last executing test programs: 1m9.996300163s ago: executing program 4 (id=424): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000005480)=ANY=[@ANYBLOB]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x1, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r5, 0x40044160, 0x3) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x38, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x2, {0x0, 0x6, '\x00', 0x9, 0x6, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, [], "17c17f0791710007"}}}}}}}, 0x0) fcntl$dupfd(r1, 0x0, r1) 1m6.511816169s ago: executing program 4 (id=443): socket$inet6(0xa, 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_setup(0x0, 0x0) io_uring_setup(0x7446, &(0x7f0000000640)={0x0, 0xc67f, 0x20408, 0x0, 0x11a}) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x265}, 0x8) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000480)=ANY=[], 0xf0) sendto$inet6(r3, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) prctl$PR_SCHED_CORE(0x4d, 0x2, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_open_dev$sndctrl(0x0, 0x1, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c00)='oom_adj\x00') exit(0xffff) preadv(r6, &(0x7f00000006c0), 0x0, 0x8000, 0x5) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m2.643311249s ago: executing program 4 (id=452): socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x0, 0x6}}, 0x20) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r2, 0x40046103, &(0x7f0000000300)={0x0, 0x6, 0xfffffff9, 0x9, 0x5, 0x1, 0xf7, 0x7f, 0x3, 0x1, 0x5, "f7d9d17d2756a832754d2db7a81004bd6b122e1a46766bc2f771d8be1f6c41e1"}) 59.940535915s ago: executing program 4 (id=459): r0 = epoll_create1(0x80000) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0xffffffff, "ffbdbdc772022acd2c000000000800000000000000008000", 0xffffffffffffffff}) poll(&(0x7f0000000040)=[{r2, 0x6242}], 0x1, 0x7f) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, 0x0) 58.996418985s ago: executing program 4 (id=464): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001c00010a00000000fbc298"], 0x14}}, 0x20008000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0xc000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x1000000000, 0x5, 0x41, 0x4, 0x0, 0x2004cb, 0x0, 0x40000000000a1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f0000000600)={0x0, @sliced={0x0, [0x8, 0x8c, 0xd6ea, 0x7fff, 0x1, 0x6, 0x3, 0x1, 0x6, 0xe581, 0x6, 0xfff, 0x1, 0x9, 0x975, 0x2, 0xc0f, 0x6, 0x7f, 0x4d08, 0x1, 0xb, 0x0, 0x7, 0x775, 0x5, 0xffff, 0x2, 0x3cc, 0x5, 0xd, 0xff01, 0x3, 0xfff, 0x8, 0x5, 0x9, 0x6, 0xfffb, 0x4, 0x8, 0x5, 0x8, 0x6, 0x8, 0xd7, 0x8, 0x3], 0x2e156173}}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0xc048aec8, &(0x7f0000000080)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, '\x00', 0xfc}, {}, {0x4}, {0x0, 0x4}, {0x0, 0x0, 0x0, '\x00', 0xff}, {0x0, 0x4}, {0x0, 0x0, 0x0, '\x00', 0x2}, {0x0, 0xfe}, {0x0, 0x80, 0x2}, {}, {}, {0x0, 0xfd}, {}, {0x28, 0xff}, {}, {}, {0x3}, {}, {0x0, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x40}]}}) 58.675624731s ago: executing program 4 (id=470): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5505, &(0x7f0000002480)="$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") r1 = open(&(0x7f0000000440)='./file1\x00', 0x84242, 0x1df2a23c5997fa7f) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101100, 0x0) sendfile(r2, r3, 0x0, 0x20fffe82) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0xfffffffffffffffe, 0x0, {{0x6, 0x0, 0x5, 0x81, 0x1, 0x1, {0x6, 0xff, 0x5, 0x8, 0xe, 0xd615, 0x9, 0x1, 0xfffffffe, 0x1000, 0x4000000, 0x0, 0xffffffffffffffff, 0x5, 0x2000000}}, {0x0, 0x19}}}, 0xa0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x7f03) 43.511602441s ago: executing program 32 (id=470): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5505, &(0x7f0000002480)="$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") r1 = open(&(0x7f0000000440)='./file1\x00', 0x84242, 0x1df2a23c5997fa7f) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101100, 0x0) sendfile(r2, r3, 0x0, 0x20fffe82) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0xfffffffffffffffe, 0x0, {{0x6, 0x0, 0x5, 0x81, 0x1, 0x1, {0x6, 0xff, 0x5, 0x8, 0xe, 0xd615, 0x9, 0x1, 0xfffffffe, 0x1000, 0x4000000, 0x0, 0xffffffffffffffff, 0x5, 0x2000000}}, {0x0, 0x19}}}, 0xa0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x7f03) 9.097179893s ago: executing program 5 (id=650): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 8.653015463s ago: executing program 5 (id=654): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x7000000) shmget$private(0x0, 0x400000, 0x800, &(0x7f000000e000/0x400000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$key(0xf, 0x3, 0x2) ioprio_set$pid(0x2, 0x0, 0x6000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1f00, 0x12) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) setrlimit(0x7, &(0x7f0000000400)) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0xffffffffffffffff) syz_emit_ethernet(0x86, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb810010000800450000740000000000019078ac230101ac1414aa0303907803fe00004600000000000000002f0003ac14141eac1414bb44440001ac140420001700047f000001fffffbfeac14141e00000000ac1414aa00000000ac1414aa00000000e000000100000000ac141430000000007f000001000000068eee65ef86a6ca7019c5bbad2e3d"], 