last executing test programs: 39.377770873s ago: executing program 5 (id=178): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="b000000016007f029e78f6030f7a0a762353bfb89fd8c902317bab30f89f080aaaaeb9d8091c815dcf03e14e877733fff4fe20a5be870f576b162e7de2d02673e789a4950c9cdc206e086fd0dc8ca9afcd9d522ac78876a4595146add31b35355848794ca3f8b38aef1e114ab9fb0200000000000000a3b0c81c6f8144e74fe13b80ca46c1a6c04ad73c9d44b605f900"/158, 0x9e}], 0x1}, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000280)=[{0x30, 0x9, 0xfd, 0x5ae9}, {0x6, 0x40, 0x82, 0x1ffe}, {0x400, 0x7, 0x7, 0x7}]}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @rand_addr=0x64010100}, 0x10, 0x0}, 0x140060c1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20099ec}, 0x94) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000003340)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x7fff, @loopback, 0x9}, 0x1c, &(0x7f0000001b00)=[{&(0x7f0000001a80)='g', 0x1}], 0x1}}, {{&(0x7f0000001bc0)={0xa, 0x4e20, 0x8, @empty, 0x3}, 0x1c, &(0x7f00000021c0)=[{&(0x7f0000001c00)="1b", 0x1}], 0x1}}], 0x2, 0x40) sendto$inet6(r7, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r7, 0x1) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000040)=' ', 0x1}], 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) 30.453871685s ago: executing program 5 (id=194): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0x601, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) 22.304904162s ago: executing program 5 (id=209): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mydev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./mydev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mydev/ttyS0\x00', 0x2, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) 20.983920415s ago: executing program 2 (id=211): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') acct(0x0) socket(0x15, 0x80005, 0x0) pipe2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400), 0x0, r3) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="656e633d6f6165702068d709345265686162682d636c6d81683f6f45d3398d00"/78], 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f0000000100)=0x3) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) socket$packet(0x11, 0x3, 0x300) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x38}, 0x1, 0x300}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x3) lseek(r0, 0x9, 0x0) 19.561885667s ago: executing program 3 (id=213): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0x7ff, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)={0x1, r1}) close_range(r0, r0, 0x0) 19.460284831s ago: executing program 5 (id=214): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") ioctl(r0, 0xc138fd09, &(0x7f0000000000)) 17.523769364s ago: executing program 2 (id=215): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x80f811, 0x0, 0x0, 0x0, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='A\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000440)='A/B\x00', 0x42, 0x1b6) unlinkat(0xffffffffffffff9c, &(0x7f0000000400)='A\x00', 0x200) 17.519377898s ago: executing program 4 (id=216): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000106d043ac500000000000109022d0001000070060904000504030002000921fcff400122180009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f0000000240)={0x4, 0x3, 0xffffff07}) 17.103208303s ago: executing program 5 (id=218): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000200)={[{@creator={'creator', 0x3d, "91b212f7"}}, {@nls={'nls', 0x3d, 'iso8859-15'}}, {@gid}, {@type={'type', 0x3d, "abe89a7a"}}, {@nobarrier}]}, 0x1, 0x5d9, &(0x7f0000000cc0)="$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") r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) fspick(0xffffffffffffff9c, 0x0, 0x0) fchmodat(r0, &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffff71) link(&(0x7f0000001240)='./file3\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 17.016679951s ago: executing program 3 (id=220): ppoll(&(0x7f0000000480)=[{0xffffffffffffffff, 0x4010}], 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) 15.720785348s ago: executing program 1 (id=223): syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0) close(0x3) 15.639396431s ago: executing program 3 (id=224): creat(&(0x7f0000000380)='./file0\x00', 0x206) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004100)="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", 0x2000, &(0x7f0000006d80)={&(0x7f0000006100)={0x50, 0x0, 0x4, {0x7, 0x2d, 0xa75, 0x5d010640, 0xe0b, 0x7ff, 0x4, 0x7, 0x0, 0x0, 0x741d859d8bbba6ec, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 15.63869855s ago: executing program 5 (id=225): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) write$cgroup_pid(r0, &(0x7f0000000180)=0xffffffffffffffff, 0x12) 14.516849855s ago: executing program 0 (id=226): r0 = open(&(0x7f0000000000)='./bus\x00', 0x14507e, 0x140) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xfffff000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) readahead(r0, 0x2, 0x6) 14.445896249s ago: executing program 1 (id=227): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x1, 0x4428, &(0x7f0000008940)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000880)=ANY=[], 0x32600) 14.241705376s ago: executing program 3 (id=228): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') acct(0x0) socket(0x15, 0x80005, 0x0) pipe2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400), 0x0, r3) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="656e633d6f6165702068d709345265686162682d636c6d81683f6f45d3398d00"/78], 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f0000000100)=0x3) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) socket$packet(0x11, 0x3, 0x300) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x38}, 0x1, 0x300}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x3) lseek(r0, 0x9, 0x0) 12.090067075s ago: executing program 3 (id=229): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\x00\x00!\x00'}, @local=@item_4={0x3, 0x2, 0x0, "034d2500"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) 12.089822184s ago: executing program 4 (id=230): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000140)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085000000854eb1"], 0x0, 0x0, 0x0, 0x0}, 0x0) 11.356265827s ago: executing program 1 (id=231): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="0a000300010000", 0x7) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x6110, 0x4) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10040, 0x0) 10.799881832s ago: executing program 0 (id=232): timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_gettime(r0, &(0x7f0000000000)) 10.742803506s ago: executing program 1 (id=233): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="b000000016007f029e78f6030f7a0a762353bfb89fd8c902317bab30f89f080aaaaeb9d8091c815dcf03e14e877733fff4fe20a5be870f576b162e7de2d02673e789a4950c9cdc206e086fd0dc8ca9afcd9d522ac78876a4595146add31b35355848794ca3f8b38aef1e114ab9fb0200000000000000a3b0c81c6f8144e74fe13b80ca46c1a6c04ad73c9d44b605f900"/158, 0x9e}], 0x1}, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000280)=[{0x30, 0x9, 0xfd, 0x5ae9}, {0x6, 0x40, 0x82, 0x1ffe}, {0x400, 0x7, 0x7, 0x7}]}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @rand_addr=0x64010100}, 0x10, 0x0}, 0x140060c1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20099ec}, 0x94) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r8, &(0x7f0000003340)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x7fff, @loopback, 0x9}, 0x1c, &(0x7f0000001b00)=[{&(0x7f0000001a80)='g', 0x1}], 0x1}}, {{&(0x7f0000001bc0)={0xa, 0x4e20, 0x8, @empty, 0x3}, 0x1c, &(0x7f00000021c0)=[{&(0x7f0000001c00)="1b", 0x1}], 0x1}}], 0x2, 0x40) sendto$inet6(r8, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r8, 0x1) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000040)=' ', 0x1}], 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r7, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) 9.265720945s ago: executing program 1 (id=234): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="b000000016007f029e78f6030f7a0a762353bfb89fd8c902317bab30f89f080aaaaeb9d8091c815dcf03e14e877733fff4fe20a5be870f576b162e7de2d02673e789a4950c9cdc206e086fd0dc8ca9afcd9d522ac78876a4595146add31b35355848794ca3f8b38aef1e114ab9fb0200000000000000a3b0c81c6f8144e74fe13b80ca46c1a6c04ad73c9d44b605f900"/158, 0x9e}], 0x1}, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000280)=[{0x30, 0x9, 0xfd, 0x5ae9}, {0x6, 0x40, 0x82, 0x1ffe}, {0x400, 0x7, 0x7, 0x7}]}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @rand_addr=0x64010100}, 0x10, 0x0}, 0x140060c1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20099ec}, 0x94) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r8, &(0x7f0000003340)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x7fff, @loopback, 0x9}, 0x1c, &(0x7f0000001b00)=[{&(0x7f0000001a80)='g', 0x1}], 0x1}}, {{&(0x7f0000001bc0)={0xa, 0x4e20, 0x8, @empty, 0x3}, 0x1c, &(0x7f00000021c0)=[{&(0x7f0000001c00)="1b", 0x1}], 0x1}}], 0x2, 0x40) sendto$inet6(r8, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r8, 0x1) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000040)=' ', 0x1}], 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r7, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) 8.29437456s ago: executing program 4 (id=235): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="b000000016007f029e78f6030f7a0a762353bfb89fd8c902317bab30f89f080aaaaeb9d8091c815dcf03e14e877733fff4fe20a5be870f576b162e7de2d02673e789a4950c9cdc206e086fd0dc8ca9afcd9d522ac78876a4595146add31b35355848794ca3f8b38aef1e114ab9fb0200000000000000a3b0c81c6f8144e74fe13b80ca46c1a6c04ad73c9d44b605f900"/158, 0x9e}], 0x1}, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000280)=[{0x30, 0x9, 0xfd, 0x5ae9}, {0x6, 0x40, 0x82, 0x1ffe}, {0x400, 0x7, 0x7, 0x7}]}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @rand_addr=0x64010100}, 0x10, 0x0}, 0x140060c1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20099ec}, 0x94) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r8, &(0x7f0000003340)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x7fff, @loopback, 0x9}, 0x1c, &(0x7f0000001b00)=[{&(0x7f0000001a80)='g', 0x1}], 0x1}}, {{&(0x7f0000001bc0)={0xa, 0x4e20, 0x8, @empty, 0x3}, 0x1c, &(0x7f00000021c0)=[{&(0x7f0000001c00)="1b", 0x1}], 0x1}}], 0x2, 0x40) sendto$inet6(r8, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r8, 0x1) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000040)=' ', 0x1}], 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r7, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) 6.488881428s ago: executing program 4 (id=236): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x58, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0x2, 0x0, 0x0, 0x400, {[@sack={0x5, 0x2}, @generic={0xfe, 0x2}, @window={0x3, 0x3, 0xd7}, @fastopen={0x22, 0x2}, @timestamp={0x8, 0xa, 0x2, 0xad}, @md5sig={0x13, 0x12, "8098cf093cc9cd7b8ec814f9bcfdfea9"}, @sack={0x5, 0x16, [0x1, 0xfffffffe, 0x3, 0x6, 0x1]}, @sack={0x5, 0x6, [0x6]}]}}}}}}}}, 0x0) 6.286848908s ago: executing program 2 (id=237): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000300), &(0x7f0000000400)=0x8) 6.100672818s ago: executing program 0 (id=238): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x20000001, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x9, @empty}, 0x1c) 6.013282421s ago: executing program 2 (id=239): r0 = syz_usb_connect(0x3, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd0c36000001010203010902190001010080fa0904000001ffffff0007058202000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000700)={0x0, 0x0, 0x40, '\x00'/64}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x82, 0x4, &(0x7f0000000500)="33950000") r1 = syz_open_dev$video(&(0x7f0000000200), 0x0, 0x2) read(r1, &(0x7f0000000400)=""/4096, 0x1000) 5.875015528s ago: executing program 0 (id=240): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/nf_conntrack/parameters/hashsize\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='2147483648\x00', 0xb) 5.552820091s ago: executing program 0 (id=241): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') acct(0x0) socket(0x15, 0x80005, 0x0) pipe2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400), 0x0, r3) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="656e633d6f6165702068d709345265686162682d636c6d81683f6f45d3398d00"/78], 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f0000000100)=0x3) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) socket$packet(0x11, 0x3, 0x300) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x38}, 0x1, 0x300}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x3) lseek(r0, 0x9, 0x0) 1.807441533s ago: executing program 1 (id=242): syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x0) acct(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) acct(&(0x7f0000000180)='./bus\x00') 1.580581552s ago: executing program 0 (id=243): add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd05, &(0x7f0000000000)="0400000002000000000000007e0100003801") 1.379240244s ago: executing program 2 (id=244): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) fcntl$setlease(r0, 0x400, 0x0) 1.347858382s ago: executing program 3 (id=245): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000380)=ANY=[]) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 584.520161ms ago: executing program 2 (id=246): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x183, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) lseek(r0, 0x2, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getdents64(r0, 0x0, 0x22) 557.376115ms ago: executing program 32 (id=225): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) write$cgroup_pid(r0, &(0x7f0000000180)=0xffffffffffffffff, 0x12) 279.535832ms ago: executing program 4 (id=248): mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)='oom_score_adj & 1', 