  834.340951][   T35]  ? do_raw_spin_unlock+0xf5/0x210
[  834.340978][   T35]  writeback_sb_inodes+0x992/0x1a20
[  834.341026][   T35]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  834.341047][   T35]  ? do_raw_spin_lock+0x12b/0x2f0
[  834.341103][   T35]  ? rcu_is_watching+0x15/0xb0
[  834.341130][   T35]  wb_writeback+0x456/0xb70
[  834.341154][   T35]  ? queue_io+0x251/0x4a0
[  834.341182][   T35]  ? __pfx_wb_writeback+0x10/0x10
[  834.341201][   T35]  ? do_raw_spin_lock+0x12b/0x2f0
[  834.341238][   T35]  wb_workfn+0x414/0xf50
[  834.341259][   T35]  ? look_up_lock_class+0x57/0x110
[  834.341295][   T35]  ? __pfx_wb_workfn+0x10/0x10
[  834.341319][   T35]  ? do_raw_spin_lock+0x12b/0x2f0
[  834.341345][   T35]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  834.341391][   T35]  ? process_one_work+0x8bb/0x1780
[  834.341418][   T35]  process_one_work+0x9ab/0x1780
[  834.341469][   T35]  ? __pfx_process_one_work+0x10/0x10
[  834.341494][   T35]  ? do_raw_spin_lock+0x12b/0x2f0
[  834.341536][   T35]  worker_thread+0xba8/0x11e0
[  834.341565][   T35]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  834.341596][   T35]  ? __kthread_parkme+0x7a/0x1f0
[  834.341617][   T35]  ? __kthread_parkme+0x19c/0x1f0
[  834.341644][   T35]  kthread+0x388/0x470
[  834.341667][   T35]  ? __pfx_worker_thread+0x10/0x10
[  834.341684][   T35]  ? __pfx_kthread+0x10/0x10
[  834.341707][   T35]  ret_from_fork+0x51e/0xb90
[  834.341741][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  834.341765][   T35]  ? __switch_to+0xc7d/0x1450
[  834.341794][   T35]  ? __pfx_kthread+0x10/0x10
[  834.341818][   T35]  ret_from_fork_asm+0x1a/0x30
[  834.341856][   T35]  </TASK>
[  834.345399][   T35] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  834.441965][ T1222] pwc: recv_control_msg error -32 req 02 val 2900
[  834.456729][   T35] CPU: 0 UID: 0 PID: 35 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
[  834.456754][   T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  834.456766][   T35] Workqueue: writeback wb_workfn (flush-7:4)
[  834.456795][   T35] Call Trace:
[  834.456803][   T35]  <TASK>
[  834.456811][   T35]  dump_stack_lvl+0xe8/0x150
[  834.456845][   T35]  f2fs_handle_critical_error+0x37c/0x540
[  834.456877][   T35]  f2fs_write_end_io+0x1274/0x1740
[  834.456929][   T35]  __submit_merged_bio+0x256/0x700
[  834.456963][   T35]  __submit_merged_write_cond+0x3c9/0x4e0
[  834.456996][   T35]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  834.457043][   T35]  f2fs_write_data_pages+0x287e/0x34f0
[  834.457106][   T35]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  834.457154][   T35]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  834.457208][   T35]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  834.457256][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  834.457300][   T35]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  834.457327][   T35]  do_writepages+0x32e/0x550
[  834.457356][   T35]  ? reacquire_held_locks+0x104/0x190
[  834.457375][   T35]  ? writeback_sb_inodes+0x477/0x1a20
[  834.457404][   T35]  __writeback_single_inode+0x133/0x11a0
[  834.457428][   T35]  ? do_raw_spin_unlock+0xf5/0x210
[  834.457456][   T35]  writeback_sb_inodes+0x992/0x1a20
[  834.457509][   T35]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  834.457529][   T35]  ? do_raw_spin_lock+0x12b/0x2f0
[  834.457594][   T35]  ? rcu_is_watching+0x15/0xb0
[  834.457621][   T35]  wb_writeback+0x456/0xb70
[  834.457647][   T35]  ? queue_io+0x251/0x4a0
[  834.457679][   T35]  ? __pfx_wb_writeback+0x10/0x10
[  834.457699][   T35]  ? do_raw_spin_lock+0x12b/0x2f0
[  834.457738][   T35]  wb_workfn+0x414/0xf50
[  834.457760][   T35]  ? look_up_lock_class+0x57/0x110
[  834.457796][   T35]  ? __pfx_wb_workfn+0x10/0x10
[  834.457818][   T35]  ? do_raw_spin_lock+0x12b/0x2f0
[  834.457844][   T35]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  834.457889][   T35]  ? process_one_work+0x8bb/0x1780
[  834.457914][   T35]  process_one_work+0x9ab/0x1780
[  834.457959][   T35]  ? __pfx_process_one_work+0x10/0x10
[  834.457982][   T35]  ? do_raw_spin_lock+0x12b/0x2f0
[  834.458023][   T35]  worker_thread+0xba8/0x11e0
[  834.458051][   T35]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  834.458072][   T35]  ? __kthread_parkme+0x7a/0x1f0
[  834.458091][   T35]  ? __kthread_parkme+0x19c/0x1f0
[  834.458124][   T35]  kthread+0x388/0x470
[  834.458146][   T35]  ? __pfx_worker_thread+0x10/0x10
[  834.458161][   T35]  ? __pfx_kthread+0x10/0x10
[  834.458184][   T35]  ret_from_fork+0x51e/0xb90
[  834.458214][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  834.458237][   T35]  ? __switch_to+0xc7d/0x1450
[  834.458265][   T35]  ? __pfx_kthread+0x10/0x10
[  834.458287][   T35]  ret_from_fork_asm+0x1a/0x30
[  834.458324][   T35]  </TASK>
[  834.463513][   T35] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  834.518334][ T1222] pwc: recv_control_msg error -32 req 02 val 2800
[  834.520611][   T35] CPU: 0 UID: 0 PID: 35 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
[  834.520635][   T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  834.520646][   T35] Workqueue: writeback wb_workfn (flush-7:4)
[  834.520676][   T35] Call Trace:
[  834.520684][   T35]  <TASK>
[  834.520692][   T35]  dump_stack_lvl+0xe8/0x150
[  834.520722][   T35]  f2fs_handle_critical_error+0x37c/0x540
[  834.520752][   T35]  f2fs_write_end_io+0x1274/0x1740
[  834.520801][   T35]  __submit_merged_bio+0x256/0x700
[  834.520832][   T35]  __submit_merged_write_cond+0x3c9/0x4e0
[  834.520864][   T35]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  834.520912][   T35]  f2fs_write_data_pages+0x287e/0x34f0
[  834.520975][   T35]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  834.521015][   T35]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  834.521076][   T35]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  834.521126][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  834.521171][   T35]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  834.521198][   T35]  do_writepages+0x32e/0x550
[  834.521228][   T35]  ? reacquire_held_locks+0x104/0x190
[  834.521248][   T35]  ? writeback_sb_inodes+0x477/0x1a20
[  834.521277][   T35]  __writeback_single_inode+0x133/0x11a0
[  834.521302][   T35]  ? do_raw_spin_unlock+0xf5/0x210
[  834.521329][   T35]  writeback_sb_inodes+0x992/0x1a20
[  834.521382][   T35]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  834.521403][   T35]  ? do_raw_spin_lock+0x12b/0x2f0
[  834.521467][   T35]  ? rcu_is_watching+0x15/0xb0
[  834.521496][   T35]  wb_writeback+0x456/0xb70
[  834.521522][   T35]  ? queue_io+0x251/0x4a0
[  834.521553][   T35]  ? __pfx_wb_writeback+0x10/0x10
[  834.521573][   T35]  ? do_raw_spin_lock+0x12b/0x2f0
[  834.521613][   T35]  wb_workfn+0x414/0xf50
[  834.521635][   T35]  ? look_up_lock_class+0x57/0x110
[  834.521670][   T35]  ? __pfx_wb_workfn+0x10/0x10
[  834.521693][   T35]  ? do_raw_spin_lock+0x12b/0x2f0
[  834.521718][   T35]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  834.521764][   T35]  ? process_one_work+0x8bb/0x1780
[  834.521789][   T35]  process_one_work+0x9ab/0x1780
[  834.521843][   T35]  ? __pfx_process_one_work+0x10/0x10
[  834.521866][   T35]  ? do_raw_spin_lock+0x12b/0x2f0
[  834.521907][   T35]  worker_thread+0xba8/0x11e0
[  834.521935][   T35]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  834.521956][   T35]  ? __kthread_parkme+0x7a/0x1f0
[  834.521975][   T35]  ? __kthread_parkme+0x19c/0x1f0
[  834.522002][   T35]  kthread+0x388/0x470
[  834.522023][   T35]  ? __pfx_worker_thread+0x10/0x10
[  834.522039][   T35]  ? __pfx_kthread+0x10/0x10
[  834.522068][   T35]  ret_from_fork+0x51e/0xb90
[  834.522097][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  834.522121][   T35]  ? __switch_to+0xc7d/0x1450
[  834.522149][   T35]  ? __pfx_kthread+0x10/0x10
[  834.522171][   T35]  ret_from_fork_asm+0x1a/0x30
[  834.522207][   T35]  </TASK>
[  834.522432][   T35] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  834.729735][ T1222] pwc: recv_control_msg error -71 req 04 val 1200
[  835.232970][T17073] syzkaller0: entered promiscuous mode
[  835.239389][T17073] syzkaller0: entered allmulticast mode
[  835.311316][ T1222] pwc: Registered as video103.
[  835.318068][T17074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3334'.
[  835.358955][ T1222] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input70
[  835.443092][ T1222] usb 3-1: USB disconnect, device number 107
[  835.567991][T17074] bridge0: port 2(bridge_slave_1) entered disabled state
[  835.575723][T17074] bridge0: port 1(bridge_slave_0) entered disabled state
[  835.620211][T17081] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3339'.
[  835.844714][T17088] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3341'.
[  835.876269][T17088] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3341'.
[  836.464560][T17099] 9pnet_virtio: no channels available for device syz
[  836.478711][T17099] overlayfs: missing 'lowerdir'
[  837.762184][T17102] loop3: detected capacity change from 0 to 256
[  837.779833][T17102] exfat: Unknown parameter '����������'
[  838.734012][T17108] loop2: detected capacity change from 0 to 256
[  838.758400][T17108] exfat: Unknown parameter '����������'
[  838.774915][T17102] loop3: detected capacity change from 0 to 40427
[  838.804423][T17102] F2FS-fs (loop3): invalid crc value
[  839.682475][T17104] loop4: detected capacity change from 0 to 40427
[  839.721786][T17102] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  839.749456][T17102] F2FS-fs (loop3): Start checkpoint disabled!
[  839.765391][T17102] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0
[  839.770306][T17104] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  839.785860][T17102] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  839.797943][T17104] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  839.815647][T17117] syzkaller0: entered promiscuous mode
[  839.825632][T17104] F2FS-fs (loop4): invalid crc value
[  839.828557][T17117] syzkaller0: entered allmulticast mode
[  839.858686][ T5846] usb 1-1: new high-speed USB device number 104 using dummy_hcd
[  839.954970][T17104] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  840.041580][T17104] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  840.052259][ T5846] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  840.068395][T17104] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  840.121501][ T5846] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  840.138547][ T5846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  840.156639][ T5846] usb 1-1: config 0 descriptor??
[  840.237098][T17124] syz.3.3345: attempt to access beyond end of device
[  840.237098][T17124] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  840.677041][ T5846] pwc: Askey VC010 type 2 USB webcam detected.
[  840.820694][   T12] kworker/u8:0: attempt to access beyond end of device
[  840.820694][   T12] loop3: rw=2049, sector=45104, nr_sectors = 24 limit=40427
[  840.849762][   T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) 
[  840.849789][   T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  840.849801][   T12] Workqueue: writeback wb_workfn (flush-7:3)
[  840.849830][   T12] Call Trace:
[  840.849838][   T12]  <TASK>
[  840.849846][   T12]  dump_stack_lvl+0xe8/0x150
[  840.849877][   T12]  f2fs_handle_critical_error+0x37c/0x540
[  840.849909][   T12]  f2fs_write_end_io+0x1274/0x1740
[  840.849959][   T12]  __submit_merged_bio+0x256/0x700
[  840.849990][   T12]  __submit_merged_write_cond+0x3c9/0x4e0
[  840.850025][   T12]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  840.850075][   T12]  f2fs_write_data_pages+0x287e/0x34f0
[  840.850139][   T12]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  840.850181][   T12]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  840.850231][   T12]  ? __lock_acquire+0x6b5/0x2cf0
[  840.850280][   T12]  ? do_raw_spin_lock+0x12b/0x2f0
[  840.850307][   T12]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  840.850349][   T12]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  840.850377][   T12]  do_writepages+0x32e/0x550
[  840.850408][   T12]  ? reacquire_held_locks+0x104/0x190
[  840.850435][   T12]  ? writeback_sb_inodes+0x477/0x1a20
[  840.850466][   T12]  __writeback_single_inode+0x133/0x11a0
[  840.850490][   T12]  ? do_raw_spin_unlock+0xf5/0x210
[  840.850517][   T12]  writeback_sb_inodes+0x992/0x1a20
[  840.850562][   T12]  ? __lock_acquire+0x6b5/0x2cf0
[  840.850595][   T12]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  840.850616][   T12]  ? do_raw_spin_lock+0x12b/0x2f0
[  840.850684][   T12]  ? rcu_is_watching+0x15/0xb0
[  840.850714][   T12]  wb_writeback+0x456/0xb70
[  840.850741][   T12]  ? queue_io+0x251/0x4a0
[  840.850773][   T12]  ? __pfx_wb_writeback+0x10/0x10
[  840.850793][   T12]  ? do_raw_spin_lock+0x12b/0x2f0
[  840.850835][   T12]  wb_workfn+0x414/0xf50
[  840.850857][   T12]  ? look_up_lock_class+0x57/0x110
[  840.850892][   T12]  ? __pfx_wb_workfn+0x10/0x10
[  840.850916][   T12]  ? do_raw_spin_lock+0x12b/0x2f0
[  840.850942][   T12]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  840.850989][   T12]  ? process_one_work+0x8bb/0x1780
[  840.851014][   T12]  process_one_work+0x9ab/0x1780
[  840.851066][   T12]  ? __pfx_process_one_work+0x10/0x10
[  840.851090][   T12]  ? do_raw_spin_lock+0x12b/0x2f0
[  840.851130][   T12]  worker_thread+0xba8/0x11e0
[  840.851178][   T12]  kthread+0x388/0x470
[  840.851203][   T12]  ? __pfx_worker_thread+0x10/0x10
[  840.851217][   T12]  ? __pfx_kthread+0x10/0x10
[  840.851240][   T12]  ret_from_fork+0x51e/0xb90
[  840.851267][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  840.851290][   T12]  ? __switch_to+0xc7d/0x1450
[  840.851317][   T12]  ? __pfx_kthread+0x10/0x10
[  840.851339][   T12]  ret_from_fork_asm+0x1a/0x30
[  840.851375][   T12]  </TASK>
[  840.853184][   T12] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  840.987236][T17108] loop2: detected capacity change from 0 to 40427
[  841.065747][   T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) 
[  841.065771][   T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  841.065783][   T12] Workqueue: writeback wb_workfn (flush-7:3)
[  841.065813][   T12] Call Trace:
[  841.065821][   T12]  <TASK>
[  841.065830][   T12]  dump_stack_lvl+0xe8/0x150
[  841.065857][   T12]  f2fs_handle_critical_error+0x37c/0x540
[  841.065887][   T12]  f2fs_write_end_io+0x1274/0x1740
[  841.065936][   T12]  __submit_merged_bio+0x256/0x700
[  841.065966][   T12]  __submit_merged_write_cond+0x3c9/0x4e0
[  841.066000][   T12]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  841.066049][   T12]  f2fs_write_data_pages+0x287e/0x34f0
[  841.066114][   T12]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  841.066155][   T12]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  841.066206][   T12]  ? __lock_acquire+0x6b5/0x2cf0
[  841.066257][   T12]  ? do_raw_spin_lock+0x12b/0x2f0
[  841.066285][   T12]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  841.066326][   T12]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  841.066354][   T12]  do_writepages+0x32e/0x550
[  841.066389][   T12]  ? reacquire_held_locks+0x104/0x190
[  841.066418][   T12]  ? writeback_sb_inodes+0x477/0x1a20
[  841.066449][   T12]  __writeback_single_inode+0x133/0x11a0
[  841.066473][   T12]  ? do_raw_spin_unlock+0xf5/0x210
[  841.066501][   T12]  writeback_sb_inodes+0x992/0x1a20
[  841.066547][   T12]  ? __lock_acquire+0x6b5/0x2cf0