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x2b) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x26d, 0x0, 0x9800000002000000}]}) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r10, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) 7.135697185s ago: executing program 5 (id=662): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, &(0x7f00000000c0)={r1, 0x0, 0xc15, 0x9, 0x1, 0x8, [0x215, 0x4, 0xddd7, 0x2, 0x4, 0x101]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, r4, 0x325, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x48) 6.760826547s ago: executing program 2 (id=664): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000000, 0x4}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r6, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x808) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r10, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 6.730663056s ago: executing program 1 (id=665): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000140)={'raw\x00', 0x0, [0x7, 0x3, 0x101, 0x80, 0x5]}, &(0x7f0000000000)=0x54) 5.450497844s ago: executing program 2 (id=667): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 5.276645448s ago: executing program 1 (id=668): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, r1, 0x801, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x26040804) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001080)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x16) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) 5.084861139s ago: executing program 5 (id=670): r0 = syz_io_uring_setup(0x988, &(0x7f0000000280)={0x0, 0x9bee, 0x8, 0xfffffffd, 0x25d}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x2, 0x4000, 0x1}) io_uring_enter(r0, 0x52dc, 0xf62e, 0x3, 0x0, 0xffffffffffffffc0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000540)=0x1) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ed43001000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) 5.01327933s ago: executing program 1 (id=671): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x9, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x1, 0x2, 0x5, 0xfffffffffffffff8, 0xfffffffffffffffc}, @alu={0x4, 0x0, 0x2, 0x9, 0x9, 0xfffffffffffffff4, 0xfffffffffffffffc}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x3}], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x101) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r5}]}}}]}, 0x6c}}, 0x0) 4.930364223s ago: executing program 0 (id=672): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x7000000) shmget$private(0x0, 0x400000, 0x800, &(0x7f000000e000/0x400000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$key(0xf, 0x3, 0x2) ioprio_set$pid(0x2, 0x0, 0x6000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1f00, 0x12) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) setrlimit(0x7, &(0x7f0000000400)) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0xffffffffffffffff) syz_emit_ethernet(0x86, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb810010000800450000740000000000019078ac230101ac1414aa0303907803fe00004600000000000000002f0003ac14141eac1414bb44440001ac140420001700047f000001fffffbfeac14141e00000000ac1414aa00000000ac1414aa00000000e000000100000000ac141430000000007f000001000000068eee65ef86a6ca7019c5bbad2e3d"], 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x2b) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x26d, 0x0, 0x9800000002000000}]}) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r10, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) 4.928966841s ago: executing program 2 (id=673): syz_open_dev$vim2m(&(0x7f0000000100), 0x1008000b173, 0x2) syz_init_net_socket$netrom(0x6, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000970000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b00000095"], &(0x7f0000000540)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x7, 0x0, &(0x7f0000000100)="e0b9547ed387db", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000001"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) 4.682944795s ago: executing program 1 (id=674): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'cryptd(adiantum(cryptd(lrw-serpent-avx2),des3_ede-asm,poly1305-s'}, 0x30) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000040)={0x86, 0x23, 0x9, 0xdedb, 0x14, "00faec694b00"}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000000)=0x8001) openat$pfkey(0xffffff9c, &(0x7f0000000100), 0x200001, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) socket(0x10, 0x803, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) socket$kcm(0x29, 0x7, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r6, &(0x7f00000003c0)="11eb534b", 0x4, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r9, 0x1, 0x4, 0x6, @local}, 0x14) accept4(r6, &(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @private1}, &(0x7f00000001c0)=0x80, 0x80800) 3.864921067s ago: executing program 2 (id=676): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), r0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20004888}, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000010c0)=""/234, 0xea}, {&(0x7f00000000c0)=""/92, 0x5c}, {&(0x7f0000000240)=""/44, 0x2c}, {&(0x7f00000011c0)=""/4099, 0x1003}, {&(0x7f0000000080)=""/42, 