0x11) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0x7, 0x7}}, 0x30) 0s ago: executing program 4 (id=249): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="b000000016007f029e78f6030f7a0a762353bfb89fd8c902317bab30f89f080aaaaeb9d8091c815dcf03e14e877733fff4fe20a5be870f576b162e7de2d02673e789a4950c9cdc206e086fd0dc8ca9afcd9d522ac78876a4595146add31b35355848794ca3f8b38aef1e114ab9fb0200000000000000a3b0c81c6f8144e74fe13b80ca46c1a6c04ad73c9d44b605f900"/158, 0x9e}], 0x1}, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000280)=[{0x30, 0x9, 0xfd, 0x5ae9}, {0x6, 0x40, 0x82, 0x1ffe}, {0x400, 0x7, 0x7, 0x7}]}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @rand_addr=0x64010100}, 0x10, 0x0}, 0x140060c1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20099ec}, 0x94) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r8, &(0x7f0000003340)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x7fff, @loopback, 0x9}, 0x1c, &(0x7f0000001b00)=[{&(0x7f0000001a80)='g', 0x1}], 0x1}}, {{&(0x7f0000001bc0)={0xa, 0x4e20, 0x8, @empty, 0x3}, 0x1c, &(0x7f00000021c0)=[{&(0x7f0000001c00)="1b", 0x1}], 0x1}}], 0x2, 0x40) sendto$inet6(r8, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r8, 0x1) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000040)=' ', 0x1}], 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r7, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.155' (ED25519) to the list of known hosts. [ 82.489167][ T5598] cgroup: Unknown subsys name 'net' [ 82.627434][ T5598] cgroup: Unknown subsys name 'cpuset' [ 82.631608][ T5598] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.292719][ T5598] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.075254][ T187] cfg80211: failed to load regulatory.db [ 88.638951][ T5616] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.652536][ T5617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.654142][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.657801][ T5617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.658305][ T5620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.659698][ T5624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.660965][ T5624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.661730][ T5624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.669678][ T5620] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.677404][ T5620] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.680581][ T5616] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.681213][ T5616] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.682428][ T5616] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.683777][ T5616] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.703230][ T5616] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.783898][ T5616] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.786162][ T5616] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.786695][ T5616] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.787872][ T5616] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.789133][ T5616] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.831389][ T4927] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.835890][ T4927] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.837941][ T4927] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.843862][ T4927] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.845264][ T4927] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 88.847492][ T4927] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.860808][ T4927] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 88.862872][ T4927] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 88.864341][ T4927] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 88.868079][ T4927] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 90.713444][ T4927] Bluetooth: hci2: command tx timeout [ 90.713836][ T52] Bluetooth: hci1: command tx timeout [ 90.792736][ T52] Bluetooth: hci0: command tx timeout [ 90.873502][ T4927] Bluetooth: hci4: command tx timeout [ 90.873735][ T52] Bluetooth: hci3: command tx timeout [ 90.952818][ T52] Bluetooth: hci5: command tx timeout [ 91.238099][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.241549][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.241714][ T5621] bridge_slave_0: entered allmulticast mode [ 91.267061][ T5621] bridge_slave_0: entered promiscuous mode [ 91.325922][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.326107][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.326262][ T5621] bridge_slave_1: entered allmulticast mode [ 91.328391][ T5621] bridge_slave_1: entered promiscuous mode [ 91.476815][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.535564][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.680792][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.680957][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.681088][ T5613] bridge_slave_0: entered allmulticast mode [ 91.682815][ T5613] bridge_slave_0: entered promiscuous mode [ 91.686118][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.686232][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.686707][ T5613] bridge_slave_1: entered allmulticast mode [ 91.688742][ T5613] bridge_slave_1: entered promiscuous mode [ 91.735499][ T5621] team0: Port device team_slave_0 added [ 91.793960][ T5621] team0: Port device team_slave_1 added [ 91.810004][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.810153][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.810272][ T5614] bridge_slave_0: entered allmulticast mode [ 91.811889][ T5614] bridge_slave_0: entered promiscuous mode [ 91.819586][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.823707][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.870320][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.870409][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.870528][ T5619] bridge_slave_0: entered allmulticast mode [ 91.872385][ T5619] bridge_slave_0: entered promiscuous mode [ 91.901797][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.901906][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.902049][ T5614] bridge_slave_1: entered allmulticast mode [ 91.904406][ T5614] bridge_slave_1: entered promiscuous mode [ 91.948922][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.949051][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.949205][ T5619] bridge_slave_1: entered allmulticast mode [ 91.951085][ T5619] bridge_slave_1: entered promiscuous mode [ 92.004023][ T5613] team0: Port device team_slave_0 added [ 92.004240][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.004358][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.004512][ T5612] bridge_slave_0: entered allmulticast mode [ 92.006549][ T5612] bridge_slave_0: entered promiscuous mode [ 92.026893][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.026916][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.026959][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.050593][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.054630][ T5613] team0: Port device team_slave_1 added [ 92.102909][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.103025][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.103452][ T5612] bridge_slave_1: entered allmulticast mode [ 92.105217][ T5612] bridge_slave_1: entered promiscuous mode [ 92.124625][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.124646][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.124690][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.130238][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.130440][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.130555][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.131164][ T5625] bridge_slave_0: entered allmulticast mode [ 92.134582][ T5625] bridge_slave_0: entered promiscuous mode [ 92.138344][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.138524][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.138952][ T5625] bridge_slave_1: entered allmulticast mode [ 92.141098][ T5625] bridge_slave_1: entered promiscuous mode [ 92.146496][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.147618][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.147638][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.147682][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.185804][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.270758][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.270783][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.270827][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.332272][ T5614] team0: Port device team_slave_0 added [ 92.354313][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.356989][ T5619] team0: Port device team_slave_0 added [ 92.361017][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.365041][ T5614] team0: Port device team_slave_1 added [ 92.401598][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.418804][ T5619] team0: Port device team_slave_1 added [ 92.421307][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.501505][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.501532][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.501576][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.548806][ T5621] hsr_slave_0: entered promiscuous mode [ 92.549808][ T5621] hsr_slave_1: entered promiscuous mode [ 92.554499][ T5612] team0: Port device team_slave_0 added [ 92.578515][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.578539][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.578583][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.581488][ T5625] team0: Port device team_slave_0 added [ 92.590687][ T5613] hsr_slave_0: entered promiscuous mode [ 92.591946][ T5613] hsr_slave_1: entered promiscuous mode [ 92.595647][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 92.595724][ T5613] Cannot create hsr debugfs directory [ 92.602229][ T5612] team0: Port device team_slave_1 added [ 92.619317][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.619339][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.619383][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.652409][ T5625] team0: Port device team_slave_1 added [ 92.690896][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.690920][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.690964][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.718652][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.718674][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.718718][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.792753][ T4927] Bluetooth: hci2: command tx timeout [ 92.792853][ T52] Bluetooth: hci1: command tx timeout [ 92.808282][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.808299][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.808349][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.874964][ T52] Bluetooth: hci0: command tx timeout [ 92.915005][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.915031][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.915075][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.922417][ T5614] hsr_slave_0: entered promiscuous mode [ 92.924527][ T5614] hsr_slave_1: entered promiscuous mode [ 92.925379][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 92.925407][ T5614] Cannot create hsr debugfs directory [ 92.953680][ T4927] Bluetooth: hci4: command tx timeout [ 92.953778][ T52] Bluetooth: hci3: command tx timeout [ 93.032823][ T52] Bluetooth: hci5: command tx timeout [ 93.037524][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.037553][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.037599][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.046553][ T5612] hsr_slave_0: entered promiscuous mode [ 93.047754][ T5612] hsr_slave_1: entered promiscuous mode [ 93.048604][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 93.048631][ T5612] Cannot create hsr debugfs directory [ 93.060159][ T5619] hsr_slave_0: entered promiscuous mode [ 93.061333][ T5619] hsr_slave_1: entered promiscuous mode [ 93.062195][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 93.062221][ T5619] Cannot create hsr debugfs directory [ 93.381640][ T5625] hsr_slave_0: entered promiscuous mode [ 93.382552][ T5625] hsr_slave_1: entered promiscuous mode [ 93.383981][ T5625] debugfs: 'hsr0' already exists in 'hsr' [ 93.384009][ T5625] Cannot create hsr debugfs directory [ 93.774447][ T5621] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.780759][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.830688][ T5621] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.839340][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.840552][ T5621] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.850776][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.853765][ T5621] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.865909][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.964121][ T5613] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.968483][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.969953][ T5613] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.980372][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.999175][ T5613] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.007622][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.034808][ T5613] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.039130][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.096934][ T5612] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.111199][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.125994][ T5612] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.130763][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.150609][ T5612] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.161519][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.185956][ T5612] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.190412][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.214958][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.286255][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.319915][ T5614] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 94.328368][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.329387][ T5614] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 94.342334][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.352340][ T1001] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.352497][ T1001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.375752][ T5614] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 94.379716][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.401311][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.401432][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.406369][ T5614] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 94.416118][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.528997][ T5619] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.537262][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.563080][ T5619] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.566863][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.567736][ T5619] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.593669][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.618523][ T5619] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.621513][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.670924][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.820292][ T5625] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.832494][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.839105][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.859626][ T5625] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.872335][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.873581][ T4927] Bluetooth: hci2: command tx timeout [ 94.873676][ T52] Bluetooth: hci1: command tx timeout [ 94.893794][ T5625] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.899667][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.902128][ T803] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.902250][ T803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.925280][ T803] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.925407][ T803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.955749][ T52] Bluetooth: hci0: command tx timeout [ 94.976519][ T5625] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.982404][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.010264][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.032742][ T4927] Bluetooth: hci4: command tx timeout [ 95.032922][ T52] Bluetooth: hci3: command tx timeout [ 95.113144][ T52] Bluetooth: hci5: command tx timeout [ 95.120983][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.168397][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.168569][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.220989][ T1001] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.221121][ T1001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.270069][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.347316][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.431472][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.478178][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.492147][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.492272][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.569221][ T803] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.569346][ T803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.581499][ T803] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.581619][ T803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.619447][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.619571][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.713631][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.751072][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.857298][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.906887][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.907013][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.947247][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.947370][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.250302][ T5621] veth0_vlan: entered promiscuous mode [ 96.309591][ T5621] veth1_vlan: entered promiscuous mode [ 96.570458][ T5621] veth0_macvtap: entered promiscuous mode [ 96.601921][ T5621] veth1_macvtap: entered promiscuous mode [ 96.692524][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.742117][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.834419][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.834581][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.834644][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.834704][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.948958][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.955022][ T52] Bluetooth: hci1: command tx timeout [ 96.955653][ T52] Bluetooth: hci2: command tx timeout [ 96.956283][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.036317][ T4927] Bluetooth: hci0: command tx timeout [ 97.114311][ T4927] Bluetooth: hci3: command tx timeout [ 97.114356][ T4927] Bluetooth: hci4: command tx timeout [ 97.194555][ T52] Bluetooth: hci5: command tx timeout [ 97.329376][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.329409][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.441159][ T5612] veth0_vlan: entered promiscuous mode [ 97.479149][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.479946][ T1001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.479973][ T1001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.490813][ T5613] veth0_vlan: entered promiscuous mode [ 97.516443][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.525364][ T5612] veth1_vlan: entered promiscuous mode [ 97.599645][ T5613] veth1_vlan: entered promiscuous mode [ 97.676828][ T5621] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.825968][ T5612] veth0_macvtap: entered promiscuous mode [ 97.873636][ T5612] veth1_macvtap: entered promiscuous mode [ 97.934975][ T5613] veth0_macvtap: entered promiscuous mode [ 97.948136][ T5619] veth0_vlan: entered promiscuous mode [ 97.982472][ T5613] veth1_macvtap: entered promiscuous mode [ 98.042909][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.097361][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.097889][ T5619] veth1_vlan: entered promiscuous mode [ 98.180462][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.238597][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.274165][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.274240][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.274303][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.274366][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.359248][ T1001] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.359315][ T1001] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.359372][ T1001] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.434145][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.438874][ T5619] veth0_macvtap: entered promiscuous mode [ 98.475911][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.531070][ T5844] vlan2: entered allmulticast mode [ 98.561202][ T5619] veth1_macvtap: entered promiscuous mode [ 98.649598][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.649631][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.828804][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.898401][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.910120][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.910148][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.002067][ T5614] veth0_vlan: entered promiscuous mode [ 99.020591][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.020621][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.074852][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.075917][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.075981][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.076043][ T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.110683][ T5614] veth1_vlan: entered promiscuous mode [ 99.206699][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.206731][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.448344][ T2253] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 99.478995][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.479024][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.483655][ T5614] veth0_macvtap: entered promiscuous mode [ 99.570900][ T5614] veth1_macvtap: entered promiscuous mode [ 99.612756][ T2253] usb 4-1: Using ep0 maxpacket: 8 [ 99.616390][ T2253] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 99.622043][ T2253] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 99.622083][ T2253] usb 4-1: config 0 has no interface number 0 [ 99.656355][ T2253] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.656397][ T2253] usb 4-1: Product: syz [ 99.656425][ T2253] usb 4-1: Manufacturer: syz [ 99.656452][ T2253] usb 4-1: SerialNumber: syz [ 99.689910][ T2253] usb 4-1: config 0 descriptor?? [ 99.693526][ T5625] veth0_vlan: entered promiscuous mode [ 99.725189][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.725220][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.789016][ T5625] veth1_vlan: entered promiscuous mode [ 99.821786][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.878479][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.939916][ T2253] uvcvideo 4-1:0.31: probe with driver uvcvideo failed with error -22 [ 99.959502][ T2253] usb 4-1: USB disconnect, device number 2 [ 100.120811][ T5625] veth0_macvtap: entered promiscuous mode [ 100.199002][ T5625] veth1_macvtap: entered promiscuous mode [ 100.214487][ T59] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.384202][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.429321][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.437573][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.437602][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.554776][ T5865] loop0: detected capacity change from 0 to 40427 [ 100.570153][ T5865] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 100.570190][ T5865] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 100.597743][ T5865] F2FS-fs (loop0): invalid crc value [ 100.686102][ T136] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.734091][ T1169] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.734166][ T1169] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.734228][ T1169] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.734289][ T1169] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.734351][ T1169] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.734412][ T1169] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.767311][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.767342][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.175697][ T2253] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 101.201075][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.201105][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.291651][ T5865] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 101.293607][ T5734] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 101.330703][ T5865] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 101.331220][ T5865] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 101.349064][ T2253] usb 2-1: Using ep0 maxpacket: 16 [ 101.349798][ T2253] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 7.00 [ 101.378181][ T2253] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.378224][ T2253] usb 2-1: Product: syz [ 101.378259][ T2253] usb 2-1: Manufacturer: syz [ 101.378287][ T2253] usb 2-1: SerialNumber: syz [ 101.411347][ T2253] usb 2-1: config 0 descriptor?? [ 101.420330][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.420356][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.422873][ T2253] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 101.459370][ T2253] usb 2-1: Detected FT2232H [ 101.486186][ T5734] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 101.496810][ T5734] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 101.496878][ T5734] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 101.515199][ T5734] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.515238][ T5734] usb 4-1: Product: syz [ 101.515264][ T5734] usb 4-1: Manufacturer: syz [ 101.515291][ T5734] usb 4-1: SerialNumber: syz [ 101.665764][ T5876] loop2: detected capacity change from 0 to 40427 [ 101.690782][ T5876] F2FS-fs (loop2): Corrupted extension count (327717 + 1 > 64) [ 101.690821][ T5876] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 101.690857][ T5876] F2FS-fs (loop2): build fault injection rate: 771 [ 101.699879][ T5876] F2FS-fs (loop2): invalid crc value [ 101.714851][ T5760] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 101.903519][ T5760] usb 6-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 101.909725][ T5760] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 101.909769][ T5760] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 101.929908][ T5734] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 101.933070][ T2253] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 101.970400][ T5760] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.970442][ T5760] usb 6-1: Product: syz [ 101.970469][ T5760] usb 6-1: Manufacturer: syz [ 101.970495][ T5760] usb 6-1: SerialNumber: syz [ 102.005187][ T2253] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 102.052032][ T2253] usb 2-1: USB disconnect, device number 2 [ 102.133982][ T2253] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 102.136584][ T2253] ftdi_sio 2-1:0.0: device disconnected [ 102.139774][ T5782] usb 4-1: USB