[  841.066579][   T12]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  841.066600][   T12]  ? do_raw_spin_lock+0x12b/0x2f0
[  841.066669][   T12]  ? rcu_is_watching+0x15/0xb0
[  841.066699][   T12]  wb_writeback+0x456/0xb70
[  841.066725][   T12]  ? queue_io+0x251/0x4a0
[  841.066758][   T12]  ? __pfx_wb_writeback+0x10/0x10
[  841.066779][   T12]  ? do_raw_spin_lock+0x12b/0x2f0
[  841.066820][   T12]  wb_workfn+0x414/0xf50
[  841.066843][   T12]  ? look_up_lock_class+0x57/0x110
[  841.066881][   T12]  ? __pfx_wb_workfn+0x10/0x10
[  841.066905][   T12]  ? do_raw_spin_lock+0x12b/0x2f0
[  841.066930][   T12]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  841.066974][   T12]  ? process_one_work+0x8bb/0x1780
[  841.067000][   T12]  process_one_work+0x9ab/0x1780
[  841.067050][   T12]  ? __pfx_process_one_work+0x10/0x10
[  841.067074][   T12]  ? do_raw_spin_lock+0x12b/0x2f0
[  841.067113][   T12]  worker_thread+0xba8/0x11e0
[  841.067160][   T12]  kthread+0x388/0x470
[  841.067182][   T12]  ? __pfx_worker_thread+0x10/0x10
[  841.067198][   T12]  ? __pfx_kthread+0x10/0x10
[  841.067220][   T12]  ret_from_fork+0x51e/0xb90
[  841.067249][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  841.067273][   T12]  ? __switch_to+0xc7d/0x1450
[  841.067300][   T12]  ? __pfx_kthread+0x10/0x10
[  841.067323][   T12]  ret_from_fork_asm+0x1a/0x30
[  841.067360][   T12]  </TASK>
[  841.067513][   T12] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  841.107487][ T5846] pwc: recv_control_msg error -32 req 02 val 2b00
[  841.154770][T17108] F2FS-fs (loop2): invalid crc value
[  841.180439][   T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) 
[  841.180465][   T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  841.180477][   T12] Workqueue: writeback wb_workfn (flush-7:3)
[  841.180509][   T12] Call Trace:
[  841.180517][   T12]  <TASK>
[  841.180525][   T12]  dump_stack_lvl+0xe8/0x150
[  841.180554][   T12]  f2fs_handle_critical_error+0x37c/0x540
[  841.180585][   T12]  f2fs_write_end_io+0x1274/0x1740
[  841.180632][   T12]  __submit_merged_bio+0x256/0x700
[  841.180662][   T12]  __submit_merged_write_cond+0x3c9/0x4e0
[  841.180693][   T12]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  841.180738][   T12]  f2fs_write_data_pages+0x287e/0x34f0
[  841.180798][   T12]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  841.180836][   T12]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  841.180882][   T12]  ? __lock_acquire+0x6b5/0x2cf0
[  841.180938][   T12]  ? do_raw_spin_lock+0x12b/0x2f0
[  841.180963][   T12]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  841.181002][   T12]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  841.181029][   T12]  do_writepages+0x32e/0x550
[  841.181058][   T12]  ? reacquire_held_locks+0x104/0x190
[  841.181077][   T12]  ? writeback_sb_inodes+0x477/0x1a20
[  841.181105][   T12]  __writeback_single_inode+0x133/0x11a0
[  841.181129][   T12]  ? do_raw_spin_unlock+0xf5/0x210
[  841.181156][   T12]  writeback_sb_inodes+0x992/0x1a20
[  841.181198][   T12]  ? __lock_acquire+0x6b5/0x2cf0
[  841.181230][   T12]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  841.181250][   T12]  ? do_raw_spin_lock+0x12b/0x2f0
[  841.181309][   T12]  ? rcu_is_watching+0x15/0xb0
[  841.181337][   T12]  wb_writeback+0x456/0xb70
[  841.181363][   T12]  ? queue_io+0x251/0x4a0
[  841.181393][   T12]  ? __pfx_wb_writeback+0x10/0x10
[  841.181412][   T12]  ? do_raw_spin_lock+0x12b/0x2f0
[  841.181450][   T12]  wb_workfn+0x414/0xf50
[  841.181472][   T12]  ? look_up_lock_class+0x57/0x110
[  841.181505][   T12]  ? __pfx_wb_workfn+0x10/0x10
[  841.181527][   T12]  ? do_raw_spin_lock+0x12b/0x2f0
[  841.181552][   T12]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  841.181594][   T12]  ? process_one_work+0x8bb/0x1780
[  841.181619][   T12]  process_one_work+0x9ab/0x1780
[  841.181667][   T12]  ? __pfx_process_one_work+0x10/0x10
[  841.181690][   T12]  ? do_raw_spin_lock+0x12b/0x2f0
[  841.181728][   T12]  worker_thread+0xba8/0x11e0
[  841.181771][   T12]  kthread+0x388/0x470
[  841.181792][   T12]  ? __pfx_worker_thread+0x10/0x10
[  841.181807][   T12]  ? __pfx_kthread+0x10/0x10
[  841.181830][   T12]  ret_from_fork+0x51e/0xb90
[  841.181859][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  841.181881][   T12]  ? __switch_to+0xc7d/0x1450
[  841.181914][   T12]  ? __pfx_kthread+0x10/0x10
[  841.181937][   T12]  ret_from_fork_asm+0x1a/0x30
[  841.181971][   T12]  </TASK>
[  841.182514][ T5846] pwc: recv_control_msg error -32 req 02 val 2700
[  841.318400][   T12] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  841.409417][ T5846] pwc: recv_control_msg error -32 req 02 val 2c00
[  841.420571][ T5855] Bluetooth: hci5: command 0x0406 tx timeout
[  841.433527][ T5846] pwc: recv_control_msg error -32 req 04 val 1000
[  841.781377][T17108] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  841.809834][T17108] F2FS-fs (loop2): Start checkpoint disabled!
[  841.901751][ T5846] pwc: recv_control_msg error -32 req 04 val 1300
[  841.910256][T17108] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0
[  841.928325][ T5846] pwc: recv_control_msg error -32 req 04 val 1400
[  841.935424][ T5846] pwc: recv_control_msg error -32 req 02 val 2000
[  841.944661][ T5846] pwc: recv_control_msg error -32 req 02 val 2100
[  841.958786][ T5846] pwc: recv_control_msg error -32 req 04 val 1500
[  841.980279][ T5846] pwc: recv_control_msg error -32 req 02 val 2500
[  841.990396][ T5846] pwc: recv_control_msg error -32 req 02 val 2400
[  842.006931][ T5846] pwc: recv_control_msg error -32 req 02 val 2600
[  842.015014][ T5846] pwc: recv_control_msg error -32 req 02 val 2900
[  842.023629][ T5846] pwc: recv_control_msg error -32 req 02 val 2800
[  842.238366][ T5846] pwc: recv_control_msg error -71 req 04 val 1200
[  842.265319][ T5846] pwc: Registered as video103.
[  842.286165][ T5846] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input71
[  842.340650][ T5846] usb 1-1: USB disconnect, device number 104
[  842.503997][T17146] lo speed is unknown, defaulting to 1000
[  842.618220][T17153] loop3: detected capacity change from 0 to 1024
[  842.632571][T17153] EXT4-fs: Ignoring removed orlov option
[  842.658770][T17153] EXT4-fs: Ignoring removed bh option
[  842.680457][T17153] ext4: Unknown parameter 'seclabel'
[  842.756188][T17153] loop3: detected capacity change from 0 to 1024
[  842.769124][T17153] EXT4-fs: Ignoring removed i_version option
[  842.775259][T17153] EXT4-fs: inline encryption not supported
[  842.794916][T17153] EXT4-fs (loop3): Test dummy encryption mode enabled
[  842.856448][T17158] 9pnet_virtio: no channels available for device syz
[  842.865265][T17158] overlayfs: missing 'lowerdir'
[  843.459359][T17153] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  844.935493][T17168] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3360'.
[  845.133151][T15971] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  845.280146][T17176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3364'.
[  845.320785][T17176] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3364'.
[  845.677460][ T6020] usb 4-1: new high-speed USB device number 98 using dummy_hcd
[  845.799887][T17173] syzkaller0: entered promiscuous mode
[  845.805967][T17173] syzkaller0: entered allmulticast mode
[  845.851145][ T6020] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  845.888397][ T6020] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  845.913511][ T6020] usb 4-1: Product: syz
[  845.934754][ T6020] usb 4-1: Manufacturer: syz
[  845.950420][ T6020] usb 4-1: SerialNumber: syz
[  846.422629][ T6020] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  846.436898][ T6020] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  846.675859][T17193] loop4: detected capacity change from 0 to 40427
[  846.716766][T17193] F2FS-fs (loop4): invalid crc value
[  846.902410][T17193] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  846.937574][T17193] F2FS-fs (loop4): Start checkpoint disabled!
[  846.967755][T17193] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0
[  847.005862][T17193] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  847.437027][T17200] syz.4.3368: attempt to access beyond end of device
[  847.437027][T17200] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  847.606783][ T6020] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE
[  847.921530][ T6020] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  847.925540][   T49] kworker/u8:3: attempt to access beyond end of device
[  847.925540][   T49] loop4: rw=2049, sector=45104, nr_sectors = 24 limit=40427
[  847.932707][ T6020] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  847.991205][ T6020] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32
[  848.007123][   T49] CPU: 0 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
[  848.007148][   T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  848.007160][   T49] Workqueue: writeback wb_workfn (flush-7:4)
[  848.007189][   T49] Call Trace:
[  848.007197][   T49]  <TASK>
[  848.007205][   T49]  dump_stack_lvl+0xe8/0x150
[  848.007235][   T49]  f2fs_handle_critical_error+0x37c/0x540
[  848.007260][   T49]  f2fs_write_end_io+0x1274/0x1740
[  848.007304][   T49]  __submit_merged_bio+0x256/0x700
[  848.007342][   T49]  __submit_merged_write_cond+0x3c9/0x4e0
[  848.007376][   T49]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  848.007424][   T49]  f2fs_write_data_pages+0x287e/0x34f0
[  848.007488][   T49]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  848.007530][   T49]  ? finish_task_switch+0x41f/0xbe0
[  848.007610][   T49]  ? __pfx___schedule+0x10/0x10
[  848.007638][   T49]  ? __lock_acquire+0x6b5/0x2cf0
[  848.007678][   T49]  ? rcu_is_watching+0x15/0xb0
[  848.007700][   T49]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  848.007727][   T49]  do_writepages+0x32e/0x550
[  848.007757][   T49]  ? reacquire_held_locks+0x104/0x190
[  848.007776][   T49]  ? writeback_sb_inodes+0x477/0x1a20
[  848.007805][   T49]  __writeback_single_inode+0x133/0x11a0
[  848.007828][   T49]  ? do_raw_spin_unlock+0xf5/0x210
[  848.007855][   T49]  writeback_sb_inodes+0x992/0x1a20
[  848.007899][   T49]  ? __lock_acquire+0x6b5/0x2cf0
[  848.007931][   T49]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  848.007952][   T49]  ? do_raw_spin_lock+0x12b/0x2f0
[  848.008015][   T49]  ? rcu_is_watching+0x15/0xb0
[  848.008043][   T49]  wb_writeback+0x456/0xb70
[  848.008069][   T49]  ? queue_io+0x251/0x4a0
[  848.008099][   T49]  ? __pfx_wb_writeback+0x10/0x10
[  848.008119][   T49]  ? do_raw_spin_lock+0x12b/0x2f0
[  848.008159][   T49]  wb_workfn+0x414/0xf50
[  848.008181][   T49]  ? look_up_lock_class+0x57/0x110
[  848.008216][   T49]  ? __pfx_wb_workfn+0x10/0x10
[  848.008239][   T49]  ? do_raw_spin_lock+0x12b/0x2f0
[  848.008263][   T49]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  848.008309][   T49]  ? process_one_work+0x8bb/0x1780
[  848.008340][   T49]  process_one_work+0x9ab/0x1780
[  848.008387][   T49]  ? __pfx_process_one_work+0x10/0x10
[  848.008411][   T49]  ? do_raw_spin_lock+0x12b/0x2f0
[  848.008466][   T49]  worker_thread+0xba8/0x11e0
[  848.008495][   T49]  kthread+0x388/0x470
[  848.008507][   T49]  ? __pfx_worker_thread+0x10/0x10
[  848.008516][   T49]  ? __pfx_kthread+0x10/0x10
[  848.008529][   T49]  ret_from_fork+0x51e/0xb90
[  848.008545][   T49]  ? __pfx_ret_from_fork+0x10/0x10
[  848.008558][   T49]  ? __switch_to+0xc7d/0x1450
[  848.008574][   T49]  ? __pfx_kthread+0x10/0x10
[  848.008587][   T49]  ret_from_fork_asm+0x1a/0x30
[  848.008609][   T49]  </TASK>
[  848.012908][   T49] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  848.287158][   T49] CPU: 0 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
[  848.287174][   T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  848.287181][   T49] Workqueue: writeback wb_workfn (flush-7:4)
[  848.287200][   T49] Call Trace:
[  848.287205][   T49]  <TASK>
[  848.287211][   T49]  dump_stack_lvl+0xe8/0x150
[  848.287229][   T49]  f2fs_handle_critical_error+0x37c/0x540
[  848.287247][   T49]  f2fs_write_end_io+0x1274/0x1740
[  848.287274][   T49]  __submit_merged_bio+0x256/0x700
[  848.287298][   T49]  __submit_merged_write_cond+0x3c9/0x4e0
[  848.287316][   T49]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  848.287342][   T49]  f2fs_write_data_pages+0x287e/0x34f0
[  848.287376][   T49]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  848.287398][   T49]  ? finish_task_switch+0x41f/0xbe0
[  848.287439][   T49]  ? __pfx___schedule+0x10/0x10
[  848.287454][   T49]  ? __lock_acquire+0x6b5/0x2cf0
[  848.287476][   T49]  ? rcu_is_watching+0x15/0xb0
[  848.287489][   T49]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  848.287503][   T49]  do_writepages+0x32e/0x550
[  848.287520][   T49]  ? reacquire_held_locks+0x104/0x190
[  848.287530][   T49]  ? writeback_sb_inodes+0x477/0x1a20
[  848.287546][   T49]  __writeback_single_inode+0x133/0x11a0
[  848.287560][   T49]  ? do_raw_spin_unlock+0xf5/0x210
[  848.287575][   T49]  writeback_sb_inodes+0x992/0x1a20
[  848.287599][   T49]  ? __lock_acquire+0x6b5/0x2cf0
[  848.287616][   T49]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  848.287628][   T49]  ? do_raw_spin_lock+0x12b/0x2f0
[  848.287662][   T49]  ? rcu_is_watching+0x15/0xb0
[  848.287677][   T49]  wb_writeback+0x456/0xb70
[  848.287691][   T49]  ? queue_io+0x251/0x4a0
[  848.287708][   T49]  ? __pfx_wb_writeback+0x10/0x10
[  848.287719][   T49]  ? do_raw_spin_lock+0x12b/0x2f0
[  848.287740][   T49]  wb_workfn+0x414/0xf50
[  848.287752][   T49]  ? look_up_lock_class+0x57/0x110
[  848.287771][   T49]  ? __pfx_wb_workfn+0x10/0x10
[  848.287783][   T49]  ? do_raw_spin_lock+0x12b/0x2f0
[  848.287800][   T49]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  848.287824][   T49]  ? process_one_work+0x8bb/0x1780
[  848.287839][   T49]  process_one_work+0x9ab/0x1780
[  848.287865][   T49]  ? __pfx_process_one_work+0x10/0x10
[  848.287878][   T49]  ? do_raw_spin_lock+0x12b/0x2f0
[  848.287900][   T49]  worker_thread+0xba8/0x11e0
[  848.287924][   T49]  kthread+0x388/0x470
[  848.287936][   T49]  ? __pfx_worker_thread+0x10/0x10
[  848.287945][   T49]  ? __pfx_kthread+0x10/0x10
[  848.287957][   T49]  ret_from_fork+0x51e/0xb90
[  848.287973][   T49]  ? __pfx_ret_from_fork+0x10/0x10
[  848.287986][   T49]  ? __switch_to+0xc7d/0x1450
[  848.288002][   T49]  ? __pfx_kthread+0x10/0x10
[  848.288014][   T49]  ret_from_fork_asm+0x1a/0x30
[  848.288033][   T49]  </TASK>
[  848.288038][   T49] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  848.609334][   T49] CPU: 0 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
[  848.609363][   T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  848.609375][   T49] Workqueue: writeback wb_workfn (flush-7:4)
[  848.609402][   T49] Call Trace:
[  848.609409][   T49]  <TASK>
[  848.609416][   T49]  dump_stack_lvl+0xe8/0x150
[  848.609444][   T49]  f2fs_handle_critical_error+0x37c/0x540
[  848.609475][   T49]  f2fs_write_end_io+0x1274/0x1740
[  848.609518][   T49]  __submit_merged_bio+0x256/0x700
[  848.609548][   T49]  __submit_merged_write_cond+0x3c9/0x4e0
[  848.609580][   T49]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  848.609626][   T49]  f2fs_write_data_pages+0x287e/0x34f0
[  848.609686][   T49]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  848.609727][   T49]  ? finish_task_switch+0x41f/0xbe0
[  848.609803][   T49]  ? __pfx___schedule+0x10/0x10
[  848.609830][   T49]  ? __lock_acquire+0x6b5/0x2cf0
[  848.609871][   T49]  ? rcu_is_watching+0x15/0xb0