0x2a}, {0x0}, {&(0x7f0000000640)=""/261, 0x105}], 0x7}, 0x20102) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 3.864135077s ago: executing program 0 (id=677): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000000, 0x4}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r6, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x808) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r10, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 3.409505263s ago: executing program 2 (id=679): setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x9) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000400)=@abs={0x1}, 0x6e) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e20}, 0x6e) pread64(r0, &(0x7f0000000240)=""/164, 0x131, 0x131) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100, 0x7fffffffffffffff, 0x0) r2 = request_key(0x0, &(0x7f0000000380)={'syz', 0x0}, 0x0, 0xfffffffffffffffe) request_key(0x0, &(0x7f0000000900)={'syz', 0x0}, 0x0, r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read$char_usb(r5, &(0x7f0000000200)=""/73, 0x49) 3.340304115s ago: executing program 1 (id=680): syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = syz_open_dev$vim2m(0x0, 0xfffffffffffffff6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x0, 0x1012, 0x1, @discrete={0xfffffffe, 0x7fff}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000a80)={{0x5, 0x6, 0x401, 0x7, 'syz1\x00', 0x81}, 0x1, [0x6, 0xfffffffffffffffa, 0x95, 0x907a, 0xffffffff, 0x60, 0x1, 0xf, 0x2, 0x4, 0xfffffffffffffffd, 0x63, 0xfff, 0x100000002, 0xfffffffffffffffa, 0xc8, 0xb6da, 0x80000a5, 0xb7, 0xb6, 0x8000000000000002, 0x4000000008, 0x7, 0xfff, 0x6, 0xfb, 0x1, 0x4f51, 0x0, 0x37c7, 0xc, 0xbb33, 0x0, 0x63, 0x4, 0x4, 0x8, 0xffffffffffff7fff, 0x6, 0x8, 0x5, 0x0, 0x8, 0x401, 0x3, 0xc1be, 0xffffffff, 0x8000000000000001, 0x3, 0x0, 0x7, 0x72, 0x9, 0x2000000002, 0x6a44d0ea, 0xffffffffffffffff, 0x9, 0x5f0, 0xfffffffffffff2e2, 0x4, 0x6, 0xfffffffffffffffd, 0x7, 0xf1, 0x26e69303, 0x5, 0x2, 0x5, 0x2, 0x1, 0x9, 0x7, 0xdffffffffffffd, 0xd, 0x81, 0x8, 0x8003, 0x6, 0xe, 0x3ff, 0xffffffffffffcc1c, 0x10000, 0xfffffffffffffffb, 0x6, 0x2, 0x1, 0xf, 0x79d, 0x2, 0x8d6, 0x0, 0x5, 0x4, 0xafae, 0x5e, 0xf, 0x6, 0xb, 0x1, 0x10003, 0x1, 0x10000, 0x1ff, 0xc, 0x0, 0x7, 0x7, 0x0, 0xfc0, 0x7, 0xaad, 0x8000000000007, 0x2, 0x8, 0x200e2, 0x6, 0x6, 0x8, 0xa, 0x0, 0x9, 0x5, 0x40, 0x8000, 0x83d0, 0xf0, 0x100000000, 0x140000000]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x141900) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f00000000c0)={0x2, 0x0, 0xffffffe7, 0x1}) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, 0x0) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="39000000140081ae50003c00fbff008311001f9f660fcf065c05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bb8", 0x32}], 0x1}, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x388, 0x7ffffffe) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000000c0)={0xe, 0x2, 0x10, "f7b817716daef7e53fa4f9a9dad13c74c3f001fd3600", 0x7115131e}) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) writev(r6, &(0x7f0000000440), 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 3.325709565s ago: executing program 3 (id=681): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, r1, 0x801, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x26040804) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001080)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x16) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) 2.964243235s ago: executing program 3 (id=682): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000140)={'raw\x00', 0x0, [0x7, 0x3, 0x101, 0x80, 0x5]}, &(0x7f0000000000)=0x54) 2.798555749s ago: executing program 0 (id=683): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x3}, @TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x20040084) 2.717661659s ago: executing program 5 (id=684): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x9, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x1, 0x2, 0x5, 0xfffffffffffffff8, 0xfffffffffffffffc}, @alu={0x4, 0x0, 0x2, 0x9, 0x9, 0xfffffffffffffff4, 0xfffffffffffffffc}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x3}], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x101) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r5}]}}}]}, 0x6c}}, 0x0) 2.409074574s ago: executing program 5 (id=685): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1) close(r3) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r4, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) splice(r2, 0x0, r3, 0x0, 0xfffd, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, 0x3, 0x3, 0x301, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYRES32=r0], 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x400022c, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r5 = syz_io_uring_setup(0xcaf, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_usb_connect(0x17aff7a88c855ce9, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(r5, 0x847ba, 0x20000000, 0xe, 0x0, 0x0) r6 = io_uring_setup(0x7530, &(0x7f00000003c0)={0x0, 0x48d7, 0x800, 0x0, 0xfffffffd}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) socket(0xb, 0x2, 0x15) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40046607, &(0x7f0000000380)=0x80000000) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/50, 