disconnect, device number 3 [ 102.301684][ T5760] usblp 6-1:1.0: usblp1: USB Bidirectional printer dev 2 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 102.309250][ T5782] usblp0: removed [ 102.343070][ T5876] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 102.362022][ T5876] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 102.362066][ T5876] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 102.469428][ T5890] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.470430][ T5890] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.681782][ T5876] F2FS-fs (loop2): access invalid blkaddr:2816 [ 102.681823][ T5876] CPU: 0 UID: 0 PID: 5876 Comm: syz.2.17 Not tainted syzkaller #0 PREEMPT(full) [ 102.681873][ T5876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 102.681896][ T5876] Call Trace: [ 102.681908][ T5876] [ 102.681923][ T5876] dump_stack_lvl+0x100/0x190 [ 102.681984][ T5876] __f2fs_is_valid_blkaddr+0xad0/0x13c0 [ 102.682042][ T5876] ? f2fs_map_blocks+0x979/0x5d50 [ 102.682094][ T5876] f2fs_is_valid_blkaddr+0xd0/0x2b0 [ 102.682155][ T5876] f2fs_map_blocks+0x979/0x5d50 [ 102.682233][ T5876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.682289][ T5876] ? __pfx_f2fs_map_blocks+0x10/0x10 [ 102.682342][ T5876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.682395][ T5876] ? find_held_lock+0x2b/0x80 [ 102.682449][ T5876] ? xa_load+0x149/0x2c0 [ 102.682491][ T5876] ? xa_load+0x149/0x2c0 [ 102.682541][ T5876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.682609][ T5876] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 102.682676][ T5876] f2fs_mpage_readpages+0x7cb/0x33f0 [ 102.682747][ T5876] ? __pfx_f2fs_mpage_readpages+0x10/0x10 [ 102.682802][ T5876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.682848][ T5876] ? __lock_acquire+0x5c0/0x1f40 [ 102.682887][ T5876] ? __css_rstat_updated+0x1ce/0x590 [ 102.682931][ T5876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.682980][ T5876] ? __pfx___css_rstat_updated+0x10/0x10 [ 102.683029][ T5876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.683088][ T5876] ? rcu_is_watching+0x13/0xc0 [ 102.683137][ T5876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.683183][ T5876] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 102.683248][ T5876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.683295][ T5876] ? find_held_lock+0x2b/0x80 [ 102.683353][ T5876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.683422][ T5876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.683476][ T5876] f2fs_readahead+0x337/0x4f0 [ 102.683529][ T5876] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 102.683584][ T5876] ? __pfx_f2fs_readahead+0x10/0x10 [ 102.683641][ T5876] read_pages+0x1b1/0xdf0 [ 102.683705][ T5876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.683754][ T5876] ? __pfx_lru_add+0x10/0x10 [ 102.683800][ T5876] ? __pfx_read_pages+0x10/0x10 [ 102.683860][ T5876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.683921][ T5876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.683969][ T5876] ? filemap_alloc_folio_noprof+0x66/0x80 [ 102.684032][ T5876] page_cache_ra_unbounded+0x48a/0x990 [ 102.684115][ T5876] do_page_cache_ra+0x10f/0x160 [ 102.684183][ T5876] page_cache_ra_order+0xc05/0xed0 [ 102.684259][ T5876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.684316][ T5876] page_cache_sync_ra+0x6d7/0xb40 [ 102.684390][ T5876] page_cache_sync_readahead+0xb5/0xf0 [ 102.684443][ T5876] ? __pfx_page_cache_sync_readahead+0x10/0x10 [ 102.684505][ T5876] ? __pfx___might_resched+0x10/0x10 [ 102.684585][ T5876] f2fs_readdir+0x6ab/0xad0 [ 102.684642][ T5876] ? lock_acquire+0x1d1/0x380 [ 102.684686][ T5876] ? __pfx_f2fs_readdir+0x10/0x10 [ 102.684744][ T5876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.684794][ T5876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.684840][ T5876] ? down_read_killable+0x35d/0x520 [ 102.684887][ T5876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.684934][ T5876] ? common_file_perm+0x266/0x500 [ 102.685006][ T5876] iterate_dir+0x296/0xae0 [ 102.685072][ T5876] __x64_sys_getdents+0x13b/0x2b0 [ 102.685131][ T5876] ? __pfx___x64_sys_getdents+0x10/0x10 [ 102.685191][ T5876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.685237][ T5876] ? __pfx_filldir+0x10/0x10 [ 102.685301][ T5876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.685357][ T5876] do_syscall_64+0x123/0x790 [ 102.685426][ T5876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.685466][ T5876] RIP: 0033:0x7f4eb059e159 [ 102.685496][ T5876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.685533][ T5876] RSP: 002b:00007f4eb1460028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 102.685576][ T5876] RAX: ffffffffffffffda RBX: 00007f4eb0825fa0 RCX: 00007f4eb059e159 [ 102.685603][ T5876] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 102.685626][ T5876] RBP: 00007f4eb063503b R08: 0000000000000000 R09: 0000000000000000 [ 102.685651][ T5876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.685675][ T5876] R13: 00007f4eb0826038 R14: 00007f4eb0825fa0 R15: 00007fff984df988 [ 102.685725][ T5876] [ 102.742137][ T5771] usb 6-1: USB disconnect, device number 2 [ 102.826386][ T5771] usblp1: removed [ 102.951865][ T5876] F2FS-fs (loop2): access invalid blkaddr:2816 [ 102.951904][ T5876] CPU: 1 UID: 0 PID: 5876 Comm: syz.2.17 Not tainted syzkaller #0 PREEMPT(full) [ 102.951947][ T5876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 102.951969][ T5876] Call Trace: [ 102.951981][ T5876] [ 102.951995][ T5876] dump_stack_lvl+0x100/0x190 [ 102.952060][ T5876] __f2fs_is_valid_blkaddr+0xad0/0x13c0 [ 102.952115][ T5876] ? f2fs_map_blocks+0x979/0x5d50 [ 102.952166][ T5876] f2fs_is_valid_blkaddr+0xd0/0x2b0 [ 102.952225][ T5876] f2fs_map_blocks+0x979/0x5d50 [ 102.952299][ T5876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.952352][ T5876] ? __pfx_f2fs_map_blocks+0x10/0x10 [ 102.952406][ T5876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.952458][ T5876] ? find_held_lock+0x2b/0x80 [ 102.952509][ T5876] ? xa_load+0x149/0x2c0 [ 102.952550][ T5876] ? xa_load+0x149/0x2c0 [ 102.952597][ T5876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.952657][ T5876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.952702][ T5876] ? zero_user_segments.constprop.0+0x286/0x360 [ 102.952753][ T5876] f2fs_mpage_readpages+0x7cb/0x33f0 [ 102.952822][ T5876] ? __pfx_f2fs_mpage_readpages+0x10/0x10 [ 102.952875][ T5876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.952920][ T5876] ? __lock_acquire+0x5c0/0x1f40 [ 102.952957][ T5876] ? __css_rstat_updated+0x1ce/0x590 [ 102.953000][ T5876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.953048][ T5876] ? __pfx___css_rstat_updated+0x10/0x10 [ 102.953100][ T5876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.953157][ T5876] ? rcu_is_watching+0x13/0xc0 [ 102.953204][ T5876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.953249][ T5876] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 102.953310][ T5876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.953356][ T5876] ? find_held_lock+0x2b/0x80 [ 102.953413][ T5876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.953479][ T5876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.953532][ T5876] f2fs_readahead+0x337/0x4f0 [ 102.953583][ T5876] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 102.953629][ T5876] ? __pfx_f2fs_readahead+0x10/0x10 [ 102.953683][ T5876] read_pages+0x1b1/0xdf0 [ 102.953745][ T5876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.953793][ T5876] ? __pfx_lru_add+0x10/0x10 [ 102.953838][ T5876] ? __pfx_read_pages+0x10/0x10 [ 102.953895][ T5876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.953954][ T5876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.953999][ T5876] ? filemap_alloc_folio_noprof+0x66/0x80 [ 102.954066][ T5876] page_cache_ra_unbounded+0x48a/0x990 [ 102.954146][ T5876] do_page_cache_ra+0x10f/0x160 [ 102.954211][ T5876] page_cache_ra_order+0xc05/0xed0 [ 102.954283][ T5876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.954337][ T5876] page_cache_sync_ra+0x6d7/0xb40 [ 102.954408][ T5876] page_cache_sync_readahead+0xb5/0xf0 [ 102.954460][ T5876] ? __pfx_page_cache_sync_readahead+0x10/0x10 [ 102.954522][ T5876] ? __pfx___might_resched+0x10/0x10 [ 102.954592][ T5876] f2fs_readdir+0x6ab/0xad0 [ 102.954647][ T5876] ? lock_acquire+0x1d1/0x380 [ 102.954690][ T5876] ? __pfx_f2fs_readdir+0x10/0x10 [ 102.954746][ T5876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.954795][ T5876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.954840][ T5876] ? down_read_killable+0x35d/0x520 [ 102.954886][ T5876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.954931][ T5876] ? common_file_perm+0x266/0x500 [ 102.955001][ T5876] iterate_dir+0x296/0xae0 [ 102.955069][ T5876] __x64_sys_getdents+0x13b/0x2b0 [ 102.955126][ T5876] ? __pfx___x64_sys_getdents+0x10/0x10 [ 102.955184][ T5876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.955229][ T5876] ? __pfx_filldir+0x10/0x10 [ 102.955290][ T5876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.955344][ T5876] do_syscall_64+0x123/0x790 [ 102.955410][ T5876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.955449][ T5876] RIP: 0033:0x7f4eb059e159 [ 102.955478][ T5876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.955514][ T5876] RSP: 002b:00007f4eb1460028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 102.955550][ T5876] RAX: ffffffffffffffda RBX: 00007f4eb0825fa0 RCX: 00007f4eb059e159 [ 102.955575][ T5876] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 102.955598][ T5876] RBP: 00007f4eb063503b R08: 0000000000000000 R09: 0000000000000000 [ 102.955621][ T5876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.955644][ T5876] R13: 00007f4eb0826038 R14: 00007f4eb0825fa0 R15: 00007fff984df988 [ 102.955693][ T5876] [ 102.994266][ T5876] syz.2.17: attempt to access beyond end of device [ 102.994266][ T5876] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 103.322494][ T5619] syz-executor: attempt to access beyond end of device [ 103.322494][ T5619] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 103.350196][ T5619] CPU: 1 UID: 0 PID: 5619 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 103.350242][ T5619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 103.350264][ T5619] Call Trace: [ 103.350277][ T5619] [ 103.350290][ T5619] dump_stack_lvl+0x100/0x190 [ 103.350349][ T5619] f2fs_stop_checkpoint+0x5e6/0xb30 [ 103.350394][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.350439][ T5619] ? errseq_set+0xe3/0x150 [ 103.350486][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.350538][ T5619] f2fs_write_end_bio+0xef9/0x12d0 [ 103.350593][ T5619] ? __pfx_f2fs_write_end_bio+0x10/0x10 [ 103.350638][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.350689][ T5619] ? find_held_lock+0x2b/0x80 [ 103.350739][ T5619] ? percpu_ref_put_many.constprop.0+0xc4/0x2a0 [ 103.350798][ T5619] ? percpu_ref_put_many.constprop.0+0xc4/0x2a0 [ 103.350855][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.350907][ T5619] f2fs_write_end_io+0xc8/0x240 [ 103.350951][ T5619] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 103.350996][ T5619] bio_endio+0x7ba/0x9c0 [ 103.351062][ T5619] submit_bio_noacct+0x22a/0x2130 [ 103.351122][ T5619] f2fs_submit_write_bio+0x133/0x330 [ 103.351166][ T5619] __submit_merged_bio+0x330/0x7b0 [ 103.351211][ T5619] ? rcu_is_watching+0x13/0xc0 [ 103.351264][ T5619] __submit_merged_write_cond+0x3fe/0x510 [ 103.351322][ T5619] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 103.351380][ T5619] ? __pfx___might_resched+0x10/0x10 [ 103.351439][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.351483][ T5619] ? folio_clear_dirty_for_io+0x178/0x960 [ 103.351541][ T5619] f2fs_write_cache_pages+0x20e9/0x2630 [ 103.351627][ T5619] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 103.351683][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.351733][ T5619] ? __bfs+0x150/0x2a0 [ 103.351788][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.351832][ T5619] ? __lock_acquire+0x5c0/0x1f40 [ 103.351867][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.351912][ T5619] ? __css_rstat_updated+0x1ce/0x590 [ 103.351974][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.352019][ T5619] ? rcu_is_watching+0x13/0xc0 [ 103.352086][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.352130][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.352174][ T5619] ? __bfs+0x150/0x2a0 [ 103.352255][ T5619] ? check_noncircular+0x97/0x160 [ 103.352319][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.352364][ T5619] ? rcu_is_watching+0x13/0xc0 [ 103.352416][ T5619] f2fs_write_data_pages+0x799/0x16d0 [ 103.352469][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.352515][ T5619] ? is_bpf_text_address+0x8a/0x1a0 [ 103.352566][ T5619] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 103.352634][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.352678][ T5619] ? lock_acquire+0x1d1/0x380 [ 103.352712][ T5619] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 103.352771][ T5619] do_writepages+0x278/0x600 [ 103.352827][ T5619] ? __pfx_do_writepages+0x10/0x10 [ 103.352876][ T5619] ? do_raw_spin_unlock+0x145/0x1e0 [ 103.352921][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.352966][ T5619] ? _raw_spin_unlock+0x28/0x50 [ 103.353024][ T5619] filemap_writeback+0x22d/0x2e0 [ 103.353084][ T5619] ? __pfx_filemap_writeback+0x10/0x10 [ 103.353186][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.353231][ T5619] ? find_held_lock+0x2b/0x80 [ 103.353279][ T5619] ? f2fs_sync_dirty_inodes+0x38f/0x960 [ 103.353336][ T5619] ? f2fs_sync_dirty_inodes+0x38f/0x960 [ 103.353391][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.353447][ T5619] f2fs_sync_dirty_inodes+0x452/0x960 [ 103.353518][ T5619] block_operations+0x2a6/0xfc0 [ 103.353584][ T5619] ? __pfx_block_operations+0x10/0x10 [ 