[  848.609894][   T49]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  848.609922][   T49]  do_writepages+0x32e/0x550
[  848.609953][   T49]  ? reacquire_held_locks+0x104/0x190
[  848.609972][   T49]  ? writeback_sb_inodes+0x477/0x1a20
[  848.610003][   T49]  __writeback_single_inode+0x133/0x11a0
[  848.610030][   T49]  ? do_raw_spin_unlock+0xf5/0x210
[  848.610059][   T49]  writeback_sb_inodes+0x992/0x1a20
[  848.610105][   T49]  ? __lock_acquire+0x6b5/0x2cf0
[  848.610150][   T49]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  848.610172][   T49]  ? do_raw_spin_lock+0x12b/0x2f0
[  848.610239][   T49]  ? rcu_is_watching+0x15/0xb0
[  848.610270][   T49]  wb_writeback+0x456/0xb70
[  848.610298][   T49]  ? queue_io+0x251/0x4a0
[  848.610331][   T49]  ? __pfx_wb_writeback+0x10/0x10
[  848.610352][   T49]  ? do_raw_spin_lock+0x12b/0x2f0
[  848.610392][   T49]  wb_workfn+0x414/0xf50
[  848.610416][   T49]  ? look_up_lock_class+0x57/0x110
[  848.610453][   T49]  ? __pfx_wb_workfn+0x10/0x10
[  848.610478][   T49]  ? do_raw_spin_lock+0x12b/0x2f0
[  848.610504][   T49]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  848.610553][   T49]  ? process_one_work+0x8bb/0x1780
[  848.610580][   T49]  process_one_work+0x9ab/0x1780
[  848.610630][   T49]  ? __pfx_process_one_work+0x10/0x10
[  848.610656][   T49]  ? do_raw_spin_lock+0x12b/0x2f0
[  848.610697][   T49]  worker_thread+0xba8/0x11e0
[  848.610739][   T49]  kthread+0x388/0x470
[  848.610760][   T49]  ? __pfx_worker_thread+0x10/0x10
[  848.610775][   T49]  ? __pfx_kthread+0x10/0x10
[  848.610796][   T49]  ret_from_fork+0x51e/0xb90
[  848.610813][   T49]  ? __pfx_ret_from_fork+0x10/0x10
[  848.610826][   T49]  ? __switch_to+0xc7d/0x1450
[  848.610842][   T49]  ? __pfx_kthread+0x10/0x10
[  848.610855][   T49]  ret_from_fork_asm+0x1a/0x30
[  848.610875][   T49]  </TASK>
[  848.611079][   T49] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  848.971213][ T6020] usb 4-1: USB disconnect, device number 98
[  850.426876][T17218] 9pnet_virtio: no channels available for device syz
[  850.441180][T17218] overlayfs: missing 'lowerdir'
[  851.662535][T15368] Bluetooth: hci0: command 0x0406 tx timeout
[  853.569354][ T6050] bridge_slave_1: left allmulticast mode
[  853.599017][ T6050] bridge_slave_1: left promiscuous mode
[  853.615302][T17235] loop2: detected capacity change from 0 to 256
[  853.623216][T17235] exfat: Unknown parameter '����������'
[  853.634521][ T6050] bridge0: port 2(bridge_slave_1) entered disabled state
[  853.694035][ T6050] bridge_slave_0: left allmulticast mode
[  853.724920][ T6050] bridge_slave_0: left promiscuous mode
[  853.749496][ T6050] bridge0: port 1(bridge_slave_0) entered disabled state
[  854.049528][ T6050] ip6gretap0 (unregistering): left promiscuous mode
[  854.077194][T13356] usb 2-1: new high-speed USB device number 111 using dummy_hcd
[  854.244836][T13356] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  854.265517][T13356] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  854.292110][T13356] usb 2-1: Product: syz
[  854.301649][T13356] usb 2-1: Manufacturer: syz
[  854.311802][T13356] usb 2-1: SerialNumber: syz
[  854.331350][T17235] loop2: detected capacity change from 0 to 40427
[  854.343980][T17235] F2FS-fs (loop2): invalid crc value
[  854.364504][ T6050] bridge0 (unregistering): left promiscuous mode
[  854.447551][ T6050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  854.466012][T17235] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  854.483576][T17235] F2FS-fs (loop2): Start checkpoint disabled!
[  854.490888][ T6050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  854.502596][ T6050] bond0 (unregistering): Released all slaves
[  854.511375][T17235] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0
[  854.528714][ T6050] bond1 (unregistering): Released all slaves
[  854.534922][T17235] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  854.599883][ T6050] bond2 (unregistering): Released all slaves
[  854.640069][ T6050] bond3 (unregistering): Released all slaves
[  854.900881][T13356] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  855.098767][T17254] syz.2.3377: attempt to access beyond end of device
[  855.098767][T17254] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  855.677483][T13356] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  855.701417][T17256] loop0: detected capacity change from 0 to 256
[  855.768166][ T6050] bond4 (unregistering): (slave batadv1): Releasing active interface
[  855.970301][T17256] FAT-fs (loop0): Directory bread(block 64) failed
[  855.977526][T17256] FAT-fs (loop0): Directory bread(block 65) failed
[  855.984525][T17256] FAT-fs (loop0): Directory bread(block 66) failed
[  855.991208][T17256] FAT-fs (loop0): Directory bread(block 67) failed
[  855.998546][T17256] FAT-fs (loop0): Directory bread(block 68) failed
[  856.005134][T17256] FAT-fs (loop0): Directory bread(block 69) failed
[  856.013449][T17256] FAT-fs (loop0): Directory bread(block 70) failed
[  856.020780][T17256] FAT-fs (loop0): Directory bread(block 71) failed
[  856.028014][T17256] FAT-fs (loop0): Directory bread(block 72) failed
[  856.034607][T17256] FAT-fs (loop0): Directory bread(block 73) failed
[  856.929967][T14284] kworker/u8:17: attempt to access beyond end of device
[  856.929967][T14284] loop2: rw=2049, sector=45104, nr_sectors = 24 limit=40427
[  856.955760][ T6050] bond4 (unregistering): Released all slaves
[  856.993729][T14284] CPU: 0 UID: 0 PID: 14284 Comm: kworker/u8:17 Not tainted syzkaller #0 PREEMPT(full) 
[  856.993769][T14284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  856.993782][T14284] Workqueue: writeback wb_workfn (flush-7:2)
[  856.993811][T14284] Call Trace:
[  856.993819][T14284]  <TASK>
[  856.993828][T14284]  dump_stack_lvl+0xe8/0x150
[  856.993859][T14284]  f2fs_handle_critical_error+0x37c/0x540
[  856.993889][T14284]  f2fs_write_end_io+0x1274/0x1740
[  856.993938][T14284]  __submit_merged_bio+0x256/0x700
[  856.993969][T14284]  __submit_merged_write_cond+0x3c9/0x4e0
[  856.994003][T14284]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  856.994050][T14284]  f2fs_write_data_pages+0x287e/0x34f0
[  856.994110][T14284]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  856.994148][T14284]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  856.994200][T14284]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  856.994248][T14284]  ? __lock_acquire+0x6b5/0x2cf0
[  856.994293][T14284]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  856.994321][T14284]  do_writepages+0x32e/0x550
[  856.994351][T14284]  ? reacquire_held_locks+0x104/0x190
[  856.994370][T14284]  ? writeback_sb_inodes+0x477/0x1a20
[  856.994407][T14284]  __writeback_single_inode+0x133/0x11a0
[  856.994433][T14284]  ? do_raw_spin_unlock+0xf5/0x210
[  856.994461][T14284]  writeback_sb_inodes+0x992/0x1a20
[  856.994503][T14284]  ? __lock_acquire+0x6b5/0x2cf0
[  856.994535][T14284]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  856.994557][T14284]  ? do_raw_spin_lock+0x12b/0x2f0
[  856.994620][T14284]  ? rcu_is_watching+0x15/0xb0
[  856.994649][T14284]  wb_writeback+0x456/0xb70
[  856.994676][T14284]  ? queue_io+0x251/0x4a0
[  856.994708][T14284]  ? __pfx_wb_writeback+0x10/0x10
[  856.994729][T14284]  ? do_raw_spin_lock+0x12b/0x2f0
[  856.994768][T14284]  wb_workfn+0x414/0xf50
[  856.994789][T14284]  ? look_up_lock_class+0x57/0x110
[  856.994823][T14284]  ? __pfx_wb_workfn+0x10/0x10
[  856.994847][T14284]  ? do_raw_spin_lock+0x12b/0x2f0
[  856.994872][T14284]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  856.994917][T14284]  ? process_one_work+0x8bb/0x1780
[  856.994943][T14284]  process_one_work+0x9ab/0x1780
[  856.994992][T14284]  ? __pfx_process_one_work+0x10/0x10
[  856.995017][T14284]  ? do_raw_spin_lock+0x12b/0x2f0
[  856.995057][T14284]  worker_thread+0xba8/0x11e0
[  856.995085][T14284]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  856.995106][T14284]  ? __kthread_parkme+0x7a/0x1f0
[  856.995125][T14284]  ? __kthread_parkme+0x19c/0x1f0
[  856.995151][T14284]  kthread+0x388/0x470
[  856.995173][T14284]  ? __pfx_worker_thread+0x10/0x10
[  856.995189][T14284]  ? __pfx_kthread+0x10/0x10
[  856.995213][T14284]  ret_from_fork+0x51e/0xb90
[  856.995243][T14284]  ? __pfx_ret_from_fork+0x10/0x10
[  856.995268][T14284]  ? __switch_to+0xc7d/0x1450
[  856.995296][T14284]  ? __pfx_kthread+0x10/0x10
[  856.995320][T14284]  ret_from_fork_asm+0x1a/0x30
[  856.995356][T14284]  </TASK>
[  857.303236][T14284] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  857.310277][T14284] CPU: 0 UID: 0 PID: 14284 Comm: kworker/u8:17 Not tainted syzkaller #0 PREEMPT(full) 
[  857.310301][T14284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  857.310313][T14284] Workqueue: writeback wb_workfn (flush-7:2)
[  857.310352][T14284] Call Trace:
[  857.310360][T14284]  <TASK>
[  857.310369][T14284]  dump_stack_lvl+0xe8/0x150
[  857.310399][T14284]  f2fs_handle_critical_error+0x37c/0x540
[  857.310430][T14284]  f2fs_write_end_io+0x1274/0x1740
[  857.310477][T14284]  __submit_merged_bio+0x256/0x700
[  857.310509][T14284]  __submit_merged_write_cond+0x3c9/0x4e0
[  857.310542][T14284]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  857.310589][T14284]  f2fs_write_data_pages+0x287e/0x34f0
[  857.310651][T14284]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  857.310690][T14284]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  857.310741][T14284]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  857.310787][T14284]  ? __lock_acquire+0x6b5/0x2cf0
[  857.310832][T14284]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  857.310860][T14284]  do_writepages+0x32e/0x550
[  857.310890][T14284]  ? reacquire_held_locks+0x104/0x190
[  857.310910][T14284]  ? writeback_sb_inodes+0x477/0x1a20
[  857.310940][T14284]  __writeback_single_inode+0x133/0x11a0
[  857.310965][T14284]  ? do_raw_spin_unlock+0xf5/0x210
[  857.310993][T14284]  writeback_sb_inodes+0x992/0x1a20
[  857.311036][T14284]  ? __lock_acquire+0x6b5/0x2cf0
[  857.311068][T14284]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  857.311089][T14284]  ? do_raw_spin_lock+0x12b/0x2f0
[  857.311151][T14284]  ? rcu_is_watching+0x15/0xb0
[  857.311180][T14284]  wb_writeback+0x456/0xb70
[  857.311207][T14284]  ? queue_io+0x251/0x4a0
[  857.311238][T14284]  ? __pfx_wb_writeback+0x10/0x10
[  857.311259][T14284]  ? do_raw_spin_lock+0x12b/0x2f0
[  857.311299][T14284]  wb_workfn+0x414/0xf50
[  857.311320][T14284]  ? look_up_lock_class+0x57/0x110
[  857.311361][T14284]  ? __pfx_wb_workfn+0x10/0x10
[  857.311384][T14284]  ? do_raw_spin_lock+0x12b/0x2f0
[  857.311410][T14284]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  857.311455][T14284]  ? process_one_work+0x8bb/0x1780
[  857.311481][T14284]  process_one_work+0x9ab/0x1780
[  857.311529][T14284]  ? __pfx_process_one_work+0x10/0x10
[  857.311554][T14284]  ? do_raw_spin_lock+0x12b/0x2f0
[  857.311594][T14284]  worker_thread+0xba8/0x11e0
[  857.311622][T14284]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  857.311644][T14284]  ? __kthread_parkme+0x7a/0x1f0
[  857.311662][T14284]  ? __kthread_parkme+0x19c/0x1f0
[  857.311688][T14284]  kthread+0x388/0x470
[  857.311710][T14284]  ? __pfx_worker_thread+0x10/0x10
[  857.311727][T14284]  ? __pfx_kthread+0x10/0x10
[  857.311750][T14284]  ret_from_fork+0x51e/0xb90
[  857.311779][T14284]  ? __pfx_ret_from_fork+0x10/0x10
[  857.311808][T14284]  ? __switch_to+0xc7d/0x1450
[  857.311836][T14284]  ? __pfx_kthread+0x10/0x10
[  857.311858][T14284]  ret_from_fork_asm+0x1a/0x30
[  857.311894][T14284]  </TASK>
[  857.311927][T14284] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  857.601665][T14284] CPU: 1 UID: 0 PID: 14284 Comm: kworker/u8:17 Not tainted syzkaller #0 PREEMPT(full) 
[  857.601688][T14284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  857.601700][T14284] Workqueue: writeback wb_workfn (flush-7:2)
[  857.601728][T14284] Call Trace:
[  857.601737][T14284]  <TASK>
[  857.601745][T14284]  dump_stack_lvl+0xe8/0x150
[  857.601769][T14284]  f2fs_handle_critical_error+0x37c/0x540
[  857.601794][T14284]  f2fs_write_end_io+0x1274/0x1740
[  857.601845][T14284]  __submit_merged_bio+0x256/0x700
[  857.601872][T14284]  __submit_merged_write_cond+0x3c9/0x4e0
[  857.601904][T14284]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  857.601950][T14284]  f2fs_write_data_pages+0x287e/0x34f0
[  857.602008][T14284]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  857.602044][T14284]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  857.602095][T14284]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  857.602140][T14284]  ? __lock_acquire+0x6b5/0x2cf0
[  857.602184][T14284]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  857.602212][T14284]  do_writepages+0x32e/0x550
[  857.602241][T14284]  ? reacquire_held_locks+0x104/0x190
[  857.602259][T14284]  ? writeback_sb_inodes+0x477/0x1a20
[  857.602284][T14284]  __writeback_single_inode+0x133/0x11a0
[  857.602306][T14284]  ? do_raw_spin_unlock+0xf5/0x210
[  857.602331][T14284]  writeback_sb_inodes+0x992/0x1a20
[  857.602366][T14284]  ? __lock_acquire+0x6b5/0x2cf0
[  857.602395][T14284]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  857.602414][T14284]  ? do_raw_spin_lock+0x12b/0x2f0
[  857.602464][T14284]  ? rcu_is_watching+0x15/0xb0
[  857.602487][T14284]  wb_writeback+0x456/0xb70
[  857.602507][T14284]  ? queue_io+0x251/0x4a0
[  857.602531][T14284]  ? __pfx_wb_writeback+0x10/0x10
[  857.602550][T14284]  ? do_raw_spin_lock+0x12b/0x2f0
[  857.602586][T14284]  wb_workfn+0x414/0xf50
[  857.602607][T14284]  ? look_up_lock_class+0x57/0x110
[  857.602642][T14284]  ? __pfx_wb_workfn+0x10/0x10
[  857.602662][T14284]  ? do_raw_spin_lock+0x12b/0x2f0
[  857.602686][T14284]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  857.602725][T14284]  ? process_one_work+0x8bb/0x1780
[  857.602751][T14284]  process_one_work+0x9ab/0x1780
[  857.602793][T14284]  ? __pfx_process_one_work+0x10/0x10
[  857.602824][T14284]  ? do_raw_spin_lock+0x12b/0x2f0
[  857.602859][T14284]  worker_thread+0xba8/0x11e0
[  857.602883][T14284]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  857.602901][T14284]  ? __kthread_parkme+0x7a/0x1f0
[  857.602918][T14284]  ? __kthread_parkme+0x19c/0x1f0
[  857.602940][T14284]  kthread+0x388/0x470
[  857.602959][T14284]  ? __pfx_worker_thread+0x10/0x10
[  857.602973][T14284]  ? __pfx_kthread+0x10/0x10
[  857.602993][T14284]  ret_from_fork+0x51e/0xb90
[  857.603017][T14284]  ? __pfx_ret_from_fork+0x10/0x10
[  857.603038][T14284]  ? __switch_to+0xc7d/0x1450
[  857.603062][T14284]  ? __pfx_kthread+0x10/0x10
[  857.603084][T14284]  ret_from_fork_asm+0x1a/0x30
[  857.603118][T14284]  </TASK>
[  857.603406][ T6050] bond5 (unregistering): (slave batadv2): Releasing active interface
[  857.623986][T14284] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  857.630330][T13356] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE
[  857.744099][T17259] loop0: detected capacity change from 0 to 2048
[  857.759447][T13356] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  857.760091][T13356] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  857.843279][T17259] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  857.909164][ T6050] bond5 (unregistering): Released all slaves
[  857.979052][T13356] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32
[  858.032046][T16162] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  858.095265][ T6050] bond6 (unregistering): Released all slaves
[  858.359371][T17269] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3385'.