0x32}, {&(0x7f0000000100)=""/201, 0xc9}, {&(0x7f00000002c0)=""/144, 0x90}, {&(0x7f00000004c0)=""/163, 0xa3}, {&(0x7f0000000580)=""/212, 0xd4}], 0x5}, 0x40000000) 2.352001s ago: executing program 0 (id=686): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x0, 0x0, 0x80000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.341693734s ago: executing program 0 (id=687): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) sendfile(r4, r3, 0x0, 0x6) 1.22490993s ago: executing program 3 (id=688): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) write$sysctl(r0, &(0x7f00000000c0)='2\x00', 0x2) 1.084448044s ago: executing program 1 (id=689): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000500)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) socket$inet6(0xa, 0x5, 0x2) timer_create(0x0, 0x0, &(0x7f0000000300)) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1.048862999s ago: executing program 3 (id=690): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), r0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20004888}, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000010c0)=""/234, 0xea}, {&(0x7f00000000c0)=""/92, 0x5c}, {&(0x7f0000000240)=""/44, 0x2c}, {&(0x7f00000011c0)=""/4099, 0x1003}, {&(0x7f0000000080)=""/42, 0x2a}, {0x0}, {&(0x7f0000000640)=""/261, 0x105}], 0x7}, 0x20102) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 825.628352ms ago: executing program 3 (id=691): r0 = gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='\v\x00\x00\x00'], 0x50) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7ff}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x1) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001c40)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0xe8, 0x0, 0xe8, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x15}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x8, 0x0, 0x9}, 0x10) r3 = socket(0x1e, 0x4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, r5, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x8000) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000240)=@req3={0x5, 0x148, 0xff, 0x737, 0x400, 0x8, 0x9}, 0x1c) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1000000, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@dioread_nolock}]}, 0x1, 0x7af, &(0x7f0000000f80)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r6, 0x0, 0x800003e, 0x8000007ff) 561.4538ms ago: executing program 3 (id=692): r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) fsmount(r0, 0x1, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c000000020603000000000000000000000000000d000300686173683a6e65740000000005000400000000000900020073797a31000000001400078008001340000017e5080006400000000905000500020000000500010006000000ab2381c2f6a01e0d4f8bb4e73cd1eedc36dcbf124a5c244f1bf72536289da85aea8fabc706a476239f2ef3c80757669c468e3f66d6de1bbc41c8d3df9cf2f0a5311a9a78796e6edf520bd8ae78f6bdd8e7463328aa8ab2b3015f21be4e1334920a3646a5820ceddc8c41df5080db503a05381ea1bb9423552124443c30a1bfd669f0"], 0x5c}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x1, 0x3, 0x2}}, 0x80, 0x0}, 0x20008010) shutdown(0xffffffffffffffff, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000009060102000000f8ffffff00000000000900020073797a310000008005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 1.656092ms ago: executing program 2 (id=693): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 0s ago: executing program 0 (id=694): r0 = syz_io_uring_setup(0x988, &(0x7f0000000280)={0x0, 0x9bee, 0x8, 0xfffffffd, 0x25d}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x2, 0x4000, 0x1}) io_uring_enter(r0, 0x52dc, 0xf62e, 0x3, 0x0, 0xffffffffffffffc0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000540)=0x1) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ed43001000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) kernel console output (not intermixed with test programs): 121.897570][ T138] ? do_raw_spin_lock+0x12b/0x2f0 [ 121.897592][ T138] worker_thread+0xb49/0x1140 [ 121.897617][ T138] kthread+0x388/0x470 [ 121.897630][ T138] ? __pfx_worker_thread+0x10/0x10 [ 121.897639][ T138] ? __pfx_kthread+0x10/0x10 [ 121.897652][ T138] ret_from_fork+0x51e/0xb90 [ 121.897670][ T138] ? __pfx_ret_from_fork+0x10/0x10 [ 121.897684][ T138] ? __switch_to+0xc7d/0x1450 [ 121.897700][ T138] ? __pfx_kthread+0x10/0x10 [ 121.897713][ T138] ret_from_fork_asm+0x1a/0x30 [ 121.897734][ T138] [ 121.897971][ T138] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 122.231458][ T6292] loop1: detected capacity change from 0 to 1024 [ 122.301852][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.488773][ T5997] hfsplus: b-tree write err: -5, ino 25 [ 122.523196][ T5997] hfsplus: b-tree write err: -5, ino 4 [ 122.545446][ T5997] hfsplus: b-tree write err: -5, ino 2 [ 124.576034][ T6324] loop4: detected capacity change from 0 to 40427 [ 124.590632][ T6324] F2FS-fs (loop4): invalid crc value [ 124.633740][ T6324] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 124.643796][ T6324] F2FS-fs (loop4): Start checkpoint disabled! [ 124.652100][ T6324] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 124.660019][ T6324] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 124.674326][ T29] audit: type=1800 