103.353690][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.353738][ T5619] ? ktime_get+0x22c/0x320 [ 103.353775][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.353820][ T5619] ? rcu_is_watching+0x13/0xc0 [ 103.353873][ T5619] f2fs_write_checkpoint+0x58b/0x53e0 [ 103.353931][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.353979][ T5619] ? _raw_spin_unlock_irq+0x2e/0x50 [ 103.354029][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.354085][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.354129][ T5619] ? do_raw_spin_lock+0x128/0x260 [ 103.354174][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.354223][ T5619] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 103.354280][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.354324][ T5619] ? mark_held_locks+0x40/0x70 [ 103.354364][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.354409][ T5619] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 103.354463][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.354508][ T5619] ? __wake_up+0x3f/0x60 [ 103.354568][ T5619] kill_f2fs_super+0x3f1/0x4a0 [ 103.354623][ T5619] ? __pfx_kill_f2fs_super+0x10/0x10 [ 103.354697][ T5619] ? lockdep_hardirqs_on+0x7d/0x110 [ 103.354755][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.354801][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.354860][ T5619] deactivate_locked_super+0xbd/0x140 [ 103.354914][ T5619] deactivate_super+0xea/0x110 [ 103.354968][ T5619] cleanup_mnt+0x21f/0x450 [ 103.355032][ T5619] task_work_run+0x150/0x240 [ 103.355093][ T5619] ? __pfx_task_work_run+0x10/0x10 [ 103.355151][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.355204][ T5619] exit_to_user_mode_loop+0x1d8/0x700 [ 103.355246][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.355290][ T5619] ? rcu_is_watching+0x13/0xc0 [ 103.355341][ T5619] do_syscall_64+0x661/0x790 [ 103.355405][ T5619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.355443][ T5619] RIP: 0033:0x7f4eb059f397 [ 103.355474][ T5619] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 103.355509][ T5619] RSP: 002b:00007fff984debf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 103.355544][ T5619] RAX: 0000000000000000 RBX: 00007f4eb063448b RCX: 00007f4eb059f397 [ 103.355568][ T5619] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff984decb0 [ 103.355591][ T5619] RBP: 00007fff984decb0 R08: 00007fff984dfcb0 R09: 00000000ffffffff [ 103.355615][ T5619] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff984dfd40 [ 103.355638][ T5619] R13: 00007f4eb063448b R14: 000000000001921f R15: 00007fff984dfd80 [ 103.355687][ T5619] [ 103.392219][ T5890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.406653][ T5619] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 103.437517][ T5890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.535982][ T136] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.539674][ T59] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.539752][ T59] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.539818][ T59] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.553992][ T5823] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 104.714188][ T5823] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 104.715816][ T5823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.715868][ T5823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.715908][ T5823] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 104.715972][ T5823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.734206][ T5823] usb 2-1: config 0 descriptor?? [ 105.227249][ T5823] plantronics 0003:047F:FFFF.0001: reserved main item tag 0xd [ 105.412078][ T5823] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 105.427086][ T5823] usb 2-1: USB disconnect, device number 3 [ 105.575673][ T5933] loop4: detected capacity change from 0 to 256 [ 105.576861][ T5933] exfat: Deprecated parameter 'utf8' [ 105.576891][ T5933] exfat: Deprecated parameter 'utf8' [ 105.577013][ T5933] exfat: Deprecated parameter 'utf8' [ 105.577049][ T5933] exfat: Deprecated parameter 'namecase' [ 105.625571][ T5933] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 105.641770][ T5904] loop0: detected capacity change from 0 to 32768 [ 105.644895][ T5747] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 105.664936][ T5904] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.19 (5904) [ 105.764852][ T5904] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 105.764904][ T5904] BTRFS info (device loop0): using sha256 checksum algorithm [ 105.796219][ T5747] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 105.808389][ T5747] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 105.808429][ T5747] usb 3-1: config 0 has no interface number 0 [ 105.808484][ T5747] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 105.808538][ T5747] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 105.808600][ T5747] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.843585][ T5747] usb 3-1: config 0 descriptor?? [ 105.844825][ T5928] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 105.880076][ T5747] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 105.982673][ T5856] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 106.017239][ T5904] BTRFS info (device loop0): enabling ssd optimizations [ 106.017277][ T5904] BTRFS info (device loop0): turning on sync discard [ 106.017305][ T5904] BTRFS info (device loop0): enabling free space tree [ 106.017334][ T5904] BTRFS info (device loop0): use zlib compression, level 3 [ 106.143785][ T5856] usb 6-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 106.149080][ T31] audit: type=1800 audit(1789467894.382:2): pid=5904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.19" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 106.150288][ T5856] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.150339][ T5856] usb 6-1: config 0 interface 0 has no altsetting 0 [ 106.150388][ T5856] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.203946][ T5856] usb 6-1: config 0 descriptor?? [ 106.332068][ T5782] usb 3-1: USB disconnect, device number 2 [ 106.492157][ T5950] fido_id[5950]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 106.541735][ T5823] input: syz0 as /devices/virtual/misc/uhid/0005:057B:030A.0002/input/input6 [ 106.662730][ T187] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 106.770525][ T5823] hid-generic 0005:057B:030A.0002: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 106.776273][ T5856] hid-led 0003:1D34:0004.0003: unknown main item tag 0x0 [ 106.776312][ T5856] hid-led 0003:1D34:0004.0003: unknown main item tag 0x0 [ 106.776345][ T5856] hid-led 0003:1D34:0004.0003: unknown main item tag 0x0 [ 106.776378][ T5856] hid-led 0003:1D34:0004.0003: unknown main item tag 0x0 [ 106.776411][ T5856] hid-led 0003:1D34:0004.0003: unknown main item tag 0x0 [ 106.776444][ T5856] hid-led 0003:1D34:0004.0003: unknown main item tag 0x0 [ 106.776477][ T5856] hid-led 0003:1D34:0004.0003: unknown main item tag 0x0 [ 106.776509][ T5856] hid-led 0003:1D34:0004.0003: unknown main item tag 0x0 [ 106.776547][ T5856] hid-led 0003:1D34:0004.0003: unknown main item tag 0x0 [ 106.776580][ T5856] hid-led 0003:1D34:0004.0003: unknown main item tag 0x0 [ 106.813504][ T187] usb 5-1: Using ep0 maxpacket: 8 [ 106.818447][ T187] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 106.847113][ T187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.847155][ T187] usb 5-1: Product: syz [ 106.847180][ T187] usb 5-1: Manufacturer: syz [ 106.847235][ T187] usb 5-1: SerialNumber: syz [ 107.023091][ T5856] hid-led 0003:1D34:0004.0003: hidraw1: USB HID v80.01 Device [HID 1d34:0004] on usb-dummy_hcd.5-1/input0 [ 107.225453][ T5856] hid-led 0003:1D34:0004.0003: Dream Cheeky Webmail Notifier initialized [ 107.259706][ T187] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 107.259772][ T187] usb 5-1: MIDIStreaming interface descriptor not found [ 107.280586][ T5967] fido_id[5967]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 107.292051][ T5856] usb 6-1: USB disconnect, device number 3 [ 107.353104][ T52] Bluetooth: hci2: command tx timeout [ 107.491076][ T5973] loop3: detected capacity change from 0 to 512 [ 107.505081][ T5612] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 107.555732][ T5973] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 107.555761][ T5973] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 107.696942][ T5973] EXT4-fs (loop3): 1 truncate cleaned up [ 107.704863][ T5968] fido_id[5968]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 107.785358][ T5973] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.227357][ T5621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.253447][ T187] usb 5-1: USB disconnect, device number 2 [ 109.575976][ T4927] Bluetooth: hci2: command 0x0406 tx timeout [ 110.404354][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 110.513499][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 111.332733][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 111.798503][ T5604] udevd[5604]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.307563][ T6028] Zero length message leads to an empty skb [ 116.427684][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 116.639350][ T6033] loop5: detected capacity change from 0 to 512 [ 116.650439][ T6033] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 116.671173][ T6033] EXT4-fs (loop5): 1 truncate cleaned up [ 116.681032][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 116.683514][ T9] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 116.684873][ T9] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.684921][ T9] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.684960][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 116.685007][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.697037][ T6033] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.698941][ T9] usb 1-1: config 0 descriptor?? [ 116.790536][ T5760] input: syz0 as /devices/virtual/misc/uhid/0005:057B:030A.0004/input/input7 [ 116.835675][ T5760] hid-generic 0005:057B:030A.0004: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 116.913009][ T5771] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 116.942357][ T6033] EXT4-fs error (device loop5): __ext4_expand_extra_isize:6540: inode #12: comm syz.5.64: bad extra_isize 62 (inode size 256) [ 116.983484][ T5856] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 116.989946][ T6033] EXT4-fs (loop5): Remounting filesystem read-only [ 117.064441][ T5771] usb 3-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 117.084841][ T5771] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.084898][ T5771] usb 3-1: config 0 interface 0 has no altsetting 0 [ 117.084949][ T5771] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.121532][ T5771] usb 3-1: config 0 descriptor?? [ 117.133329][ T5856] usb 4-1: Using ep0 maxpacket: 8 [ 117.134157][ T5856] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 117.155673][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.155715][ T5856] usb 4-1: Product: syz [ 117.155742][ T5856] usb 4-1: Manufacturer: syz [ 117.155799][ T5856] usb 4-1: SerialNumber: syz [ 117.317199][ T9] nzxt-smart2 0003:1E71:2009.0005: item fetching failed at offset 0/5 [ 117.326944][ T9] nzxt-smart2 0003:1E71:2009.0005: probe with driver nzxt-smart2 failed with error -22 [ 117.374485][ T5614] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.518899][ T5760] usb 1-1: USB disconnect, device number 2 [ 117.570652][ T5856] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 117.570715][ T5856] usb 4-1: MIDIStreaming interface descriptor not found [ 117.717430][ T5771] hid_parser_main: 14 callbacks suppressed [ 117.717465][ T5771] hid-led 0003:1D34:0004.0006: unknown main item tag 0x0 [ 117.717503][ T5771] hid-led 0003:1D34:0004.0006: unknown main item tag 0x0 [ 117.717538][ T5771] hid-led 0003:1D34:0004.0006: unknown main item tag 0x0 [ 117.717577][ T5771] hid-led 0003:1D34:0004.0006: unknown main item tag 0x0 [ 117.717611][ T5771] hid-led 0003:1D34:0004.0006: unknown main item tag 0x0 [ 117.717645][ T5771] hid-led 0003:1D34:0004.0006: unknown main item tag 0x0 [ 117.717679][ T5771] hid-led 0003:1D34:0004.0006: unknown main item tag 0x0 [ 117.717713][ T5771] hid-led 0003:1D34:0004.0006: unknown main item tag 0x0 [ 117.717747][ T5771] hid-led 0003:1D34:0004.0006: unknown main item tag 0x0 [ 117.717781][ T5771] hid-led 0003:1D34:0004.0006: unknown main item tag 0x0 [ 117.903664][ T5771] hid-led 0003:1D34:0004.0006: hidraw0: USB HID v80.01 Device [HID 1d34:0004] on usb-dummy_hcd.2-1/input0 [ 117.981170][ T5771] hid-led 0003:1D34:0004.0006: Dream Cheeky Webmail Notifier initialized [ 118.095940][ T6046] tipc: Started in network mode [ 118.095970][ T6046] tipc: Node identity 4, cluster identity 4711 [ 118.095989][ T6046] tipc: Node number set to 4 [ 118.119111][ T5856] usb 4-1: USB disconnect, device number 4 [ 118.237617][ T10] usb 3-1: USB disconnect, device number 3 [ 118.310207][ T6054] process 'syz.0.72' launched './file2' with NULL argv: empty string added [ 118.365693][ T187] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 118.516113][ T187] usb 2-1: Using ep0 maxpacket: 8 [ 118.520170][ T187] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 118.523882][ T187] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 118.523932][ T187] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 118.523975][ T187] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 118.524016][ T187] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.524092][ T187] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.752623][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 118.792624][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 118.852613][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 120.211351][ T187] usb 2-1: GET_CAPABILITIES returned 0 [ 120.211411][ T187] usbtmc 2-1:16.0: can't read