[  858.377932][ T6050] tipc: Left network mode
[  858.399172][T17268] syzkaller0: entered promiscuous mode
[  858.420967][T17268] syzkaller0: entered allmulticast mode
[  858.524388][T13356] usb 2-1: USB disconnect, device number 111
[  858.659832][T17273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3388'.
[  859.123187][ T6050] hsr_slave_0: left promiscuous mode
[  859.137688][ T1222] usb 4-1: new high-speed USB device number 99 using dummy_hcd
[  859.152684][ T6050] hsr_slave_1: left promiscuous mode
[  859.184284][ T6050] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  859.210228][ T6050] batman_adv: batadv0: Removing interface: batadv_slave_0
[  859.219775][T17284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3393'.
[  859.234637][ T6050] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  859.242552][ T6050] batman_adv: batadv0: Removing interface: batadv_slave_1
[  859.262410][ T6050] veth1_macvtap: left promiscuous mode
[  859.268159][ T6050] veth0_macvtap: left promiscuous mode
[  859.273777][ T6050] veth1_vlan: left promiscuous mode
[  859.280682][ T6050] veth0_vlan: left promiscuous mode
[  859.322906][ T1222] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  859.335443][ T1222] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  859.346502][ T1222] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  859.360452][ T1222] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  859.370465][ T1222] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  859.394189][ T1222] usb 4-1: config 0 descriptor??
[  859.407074][   T10] usb 3-1: new high-speed USB device number 108 using dummy_hcd
[  859.568920][   T10] usb 3-1: Using ep0 maxpacket: 32
[  859.582016][   T10] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[  859.590621][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  859.613872][   T10] usb 3-1: config 0 has no interface number 0
[  859.637092][   T10] usb 3-1: config 0 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  859.665542][   T10] usb 3-1: config 0 interface 12 has no altsetting 0
[  859.685609][   T10] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  859.707806][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  859.726709][   T10] usb 3-1: Product: syz
[  859.738563][   T10] usb 3-1: Manufacturer: syz
[  859.749036][   T10] usb 3-1: SerialNumber: syz
[  859.781050][   T10] usb 3-1: config 0 descriptor??
[  859.788893][   T10] f81534 3-1:0.12: required endpoints missing
[  859.821240][ T1222] usbhid 4-1:0.0: can't add hid device: -71
[  859.828680][ T1222] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  859.848992][ T6050] team0 (unregistering): Port device team_slave_1 removed
[  859.849759][ T1222] usb 4-1: USB disconnect, device number 99
[  859.893743][ T6050] team0 (unregistering): Port device team_slave_0 removed
[  860.328414][T17287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3394'.
[  860.436370][T17292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3395'.
[  861.221803][T17307] loop0: detected capacity change from 0 to 256
[  862.082149][T17307] FAT-fs (loop0): Directory bread(block 64) failed
[  862.088888][T17307] FAT-fs (loop0): Directory bread(block 65) failed
[  862.095941][T17307] FAT-fs (loop0): Directory bread(block 66) failed
[  862.102611][T17307] FAT-fs (loop0): Directory bread(block 67) failed
[  862.109723][T17307] FAT-fs (loop0): Directory bread(block 68) failed
[  862.116327][T17307] FAT-fs (loop0): Directory bread(block 69) failed
[  862.123701][T17307] FAT-fs (loop0): Directory bread(block 70) failed
[  862.130372][T17307] FAT-fs (loop0): Directory bread(block 71) failed
[  862.137713][T17307] FAT-fs (loop0): Directory bread(block 72) failed
[  862.144313][T17307] FAT-fs (loop0): Directory bread(block 73) failed
[  863.108002][  T808] usb 3-1: USB disconnect, device number 108
[  863.166639][T17309] syzkaller0: entered promiscuous mode
[  863.206518][T17309] syzkaller0: entered allmulticast mode
[  863.577108][  T808] usb 2-1: new high-speed USB device number 112 using dummy_hcd
[  865.124947][T17315] loop0: detected capacity change from 0 to 40427
[  865.152626][T17315] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  865.188486][ T1222] usb 3-1: new high-speed USB device number 109 using dummy_hcd
[  865.207743][T17315] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  865.243867][T17315] F2FS-fs (loop0): invalid crc value
[  865.378688][ T1222] usb 3-1: Using ep0 maxpacket: 32
[  865.400684][ T1222] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  865.453154][  T808] usb 2-1: Using ep0 maxpacket: 16
[  865.460867][ T1222] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  865.461321][  T808] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  865.482351][  T808] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  865.499174][  T808] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  865.517686][  T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  865.525764][ T1222] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  865.539684][  T808] usb 2-1: Product: syz
[  865.543902][  T808] usb 2-1: Manufacturer: syz
[  865.550593][  T808] usb 2-1: SerialNumber: syz
[  865.560794][T17315] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  865.574656][  T808] usb 2-1: 0:2 : does not exist
[  865.580766][ T1222] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  865.596630][ T1222] usb 3-1: config 0 interface 0 has no altsetting 0
[  865.603520][T17315] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  865.610882][T17315] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  865.619553][ T1222] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  865.631101][ T1222] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  865.781874][  T808] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  865.825140][ T1222] usb 3-1: config 0 descriptor??
[  866.376839][  T808] usb 2-1: USB disconnect, device number 112
[  866.412164][ T5995] udevd[5995]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  866.645992][ T1222] usbhid 3-1:0.0: can't add hid device: -71
[  866.659263][ T1222] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  866.692691][ T1222] usb 3-1: USB disconnect, device number 109
[  867.237193][   T10] usb 2-1: new high-speed USB device number 113 using dummy_hcd
[  867.407248][   T10] usb 2-1: Using ep0 maxpacket: 32
[  867.422378][   T10] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[  867.700982][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  867.712110][   T10] usb 2-1: config 0 has no interface number 0
[  867.718304][   T10] usb 2-1: config 0 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  867.731232][   T10] usb 2-1: config 0 interface 12 has no altsetting 0
[  867.751610][   T10] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  867.774359][T17345] loop0: detected capacity change from 0 to 40427
[  867.777083][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  867.801666][T17345] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  867.810570][   T10] usb 2-1: Product: syz
[  867.818566][   T10] usb 2-1: Manufacturer: syz
[  867.832165][   T10] usb 2-1: SerialNumber: syz
[  867.838445][T17345] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  867.863270][   T10] usb 2-1: config 0 descriptor??
[  867.877895][T17345] F2FS-fs (loop0): invalid crc value
[  867.909412][   T10] f81534 2-1:0.12: required endpoints missing
[  867.969465][T17355] syzkaller0: entered promiscuous mode
[  867.990931][T17355] syzkaller0: entered allmulticast mode
[  868.036110][T17345] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  868.076825][T17345] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  868.090650][T17345] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  868.598160][T17371] loop3: detected capacity change from 0 to 256
[  868.772892][T17371] FAT-fs (loop3): Directory bread(block 64) failed
[  868.779956][T17371] FAT-fs (loop3): Directory bread(block 65) failed
[  868.786934][T17371] FAT-fs (loop3): Directory bread(block 66) failed
[  868.793684][T17371] FAT-fs (loop3): Directory bread(block 67) failed
[  868.800715][T17371] FAT-fs (loop3): Directory bread(block 68) failed
[  868.807346][T17371] FAT-fs (loop3): Directory bread(block 69) failed
[  868.815359][T17371] FAT-fs (loop3): Directory bread(block 70) failed
[  868.822668][T17371] FAT-fs (loop3): Directory bread(block 71) failed
[  868.829769][T17371] FAT-fs (loop3): Directory bread(block 72) failed
[  868.836367][T17371] FAT-fs (loop3): Directory bread(block 73) failed
[  870.088191][ T1314] ieee802154 phy0 wpan0: encryption failed: -22
[  870.094747][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[  870.113370][T13149] usb 2-1: USB disconnect, device number 113
[  870.254220][T17376] loop1: detected capacity change from 0 to 1024
[  870.262181][T17376] EXT4-fs: Ignoring removed orlov option
[  870.294437][T17376] EXT4-fs: Ignoring removed bh option
[  870.330216][T17376] ext4: Unknown parameter 'seclabel'
[  870.441934][T17376] loop1: detected capacity change from 0 to 1024
[  870.478022][T17376] EXT4-fs: Ignoring removed i_version option
[  870.513835][T17376] EXT4-fs: inline encryption not supported
[  870.535225][T17376] EXT4-fs (loop1): Test dummy encryption mode enabled
[  870.581374][T17376] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  871.624621][T15634] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  872.177145][T15368] Bluetooth: hci2: command 0x0406 tx timeout
[  872.255035][T17410] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3428'.
[  874.297078][   T10] usb 5-1: new high-speed USB device number 127 using dummy_hcd
[  875.617042][   T10] usb 5-1: Using ep0 maxpacket: 32
[  875.633865][   T10] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[  875.665762][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  875.728346][   T10] usb 5-1: config 0 has no interface number 0
[  875.751960][   T10] usb 5-1: config 0 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  875.800388][   T10] usb 5-1: config 0 interface 12 has no altsetting 0
[  875.829429][   T10] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  875.855124][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  875.897579][   T10] usb 5-1: Product: syz
[  875.928631][   T10] usb 5-1: Manufacturer: syz
[  875.954936][   T10] usb 5-1: SerialNumber: syz
[  875.988426][   T10] usb 5-1: config 0 descriptor??
[  876.003707][   T10] f81534 5-1:0.12: required endpoints missing
[  876.084694][T17423] loop2: detected capacity change from 0 to 40427
[  876.132302][T17423] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  876.161789][T13356] usb 5-1: USB disconnect, device number 127
[  876.171942][T17423] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  876.200013][T17423] F2FS-fs (loop2): invalid crc value
[  876.214092][T17423] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-4)
[  880.657069][ T6020] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  880.811003][ T6020] usb 5-1: device descriptor read/64, error -71
[  880.953716][T17504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3453'.
[  881.077507][ T6020] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  881.397733][ T6020] usb 5-1: device descriptor read/64, error -71
[  881.522932][ T6020] usb usb5-port1: attempt power cycle
[  881.535454][T17502] loop1: detected capacity change from 0 to 40427
[  881.581167][T17502] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  881.598884][T17502] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  881.640992][T17502] F2FS-fs (loop1): invalid crc value
[  881.734725][T17502] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  881.756077][T17502] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  881.782735][T17502] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  881.877172][ T6020] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  881.908819][ T6020] usb 5-1: device descriptor read/8, error -71
[  881.923244][T17528] loop3: detected capacity change from 0 to 256
[  881.934378][T17528] exfat: Unknown parameter '��������'
[  882.578548][ T6020] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  882.740361][T17534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3462'.
[  882.761983][T17534] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3462'.
[  882.807818][ T6020] usb 5-1: device descriptor read/8, error -71
[  882.929643][ T6020] usb usb5-port1: unable to enumerate USB device
[  883.094726][T17540] loop0: detected capacity change from 0 to 128
[  883.109381][T17528] loop3: detected capacity change from 0 to 40427
[  883.140130][T17528] F2FS-fs (loop3): invalid crc value
[  883.395443][T17528] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  883.431776][T17528] F2FS-fs (loop3): Start checkpoint disabled!