audit(1773674724.657:12): pid=6324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.92" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 124.793130][ T29] audit: type=1800 audit(1773674724.687:13): pid=6324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.92" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 124.910865][ T5997] kworker/u8:9: attempt to access beyond end of device [ 124.910865][ T5997] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 124.988190][ T5997] CPU: 0 UID: 0 PID: 5997 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 124.988223][ T5997] Tainted: [L]=SOFTLOCKUP [ 124.988230][ T5997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 124.988242][ T5997] Workqueue: writeback wb_workfn (flush-7:4) [ 124.988273][ T5997] Call Trace: [ 124.988280][ T5997] [ 124.988288][ T5997] dump_stack_lvl+0xe8/0x150 [ 124.988321][ T5997] f2fs_handle_critical_error+0x37c/0x540 [ 124.988353][ T5997] f2fs_write_end_io+0x1274/0x1740 [ 124.988399][ T5997] __submit_merged_bio+0x256/0x700 [ 124.988427][ T5997] __submit_merged_write_cond+0x3c9/0x4e0 [ 124.988457][ T5997] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 124.988500][ T5997] f2fs_write_data_pages+0x287e/0x34f0 [ 124.988561][ T5997] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 124.988595][ T5997] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 124.988625][ T5997] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 124.988652][ T5997] ? __lock_acquire+0x6b5/0x2cf0 [ 124.988678][ T5997] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 124.988694][ T5997] do_writepages+0x32e/0x550 [ 124.988712][ T5997] ? reacquire_held_locks+0x104/0x190 [ 124.988723][ T5997] ? writeback_sb_inodes+0x477/0x1a20 [ 124.988741][ T5997] __writeback_single_inode+0x133/0x11a0 [ 124.988755][ T5997] ? do_raw_spin_unlock+0xf5/0x210 [ 124.988772][ T5997] writeback_sb_inodes+0x992/0x1a20 [ 124.988796][ T5997] ? __lock_acquire+0x6b5/0x2cf0 [ 124.988816][ T5997] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 124.988829][ T5997] ? do_raw_spin_lock+0x12b/0x2f0 [ 124.988865][ T5997] ? rcu_is_watching+0x15/0xb0 [ 124.988881][ T5997] wb_writeback+0x456/0xb70 [ 124.988896][ T5997] ? queue_io+0x1e1/0x4a0 [ 124.988914][ T5997] ? __pfx_wb_writeback+0x10/0x10 [ 124.988926][ T5997] ? do_raw_spin_lock+0x12b/0x2f0 [ 124.988949][ T5997] wb_workfn+0x414/0xf50 [ 124.988978][ T5997] ? look_up_lock_class+0x57/0x110 [ 124.988999][ T5997] ? __pfx_wb_workfn+0x10/0x10 [ 124.989012][ T5997] ? do_raw_spin_lock+0x12b/0x2f0 [ 124.989026][ T5997] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 124.989057][ T5997] ? process_one_work+0x8bb/0x1780 [ 124.989073][ T5997] process_one_work+0x9ab/0x1780 [ 124.989101][ T5997] ? __pfx_process_one_work+0x10/0x10 [ 124.989115][ T5997] ? do_raw_spin_lock+0x12b/0x2f0 [ 124.989138][ T5997] worker_thread+0xb49/0x1140 [ 124.989154][ T5997] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 124.989173][ T5997] kthread+0x388/0x470 [ 124.989186][ T5997] ? __pfx_worker_thread+0x10/0x10 [ 124.989195][ T5997] ? __pfx_kthread+0x10/0x10 [ 124.989209][ T5997] ret_from_fork+0x51e/0xb90 [ 124.989227][ T5997] ? __pfx_ret_from_fork+0x10/0x10 [ 124.989241][ T5997] ? __switch_to+0xc7d/0x1450 [ 124.989260][ T5997] ? __pfx_kthread+0x10/0x10 [ 124.989274][ T5997] ret_from_fork_asm+0x1a/0x30 [ 124.989295][ T5997] [ 125.267332][ T5997] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 126.911542][ T6339] loop3: detected capacity change from 0 to 2048 [ 127.391427][ T6342] loop1: detected capacity change from 0 to 512 [ 127.415384][ T6342] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 128.688461][ T6339] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.701213][ T5997] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 129.014656][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.492384][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 129.662897][ T10] usb 4-1: too many configurations: 33, using maximum allowed: 8 [ 129.777307][ T10] usb 4-1: New USB device found, idVendor=0eb1, idProduct=6668, bcdDevice=57.b8 [ 129.808606][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.825030][ T10] usb 4-1: Product: syz [ 129.907290][ T10] usb 4-1: Manufacturer: syz [ 129.926757][ T10] usb 4-1: SerialNumber: syz [ 130.036257][ T10] usb 4-1: config 0 descriptor?? [ 130.468843][ T10] go7007-loader 4-1:0.0: can't handle multiple config [ 130.573888][ T10] go7007-loader 4-1:0.0: probe failed [ 130.683768][ T10] usb 4-1: USB disconnect, device number 3 [ 131.184852][ T6368] loop4: detected capacity change from 0 to 128 [ 131.235399][ T6368] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 131.260946][ T6368] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 131.375933][ T6366] loop1: detected capacity change from 0 to 40427 [ 131.479862][ T6366] F2FS-fs (loop1): invalid crc value [ 131.557699][ T6366] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 132.065354][ T6366] F2FS-fs (loop1): Start checkpoint disabled! [ 132.123665][ T6366] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 132.132394][ T6366] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 132.146726][ T29] audit: type=1800 audit(1773674732.127:14): pid=6366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.103" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 