capabilities [ 120.752694][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 120.847232][ T5856] usb 2-1: USB disconnect, device number 4 [ 121.112122][ T5955] udevd[5955]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 121.206436][ T6069] gadgetfs: bound to dummy_udc driver [ 121.484748][ T6076] syz.0.79 uses obsolete (PF_INET,SOCK_PACKET) [ 121.582649][ T5782] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 122.392620][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 123.104767][ T5782] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 123.128906][ T5782] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.128971][ T5782] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.146881][ T6079] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 123.147245][ T6079] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 123.187459][ T5782] usb 3-1: config 0 descriptor?? [ 123.338494][ T6079] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 123.372335][ T6079] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 123.372548][ T6079] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 123.391449][ T6079] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 123.445939][ T6079] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 123.446054][ T6079] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 123.467608][ T6079] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 123.488104][ T6079] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 123.488512][ T6079] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 123.506732][ T6079] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 123.525839][ T6079] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 123.525925][ T6079] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 123.538631][ T6079] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 123.548889][ T6079] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 123.548967][ T6079] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 123.566985][ T6079] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 123.682891][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 123.868544][ T5782] ath6kl: mismatched byte count 0 vs. expected 12 [ 123.871671][ T5782] ath6kl: Failed to init ath6kl core: -22 [ 123.903426][ T5782] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 124.093380][ T6099] loop4: detected capacity change from 0 to 1024 [ 124.094605][ T6099] EXT4-fs: Ignoring removed nomblk_io_submit option [ 124.109169][ T5856] usb 3-1: USB disconnect, device number 4 [ 124.167296][ T6099] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e042c028, mo2=0102] [ 124.167447][ T6099] System zones: 0-1, 3-12 [ 124.219746][ T6099] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.292697][ T5782] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 124.404291][ T5625] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.443358][ T5782] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 124.444978][ T5782] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.445028][ T5782] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.445069][ T5782] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 124.445133][ T5782] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.513199][ T5782] usb 6-1: config 0 descriptor?? [ 124.630921][ T6106] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 124.998854][ T5782] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 125.167549][ T6101] loop3: detected capacity change from 0 to 32768 [ 125.168667][ T6101] ======================================================= [ 125.168667][ T6101] WARNING: The mand mount option has been deprecated and [ 125.168667][ T6101] and is ignored by this kernel. Remove the mand [ 125.168667][ T6101] option from the mount to silence this warning. [ 125.168667][ T6101] ======================================================= [ 125.279314][ T5856] usb 6-1: USB disconnect, device number 4 [ 125.431622][ T6118] loop0: detected capacity change from 0 to 128 [ 125.433639][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 125.457817][ T6101] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 125.489975][ T6118] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 125.490022][ T6118] hpfs: filesystem error: improperly stopped [ 125.490053][ T6118] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 125.490078][ T6118] hpfs: You really don't want any checks? You are crazy... [ 125.490106][ T6118] hpfs: Code page index out of array [ 125.490118][ T6118] hpfs: code page support is disabled [ 125.511921][ T6118] hpfs: hpfs_map_4sectors(): unaligned read [ 125.512384][ T6118] hpfs: hpfs_map_4sectors(): unaligned read [ 125.512402][ T6118] hpfs: filesystem error: unable to find root dir [ 125.518922][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 125.518937][ T4927] Bluetooth: hci2: command 0x0406 tx timeout [ 125.592766][ T4927] Bluetooth: hci5: command 0x0c1a tx timeout [ 125.592786][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 125.609155][ T6118] hpfs: hpfs_map_sector(): read error [ 125.609197][ T6118] hpfs: hpfs_map_sector(): read error [ 125.757396][ T4927] Bluetooth: hci0: command 0x0c1a tx timeout [ 125.762451][ T6120] tipc: Started in network mode [ 125.762477][ T6120] tipc: Node identity 4, cluster identity 4711 [ 125.762498][ T6120] tipc: Node number set to 4 [ 125.790329][ T6120] tipc: Enabled bearer , priority 0 [ 125.823285][ T6120] tipc: Disabling bearer [ 127.103036][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 127.871074][ T4927] Bluetooth: hci1: command 0x0c1a tx timeout [ 127.871128][ T4927] Bluetooth: hci2: command 0x0406 tx timeout [ 127.871163][ T4927] Bluetooth: hci4: command 0x0c1a tx timeout [ 127.871192][ T4927] Bluetooth: hci5: command 0x0c1a tx timeout [ 127.871221][ T4927] Bluetooth: hci3: command 0x0c1a tx timeout [ 127.871250][ T4927] Bluetooth: hci0: command 0x0c1a tx timeout [ 127.977646][ T5621] ocfs2: Unmounting device (7,3) on (node local) [ 128.290891][ T6132] loop2: detected capacity change from 0 to 512 [ 128.454975][ T6134] loop1: detected capacity change from 0 to 512 [ 128.478556][ T6134] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 128.515776][ T6134] EXT4-fs (loop1): 1 truncate cleaned up [ 128.553095][ T6134] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.659963][ T6140] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 128.660253][ T6140] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 128.660513][ T6140] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 128.660770][ T6140] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 128.661039][ T6140] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 128.661318][ T6140] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 128.693108][ T6134] EXT4-fs error (device loop1): __ext4_expand_extra_isize:6540: inode #12: comm syz.1.83: bad extra_isize 62 (inode size 256) [ 128.702841][ T6134] EXT4-fs (loop1): Remounting filesystem read-only [ 128.924791][ T5613] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.713075][ T52] Bluetooth: hci5: command 0x0c1a tx timeout [ 130.714344][ T4927] Bluetooth: hci4: command 0x0c1a tx timeout [ 130.715984][ T4927] Bluetooth: hci2: command 0x0406 tx timeout [ 130.719849][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 130.720548][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 130.720760][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 131.058129][ T6158] loop4: detected capacity change from 0 to 1024 [ 131.214895][ T6162] FAULT_INJECTION: forcing a failure. [ 131.214895][ T6162] name failslab, interval 1, probability 0, space 0, times 1 [ 131.214948][ T6162] CPU: 1 UID: 0 PID: 6162 Comm: syz.1.106 Not tainted syzkaller #0 PREEMPT(full) [ 131.214993][ T6162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 131.215016][ T6162] Call Trace: [ 131.215029][ T6162] [ 131.215043][ T6162] dump_stack_lvl+0x100/0x190 [ 131.215104][ T6162] should_fail_ex.cold+0x5/0xa [ 131.215149][ T6162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 131.215204][ T6162] should_failslab+0xc2/0x120 [ 131.215245][ T6162] __kmalloc_noprof+0xfc/0x840 [ 131.215295][ T6162] ? __do_sys_futex_waitv+0x204/0x2b0 [ 131.215353][ T6162] __do_sys_futex_waitv+0x204/0x2b0 [ 131.215406][ T6162] ? __pfx___do_sys_futex_waitv+0x10/0x10 [ 131.215471][ T6162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 131.215523][ T6162] do_syscall_64+0x123/0x790 [ 131.215594][ T6162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.215631][ T6162] RIP: 0033:0x7f0cc039e159 [ 131.215660][ T6162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.215695][ T6162] RSP: 002b:00007f0cc1244028 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 131.215765][ T6162] RAX: ffffffffffffffda RBX: 00007f0cc0625fa0 RCX: 00007f0cc039e159 [ 131.215787][ T6162] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000002980 [ 131.215807][ T6162] RBP: 00007f0cc043503b R08: 0000000000000000 R09: 0000000000000000 [ 131.215830][ T6162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.215852][ T6162] R13: 00007f0cc0626038 R14: 00007f0cc0625fa0 R15: 00007fffea925388 [ 131.215897][ T6162] [ 133.283096][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.283197][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.669774][ T6174] loop3: detected capacity change from 0 to 128 [ 133.680964][ T6172] tipc: Enabling of bearer rejected, failed to enable media [ 133.686890][ T6174] msdos: Bad value for 'gid' [ 133.686914][ T6174] msdos: Bad value for 'gid' [ 133.800205][ T6174] type: 2229836882 invalid [ 135.192728][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 137.874774][ T6197] FAULT_INJECTION: forcing a failure. [ 137.874774][ T6197] name failslab, interval 1, probability 0, space 0, times 0 [ 137.874825][ T6197] CPU: 0 UID: 0 PID: 6197 Comm: syz.5.119 Not tainted syzkaller #0 PREEMPT(full) [ 137.874870][ T6197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 137.874893][ T6197] Call Trace: [ 137.874905][ T6197] [ 137.874920][ T6197] dump_stack_lvl+0x100/0x190 [ 137.874980][ T6197] should_fail_ex.cold+0x5/0xa [ 137.875023][ T6197] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.875084][ T6197] should_failslab+0xc2/0x120 [ 137.875123][ T6197] __kmalloc_flags_noprof+0x122/0x8e0 [ 137.875172][ T6197] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.875218][ T6197] ? __lock_acquire+0x5c0/0x1f40 [ 137.875260][ T6197] ? alloc_slab_obj_exts+0x6a/0x170 [ 137.875319][ T6197] alloc_slab_obj_exts+0x6a/0x170 [ 137.875372][ T6197] __memcg_slab_post_alloc_hook+0x3fc/0x10c0 [ 137.875436][ T6197] ? kasan_unpoison+0x27/0x60 [ 137.875493][ T6197] __kmalloc_cache_noprof+0x52a/0x6d0 [ 137.875541][ T6197] ? srso_alias_return_thunk+0x5/0xfbef5 [ 137.875588][ T6197] ? alloc_pipe_info+0x10e/0x590 [ 137.875635][ T6197] alloc_pipe_info+0x10e/0x590 [ 137.875678][ T6197] create_pipe_files+0x8c/0x970 [ 137.875723][ T6197] do_pipe2+0xbd/0x1e0 [ 137.875761][ T6197] ? __pfx_do_pipe2+0x10/0x10 [ 137.875799][ T6197] ? xfd_validate_state+0x129/0x190 [ 137.875878][ T6197] __x64_sys_pipe2+0x54/0x80 [ 137.875917][ T6197] do_syscall_64+0x123/0x790 [ 137.875985][ T6197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.876025][ T6197] RIP: 0033:0x7fe91999e159 [ 137.876061][ T6197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.876098][ T6197] RSP: 002b:00007fe91a90e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 137.876136][ T6197] RAX: ffffffffffffffda RBX: 00007fe919c25fa0 RCX: 00007fe91999e159 [ 137.876161][ T6197] RDX: 0000000000000000 RSI: 0000000000084080 RDI: 0000000000000000 [ 137.876185][ T6197] RBP: 00007fe919a3503b R08: 0000000000000000 R09: 0000000000000000 [ 137.876209][ T6197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.876233][ T6197] R13: 00007fe919c26038 R14: 00007fe919c25fa0 R15: 00007ffdf3efbc78 [ 137.876282][ T6197] [ 138.143131][ T6196] loop0: detected capacity change from 0 to 4096 [ 138.144435][ T6196] EXT4-fs: Ignoring removed nobh option [ 138.144696][ T6196] EXT4-fs: Ignoring removed bh option [ 138.149774][ T6196] EXT4-fs (loop0): Test dummy encryption mode enabled [ 138.242958][ T6196] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.369845][ T6196] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 138.609660][ T5612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.019953][ T6215] loop4: detected capacity change from 0 to 512 [ 141.035946][ T6215] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 141.059768][ T6215] EXT4-fs (loop4): 1 truncate cleaned up [ 141.061981][ T6215] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.100897][ T6213] loop0: detected capacity change from 0 to 4096 [ 141.210572][ T6215] EXT4-fs error (device loop4): __ext4_expand_extra_isize:6540: inode #12: comm syz.4.115: bad extra_isize 62 (inode size 256) [ 141.212333][ T6215] EXT4-fs (loop4): Remounting filesystem read-only [ 141.328839][ T5625] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.869611][ T6226] loop4: detected capacity change from 0 to 128 [ 143.879340][ T31] audit: type=1800 audit(1789467932.112:3): pid=6213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.123" name="file1" dev="loop0" ino=33 res=0 errno=0 [ 143.950955][ T6226] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 146.144367][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 146.191480][ T6241] loop3: detected capacity change from 0 to 512 [ 146.281997][ T6242] loop2: detected capacity change from 0 to 4096 [ 146.305871][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 146.307161][ T9] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 146.311488][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.311526][ T9] usb 1-1: Product: syz [ 146.311553][ T9] usb 1-1: Manufacturer: syz [ 146.311579][ T9] usb 1-1: SerialNumber: syz [ 146.574176][ T6245] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 146.686549][ T9] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 