[  883.462918][T17528] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0
[  883.505209][T17528] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  884.058768][T17554] syz.3.3460: attempt to access beyond end of device
[  884.058768][T17554] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  885.392849][T14284] kworker/u8:17: attempt to access beyond end of device
[  885.392849][T14284] loop3: rw=2049, sector=45104, nr_sectors = 24 limit=40427
[  885.442441][T14284] CPU: 0 UID: 0 PID: 14284 Comm: kworker/u8:17 Not tainted syzkaller #0 PREEMPT(full) 
[  885.442468][T14284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  885.442481][T14284] Workqueue: writeback wb_workfn (flush-7:3)
[  885.442511][T14284] Call Trace:
[  885.442519][T14284]  <TASK>
[  885.442528][T14284]  dump_stack_lvl+0xe8/0x150
[  885.442559][T14284]  f2fs_handle_critical_error+0x37c/0x540
[  885.442591][T14284]  f2fs_write_end_io+0x1274/0x1740
[  885.442641][T14284]  __submit_merged_bio+0x256/0x700
[  885.442673][T14284]  __submit_merged_write_cond+0x3c9/0x4e0
[  885.442707][T14284]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  885.442758][T14284]  f2fs_write_data_pages+0x287e/0x34f0
[  885.442825][T14284]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  885.442867][T14284]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  885.442923][T14284]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  885.442974][T14284]  ? __lock_acquire+0x6b5/0x2cf0
[  885.443017][T14284]  ? update_cfs_rq_load_avg+0x3fb/0x4e0
[  885.443045][T14284]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  885.443073][T14284]  do_writepages+0x32e/0x550
[  885.443104][T14284]  ? reacquire_held_locks+0x104/0x190
[  885.443123][T14284]  ? writeback_sb_inodes+0x477/0x1a20
[  885.443153][T14284]  __writeback_single_inode+0x133/0x11a0
[  885.443179][T14284]  ? do_raw_spin_unlock+0xf5/0x210
[  885.443210][T14284]  writeback_sb_inodes+0x992/0x1a20
[  885.443267][T14284]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  885.443288][T14284]  ? do_raw_spin_lock+0x12b/0x2f0
[  885.443356][T14284]  ? rcu_is_watching+0x15/0xb0
[  885.443392][T14284]  wb_writeback+0x456/0xb70
[  885.443420][T14284]  ? queue_io+0x251/0x4a0
[  885.443453][T14284]  ? __pfx_wb_writeback+0x10/0x10
[  885.443474][T14284]  ? do_raw_spin_lock+0x12b/0x2f0
[  885.443515][T14284]  wb_workfn+0x414/0xf50
[  885.443538][T14284]  ? look_up_lock_class+0x57/0x110
[  885.443574][T14284]  ? __pfx_wb_workfn+0x10/0x10
[  885.443598][T14284]  ? do_raw_spin_lock+0x12b/0x2f0
[  885.443624][T14284]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  885.443672][T14284]  ? process_one_work+0x8bb/0x1780
[  885.443699][T14284]  process_one_work+0x9ab/0x1780
[  885.443751][T14284]  ? __pfx_process_one_work+0x10/0x10
[  885.443775][T14284]  ? do_raw_spin_lock+0x12b/0x2f0
[  885.443818][T14284]  worker_thread+0xba8/0x11e0
[  885.443846][T14284]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  885.443869][T14284]  ? __kthread_parkme+0x7a/0x1f0
[  885.443889][T14284]  ? __kthread_parkme+0x19c/0x1f0
[  885.443916][T14284]  kthread+0x388/0x470
[  885.443938][T14284]  ? __pfx_worker_thread+0x10/0x10
[  885.443955][T14284]  ? __pfx_kthread+0x10/0x10
[  885.443980][T14284]  ret_from_fork+0x51e/0xb90
[  885.444009][T14284]  ? __pfx_ret_from_fork+0x10/0x10
[  885.444033][T14284]  ? __switch_to+0xc7d/0x1450
[  885.444061][T14284]  ? __pfx_kthread+0x10/0x10
[  885.444086][T14284]  ret_from_fork_asm+0x1a/0x30
[  885.444123][T14284]  </TASK>
[  885.445114][T14284] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  885.851436][T14284] CPU: 1 UID: 0 PID: 14284 Comm: kworker/u8:17 Not tainted syzkaller #0 PREEMPT(full) 
[  885.851461][T14284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  885.851473][T14284] Workqueue: writeback wb_workfn (flush-7:3)
[  885.851501][T14284] Call Trace:
[  885.851509][T14284]  <TASK>
[  885.851517][T14284]  dump_stack_lvl+0xe8/0x150
[  885.851548][T14284]  f2fs_handle_critical_error+0x37c/0x540
[  885.851578][T14284]  f2fs_write_end_io+0x1274/0x1740
[  885.851625][T14284]  __submit_merged_bio+0x256/0x700
[  885.851655][T14284]  __submit_merged_write_cond+0x3c9/0x4e0
[  885.851687][T14284]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  885.851734][T14284]  f2fs_write_data_pages+0x287e/0x34f0
[  885.851795][T14284]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  885.851834][T14284]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  885.851891][T14284]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  885.851933][T14284]  ? __lock_acquire+0x6b5/0x2cf0
[  885.851969][T14284]  ? update_cfs_rq_load_avg+0x3fb/0x4e0
[  885.851994][T14284]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  885.852018][T14284]  do_writepages+0x32e/0x550
[  885.852044][T14284]  ? reacquire_held_locks+0x104/0x190
[  885.852061][T14284]  ? writeback_sb_inodes+0x477/0x1a20
[  885.852087][T14284]  __writeback_single_inode+0x133/0x11a0
[  885.852110][T14284]  ? do_raw_spin_unlock+0xf5/0x210
[  885.852134][T14284]  writeback_sb_inodes+0x992/0x1a20
[  885.852180][T14284]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  885.852198][T14284]  ? do_raw_spin_lock+0x12b/0x2f0
[  885.852251][T14284]  ? rcu_is_watching+0x15/0xb0
[  885.852275][T14284]  wb_writeback+0x456/0xb70
[  885.852299][T14284]  ? queue_io+0x251/0x4a0
[  885.852327][T14284]  ? __pfx_wb_writeback+0x10/0x10
[  885.852345][T14284]  ? do_raw_spin_lock+0x12b/0x2f0
[  885.852380][T14284]  wb_workfn+0x414/0xf50
[  885.852400][T14284]  ? look_up_lock_class+0x57/0x110
[  885.852432][T14284]  ? __pfx_wb_workfn+0x10/0x10
[  885.852455][T14284]  ? do_raw_spin_lock+0x12b/0x2f0
[  885.852479][T14284]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  885.852521][T14284]  ? process_one_work+0x8bb/0x1780
[  885.852546][T14284]  process_one_work+0x9ab/0x1780
[  885.852595][T14284]  ? __pfx_process_one_work+0x10/0x10
[  885.852619][T14284]  ? do_raw_spin_lock+0x12b/0x2f0
[  885.852658][T14284]  worker_thread+0xba8/0x11e0
[  885.852686][T14284]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  885.852708][T14284]  ? __kthread_parkme+0x7a/0x1f0
[  885.852726][T14284]  ? __kthread_parkme+0x19c/0x1f0
[  885.852751][T14284]  kthread+0x388/0x470
[  885.852775][T14284]  ? __pfx_worker_thread+0x10/0x10
[  885.852790][T14284]  ? __pfx_kthread+0x10/0x10
[  885.852813][T14284]  ret_from_fork+0x51e/0xb90
[  885.852849][T14284]  ? __pfx_ret_from_fork+0x10/0x10
[  885.852874][T14284]  ? __switch_to+0xc7d/0x1450
[  885.852901][T14284]  ? __pfx_kthread+0x10/0x10
[  885.852923][T14284]  ret_from_fork_asm+0x1a/0x30
[  885.852956][T14284]  </TASK>
[  886.132250][T14284] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  886.139747][T14284] CPU: 0 UID: 0 PID: 14284 Comm: kworker/u8:17 Not tainted syzkaller #0 PREEMPT(full) 
[  886.139773][T14284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  886.139785][T14284] Workqueue: writeback wb_workfn (flush-7:3)
[  886.139813][T14284] Call Trace:
[  886.139820][T14284]  <TASK>
[  886.139829][T14284]  dump_stack_lvl+0xe8/0x150
[  886.139858][T14284]  f2fs_handle_critical_error+0x37c/0x540
[  886.139885][T14284]  f2fs_write_end_io+0x1274/0x1740
[  886.139929][T14284]  __submit_merged_bio+0x256/0x700
[  886.139959][T14284]  __submit_merged_write_cond+0x3c9/0x4e0
[  886.139987][T14284]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  886.140027][T14284]  f2fs_write_data_pages+0x287e/0x34f0
[  886.140074][T14284]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  886.140103][T14284]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  886.140140][T14284]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  886.140175][T14284]  ? __lock_acquire+0x6b5/0x2cf0
[  886.140206][T14284]  ? update_cfs_rq_load_avg+0x3fb/0x4e0
[  886.140227][T14284]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  886.140247][T14284]  do_writepages+0x32e/0x550
[  886.140269][T14284]  ? reacquire_held_locks+0x104/0x190
[  886.140283][T14284]  ? writeback_sb_inodes+0x477/0x1a20
[  886.140304][T14284]  __writeback_single_inode+0x133/0x11a0
[  886.140329][T14284]  ? do_raw_spin_unlock+0xf5/0x210
[  886.140349][T14284]  writeback_sb_inodes+0x992/0x1a20
[  886.140387][T14284]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  886.140403][T14284]  ? do_raw_spin_lock+0x12b/0x2f0
[  886.140448][T14284]  ? rcu_is_watching+0x15/0xb0
[  886.140469][T14284]  wb_writeback+0x456/0xb70
[  886.140489][T14284]  ? queue_io+0x251/0x4a0
[  886.140511][T14284]  ? __pfx_wb_writeback+0x10/0x10
[  886.140526][T14284]  ? do_raw_spin_lock+0x12b/0x2f0
[  886.140555][T14284]  wb_workfn+0x414/0xf50
[  886.140571][T14284]  ? look_up_lock_class+0x57/0x110
[  886.140596][T14284]  ? __pfx_wb_workfn+0x10/0x10
[  886.140613][T14284]  ? do_raw_spin_lock+0x12b/0x2f0
[  886.140632][T14284]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  886.140664][T14284]  ? process_one_work+0x8bb/0x1780
[  886.140684][T14284]  process_one_work+0x9ab/0x1780
[  886.140719][T14284]  ? __pfx_process_one_work+0x10/0x10
[  886.140737][T14284]  ? do_raw_spin_lock+0x12b/0x2f0
[  886.140766][T14284]  worker_thread+0xba8/0x11e0
[  886.140786][T14284]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  886.140802][T14284]  ? __kthread_parkme+0x7a/0x1f0
[  886.140818][T14284]  ? __kthread_parkme+0x19c/0x1f0
[  886.140838][T14284]  kthread+0x388/0x470
[  886.140853][T14284]  ? __pfx_worker_thread+0x10/0x10
[  886.140865][T14284]  ? __pfx_kthread+0x10/0x10
[  886.140883][T14284]  ret_from_fork+0x51e/0xb90
[  886.140905][T14284]  ? __pfx_ret_from_fork+0x10/0x10
[  886.140923][T14284]  ? __switch_to+0xc7d/0x1450
[  886.140943][T14284]  ? __pfx_kthread+0x10/0x10
[  886.140960][T14284]  ret_from_fork_asm+0x1a/0x30
[  886.140985][T14284]  </TASK>
[  886.140996][T14284] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  886.508682][T17567] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3474'.
[  887.464362][T17572] syzkaller0: entered promiscuous mode
[  887.489797][T17572] syzkaller0: entered allmulticast mode
[  887.501750][T17574] loop1: detected capacity change from 0 to 128
[  887.658564][ T5855] Bluetooth: hci3: command 0x0406 tx timeout
[  888.287094][ T7047] usb 2-1: new high-speed USB device number 114 using dummy_hcd
[  888.505318][T17590] loop0: detected capacity change from 0 to 256
[  888.507427][ T7047] usb 2-1: device descriptor read/64, error -71
[  888.521889][T17590] exfat: Unknown parameter '��������'
[  888.787069][ T7047] usb 2-1: new high-speed USB device number 115 using dummy_hcd
[  888.937801][ T7047] usb 2-1: device descriptor read/64, error -71
[  889.067443][ T7047] usb usb2-port1: attempt power cycle
[  889.333812][T17599] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3484'.
[  889.854223][T17590] loop0: detected capacity change from 0 to 40427
[  889.890935][T17590] F2FS-fs (loop0): invalid crc value
[  890.037194][ T7047] usb 2-1: new high-speed USB device number 116 using dummy_hcd
[  890.060016][ T7047] usb 2-1: device descriptor read/8, error -71
[  890.267482][T17590] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  890.315109][T17590] F2FS-fs (loop0): Start checkpoint disabled!
[  890.327073][ T7047] usb 2-1: new high-speed USB device number 117 using dummy_hcd
[  890.353410][T17590] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0
[  890.372868][T17610] loop3: detected capacity change from 0 to 128
[  890.394533][T17590] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  890.404042][ T7047] usb 2-1: device descriptor read/8, error -71
[  890.652670][T17615] loop2: detected capacity change from 0 to 128
[  890.716370][ T7047] usb usb2-port1: unable to enumerate USB device
[  890.875254][T17617] syz.0.3481: attempt to access beyond end of device
[  890.875254][T17617] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  891.380124][T17621] loop3: detected capacity change from 0 to 128
[  891.467862][T14284] kworker/u8:17: attempt to access beyond end of device
[  891.467862][T14284] loop0: rw=2049, sector=45104, nr_sectors = 24 limit=40427
[  891.535659][T14284] CPU: 0 UID: 0 PID: 14284 Comm: kworker/u8:17 Not tainted syzkaller #0 PREEMPT(full) 
[  891.535685][T14284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  891.535697][T14284] Workqueue: writeback wb_workfn (flush-7:0)
[  891.535735][T14284] Call Trace:
[  891.535743][T14284]  <TASK>
[  891.535752][T14284]  dump_stack_lvl+0xe8/0x150
[  891.535782][T14284]  f2fs_handle_critical_error+0x37c/0x540
[  891.535813][T14284]  f2fs_write_end_io+0x1274/0x1740
[  891.535862][T14284]  __submit_merged_bio+0x256/0x700
[  891.535892][T14284]  __submit_merged_write_cond+0x3c9/0x4e0
[  891.535925][T14284]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  891.535972][T14284]  f2fs_write_data_pages+0x287e/0x34f0
[  891.536034][T14284]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  891.536074][T14284]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  891.536127][T14284]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  891.536190][T14284]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  891.536218][T14284]  do_writepages+0x32e/0x550
[  891.536248][T14284]  ? reacquire_held_locks+0x104/0x190
[  891.536268][T14284]  ? writeback_sb_inodes+0x477/0x1a20
[  891.536298][T14284]  __writeback_single_inode+0x133/0x11a0
[  891.536323][T14284]  ? do_raw_spin_unlock+0xf5/0x210
[  891.536351][T14284]  writeback_sb_inodes+0x992/0x1a20
[  891.536403][T14284]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  891.536424][T14284]  ? do_raw_spin_lock+0x12b/0x2f0
[  891.536487][T14284]  ? rcu_is_watching+0x15/0xb0
[  891.536516][T14284]  wb_writeback+0x456/0xb70
[  891.536542][T14284]  ? queue_io+0x251/0x4a0
[  891.536574][T14284]  ? __pfx_wb_writeback+0x10/0x10
[  891.536595][T14284]  ? do_raw_spin_lock+0x12b/0x2f0
[  891.536635][T14284]  wb_workfn+0x414/0xf50
[  891.536657][T14284]  ? look_up_lock_class+0x57/0x110
[  891.536692][T14284]  ? __pfx_wb_workfn+0x10/0x10
[  891.536720][T14284]  ? do_raw_spin_unlock+0xf5/0x210
[  891.536752][T14284]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  891.536791][T14284]  ? process_one_work+0x8bb/0x1780
[  891.536817][T14284]  process_one_work+0x9ab/0x1780
[  891.536867][T14284]  ? __pfx_process_one_work+0x10/0x10
[  891.536892][T14284]  ? do_raw_spin_lock+0x12b/0x2f0
[  891.536932][T14284]  worker_thread+0xba8/0x11e0
[  891.536956][T14284]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  891.536975][T14284]  ? __kthread_parkme+0x7a/0x1f0
[  891.536993][T14284]  ? __kthread_parkme+0x19c/0x1f0
[  891.537017][T14284]  kthread+0x388/0x470
[  891.537036][T14284]  ? __pfx_worker_thread+0x10/0x10
[  891.537049][T14284]  ? __pfx_kthread+0x10/0x10
[  891.537071][T14284]  ret_from_fork+0x51e/0xb90
[  891.537099][T14284]  ? __pfx_ret_from_fork+0x10/0x10
[  891.537123][T14284]  ? __switch_to+0xc7d/0x1450
[  891.537147][T14284]  ? __pfx_kthread+0x10/0x10
[  891.537170][T14284]  ret_from_fork_asm+0x1a/0x30
[  891.537204][T14284]  </TASK>
[  891.810564][T14284] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  891.819660][T14284] CPU: 1 UID: 0 PID: 14284 Comm: kworker/u8:17 Not tainted syzkaller #0 PREEMPT(full) 
[  891.819684][T14284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  891.819696][T14284] Workqueue: writeback wb_workfn (flush-7:0)
[  891.819731][T14284] Call Trace:
[  891.819738][T14284]  <TASK>
[  891.819745][T14284]  dump_stack_lvl+0xe8/0x150
[  891.819774][T14284]  f2fs_handle_critical_error+0x37c/0x540
[  891.819804][T14284]  f2fs_write_end_io+0x1274/0x1740
[  891.819851][T14284]  __submit_merged_bio+0x256/0x700
[  891.819881][T14284]  __submit_merged_write_cond+0x3c9/0x4e0
[  891.819911][T14284]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  891.819952][T14284]  f2fs_write_data_pages+0x287e/0x34f0