132.249022][ T29] audit: type=1800 audit(1773674732.127:15): pid=6366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.103" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 132.417410][ T6060] kworker/u8:10: attempt to access beyond end of device [ 132.417410][ T6060] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 132.443320][ T6060] CPU: 0 UID: 0 PID: 6060 Comm: kworker/u8:10 Tainted: G L syzkaller #0 PREEMPT(full) [ 132.443349][ T6060] Tainted: [L]=SOFTLOCKUP [ 132.443355][ T6060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 132.443366][ T6060] Workqueue: writeback wb_workfn (flush-7:1) [ 132.443395][ T6060] Call Trace: [ 132.443402][ T6060] [ 132.443410][ T6060] dump_stack_lvl+0xe8/0x150 [ 132.443433][ T6060] f2fs_handle_critical_error+0x37c/0x540 [ 132.443452][ T6060] f2fs_write_end_io+0x1274/0x1740 [ 132.443480][ T6060] __submit_merged_bio+0x256/0x700 [ 132.443498][ T6060] __submit_merged_write_cond+0x3c9/0x4e0 [ 132.443516][ T6060] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 132.443543][ T6060] f2fs_write_data_pages+0x287e/0x34f0 [ 132.443577][ T6060] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 132.443600][ T6060] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 132.443629][ T6060] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 132.443656][ T6060] ? __lock_acquire+0x6b5/0x2cf0 [ 132.443683][ T6060] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 132.443698][ T6060] do_writepages+0x32e/0x550 [ 132.443715][ T6060] ? reacquire_held_locks+0x104/0x190 [ 132.443726][ T6060] ? writeback_sb_inodes+0x477/0x1a20 [ 132.443744][ T6060] __writeback_single_inode+0x133/0x11a0 [ 132.443758][ T6060] ? do_raw_spin_unlock+0xf5/0x210 [ 132.443774][ T6060] writeback_sb_inodes+0x992/0x1a20 [ 132.443798][ T6060] ? __lock_acquire+0x6b5/0x2cf0 [ 132.443817][ T6060] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 132.443837][ T6060] ? do_raw_spin_lock+0x12b/0x2f0 [ 132.443872][ T6060] ? rcu_is_watching+0x15/0xb0 [ 132.443889][ T6060] wb_writeback+0x456/0xb70 [ 132.443905][ T6060] ? queue_io+0x1e1/0x4a0 [ 132.443922][ T6060] ? __pfx_wb_writeback+0x10/0x10 [ 132.443934][ T6060] ? do_raw_spin_lock+0x12b/0x2f0 [ 132.443957][ T6060] wb_workfn+0x414/0xf50 [ 132.443969][ T6060] ? look_up_lock_class+0x57/0x110 [ 132.443990][ T6060] ? __pfx_wb_workfn+0x10/0x10 [ 132.444003][ T6060] ? do_raw_spin_lock+0x12b/0x2f0 [ 132.444017][ T6060] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 132.444043][ T6060] ? process_one_work+0x8bb/0x1780 [ 132.444060][ T6060] process_one_work+0x9ab/0x1780 [ 132.444088][ T6060] ? __pfx_process_one_work+0x10/0x10 [ 132.444102][ T6060] ? do_raw_spin_lock+0x12b/0x2f0 [ 132.444124][ T6060] worker_thread+0xb49/0x1140 [ 132.444140][ T6060] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 132.444159][ T6060] kthread+0x388/0x470 [ 132.444172][ T6060] ? __pfx_worker_thread+0x10/0x10 [ 132.444181][ T6060] ? __pfx_kthread+0x10/0x10 [ 132.444196][ T6060] ret_from_fork+0x51e/0xb90 [ 132.444213][ T6060] ? __pfx_ret_from_fork+0x10/0x10 [ 132.444228][ T6060] ? __switch_to+0xc7d/0x1450 [ 132.444243][ T6060] ? __pfx_kthread+0x10/0x10 [ 132.444257][ T6060] ret_from_fork_asm+0x1a/0x30 [ 132.444277][ T6060] [ 132.444282][ T6060] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 132.733440][ T5832] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.881605][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.889116][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.578716][ T6390] loop1: detected capacity change from 0 to 64 [ 134.141955][ T5899] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 134.426998][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 134.565863][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.685418][ T5899] usb 2-1: New USB device found, idVendor=12ba, idProduct=0100, bcdDevice= 0.00 [ 134.772411][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.863257][ T5899] usb 2-1: config 0 descriptor?? [ 135.323106][ T5899] usbhid 2-1:0.0: can't add hid device: -71 [ 135.359910][ T5899] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 135.433819][ T5899] usb 2-1: USB disconnect, device number 10 [ 138.585419][ T6411] loop4: detected capacity change from 0 to 32768 [ 138.840993][ T6418] read_mapping_page failed! [ 138.845840][ T6418] ERROR: (device loop4): txCommit: [ 138.845840][ T6418] [ 138.881109][ T6418] ERROR: (device loop4): remounting filesystem as read-only [ 139.260922][ T6421] loop1: detected capacity change from 0 to 128 [ 139.484989][ T6422] loop3: detected capacity change from 0 to 40427 [ 139.500209][ T6422] F2FS-fs (loop3): invalid crc value [ 139.594925][ T6422] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 139.605119][ T6422] F2FS-fs (loop3): Start checkpoint disabled! [ 139.618040][ T6422] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 139.620822][ T6421] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 139.638585][ T6422] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 139.650255][ T29] audit: type=1800 audit(1773674739.637:16): pid=6422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.117" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 139.841031][ T6421] ext4 filesystem being mounted at /24/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 