146.814820][ T9] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 146.815267][ T9] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 146.815325][ T9] usb 1-1: media controller created [ 146.961419][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 147.118679][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 147.152108][ T10] kernel read not supported for file /video9 (pid: 10 comm: kworker/0:1) [ 147.175648][ T31] audit: type=1326 audit(1789467935.412:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6252 comm="syz.3.139" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff44139e159 code=0x0 [ 147.397067][ T9] dvb_usb_gl861 1-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 147.414201][ T9] usb 1-1: USB disconnect, device number 3 [ 147.547988][ T6259] synth uevent: /bus/acpi: unknown uevent action string [ 149.571799][ T6267] syzkaller1: entered promiscuous mode [ 149.571832][ T6267] syzkaller1: entered allmulticast mode [ 152.059302][ T6280] loop3: detected capacity change from 0 to 512 [ 152.094957][ T6280] EXT4-fs: Ignoring removed orlov option [ 152.101117][ T6280] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 152.700232][ T6280] EXT4-fs (loop3): 1 truncate cleaned up [ 152.713332][ T6280] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.801301][ T6284] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 152.892551][ T6280] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 153.007472][ T6291] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 153.170867][ T5621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.677061][ T5856] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 153.853917][ T5856] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 153.857009][ T5856] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x6E, changing to 0xE [ 153.857057][ T5856] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 28719, setting to 64 [ 153.891863][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.891902][ T5856] usb 4-1: Product: syz [ 153.891928][ T5856] usb 4-1: Manufacturer: syz [ 153.891954][ T5856] usb 4-1: SerialNumber: syz [ 153.905629][ T5856] usb 4-1: config 0 descriptor?? [ 154.366634][ T6295] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 154.491931][ T5856] usb 4-1: USB disconnect, device number 5 [ 154.609224][ T6308] netlink: 14 bytes leftover after parsing attributes in process `syz.4.159'. [ 154.645201][ T6300] loop1: detected capacity change from 0 to 32768 [ 154.668253][ T5971] udevd[5971]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 155.186766][ T6312] FAULT_INJECTION: forcing a failure. [ 155.186766][ T6312] name failslab, interval 1, probability 0, space 0, times 0 [ 155.186817][ T6312] CPU: 0 UID: 0 PID: 6312 Comm: syz.2.144 Not tainted syzkaller #0 PREEMPT(full) [ 155.186862][ T6312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 155.186885][ T6312] Call Trace: [ 155.186898][ T6312] [ 155.186912][ T6312] dump_stack_lvl+0x100/0x190 [ 155.186973][ T6312] should_fail_ex.cold+0x5/0xa [ 155.187018][ T6312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.187081][ T6312] should_failslab+0xc2/0x120 [ 155.187125][ T6312] __kmalloc_cache_noprof+0x91/0x6d0 [ 155.187175][ T6312] ? __x64_sys_futex+0x358/0x4d0 [ 155.187228][ T6312] ? __do_sys_mincore+0x120/0x6c0 [ 155.187284][ T6312] __do_sys_mincore+0x120/0x6c0 [ 155.187334][ T6312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.187390][ T6312] do_syscall_64+0x123/0x790 [ 155.187459][ T6312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.187500][ T6312] RIP: 0033:0x7f4eb059e159 [ 155.187531][ T6312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.187567][ T6312] RSP: 002b:00007f4eb1460028 EFLAGS: 00000246 ORIG_RAX: 000000000000001b [ 155.187604][ T6312] RAX: ffffffffffffffda RBX: 00007f4eb0825fa0 RCX: 00007f4eb059e159 [ 155.187630][ T6312] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 00002000000ef000 [ 155.187654][ T6312] RBP: 00007f4eb063503b R08: 0000000000000000 R09: 0000000000000000 [ 155.187679][ T6312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.187702][ T6312] R13: 00007f4eb0826038 R14: 00007f4eb0825fa0 R15: 00007fff984df988 [ 155.187751][ T6312] [ 156.516055][ T6313] loop1: detected capacity change from 0 to 4096 [ 156.621276][ T6313] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 156.658602][ T6330] loop4: detected capacity change from 0 to 256 [ 156.717650][ T6313] ntfs3(loop1): Failed to load $Extend (-22). [ 156.717686][ T6313] ntfs3(loop1): Failed to initialize $Extend. [ 156.772701][ T5782] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 156.825908][ T6332] : entered promiscuous mode [ 156.927383][ T5782] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 156.928797][ T5782] usb 3-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 156.928845][ T5782] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 14129, setting to 64 [ 156.928893][ T5782] usb 3-1: config 0 interface 0 has no altsetting 0 [ 156.934683][ T6313] ntfs3: Cannot use different iocharset when remounting! [ 156.942195][ T5782] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 156.942234][ T5782] usb 3-1: Product: syz [ 156.942261][ T5782] usb 3-1: Manufacturer: syz [ 156.942287][ T5782] usb 3-1: SerialNumber: syz [ 156.953036][ T6332] openvswitch: : Dropping previously announced user features [ 157.018230][ T5782] usb 3-1: config 0 descriptor?? [ 157.055574][ T5782] usb 3-1: selecting invalid altsetting 0 [ 157.568278][ T6327] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 157.675205][ T6327] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 158.089526][ T6327] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 158.090149][ T6327] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 158.110528][ T6327] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 158.111165][ T6327] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 158.140259][ T6327] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 158.140885][ T6327] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 158.158293][ T6327] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 158.158889][ T6327] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 158.159530][ T6327] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 158.160167][ T6327] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 158.160770][ T6327] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 158.161391][ T6327] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 158.162001][ T6327] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 158.283408][ T6327] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 158.284099][ T6327] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 158.284749][ T6327] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 158.285685][ T6327] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 158.286327][ T6327] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 158.286963][ T6327] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 158.287613][ T6327] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 158.288246][ T6327] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 158.288885][ T6327] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 158.289526][ T6327] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 158.290162][ T6327] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 158.290797][ T6327] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 158.291443][ T6327] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 158.292079][ T6327] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 158.385873][ T6327] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 158.478866][ T6349] loop3: detected capacity change from 0 to 128 [ 158.675691][ T6349] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 158.689560][ T6349] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.395058][ T6325] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 161.400014][ T5856] usb 3-1: USB disconnect, device number 5 [ 162.347012][ T5621] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 162.759519][ T6365] loop2: detected capacity change from 0 to 4096 [ 162.781798][ T6368] capability: warning: `syz.3.180' uses 32-bit capabilities (legacy support in use) [ 162.849077][ T6368] overlayfs: upper fs does not support file handles, falling back to index=off. [ 162.849290][ T6368] overlayfs: failed to set uuid (35/file2, err=-1); falling back to uuid=null. [ 163.263494][ T5726] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 163.323648][ T31] audit: type=1800 audit(1789467951.562:5): pid=6365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.179" name="file1" dev="loop2" ino=33 res=0 errno=0 [ 163.432677][ T5726] usb 2-1: Using ep0 maxpacket: 16 [ 163.433755][ T5726] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 163.435284][ T5726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.473433][ T5726] usb 2-1: config 0 descriptor?? [ 163.492895][ T5726] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 166.176777][ T5726] gspca_sonixj: reg_w1 err -110 [ 166.176892][ T5726] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 168.113066][ T5782] usb 2-1: USB disconnect, device number 5 [ 173.852849][ T5782] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 174.004171][ T5782] usb 2-1: Using ep0 maxpacket: 8 [ 174.018230][ T5782] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 174.021288][ T5782] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 174.021352][ T5782] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 174.021392][ T5782] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 174.021436][ T5782] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 174.021480][ T5782] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 174.021543][ T5782] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.096696][ T5771] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 174.272765][ T5771] usb 1-1: Using ep0 maxpacket: 16 [ 174.274440][ T5771] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 174.275724][ T5771] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 174.275763][ T5771] usb 1-1: config 0 has no interface number 0 [ 174.275840][ T5771] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 174.275873][ T5771] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 174.325411][ T5771] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.325481][ T5771] usb 1-1: Product: syz [ 174.325509][ T5771] usb 1-1: Manufacturer: syz [ 174.325535][ T5771] usb 1-1: SerialNumber: syz [ 174.385354][ T5771] usb 1-1: config 0 descriptor?? [ 174.389617][ T6418] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 174.390211][ T6418] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 175.255688][ T6418] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 175.255868][ T6418] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 175.414887][ T5782] usb 2-1: usb_control_msg returned -71 [ 175.414949][ T5782] usbtmc 2-1:16.0: can't read capabilities [ 175.463471][ T5771] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 175.498945][ T5782] usb 2-1: USB disconnect, device number 6 [ 175.799099][ T6425] warning: `syz.1.198' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 175.989668][ T6429] Illegal XDP return value 6429 on prog (id 6) dev syz_tun, expect packet loss! [ 176.079127][ T5771] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 176.079178][ T5771] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 176.093636][ T5771] asix 1-1:0.34: probe with driver asix failed with error -71 [ 176.133417][ T5771] usb 1-1: USB disconnect, device number 4 [ 176.535560][ T6434] loop1: detected capacity change from 0 to 512 [ 176.553333][ T6434] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 176.589092][ T6434] EXT4-fs (loop1): 1 truncate cleaned up [ 176.604776][ T6434] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.932303][ T5613] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.522712][ T5771] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 178.866806][ T5771] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 178.920809][ T5771] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.920924][ T5771] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.920981][ T5771] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 178.921066][ T5771] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.394467][ T5771] usb 5-1: config 0 descriptor?? hcd.4-1/input0 [ 181.240517][ T9] usb 5-1: USB disconnect, device number 3 [ 183.086745][ T6465] fido_id[6465]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 183.481295][ T6476] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800 [ 183.805850][ T5726] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 183.941906][ T6485] loop5: detected capacity change from 0 to 1024 [ 183.962969][ T5726] usb 5-1: Using ep0 maxpacket: 16 [ 183.965674][ T5726] usb 5-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 183.967525][ T5726] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.967599][ T5726] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.967647][ T5726] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.967688][ T5726] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 183.967737][ T5726] usb 5-1: config 0 interface 0 has no altsetting 0 [ 183.967786][ T5726] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.828697][ T5726] usb 5-1: config 0 descriptor?? [ 186.073184][ T5726] logitech-djreceiver 0003:046D:C53A.0009: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.4-1/input0 [ 186.156369][ T5726] usb 5-1: USB disconnect, device number 4 [ 186.348063][ T6507] fido_id[6507]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 186.814395][ T6512] loop1: detected capacity change from 0 to 32768 [ 188.722902][ T6512] JBD2: Ignoring recovery information on journal [ 188.846250][ T6512] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 189.057136][ T6512] OCFS2: ERROR (device