[  891.820010][T14284]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  891.820047][T14284]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  891.820097][T14284]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  891.820162][T14284]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  891.820188][T14284]  do_writepages+0x32e/0x550
[  891.820215][T14284]  ? reacquire_held_locks+0x104/0x190
[  891.820233][T14284]  ? writeback_sb_inodes+0x477/0x1a20
[  891.820261][T14284]  __writeback_single_inode+0x133/0x11a0
[  891.820285][T14284]  ? do_raw_spin_unlock+0xf5/0x210
[  891.820312][T14284]  writeback_sb_inodes+0x992/0x1a20
[  891.820360][T14284]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  891.820379][T14284]  ? do_raw_spin_lock+0x12b/0x2f0
[  891.820431][T14284]  ? rcu_is_watching+0x15/0xb0
[  891.820454][T14284]  wb_writeback+0x456/0xb70
[  891.820478][T14284]  ? queue_io+0x251/0x4a0
[  891.820503][T14284]  ? __pfx_wb_writeback+0x10/0x10
[  891.820523][T14284]  ? do_raw_spin_lock+0x12b/0x2f0
[  891.820556][T14284]  wb_workfn+0x414/0xf50
[  891.820575][T14284]  ? look_up_lock_class+0x57/0x110
[  891.820604][T14284]  ? __pfx_wb_workfn+0x10/0x10
[  891.820627][T14284]  ? do_raw_spin_unlock+0xf5/0x210
[  891.820650][T14284]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  891.820684][T14284]  ? process_one_work+0x8bb/0x1780
[  891.820722][T14284]  process_one_work+0x9ab/0x1780
[  891.820764][T14284]  ? __pfx_process_one_work+0x10/0x10
[  891.820785][T14284]  ? do_raw_spin_lock+0x12b/0x2f0
[  891.820821][T14284]  worker_thread+0xba8/0x11e0
[  891.820846][T14284]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  891.820865][T14284]  ? __kthread_parkme+0x7a/0x1f0
[  891.820882][T14284]  ? __kthread_parkme+0x19c/0x1f0
[  891.820908][T14284]  kthread+0x388/0x470
[  891.820928][T14284]  ? __pfx_worker_thread+0x10/0x10
[  891.820944][T14284]  ? __pfx_kthread+0x10/0x10
[  891.820966][T14284]  ret_from_fork+0x51e/0xb90
[  891.820988][T14284]  ? __pfx_ret_from_fork+0x10/0x10
[  891.821006][T14284]  ? __switch_to+0xc7d/0x1450
[  891.821027][T14284]  ? __pfx_kthread+0x10/0x10
[  891.821044][T14284]  ret_from_fork_asm+0x1a/0x30
[  891.821070][T14284]  </TASK>
[  891.821555][T14284] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  891.964003][T17623] syzkaller0: entered promiscuous mode
[  892.114475][T17623] syzkaller0: entered allmulticast mode
[  892.123281][T14284] CPU: 0 UID: 0 PID: 14284 Comm: kworker/u8:17 Not tainted syzkaller #0 PREEMPT(full) 
[  892.123306][T14284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  892.123318][T14284] Workqueue: writeback wb_workfn (flush-7:0)
[  892.123346][T14284] Call Trace:
[  892.123353][T14284]  <TASK>
[  892.123361][T14284]  dump_stack_lvl+0xe8/0x150
[  892.123392][T14284]  f2fs_handle_critical_error+0x37c/0x540
[  892.123424][T14284]  f2fs_write_end_io+0x1274/0x1740
[  892.123475][T14284]  __submit_merged_bio+0x256/0x700
[  892.123507][T14284]  __submit_merged_write_cond+0x3c9/0x4e0
[  892.123541][T14284]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  892.123591][T14284]  f2fs_write_data_pages+0x287e/0x34f0
[  892.123657][T14284]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  892.123699][T14284]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  892.123754][T14284]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  892.123826][T14284]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  892.123854][T14284]  do_writepages+0x32e/0x550
[  892.123885][T14284]  ? reacquire_held_locks+0x104/0x190
[  892.123910][T14284]  ? writeback_sb_inodes+0x477/0x1a20
[  892.123957][T14284]  __writeback_single_inode+0x133/0x11a0
[  892.123982][T14284]  ? do_raw_spin_unlock+0xf5/0x210
[  892.124011][T14284]  writeback_sb_inodes+0x992/0x1a20
[  892.124066][T14284]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  892.124087][T14284]  ? do_raw_spin_lock+0x12b/0x2f0
[  892.124154][T14284]  ? rcu_is_watching+0x15/0xb0
[  892.124184][T14284]  wb_writeback+0x456/0xb70
[  892.124211][T14284]  ? queue_io+0x251/0x4a0
[  892.124250][T14284]  ? __pfx_wb_writeback+0x10/0x10
[  892.124272][T14284]  ? do_raw_spin_lock+0x12b/0x2f0
[  892.124312][T14284]  wb_workfn+0x414/0xf50
[  892.124335][T14284]  ? look_up_lock_class+0x57/0x110
[  892.124372][T14284]  ? __pfx_wb_workfn+0x10/0x10
[  892.124400][T14284]  ? do_raw_spin_unlock+0xf5/0x210
[  892.124426][T14284]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  892.124467][T14284]  ? process_one_work+0x8bb/0x1780
[  892.124494][T14284]  process_one_work+0x9ab/0x1780
[  892.124545][T14284]  ? __pfx_process_one_work+0x10/0x10
[  892.124571][T14284]  ? do_raw_spin_lock+0x12b/0x2f0
[  892.124612][T14284]  worker_thread+0xba8/0x11e0
[  892.124641][T14284]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  892.124663][T14284]  ? __kthread_parkme+0x7a/0x1f0
[  892.124683][T14284]  ? __kthread_parkme+0x19c/0x1f0
[  892.124710][T14284]  kthread+0x388/0x470
[  892.124732][T14284]  ? __pfx_worker_thread+0x10/0x10
[  892.124748][T14284]  ? __pfx_kthread+0x10/0x10
[  892.124771][T14284]  ret_from_fork+0x51e/0xb90
[  892.124802][T14284]  ? __pfx_ret_from_fork+0x10/0x10
[  892.124827][T14284]  ? __switch_to+0xc7d/0x1450
[  892.124855][T14284]  ? __pfx_kthread+0x10/0x10
[  892.124879][T14284]  ret_from_fork_asm+0x1a/0x30
[  892.124916][T14284]  </TASK>
[  892.124924][T14284] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  892.688348][T17636] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3497'.
[  892.995034][T17643] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3500'.
[  893.167409][ T7047] usb 3-1: new full-speed USB device number 110 using dummy_hcd
[  893.230789][T17647] loop4: detected capacity change from 0 to 128
[  893.284444][T17646] loop0: detected capacity change from 0 to 1024
[  893.319620][T17646] EXT4-fs: Ignoring removed orlov option
[  893.330999][ T7047] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1120, setting to 64
[  893.340888][T17646] EXT4-fs: Ignoring removed bh option
[  893.361812][T17646] ext4: Unknown parameter 'seclabel'
[  893.393118][ T7047] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64
[  893.418929][ T7047] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  893.464020][T17646] loop0: detected capacity change from 0 to 1024
[  893.479995][T17646] EXT4-fs: Ignoring removed i_version option
[  893.494195][T17646] EXT4-fs: inline encryption not supported
[  893.494312][ T7047] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  893.521445][T17646] EXT4-fs (loop0): Test dummy encryption mode enabled
[  893.533642][ T7047] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  893.575014][ T7047] usb 3-1: Product: 蛻뽂崮㽰❶ퟝ뭊ᙲ펋졳⥲꠫畠ഗ炰溯臻襧ᜢ燰擎銅᪸ᬑ翛鲞㰸顸釡ִ㯻驄虨醇噕ِ騴篐⃽ꀐ♄녛뾐Ⲧ諷쵰帟⾋☥嶚钖包閤
[  893.597663][ T7047] usb 3-1: Manufacturer: ю
[  893.602312][ T7047] usb 3-1: SerialNumber: ࠧ
[  893.630394][T17641] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  893.631879][T17646] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  893.965401][T17653] loop4: detected capacity change from 0 to 256
[  893.983105][T17653] exfat: Unknown parameter '��������'
[  894.087099][ T7047] cdc_ncm 3-1:1.0: bind() failure
[  894.109905][ T7047] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  894.117060][ T7047] cdc_ncm 3-1:1.1: bind() failure
[  894.733076][T16162] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  894.772765][ T7047] usb 3-1: USB disconnect, device number 110
[  895.458997][T17653] loop4: detected capacity change from 0 to 40427
[  895.507607][T17653] F2FS-fs (loop4): invalid crc value
[  895.605586][    T9] usb 3-1: new high-speed USB device number 111 using dummy_hcd
[  897.049750][    T9] usb 3-1: device descriptor read/64, error -71
[  897.221045][T17653] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  897.249784][T17653] F2FS-fs (loop4): Start checkpoint disabled!
[  897.269330][T17653] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0
[  897.317110][    T9] usb 3-1: new high-speed USB device number 112 using dummy_hcd
[  897.480096][    T9] usb 3-1: device descriptor read/64, error -71
[  897.601441][T17680] gretap0: entered promiscuous mode
[  897.608956][    T9] usb usb3-port1: attempt power cycle
[  897.643799][T17680] gretap0: left promiscuous mode
[  897.930803][T17687] loop1: detected capacity change from 0 to 128
[  897.968937][    T9] usb 3-1: new high-speed USB device number 113 using dummy_hcd
[  898.009537][    T9] usb 3-1: device descriptor read/8, error -71
[  898.148692][T17692] loop4: detected capacity change from 0 to 512
[  898.164758][T17692] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  898.267361][    T9] usb 3-1: new high-speed USB device number 114 using dummy_hcd
[  898.389571][   T29] audit: type=1800 audit(1773736293.559:40): pid=17692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3516" name="file1" dev="loop4" ino=1048639 res=0 errno=0
[  898.417976][T17699] loop0: detected capacity change from 0 to 1024
[  898.432283][    T9] usb 3-1: device descriptor read/8, error -71
[  898.502217][T17699] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  898.557356][    T9] usb usb3-port1: unable to enumerate USB device
[  898.592434][   T29] audit: type=1800 audit(1773736293.759:41): pid=17699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3518" name="file1" dev="loop0" ino=15 res=0 errno=0
[  898.731008][T16162] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  898.837323][T17707] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3520'.
[  900.031267][   T10] usb 2-1: new high-speed USB device number 118 using dummy_hcd
[  900.567449][   T10] usb 2-1: device descriptor read/64, error -71
[  900.817096][   T10] usb 2-1: new high-speed USB device number 119 using dummy_hcd
[  900.973026][   T10] usb 2-1: device descriptor read/64, error -71
[  901.100953][   T10] usb usb2-port1: attempt power cycle
[  901.346887][T17727] loop0: detected capacity change from 0 to 40427
[  901.362589][T17727] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  901.395228][T17727] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  901.435573][T17727] F2FS-fs (loop0): invalid crc value
[  901.460502][   T10] usb 2-1: new high-speed USB device number 120 using dummy_hcd
[  901.507564][   T10] usb 2-1: device descriptor read/8, error -71
[  901.658713][T17727] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  901.691041][T17727] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  901.724124][T17727] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  901.781471][   T10] usb 2-1: new high-speed USB device number 121 using dummy_hcd
[  901.827963][   T10] usb 2-1: device descriptor read/8, error -71
[  901.951467][   T10] usb usb2-port1: unable to enumerate USB device
[  902.532433][T17742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3531'.
[  903.029836][   T10] usb 2-1: new high-speed USB device number 122 using dummy_hcd
[  903.177469][   T10] usb 2-1: device descriptor read/64, error -71
[  903.209017][T17744] loop2: detected capacity change from 0 to 1024
[  903.258743][T17744] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  903.342349][   T29] audit: type=1800 audit(1773736298.509:42): pid=17744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3532" name="file1" dev="loop2" ino=15 res=0 errno=0
[  903.427686][   T10] usb 2-1: new high-speed USB device number 123 using dummy_hcd
[  903.444965][T15461] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  903.587379][   T10] usb 2-1: device descriptor read/64, error -71
[  903.708096][   T10] usb usb2-port1: attempt power cycle
[  903.807691][    T9] usb 3-1: new high-speed USB device number 115 using dummy_hcd
[  903.944711][T17760] loop3: detected capacity change from 0 to 256
[  903.971058][    T9] usb 3-1: Using ep0 maxpacket: 32
[  903.985565][T17760] FAT-fs (loop3): Directory bread(block 64) failed
[  903.993284][T17760] FAT-fs (loop3): Directory bread(block 65) failed
[  903.999971][T17760] FAT-fs (loop3): Directory bread(block 66) failed
[  904.006511][T17760] FAT-fs (loop3): Directory bread(block 67) failed
[  904.013145][T17760] FAT-fs (loop3): Directory bread(block 68) failed
[  904.019706][T17760] FAT-fs (loop3): Directory bread(block 69) failed
[  904.026310][T17760] FAT-fs (loop3): Directory bread(block 70) failed
[  904.033539][T17760] FAT-fs (loop3): Directory bread(block 71) failed
[  904.041925][T17760] FAT-fs (loop3): Directory bread(block 72) failed
[  904.048536][T17760] FAT-fs (loop3): Directory bread(block 73) failed
[  904.070986][    T9] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[  904.095833][    T9] usb 3-1: config 0 has no interface number 0
[  904.107904][    T9] usb 3-1: config 0 interface 12 altsetting 2 has a duplicate endpoint with address 0x82, skipping
[  904.122013][   T10] usb 2-1: new high-speed USB device number 124 using dummy_hcd
[  904.154506][    T9] usb 3-1: config 0 interface 12 has no altsetting 0
[  904.176370][    T9] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  904.197485][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  904.205883][   T10] usb 2-1: device descriptor read/8, error -71
[  904.212402][    T9] usb 3-1: Product: syz
[  904.216671][    T9] usb 3-1: Manufacturer: syz
[  904.221674][    T9] usb 3-1: SerialNumber: syz
[  904.256037][    T9] usb 3-1: config 0 descriptor??
[  904.274090][    T9] f81534 3-1:0.12: required endpoints missing
[  904.358045][T17766] lo speed is unknown, defaulting to 1000
[  904.448950][   T10] usb 2-1: new high-speed USB device number 125 using dummy_hcd
[  904.478743][   T10] usb 2-1: device descriptor read/8, error -71
[  904.599343][   T10] usb usb2-port1: unable to enumerate USB device
[  904.797908][ T6020] usb 1-1: new high-speed USB device number 105 using dummy_hcd
[  904.868220][T17776] lo speed is unknown, defaulting to 1000
[  904.900863][T17780] loop3: detected capacity change from 0 to 512
[  904.947216][ T6020] usb 1-1: device descriptor read/64, error -71
[  904.972972][T17780] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002]
[  904.997283][T17780] System zones: 0-2, 18-18, 34-34
[  905.023400][T17780] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters
[  905.039110][T17780] EXT4-fs (loop3): Remounting filesystem read-only
[  905.046284][T17780] EXT4-fs (loop3): 1 truncate cleaned up
[  905.052012][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  905.052031][    C1] EXT4-fs (loop3): initial error at time 1773736300: ext4_mb_generate_buddy:1315
[  905.052054][    C1] EXT4-fs (loop3): last error at time 1773736300: ext4_mb_generate_buddy:1315
[  905.066167][   T49] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync!
[  905.090812][   T49] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  905.107068][   T49] Quota error (device loop3): write_blk: dquota write failed
[  905.112683][T17780] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  905.114623][   T49] Quota error (device loop3): remove_free_dqentry: Can't write block (5) with free entries
[  905.143785][   T49] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  905.168282][T17780] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  905.173611][   T49] Quota error (device loop3): write_blk: dquota write failed
[  905.186337][   T49] Quota error (device loop3): free_dqentry: Can't move quota data block (5) to free list
[  905.222329][   T49] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started
[  905.240437][ T6020] usb 1-1: new high-speed USB device number 106 using dummy_hcd
[  905.250660][   T49] Quota error (device loop3): v2_write_file_info: Can't write info structure
[  905.278412][   T49] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync!
[  905.291467][   T49] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  905.315669][T17776] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3543'.
[  905.345191][T15971] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  905.379231][T17792] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3547'.