139.948487][ T1088] kworker/u8:7: attempt to access beyond end of device [ 139.948487][ T1088] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 140.013036][ T1088] CPU: 0 UID: 0 PID: 1088 Comm: kworker/u8:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.013063][ T1088] Tainted: [L]=SOFTLOCKUP [ 140.013068][ T1088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 140.013078][ T1088] Workqueue: writeback wb_workfn (flush-7:3) [ 140.013110][ T1088] Call Trace: [ 140.013117][ T1088] [ 140.013125][ T1088] dump_stack_lvl+0xe8/0x150 [ 140.013156][ T1088] f2fs_handle_critical_error+0x37c/0x540 [ 140.013185][ T1088] f2fs_write_end_io+0x1274/0x1740 [ 140.013225][ T1088] __submit_merged_bio+0x256/0x700 [ 140.013253][ T1088] __submit_merged_write_cond+0x3c9/0x4e0 [ 140.013283][ T1088] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 140.013337][ T1088] f2fs_write_data_pages+0x287e/0x34f0 [ 140.013404][ T1088] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 140.013429][ T1088] ? cfg80211_inform_single_bss_data+0x13c6/0x1b70 [ 140.013507][ T1088] ? __lock_acquire+0x6b5/0x2cf0 [ 140.013540][ T1088] ? __lock_acquire+0x6b5/0x2cf0 [ 140.013585][ T1088] ? unwind_next_frame+0xa5/0x23c0 [ 140.013631][ T1088] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 140.013658][ T1088] do_writepages+0x32e/0x550 [ 140.013688][ T1088] ? reacquire_held_locks+0x104/0x190 [ 140.013707][ T1088] ? writeback_sb_inodes+0x477/0x1a20 [ 140.013737][ T1088] __writeback_single_inode+0x133/0x11a0 [ 140.013763][ T1088] ? do_raw_spin_unlock+0xf5/0x210 [ 140.013790][ T1088] writeback_sb_inodes+0x992/0x1a20 [ 140.013842][ T1088] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 140.013863][ T1088] ? do_raw_spin_lock+0x12b/0x2f0 [ 140.013924][ T1088] ? rcu_is_watching+0x15/0xb0 [ 140.013953][ T1088] wb_writeback+0x456/0xb70 [ 140.013980][ T1088] ? queue_io+0x1e1/0x4a0 [ 140.014011][ T1088] ? __pfx_wb_writeback+0x10/0x10 [ 140.014032][ T1088] ? do_raw_spin_lock+0x12b/0x2f0 [ 140.014070][ T1088] wb_workfn+0x414/0xf50 [ 140.014092][ T1088] ? look_up_lock_class+0x57/0x110 [ 140.014133][ T1088] ? __pfx_wb_workfn+0x10/0x10 [ 140.014156][ T1088] ? do_raw_spin_lock+0x12b/0x2f0 [ 140.014183][ T1088] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 140.014227][ T1088] ? process_one_work+0x8bb/0x1780 [ 140.014253][ T1088] process_one_work+0x9ab/0x1780 [ 140.014309][ T1088] ? __pfx_process_one_work+0x10/0x10 [ 140.014335][ T1088] ? do_raw_spin_lock+0x12b/0x2f0 [ 140.014375][ T1088] worker_thread+0xb49/0x1140 [ 140.014418][ T1088] kthread+0x388/0x470 [ 140.014440][ T1088] ? __pfx_worker_thread+0x10/0x10 [ 140.014456][ T1088] ? __pfx_kthread+0x10/0x10 [ 140.014480][ T1088] ret_from_fork+0x51e/0xb90 [ 140.014510][ T1088] ? __pfx_ret_from_fork+0x10/0x10 [ 140.014535][ T1088] ? __switch_to+0xc7d/0x1450 [ 140.014568][ T1088] ? __pfx_kthread+0x10/0x10 [ 140.014592][ T1088] ret_from_fork_asm+0x1a/0x30 [ 140.014627][ T1088] [ 140.016662][ T1088] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 140.844325][ T5838] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 140.869064][ T6436] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 141.637056][ T6447] loop4: detected capacity change from 0 to 64 [ 142.501968][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 142.806095][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.877546][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 142.905361][ T9] usb 2-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba [ 142.923514][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.950704][ T9] usb 2-1: config 0 descriptor?? [ 143.131158][ T6461] loop0: detected capacity change from 0 to 40427 [ 143.148759][ T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 143.162022][ T6461] F2FS-fs (loop0): invalid crc value [ 143.206667][ T6461] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 143.218909][ T6461] F2FS-fs (loop0): Start checkpoint disabled! [ 143.227919][ T6461] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 143.235788][ T6461] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 143.248892][ T29] audit: type=1800 audit(1773674743.227:17): pid=6461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.130" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 143.545824][ T138] kworker/u8:5: attempt to access beyond end of device [ 143.545824][ T138] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 143.591561][ T138] CPU: 1 UID: 0 PID: 138 Comm: kworker/u8:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.591593][ T138] Tainted: [L]=SOFTLOCKUP [ 143.591599][ T138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 143.591610][ T138] Workqueue: writeback wb_workfn (flush-7:0) [ 143.591639][ T138] Call Trace: [ 143.591646][ T138] [ 143.591653][ T138] dump_stack_lvl+0xe8/0x150 [ 143.591683][ T138] f2fs_handle_critical_error+0x37c/0x540 [ 143.591713][ T138] f2fs_write_end_io+0x1274/0x1740 [ 143.591760][ T138] __submit_merged_bio+0x256/0x700 [ 143.591790][ T138] __submit_merged_write_cond+0x3c9/0x4e0 [ 143.591821][ T138] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 143.591862][ T138] f2fs_write_data_pages+0x287e/0x34f0 [ 143.591914][ T138] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 143.591950][ T138] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 