loop1): ocfs2_reserve_local_alloc_bits: local alloc inode 76 says it has 9 used bits, but a count shows 8 [ 189.057186][ T6512] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 189.057203][ T6512] OCFS2: File system is now read-only. [ 189.057218][ T6512] (syz.1.227,6512,0):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -30 [ 189.057260][ T6512] (syz.1.227,6512,0):ocfs2_reserve_clusters_with_limit:1288 ERROR: status = -30 [ 189.057318][ T6512] (syz.1.227,6512,0):ocfs2_reserve_clusters_with_limit:1337 ERROR: status = -30 [ 189.057358][ T6512] (syz.1.227,6512,0):ocfs2_lock_allocators:3123 ERROR: status = -30 [ 189.057398][ T6512] (syz.1.227,6512,0):ocfs2_write_begin_nolock:1724 ERROR: status = -30 [ 189.057452][ T6512] (syz.1.227,6512,0):ocfs2_write_begin:1888 ERROR: status = -30 [ 189.272905][ T1669] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 189.426975][ T1669] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 189.431368][ T1669] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.431419][ T1669] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.431477][ T1669] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.479945][ T1669] usb 5-1: config 0 descriptor?? [ 189.650761][ T5613] ocfs2: Unmounting device (7,1) on (node local) [ 189.938158][ T6529] Bluetooth: MGMT ver 1.23 [ 189.951282][ T1669] hid-steam 0003:28DE:1142.000A: item fetching failed at offset 4/5 [ 189.967727][ T1669] hid-steam 0003:28DE:1142.000A: steam_probe:parse of hid interface failed [ 189.967829][ T1669] hid-steam 0003:28DE:1142.000A: probe with driver hid-steam failed with error -22 [ 190.156233][ T1669] usb 5-1: USB disconnect, device number 5 [ 193.606084][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.606207][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.892996][ T1669] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 195.046057][ T1669] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 195.050208][ T1669] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.050257][ T1669] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.050298][ T1669] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 195.050362][ T1669] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.109989][ T1669] usb 4-1: config 0 descriptor?? [ 195.195112][ T187] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 195.355733][ T187] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0036, bcdDevice= 1.00 [ 195.367416][ T187] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.367456][ T187] usb 3-1: Product: syz [ 195.367482][ T187] usb 3-1: Manufacturer: syz [ 195.367508][ T187] usb 3-1: SerialNumber: syz [ 195.427800][ T187] em28xx 3-1:1.0: New device syz syz @ 480 Mbps (0ccd:0036, interface 0, class 0) [ 195.427857][ T187] em28xx 3-1:1.0: Video interface 0 found: bulk [ 199.210426][ T1669] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 199.326419][ T187] em28xx 3-1:1.0: unknown em28xx chip ID (0) [ 199.352838][ T5856] usb 4-1: USB disconnect, device number 6 [ 199.475496][ T187] em28xx 3-1:1.0: reading from i2c device at 0xa0 failed (error=-5) [ 199.475543][ T187] em28xx 3-1:1.0: board has no eeprom [ 199.543176][ T187] em28xx 3-1:1.0: Identified as Terratec Cinergy 250 USB (card=2) [ 199.543221][ T187] em28xx 3-1:1.0: analog set to bulk mode. [ 199.547306][ T9] em28xx 3-1:1.0: Registering V4L2 extension [ 199.624751][ T187] usb 3-1: USB disconnect, device number 6 [ 199.639674][ T187] em28xx 3-1:1.0: Disconnecting em28xx [ 199.745202][ T6565] FAULT_INJECTION: forcing a failure. [ 199.745202][ T6565] name failslab, interval 1, probability 0, space 0, times 0 [ 199.745284][ T6565] CPU: 1 UID: 0 PID: 6565 Comm: syz.2.244 Tainted: G L syzkaller #0 PREEMPT(full) [ 199.745340][ T6565] Tainted: [L]=SOFTLOCKUP [ 199.745354][ T6565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 199.745377][ T6565] Call Trace: [ 199.745389][ T6565] [ 199.745404][ T6565] dump_stack_lvl+0x100/0x190 [ 199.745465][ T6565] should_fail_ex.cold+0x5/0xa [ 199.745509][ T6565] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.745570][ T6565] should_failslab+0xc2/0x120 [ 199.745611][ T6565] kmem_cache_alloc_noprof+0x92/0x6a0 [ 199.745672][ T6565] ? do_fcntl_add_lease+0x9d/0x550 [ 199.745730][ T6565] do_fcntl_add_lease+0x9d/0x550 [ 199.745777][ T6565] ? __pfx_do_fcntl_add_lease+0x10/0x10 [ 199.745834][ T6565] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.745888][ T6565] fcntl_setlease+0xfc/0x180 [ 199.745939][ T6565] ? __pfx_fcntl_setlease+0x10/0x10 [ 199.745996][ T6565] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.746050][ T6565] do_fcntl+0x1149/0x1670 [ 199.746097][ T6565] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.746148][ T6565] ? __pfx_do_fcntl+0x10/0x10 [ 199.746194][ T6565] ? __fget_files+0x215/0x3d0 [ 199.746247][ T6565] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.746295][ T6565] ? tomoyo_file_fcntl+0x6c/0xc0 [ 199.746353][ T6565] __x64_sys_fcntl+0x163/0x200 [ 199.746409][ T6565] do_syscall_64+0x123/0x790 [ 199.746480][ T6565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.746521][ T6565] RIP: 0033:0x7f4eb059e159 [ 199.746555][ T6565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.746593][ T6565] RSP: 002b:00007f4eb1460028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 199.746634][ T6565] RAX: ffffffffffffffda RBX: 00007f4eb0825fa0 RCX: 00007f4eb059e159 [ 199.746661][ T6565] RDX: 0000000000000000 RSI: 0000000000000400 RDI: 0000000000000003 [ 199.746685][ T6565] RBP: 00007f4eb063503b R08: 0000000000000000 R09: 0000000000000000 [ 199.746710][ T6565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.746734][ T6565] R13: 00007f4eb0826038 R14: 00007f4eb0825fa0 R15: 00007fff984df988 [ 199.746785][ T6565] [ 200.066623][ T6562] fido_id[6562]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 200.143142][ T5856] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 200.294121][ T5856] usb 4-1: Using ep0 maxpacket: 32 [ 200.297006][ T5856] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 200.306237][ T5856] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 200.306276][ T5856] usb 4-1: config 0 has no interface number 0 [ 200.306330][ T5856] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 200.306378][ T5856] usb 4-1: config 0 interface 85 has no altsetting 0 [ 200.314515][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.314554][ T5856] usb 4-1: Product: syz [ 200.314582][ T5856] usb 4-1: Manufacturer: syz [ 200.314608][ T5856] usb 4-1: SerialNumber: syz [ 200.330409][ T5856] usb 4-1: config 0 descriptor?? [ 200.460961][ T6573] loop2: detected capacity change from 0 to 8 [ 200.731084][ T6573] SQUASHFS error: Unable to read directory block [249:c] [ 200.788275][ T9] em28xx 3-1:1.0: Config register raw data: 0xffffffed [ 200.788312][ T9] em28xx 3-1:1.0: AC97 chip type couldn't be determined [ 200.788364][ T9] em28xx 3-1:1.0: No AC97 audio processor [ 201.877062][ T9] usb 3-1: Decoder not found [ 201.877093][ T9] em28xx 3-1:1.0: failed to create media gr ** replaying previous printk message ** [ 201.877093][ T9] em28xx 3-1:1.0: failed to create media graph [ 201.877134][ T9] em28xx 3-1:1.0: V4L2 device video103 deregistered [ 201.892429][ T9] INFO: trying to register non-static key. [ 201.915349][ T9] The code is fine but needs lockdep annotation, or maybe [ 201.922450][ T9] you didn't initialize this object before use? [ 201.928683][ T9] turning off the locking correctness validator. [ 201.935018][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 201.945726][ T9] Tainted: [L]=SOFTLOCKUP [ 201.950048][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 201.960106][ T9] Workqueue: events request_module_async [ 201.965789][ T9] Call Trace: [ 201.969066][ T9] [ 201.971991][ T9] dump_stack_lvl+0x100/0x190 [ 201.976695][ T9] register_lock_class+0x79b/0x7b0 [ 201.981847][ T9] __lock_acquire+0x25d/0x1f40 [ 201.986624][ T9] ? lock_acquire+0x5e/0x380 [ 201.991247][ T9] lock_acquire+0x1d1/0x380 [ 201.995754][ T9] ? __wake_up+0x1c/0x60 [ 202.000024][ T9] ? vb2_video_unregister_device+0x12b/0x2e0 [ 202.006024][ T9] ? kobject_put+0xb9/0x640 [ 202.010547][ T9] ? _raw_spin_lock_irqsave+0x52/0x60 [ 202.015966][ T9] _raw_spin_lock_irqsave+0x3a/0x60 [ 202.021189][ T9] ? __wake_up+0x1c/0x60 [ 202.025452][ T9] __wake_up+0x1c/0x60 [ 202.029552][ T9] __vb2_queue_cancel+0x348/0xe90 [ 202.034592][ T9] ? __pfx_device_del+0x10/0x10 [ 202.039466][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.045116][ T9] ? kobject_put+0xb9/0x640 [ 202.049635][ T9] vb2_core_queue_release+0x27/0x190 [ 202.054938][ T9] vb2_video_unregister_device+0x152/0x2e0 [ 202.060761][ T9] em28xx_v4l2_init.cold+0xe1a/0x3a18 [ 202.066164][ T9] ? __pfx_em28xx_v4l2_init+0x10/0x10 [ 202.071567][ T9] em28xx_init_extension+0x13a/0x200 [ 202.076877][ T9] request_module_async+0x1e/0x30 [ 202.081947][ T9] process_one_work+0xac7/0x1b10 [ 202.086922][ T9] ? __pfx_process_one_work+0x10/0x10 [ 202.092344][ T9] ? lock_acquire+0x1d1/0x380 [ 202.097038][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.102691][ T9] worker_thread+0x5ef/0xe50 [ 202.107312][ T9] ? kthread+0x13a/0x450 [ 202.111572][ T9] ? __pfx_worker_thread+0x10/0x10 [ 202.116707][ T9] kthread+0x373/0x450 [ 202.120799][ T9] ? __pfx_kthread+0x10/0x10 [ 202.125411][ T9] ret_from_fork+0x730/0xd60 [ 202.130013][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 202.135136][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.140801][ T9] ? __switch_to+0x800/0x10f0 [ 202.145498][ T9] ? __switch_to_asm+0x39/0x70 [ 202.150270][ T9] ? __pfx_kthread+0x10/0x10 [ 202.154881][ T9] ret_from_fork_asm+0x1a/0x30 [ 202.159664][ T9] [ 202.162716][ T9] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 202.174788][ T9] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 202.183205][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 202.193895][ T9] Tainted: [L]=SOFTLOCKUP [ 202.198215][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 202.208271][ T9] Workqueue: events request_module_async [ 202.213935][ T9] RIP: 0010:__wake_up_common+0x9b/0x1f0 [ 202.219517][ T9] Code: 02 00 0f 85 5b 01 00 00 48 8b 5b 40 48 8d 43 e8 4c 39 fb 0f 84 b3 00 00 00 48 ba 00 00 00 00 00 fc ff df 48 89 d9 48 c1 e9 03 <80> 3c 11 00 0f 85 18 01 00 00 48 bd 00 00 00 00 00 fc ff df 4c 8b [ 202.239136][ T9] RSP: 0018:ffffc900000e79a0 EFLAGS: 00010056 [ 202.245212][ T9] RAX: ffffffffffffffe8 RBX: 0000000000000000 RCX: 0000000000000000 [ 202.253188][ T9] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff888050001790 [ 202.261162][ T9] RBP: ffff888050001790 R08: 0000000000000000 R09: fffff5200001cf2b [ 202.269134][ T9] R10: 0000000000000003 R11: 000000000000761b R12: 0000000000000003 [ 202.277107][ T9] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880500017d0 [ 202.285083][ T9] FS: 0000000000000000(0000) GS:ffff888123b56000(0000) knlGS:0000000000000000 [ 202.294020][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 202.300609][ T9] CR2: fffffffffffffe70 CR3: 000000003431b000 CR4: 0000000000350ef0 [ 202.308584][ T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 202.316555][ T9] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 202.324529][ T9] Call Trace: [ 202.327803][ T9] [ 202.330736][ T9] __wake_up+0x31/0x60 [ 202.334836][ T9] __vb2_queue_cancel+0x348/0xe90 [ 202.339880][ T9] ? __pfx_device_del+0x10/0x10 [ 202.344753][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.350401][ T9] ? kobject_put+0xb9/0x640 [ 202.354922][ T9] vb2_core_queue_release+0x27/0x190 [ 202.360252][ T9] vb2_video_unregister_device+0x152/0x2e0 [ 202.366080][ T9] em28xx_v4l2_init.cold+0xe1a/0x3a18 [ 202.371483][ T9] ? __pfx_em28xx_v4l2_init+0x10/0x10 [ 202.376889][ T9] em28xx_init_extension+0x13a/0x200 [ 202.382207][ T9] request_module_async+0x1e/0x30 [ 202.387251][ T9] process_one_work+0xac7/0x1b10 [ 202.392227][ T9] ? __pfx_process_one_work+0x10/0x10 [ 202.397625][ T9] ? lock_acquire+0x1d1/0x380 [ 202.402316][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.407969][ T9] worker_thread+0x5ef/0xe50 [ 202.412597][ T9] ? kthread+0x13a/0x450 [ 202.416875][ T9] ? __pfx_worker_thread+0x10/0x10 [ 202.422010][ T9] kthread+0x373/0x450 [ 202.426102][ T9] ? __pfx_kthread+0x10/0x10 [ 202.430714][ T9] ret_from_fork+0x730/0xd60 [ 202.435315][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 202.440437][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.446084][ T9] ? __switch_to+0x800/0x10f0 [ 202.450777][ T9] ? __switch_to_asm+0x39/0x70 [ 202.455548][ T9] ? __pfx_kthread+0x10/0x10 [ 202.460194][ T9] ret_from_fork_asm+0x1a/0x30 [ 202.464978][ T9] [ 202.467992][ T9] Modules linked in: [ 202.471892][ T9] ---[ end trace 0000000000000000 ]--- [ 202.477341][ T9] RIP: 0010:__wake_up_common+0x9b/0x1f0 [ 202.477399][ T9] Code: 02 00 0f 85 5b 01 00 00 48 8b 5b 40 48 8d 43 e8 4c 39 fb 0f 84 b3 00 00 00 48 ba 00 00 00 00 00 fc ff df 48 89 d9 48 c1 e9 03 <80> 3c 11 00 0f 85 18 01 00 00 48 bd 00 00 00 00 00 fc ff df 4c 8b [ 202.477431][ T9] RSP: 0018:ffffc900000e79a0 EFLAGS: 00010056 [ 202.477458][ T9] RAX: ffffffffffffffe8 RBX: 0000000000000000 RCX: 0000000000000000 [ 202.477479][ T9] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff888050001790 [ 202.477501][ T9] RBP: ffff888050001790 R08: 0000000000000000 R09: fffff5200001cf2b [ 202.477522][ T9] R10: 0000000000000003 R11: 000000000000761b R12: 0000000000000003 [ 202.477543][ T9] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880500017d0 [ 202.477567][ T9] FS: 0000000000000000(0000) GS:ffff888123b56000(0000) knlGS:0000000000000000 [ 202.477596][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 202.477618][ T9] CR2: fffffffffffffe70 CR3: 000000003431b000 CR4: 0000000000350ef0 [ 202.477640][ T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 202.477660][ T9] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 202.477683][ T9] Kernel panic - not syncing: Fatal exception [ 202.594237][ T9] Kernel Offset: disabled [ 202.598556][ T9] Rebooting in 86400 seconds..