[  905.407678][ T6020] usb 1-1: device descriptor read/64, error -71
[  905.525237][ T6020] usb usb1-port1: attempt power cycle
[  905.537069][T13149] usb 2-1: new full-speed USB device number 126 using dummy_hcd
[  905.799082][T13149] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1120, setting to 64
[  905.826033][T13149] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64
[  905.838395][T13149] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  905.852464][T13149] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  905.862119][T13149] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  905.870500][T13149] usb 2-1: Product: 蛻뽂崮㽰❶ퟝ뭊ᙲ펋졳⥲꠫畠ഗ炰溯臻襧ᜢ燰擎銅᪸ᬑ翛鲞㰸顸釡ִ㯻驄虨醇噕ِ騴篐⃽ꀐ♄녛뾐Ⲧ諷쵰帟⾋☥嶚钖包閤
[  906.412907][ T6020] usb 1-1: new high-speed USB device number 107 using dummy_hcd
[  906.438637][T13149] usb 2-1: Manufacturer: ю
[  906.438915][ T6020] usb 1-1: device descriptor read/8, error -71
[  906.454425][T13149] usb 2-1: SerialNumber: ࠧ
[  906.485997][T17789] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  906.658973][   T10] usb 3-1: USB disconnect, device number 115
[  906.730707][T13149] cdc_ncm 2-1:1.0: bind() failure
[  906.738945][ T6020] usb 1-1: new high-speed USB device number 108 using dummy_hcd
[  906.789232][T13149] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  906.799096][ T6020] usb 1-1: device descriptor read/8, error -71
[  906.809790][T13149] cdc_ncm 2-1:1.1: bind() failure
[  906.849872][T13149] usb 2-1: USB disconnect, device number 126
[  906.917360][ T6020] usb usb1-port1: unable to enumerate USB device
[  907.204041][T17814] syzkaller0: entered promiscuous mode
[  907.210033][T17814] syzkaller0: entered allmulticast mode
[  907.569576][T17823] loop1: detected capacity change from 0 to 128
[  907.651848][ T6020] usb 4-1: new high-speed USB device number 100 using dummy_hcd
[  907.807228][ T6020] usb 4-1: device descriptor read/64, error -71
[  907.925013][T17833] loop0: detected capacity change from 0 to 1024
[  907.994148][T17837] loop1: detected capacity change from 0 to 128
[  908.010000][T17839] loop2: detected capacity change from 0 to 128
[  908.037472][T17837] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  908.041150][T17833] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  908.064401][T17837] ext4 filesystem being mounted at /104/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  908.097424][ T6020] usb 4-1: new high-speed USB device number 101 using dummy_hcd
[  908.230733][T17837] EXT4-fs error (device loop1): dx_make_map:1296: inode #2: block 18: comm syz.1.3563: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1
[  908.237101][ T6020] usb 4-1: device descriptor read/64, error -71
[  908.285384][T17833] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  908.362279][T17833] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  908.379903][T17837] EXT4-fs error (device loop1) in do_split:2027: Corrupt filesystem
[  908.388308][T17833] EXT4-fs (loop0): This should not happen!! Data will be lost
[  908.388308][T17833] 
[  908.416838][T17833] EXT4-fs (loop0): Total free blocks count 0
[  908.431915][T17833] EXT4-fs (loop0): Free/Dirty block details
[  908.444719][T17833] EXT4-fs (loop0): free_blocks=20480
[  908.455989][T17833] EXT4-fs (loop0): dirty_blocks=80
[  908.472166][T17833] EXT4-fs (loop0): Block reservation details
[  908.483163][T17833] EXT4-fs (loop0): i_reserved_data_blocks=5
[  908.499888][ T6020] usb usb4-port1: attempt power cycle
[  908.561075][T15634] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  908.918675][ T6020] usb 4-1: new high-speed USB device number 102 using dummy_hcd
[  909.070548][ T6020] usb 4-1: device descriptor read/8, error -71
[  909.857414][ T6020] usb 4-1: new high-speed USB device number 103 using dummy_hcd
[  909.898219][ T6020] usb 4-1: device descriptor read/8, error -71
[  910.017424][ T6020] usb usb4-port1: unable to enumerate USB device
[  910.329300][   T35] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28
[  910.539280][T17858] syzkaller0: entered promiscuous mode
[  910.545191][T17858] syzkaller0: entered allmulticast mode
[  910.707159][T13149] usb 3-1: new high-speed USB device number 116 using dummy_hcd
[  910.774256][T17863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3567'.
[  910.988229][T13149] usb 3-1: device descriptor read/64, error -71
[  911.287478][T13149] usb 3-1: new high-speed USB device number 117 using dummy_hcd
[  911.487446][T13149] usb 3-1: device descriptor read/64, error -71
[  911.759560][T13149] usb usb3-port1: attempt power cycle
[  912.625623][T17878] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3576'.
[  912.747085][T13149] usb 3-1: new high-speed USB device number 118 using dummy_hcd
[  912.781357][T13149] usb 3-1: device descriptor read/8, error -71
[  913.013525][T17886] 9pnet_virtio: no channels available for device syz
[  913.037018][T13149] usb 3-1: new high-speed USB device number 119 using dummy_hcd
[  913.054251][T17886] overlayfs: missing 'lowerdir'
[  913.087638][T13149] usb 3-1: device descriptor read/8, error -71
[  913.210131][T13149] usb usb3-port1: unable to enumerate USB device
[  913.801957][T17898] loop0: detected capacity change from 0 to 256
[  913.838245][T17898] exfat: Unknown parameter '��������'
[  913.877022][ T1222] usb 3-1: new high-speed USB device number 120 using dummy_hcd
[  913.937665][T17900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3583'.
[  914.057452][ T1222] usb 3-1: Using ep0 maxpacket: 16
[  914.072463][ T1222] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  914.102521][ T1222] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  914.124017][ T1222] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  914.143628][ T1222] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  914.169993][ T1222] usb 3-1: Product: syz
[  914.181752][ T1222] usb 3-1: Manufacturer: syz
[  914.196861][ T1222] usb 3-1: SerialNumber: syz
[  914.209050][T17902] syzkaller0: entered promiscuous mode
[  914.226004][ T1222] usb 3-1: 0:2 : does not exist
[  914.241815][T17902] syzkaller0: entered allmulticast mode
[  914.703798][ T1222] usb 3-1: USB disconnect, device number 120
[  914.909459][ T5995] udevd[5995]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  915.305137][T17913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3586'.
[  915.556723][T17914] loop1: detected capacity change from 0 to 1024
[  915.626702][ T6384] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  915.645502][T17913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3586'.
[  915.676745][T17920] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3588'.
[  915.718664][ T6384] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  915.750937][T17914] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  915.789636][T17898] loop0: detected capacity change from 0 to 40427
[  915.831925][ T6384] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  915.841003][T17914] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal
[  915.886860][T17898] F2FS-fs (loop0): invalid crc value
[  915.896693][ T6021] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  916.111711][T17898] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  916.173999][T17898] F2FS-fs (loop0): Start checkpoint disabled!
[  916.207793][T17898] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0
[  916.251139][T17898] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  916.616655][T17932] syz.0.3582: attempt to access beyond end of device
[  916.616655][T17932] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  917.264546][ T6384] kworker/u8:13: attempt to access beyond end of device
[  917.264546][ T6384] loop0: rw=2049, sector=45104, nr_sectors = 24 limit=40427
[  917.285247][ T6384] CPU: 1 UID: 0 PID: 6384 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) 
[  917.285272][ T6384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  917.285284][ T6384] Workqueue: writeback wb_workfn (flush-7:0)
[  917.285313][ T6384] Call Trace:
[  917.285320][ T6384]  <TASK>
[  917.285328][ T6384]  dump_stack_lvl+0xe8/0x150
[  917.285358][ T6384]  f2fs_handle_critical_error+0x37c/0x540
[  917.285389][ T6384]  f2fs_write_end_io+0x1274/0x1740
[  917.285437][ T6384]  __submit_merged_bio+0x256/0x700
[  917.285468][ T6384]  __submit_merged_write_cond+0x3c9/0x4e0
[  917.285500][ T6384]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  917.285547][ T6384]  f2fs_write_data_pages+0x287e/0x34f0
[  917.285612][ T6384]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  917.285635][ T6384]  ? cfg80211_inform_single_bss_data+0x13c6/0x1b70
[  917.285776][ T6384]  ? __lock_acquire+0x6b5/0x2cf0
[  917.285820][ T6384]  ? unwind_next_frame+0xa5/0x23c0
[  917.285864][ T6384]  ? unwind_next_frame+0xa5/0x23c0
[  917.285882][ T6384]  ? unwind_next_frame+0x1aaf/0x23c0
[  917.285902][ T6384]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  917.285928][ T6384]  do_writepages+0x32e/0x550
[  917.285956][ T6384]  ? reacquire_held_locks+0x104/0x190
[  917.285973][ T6384]  ? writeback_sb_inodes+0x477/0x1a20
[  917.286002][ T6384]  __writeback_single_inode+0x133/0x11a0
[  917.286026][ T6384]  ? do_raw_spin_unlock+0xf5/0x210
[  917.286054][ T6384]  writeback_sb_inodes+0x992/0x1a20
[  917.286101][ T6384]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  917.286131][ T6384]  ? do_raw_spin_lock+0x12b/0x2f0
[  917.286192][ T6384]  ? rcu_is_watching+0x15/0xb0
[  917.286222][ T6384]  wb_writeback+0x456/0xb70
[  917.286249][ T6384]  ? queue_io+0x251/0x4a0
[  917.286281][ T6384]  ? __pfx_wb_writeback+0x10/0x10
[  917.286302][ T6384]  ? do_raw_spin_lock+0x12b/0x2f0
[  917.286343][ T6384]  wb_workfn+0x414/0xf50
[  917.286366][ T6384]  ? look_up_lock_class+0x57/0x110
[  917.286401][ T6384]  ? __pfx_wb_workfn+0x10/0x10
[  917.286428][ T6384]  ? do_raw_spin_unlock+0xf5/0x210
[  917.286455][ T6384]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  917.286497][ T6384]  ? process_one_work+0x8bb/0x1780
[  917.286523][ T6384]  process_one_work+0x9ab/0x1780
[  917.286573][ T6384]  ? __pfx_process_one_work+0x10/0x10
[  917.286597][ T6384]  ? do_raw_spin_lock+0x12b/0x2f0
[  917.286635][ T6384]  worker_thread+0xba8/0x11e0
[  917.286664][ T6384]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  917.286685][ T6384]  ? __kthread_parkme+0x7a/0x1f0
[  917.286706][ T6384]  ? __kthread_parkme+0x19c/0x1f0
[  917.286732][ T6384]  kthread+0x388/0x470
[  917.286755][ T6384]  ? __pfx_worker_thread+0x10/0x10
[  917.286771][ T6384]  ? __pfx_kthread+0x10/0x10
[  917.286794][ T6384]  ret_from_fork+0x51e/0xb90
[  917.286824][ T6384]  ? __pfx_ret_from_fork+0x10/0x10
[  917.286860][ T6384]  ? __switch_to+0xc7d/0x1450
[  917.286889][ T6384]  ? __pfx_kthread+0x10/0x10
[  917.286913][ T6384]  ret_from_fork_asm+0x1a/0x30
[  917.286948][ T6384]  </TASK>
[  917.786848][ T6384] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  917.806249][ T6384] CPU: 0 UID: 0 PID: 6384 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) 
[  917.806275][ T6384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  917.806288][ T6384] Workqueue: writeback wb_workfn (flush-7:0)
[  917.806316][ T6384] Call Trace:
[  917.806324][ T6384]  <TASK>
[  917.806333][ T6384]  dump_stack_lvl+0xe8/0x150
[  917.806363][ T6384]  f2fs_handle_critical_error+0x37c/0x540
[  917.806395][ T6384]  f2fs_write_end_io+0x1274/0x1740
[  917.806444][ T6384]  __submit_merged_bio+0x256/0x700
[  917.806475][ T6384]  __submit_merged_write_cond+0x3c9/0x4e0
[  917.806508][ T6384]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  917.806556][ T6384]  f2fs_write_data_pages+0x287e/0x34f0
[  917.806618][ T6384]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  917.806643][ T6384]  ? cfg80211_inform_single_bss_data+0x13c6/0x1b70
[  917.806712][ T6384]  ? __lock_acquire+0x6b5/0x2cf0
[  917.806757][ T6384]  ? unwind_next_frame+0xa5/0x23c0
[  917.806798][ T6384]  ? unwind_next_frame+0xa5/0x23c0
[  917.806816][ T6384]  ? unwind_next_frame+0x1aaf/0x23c0
[  917.806836][ T6384]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  917.806864][ T6384]  do_writepages+0x32e/0x550
[  917.806894][ T6384]  ? reacquire_held_locks+0x104/0x190
[  917.806913][ T6384]  ? writeback_sb_inodes+0x477/0x1a20
[  917.806943][ T6384]  __writeback_single_inode+0x133/0x11a0
[  917.806967][ T6384]  ? do_raw_spin_unlock+0xf5/0x210
[  917.806994][ T6384]  writeback_sb_inodes+0x992/0x1a20
[  917.807047][ T6384]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  917.807076][ T6384]  ? do_raw_spin_lock+0x12b/0x2f0
[  917.807138][ T6384]  ? rcu_is_watching+0x15/0xb0
[  917.807166][ T6384]  wb_writeback+0x456/0xb70
[  917.807194][ T6384]  ? queue_io+0x251/0x4a0
[  917.807225][ T6384]  ? __pfx_wb_writeback+0x10/0x10
[  917.807246][ T6384]  ? do_raw_spin_lock+0x12b/0x2f0
[  917.807285][ T6384]  wb_workfn+0x414/0xf50
[  917.807307][ T6384]  ? look_up_lock_class+0x57/0x110
[  917.807342][ T6384]  ? __pfx_wb_workfn+0x10/0x10
[  917.807369][ T6384]  ? do_raw_spin_unlock+0xf5/0x210
[  917.807395][ T6384]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  917.807433][ T6384]  ? process_one_work+0x8bb/0x1780
[  917.807460][ T6384]  process_one_work+0x9ab/0x1780
[  917.807509][ T6384]  ? __pfx_process_one_work+0x10/0x10
[  917.807533][ T6384]  ? do_raw_spin_lock+0x12b/0x2f0
[  917.807573][ T6384]  worker_thread+0xba8/0x11e0
[  917.807601][ T6384]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  917.807622][ T6384]  ? __kthread_parkme+0x7a/0x1f0
[  917.807642][ T6384]  ? __kthread_parkme+0x19c/0x1f0
[  917.807668][ T6384]  kthread+0x388/0x470
[  917.807691][ T6384]  ? __pfx_worker_thread+0x10/0x10
[  917.807707][ T6384]  ? __pfx_kthread+0x10/0x10
[  917.807731][ T6384]  ret_from_fork+0x51e/0xb90
[  917.807761][ T6384]  ? __pfx_ret_from_fork+0x10/0x10
[  917.807786][ T6384]  ? __switch_to+0xc7d/0x1450
[  917.807814][ T6384]  ? __pfx_kthread+0x10/0x10
[  917.807838][ T6384]  ret_from_fork_asm+0x1a/0x30
[  917.807873][ T6384]  </TASK>
[  918.445701][ T6384] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  918.452732][ T6384] CPU: 1 UID: 0 PID: 6384 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) 
[  918.452757][ T6384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  918.452769][ T6384] Workqueue: writeback wb_workfn (flush-7:0)
[  918.452798][ T6384] Call Trace:
[  918.452805][ T6384]  <TASK>
[  918.452814][ T6384]  dump_stack_lvl+0xe8/0x150
[  918.452844][ T6384]  f2fs_handle_critical_error+0x37c/0x540
[  918.452876][ T6384]  f2fs_write_end_io+0x1274/0x1740
[  918.452926][ T6384]  __submit_merged_bio+0x256/0x700
[  918.452958][ T6384]  __submit_merged_write_cond+0x3c9/0x4e0
[  918.452992][ T6384]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  918.453048][ T6384]  f2fs_write_data_pages+0x287e/0x34f0
[  918.453114][ T6384]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  918.453138][ T6384]  ? cfg80211_inform_single_bss_data+0x13c6/0x1b70
[  918.453212][ T6384]  ? __lock_acquire+0x6b5/0x2cf0
[  918.453259][ T6384]  ? unwind_next_frame+0xa5/0x23c0
[  918.453303][ T6384]  ? unwind_next_frame+0xa5/0x23c0
[  918.453320][ T6384]  ? unwind_next_frame+0x1aaf/0x23c0
[  918.453340][ T6384]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  918.453368][ T6384]  do_writepages+0x32e/0x550
[  918.453399][ T6384]  ? reacquire_held_locks+0x104/0x190
[  918.453419][ T6384]  ? writeback_sb_inodes+0x477/0x1a20
[  918.453450][ T6384]  __writeback_single_inode+0x133/0x11a0
[  918.453475][ T6384]  ? do_raw_spin_unlock+0xf5/0x210
[  918.453504][ T6384]  writeback_sb_inodes+0x992/0x1a20
[  918.453558][ T6384]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  918.453579][ T6384]  ? do_raw_spin_lock+0x12b/0x2f0
[  918.453646][ T6384]  ? rcu_is_watching+0x15/0xb0
[  918.453676][ T6384]  wb_writeback+0x456/0xb70
[  918.453703][ T6384]  ? queue_io+0x251/0x4a0
[  918.453735][ T6384]  ? __pfx_wb_writeback+0x10/0x10
[  918.453755][ T6384]  ? do_raw_spin_lock+0x12b/0x2f0
[  918.453796][ T6384]  wb_workfn+0x414/0xf50
[  918.453819][ T6384]  ? look_up_lock_class+0x57/0x110
[  918.453856][ T6384]  ? __pfx_wb_workfn+0x10/0x10
[  918.453884][ T6384]  ? do_raw_spin_unlock+0xf5/0x210
[  918.453910][ T6384]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  918.453953][ T6384]  ? process_one_work+0x8bb/0x1780
[  918.453979][ T6384]  process_one_work+0x9ab/0x1780
[  918.454037][ T6384]  ? __pfx_process_one_work+0x10/0x10
[  918.454061][ T6384]  ? do_raw_spin_lock+0x12b/0x2f0
[  918.454107][ T6384]  worker_thread+0xba8/0x11e0
[  918.454136][ T6384]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  918.454157][ T6384]  ? __kthread_parkme+0x7a/0x1f0
[  918.454178][ T6384]  ? __kthread_parkme+0x19c/0x1f0
[  918.454205][ T6384]  kthread+0x388/0x470
[  918.454227][ T6384]  ? __pfx_worker_thread+0x10/0x10
[  918.454243][ T6384]  ? __pfx_kthread+0x10/0x10
[  918.454267][ T6384]  ret_from_fork+0x51e/0xb90
[  918.454297][ T6384]  ? __pfx_ret_from_fork+0x10/0x10
[  918.454320][ T6384]  ? __switch_to+0xc7d/0x1450
[  918.454349][ T6384]  ? __pfx_kthread+0x10/0x10
[  918.454373][ T6384]  ret_from_fork_asm+0x1a/0x30
[  918.454411][ T6384]  </TASK>
[  918.454459][ T6384] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  919.018565][T17944] syzkaller0: entered promiscuous mode
[  919.043062][T17944] syzkaller0: entered allmulticast mode
[  920.709192][T17968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3600'.
[  920.748912][T17968] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3600'.
[  921.616898][T17987] syzkaller0: entered promiscuous mode
[  921.629570][T17987] syzkaller0: entered allmulticast mode
[  921.671361][T17989] loop2: detected capacity change from 0 to 1024
[  921.709648][T17989] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  921.775609][    T9] IPVS: starting estimator thread 0...
[  921.787224][T17989] ==================================================================
[  921.795299][T17989] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x8e9/0x1e20
[  921.803016][T17989] Read of size 18446744073709551588 at addr ffff8880328e1840 by task syz.2.3609/17989
[  921.812541][T17989] 
[  921.814862][T17989] CPU: 1 UID: 0 PID: 17989 Comm: syz.2.3609 Not tainted syzkaller #0 PREEMPT(full) 
[  921.814882][T17989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  921.814892][T17989] Call Trace:
[  921.814899][T17989]  <TASK>
[  921.814906][T17989]  dump_stack_lvl+0xe8/0x150
[  921.814933][T17989]  print_address_description+0x55/0x1e0
[  921.814957][T17989]  ? ext4_xattr_set_entry+0x8e9/0x1e20
[  921.814975][T17989]  print_report+0x58/0x70
[  921.814994][T17989]  kasan_report+0x117/0x150
[  921.815012][T17989]  ? ext4_xattr_set_entry+0x8e9/0x1e20
[  921.815032][T17989]  ? ext4_xattr_set_entry+0x8e9/0x1e20
[  921.815050][T17989]  kasan_check_range+0x264/0x2c0
[  921.815067][T17989]  ? ext4_xattr_set_entry+0x8e9/0x1e20
[  921.815086][T17989]  __asan_memmove+0x29/0x70
[  921.815109][T17989]  ext4_xattr_set_entry+0x8e9/0x1e20
[  921.815134][T17989]  ext4_xattr_block_set+0x878/0x2ad0
[  921.815152][T17989]  ? __pfx_ext4_free_in_core_inode+0x10/0x10
[  921.815186][T17989]  ? __pfx_evict+0x10/0x10
[  921.815201][T17989]  ? do_raw_spin_unlock+0xf5/0x210
[  921.815223][T17989]  ? _raw_spin_unlock+0x28/0x50
[  921.815238][T17989]  ? iput+0xb25/0xe80
[  921.815261][T17989]  ? __pfx_ext4_xattr_block_set+0x10/0x10
[  921.815279][T17989]  ? ext4_xattr_ibody_set+0x510/0x6a0
[  921.815300][T17989]  ext4_xattr_set_handle+0xe34/0x14c0
[  921.815324][T17989]  ? __pfx_ext4_xattr_set_handle+0x10/0x10
[  921.815348][T17989]  ext4_xattr_set+0x255/0x340
[  921.815368][T17989]  ? __pfx_ext4_xattr_set+0x10/0x10
[  921.815387][T17989]  ? __pfx_evm_protect_xattr+0x10/0x10
[  921.815484][T17989]  ? __pfx_ext4_xattr_security_set+0x10/0x10
[  921.815499][T17989]  __vfs_setxattr+0x43c/0x480
[  921.815524][T17989]  __vfs_setxattr_noperm+0x12d/0x660
[  921.815548][T17989]  vfs_setxattr+0x163/0x360
[  921.815571][T17989]  ? __pfx_vfs_setxattr+0x10/0x10
[  921.815594][T17989]  filename_setxattr+0x296/0x630
[  921.815620][T17989]  ? __pfx_filename_setxattr+0x10/0x10
[  921.815642][T17989]  ? do_getname+0x151/0x250
[  921.815663][T17989]  path_setxattrat+0x3eb/0x440
[  921.815682][T17989]  ? __pfx_path_setxattrat+0x10/0x10
[  921.815697][T17989]  ? do_futex+0x395/0x420
[  921.815721][T17989]  ? rcu_is_watching+0x15/0xb0
[  921.815738][T17989]  __x64_sys_setxattr+0xbc/0xe0
[  921.815761][T17989]  do_syscall_64+0x14d/0xf80
[  921.815779][T17989]  ? trace_irq_disable+0x3b/0x150
[  921.815798][T17989]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  921.815814][T17989]  ? clear_bhb_loop+0x40/0x90
[  921.815831][T17989]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  921.815846][T17989] RIP: 0033:0x7fb16b39c799
[  921.815867][T17989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  921.815882][T17989] RSP: 002b:00007fb16c280028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  921.815928][T17989] RAX: ffffffffffffffda RBX: 00007fb16b615fa0 RCX: 00007fb16b39c799
[  921.815941][T17989] RDX: 00002000000013c0 RSI: 0000200000000140 RDI: 0000200000000100
[  921.815952][T17989] RBP: 00007fb16b432c99 R08: 0000000000000000 R09: 0000000000000000
[  921.815963][T17989] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000000
[  921.815973][T17989] R13: 00007fb16b616038 R14: 00007fb16b615fa0 R15: 00007fff56552be8
[  921.815992][T17989]  </TASK>
[  921.815998][T17989] 
[  922.130865][T17989] Allocated by task 17989:
[  922.135329][T17989]  kasan_save_track+0x3e/0x80
[  922.140002][T17989]  __kasan_kmalloc+0x93/0xb0
[  922.144576][T17989]  __kmalloc_node_track_caller_noprof+0x4db/0x7b0
[  922.150978][T17989]  kmemdup_noprof+0x2b/0x70
[  922.155468][T17989]  ext4_xattr_block_set+0x787/0x2ad0
[  922.160740][T17989]  ext4_xattr_set_handle+0xe34/0x14c0
[  922.166099][T17989]  ext4_xattr_set+0x255/0x340
[  922.170772][T17989]  __vfs_setxattr+0x43c/0x480
[  922.175442][T17989]  __vfs_setxattr_noperm+0x12d/0x660
[  922.180713][T17989]  vfs_setxattr+0x163/0x360
[  922.185211][T17989]  filename_setxattr+0x296/0x630
[  922.190136][T17989]  path_setxattrat+0x3eb/0x440
[  922.194884][T17989]  __x64_sys_setxattr+0xbc/0xe0
[  922.199722][T17989]  do_syscall_64+0x14d/0xf80
[  922.204298][T17989]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  922.210175][T17989] 
[  922.212482][T17989] The buggy address belongs to the object at ffff8880328e1800
[  922.212482][T17989]  which belongs to the cache kmalloc-1k of size 1024
[  922.226576][T17989] The buggy address is located 64 bytes inside of
[  922.226576][T17989]  1024-byte region [ffff8880328e1800, ffff8880328e1c00)
[  922.239837][T17989] 
[  922.242146][T17989] The buggy address belongs to the physical page:
[  922.248548][T17989] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x328e0
[  922.257291][T17989] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  922.265777][T17989] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  922.273322][T17989] page_type: f5(slab)
[  922.277291][T17989] raw: 00fff00000000040 ffff88801b041dc0 dead000000000100 dead000000000122
[  922.285855][T17989] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  922.294420][T17989] head: 00fff00000000040 ffff88801b041dc0 dead000000000100 dead000000000122
[  922.303073][T17989] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  922.311732][T17989] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[  922.320383][T17989] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  922.329032][T17989] page dumped because: kasan: bad access detected
[  922.335430][T17989] page_owner tracks the page as allocated
[  922.341134][T17989] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 14284, tgid 14284 (kworker/u8:17), ts 753660430278, free_ts 753645963699
[  922.362319][T17989]  post_alloc_hook+0x231/0x280
[  922.367090][T17989]  get_page_from_freelist+0x2418/0x24b0
[  922.372629][T17989]  __alloc_frozen_pages_noprof+0x233/0x3d0
[  922.378428][T17989]  allocate_slab+0x77/0x660
[  922.382927][T17989]  refill_objects+0x339/0x3d0
[  922.387593][T17989]  __pcs_replace_empty_main+0x321/0x720
[  922.393127][T17989]  __kmalloc_node_track_caller_noprof+0x572/0x7b0
[  922.399526][T17989]  pskb_expand_head+0x21e/0x1480
[  922.404463][T17989]  batadv_skb_head_push+0x169/0x200
[  922.409651][T17989]  batadv_send_skb_packet+0xc8/0x690
[  922.414924][T17989]  batadv_iv_send_outstanding_bat_ogm_packet+0x631/0x7e0
[  922.421993][T17989]  process_one_work+0x9ab/0x1780
[  922.426926][T17989]  worker_thread+0xba8/0x11e0
[  922.431591][T17989]  kthread+0x388/0x470
[  922.435646][T17989]  ret_from_fork+0x51e/0xb90
[  922.440231][T17989]  ret_from_fork_asm+0x1a/0x30
[  922.444980][T17989] page last free pid 12 tgid 12 stack trace:
[  922.450939][T17989]  __free_frozen_pages+0xbf0/0xd00
[  922.456036][T17989]  rhashtable_free_and_destroy+0x7e8/0x940
[  922.461869][T17989]  ila_xlat_exit_net+0x4f/0xa0
[  922.466624][T17989]  ops_undo_list+0x49f/0x940
[  922.471204][T17989]  cleanup_net+0x56b/0x800
[  922.475612][T17989]  process_one_work+0x9ab/0x1780
[  922.480544][T17989]  worker_thread+0xba8/0x11e0
[  922.485216][T17989]  kthread+0x388/0x470
[  922.489273][T17989]  ret_from_fork+0x51e/0xb90
[  922.493855][T17989]  ret_from_fork_asm+0x1a/0x30
[  922.498606][T17989] 
[  922.500916][T17989] Memory state around the buggy address:
[  922.506527][T17989]  ffff8880328e1700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  922.514582][T17989]  ffff8880328e1780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  922.522626][T17989] >ffff8880328e1800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  922.530670][T17989]                                            ^
[  922.536801][T17989]  ffff8880328e1880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  922.544847][T17989]  ffff8880328e1900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  922.552892][T17989] ==================================================================
[  922.593574][T17997] 9pnet_virtio: no channels available for device syz
[  922.609773][T17989] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  922.616989][T17989] CPU: 1 UID: 0 PID: 17989 Comm: syz.2.3609 Not tainted syzkaller #0 PREEMPT(full) 
[  922.626363][T17989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  922.636420][T17989] Call Trace:
[  922.639704][T17989]  <TASK>
[  922.642637][T17989]  vpanic+0x56c/0xa60
[  922.646642][T17989]  ? __pfx_vpanic+0x10/0x10
[  922.651163][T17989]  panic+0xc5/0xd0
[  922.654904][T17989]  ? __pfx_panic+0x10/0x10
[  922.659343][T17989]  ? preempt_schedule_thunk+0x16/0x30
[  922.665080][T17989]  ? ext4_xattr_set_entry+0x8e9/0x1e20
[  922.670558][T17989]  ? preempt_schedule_thunk+0x16/0x30
[  922.675954][T17989]  ? ext4_xattr_set_entry+0x8e9/0x1e20
[  922.681430][T17989]  check_panic_on_warn+0x89/0xb0
[  922.686379][T17989]  ? ext4_xattr_set_entry+0x8e9/0x1e20
[  922.691839][T17989]  end_report+0x73/0x180
[  922.696083][T17989]  ? ext4_xattr_set_entry+0x8e9/0x1e20
[  922.701544][T17989]  kasan_report+0x128/0x150
[  922.706057][T17989]  ? ext4_xattr_set_entry+0x8e9/0x1e20
[  922.711524][T17989]  ? ext4_xattr_set_entry+0x8e9/0x1e20
[  922.716993][T17989]  kasan_check_range+0x264/0x2c0
[  922.721935][T17989]  ? ext4_xattr_set_entry+0x8e9/0x1e20
[  922.727410][T17989]  __asan_memmove+0x29/0x70
[  922.731933][T17989]  ext4_xattr_set_entry+0x8e9/0x1e20
[  922.737245][T17989]  ext4_xattr_block_set+0x878/0x2ad0
[  922.742537][T17989]  ? __pfx_ext4_free_in_core_inode+0x10/0x10
[  922.748542][T17989]  ? __pfx_evict+0x10/0x10
[  922.752966][T17989]  ? do_raw_spin_unlock+0xf5/0x210
[  922.758088][T17989]  ? _raw_spin_unlock+0x28/0x50
[  922.762937][T17989]  ? iput+0xb25/0xe80
[  922.766927][T17989]  ? __pfx_ext4_xattr_block_set+0x10/0x10
[  922.772651][T17989]  ? ext4_xattr_ibody_set+0x510/0x6a0
[  922.778035][T17989]  ext4_xattr_set_handle+0xe34/0x14c0
[  922.783426][T17989]  ? __pfx_ext4_xattr_set_handle+0x10/0x10
[  922.789246][T17989]  ext4_xattr_set+0x255/0x340
[  922.793931][T17989]  ? __pfx_ext4_xattr_set+0x10/0x10
[  922.799134][T17989]  ? __pfx_evm_protect_xattr+0x10/0x10
[  922.804598][T17989]  ? __pfx_ext4_xattr_security_set+0x10/0x10
[  922.810577][T17989]  __vfs_setxattr+0x43c/0x480
[  922.815268][T17989]  __vfs_setxattr_noperm+0x12d/0x660
[  922.820569][T17989]  vfs_setxattr+0x163/0x360
[  922.825092][T17989]  ? __pfx_vfs_setxattr+0x10/0x10
[  922.830134][T17989]  filename_setxattr+0x296/0x630
[  922.835094][T17989]  ? __pfx_filename_setxattr+0x10/0x10
[  922.840569][T17989]  ? do_getname+0x151/0x250
[  922.845082][T17989]  path_setxattrat+0x3eb/0x440
[  922.849857][T17989]  ? __pfx_path_setxattrat+0x10/0x10
[  922.855144][T17989]  ? do_futex+0x395/0x420
[  922.859489][T17989]  ? rcu_is_watching+0x15/0xb0
[  922.864262][T17989]  __x64_sys_setxattr+0xbc/0xe0
[  922.869131][T17989]  do_syscall_64+0x14d/0xf80
[  922.873740][T17989]  ? trace_irq_disable+0x3b/0x150
[  922.878778][T17989]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  922.884855][T17989]  ? clear_bhb_loop+0x40/0x90
[  922.889548][T17989]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  922.895455][T17989] RIP: 0033:0x7fb16b39c799
[  922.899877][T17989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  922.919487][T17989] RSP: 002b:00007fb16c280028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  922.927917][T17989] RAX: ffffffffffffffda RBX: 00007fb16b615fa0 RCX: 00007fb16b39c799
[  922.935899][T17989] RDX: 00002000000013c0 RSI: 0000200000000140 RDI: 0000200000000100
[  922.943875][T17989] RBP: 00007fb16b432c99 R08: 0000000000000000 R09: 0000000000000000
[  922.951847][T17989] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000000
[  922.959820][T17989] R13: 00007fb16b616038 R14: 00007fb16b615fa0 R15: 00007fff56552be8
[  922.967801][T17989]  </TASK>
[  922.971097][T17989] Kernel Offset: disabled
[  922.975418][T17989] Rebooting in 86400 seconds..