143.592000][ T138] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 143.592046][ T138] ? __lock_acquire+0x6b5/0x2cf0 [ 143.592090][ T138] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 143.592118][ T138] do_writepages+0x32e/0x550 [ 143.592145][ T138] ? reacquire_held_locks+0x104/0x190 [ 143.592162][ T138] ? writeback_sb_inodes+0x477/0x1a20 [ 143.592189][ T138] __writeback_single_inode+0x133/0x11a0 [ 143.592220][ T138] ? do_raw_spin_unlock+0xf5/0x210 [ 143.592244][ T138] writeback_sb_inodes+0x992/0x1a20 [ 143.592281][ T138] ? __lock_acquire+0x6b5/0x2cf0 [ 143.592310][ T138] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 143.592330][ T138] ? do_raw_spin_lock+0x12b/0x2f0 [ 143.592383][ T138] ? rcu_is_watching+0x15/0xb0 [ 143.592409][ T138] wb_writeback+0x456/0xb70 [ 143.592433][ T138] ? queue_io+0x1e1/0x4a0 [ 143.592461][ T138] ? __pfx_wb_writeback+0x10/0x10 [ 143.592482][ T138] ? do_raw_spin_lock+0x12b/0x2f0 [ 143.592515][ T138] wb_workfn+0x414/0xf50 [ 143.592534][ T138] ? look_up_lock_class+0x57/0x110 [ 143.592566][ T138] ? __pfx_wb_workfn+0x10/0x10 [ 143.592588][ T138] ? do_raw_spin_lock+0x12b/0x2f0 [ 143.592612][ T138] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 143.592653][ T138] ? process_one_work+0x8bb/0x1780 [ 143.592678][ T138] process_one_work+0x9ab/0x1780 [ 143.592723][ T138] ? __pfx_process_one_work+0x10/0x10 [ 143.592748][ T138] ? do_raw_spin_lock+0x12b/0x2f0 [ 143.592783][ T138] worker_thread+0xb49/0x1140 [ 143.592827][ T138] kthread+0x388/0x470 [ 143.592848][ T138] ? __pfx_worker_thread+0x10/0x10 [ 143.592862][ T138] ? __pfx_kthread+0x10/0x10 [ 143.592883][ T138] ret_from_fork+0x51e/0xb90 [ 143.592912][ T138] ? __pfx_ret_from_fork+0x10/0x10 [ 143.592933][ T138] ? __switch_to+0xc7d/0x1450 [ 143.592959][ T138] ? __pfx_kthread+0x10/0x10 [ 143.592981][ T138] ret_from_fork_asm+0x1a/0x30 [ 143.593016][ T138] [ 143.877918][ T138] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 144.143506][ T6471] loop0: detected capacity change from 0 to 64 [ 144.508065][ T5831] hfs: node 4:3 still has 1 user(s)! [ 144.833621][ T5899] usb 2-1: USB disconnect, device number 11 [ 145.788940][ T6480] loop1: detected capacity change from 0 to 512 [ 145.823576][ T6480] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 145.841744][ T6483] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 146.668688][ T6493] overlayfs: missing 'lowerdir' [ 146.674484][ T6486] orangefs_mount: mount request failed with -4 [ 146.701039][ T6493] overlayfs: overlapping lowerdir path [ 146.826502][ T77] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 147.330282][ T6500] loop0: detected capacity change from 0 to 40427 [ 147.357167][ T6500] F2FS-fs (loop0): invalid crc value [ 147.405822][ T6500] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 147.426552][ T6500] F2FS-fs (loop0): Start checkpoint disabled! [ 147.433537][ T6500] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 147.441532][ T6500] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 147.457653][ T29] audit: type=1800 audit(1773674747.437:18): pid=6500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.141" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 147.677923][ T32] kworker/u8:2: attempt to access beyond end of device [ 147.677923][ T32] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 147.840948][ T32] CPU: 0 UID: 0 PID: 32 Comm: kworker/u8:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 147.840976][ T32] Tainted: [L]=SOFTLOCKUP [ 147.840981][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 147.840991][ T32] Workqueue: writeback wb_workfn (flush-7:0) [ 147.841017][ T32] Call Trace: [ 147.841023][ T32] [ 147.841030][ T32] dump_stack_lvl+0xe8/0x150 [ 147.841055][ T32] f2fs_handle_critical_error+0x37c/0x540 [ 147.841082][ T32] f2fs_write_end_io+0x1274/0x1740 [ 147.841122][ T32] __submit_merged_bio+0x256/0x700 [ 147.841148][ T32] __submit_merged_write_cond+0x3c9/0x4e0 [ 147.841175][ T32] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 147.841222][ T32] f2fs_write_data_pages+0x287e/0x34f0 [ 147.841274][ T32] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 147.841307][ T32] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 147.841351][ T32] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 147.841392][ T32] ? __lock_acquire+0x6b5/0x2cf0 [ 147.841430][ T32] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 147.841452][ T32] do_writepages+0x32e/0x550 [ 147.841480][ T32] ? reacquire_held_locks+0x104/0x190 [ 147.841496][ T32] ? writeback_sb_inodes+0x477/0x1a20 [ 147.841521][ T32] __writeback_single_inode+0x133/0x11a0 [ 147.841542][ T32] ? do_raw_spin_unlock+0xf5/0x210 [ 147.841565][ T32] writeback_sb_inodes+0x992/0x1a20 [ 147.841602][ T32] ? __lock_acquire+0x6b5/0x2cf0 [ 147.841629][ T32] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 147.841647][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 147.841699][ T32] ? rcu_is_watching+0x15/0xb0 [ 147.841723][ T32] wb_writeback+0x456/0xb70 [ 147.841746][ T32] ? queue_io+0x1e1/0x4a0 [ 147.841772][ T32] ? __pfx_wb_writeback+0x10/0x10 [ 147.841788][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 147.841821][ T32] wb_workfn+0x414/0xf50 [ 147.841839][ T32] ? look_up_lock_class+0x57/0x110 [ 147.841873][ T32] ? __pfx_wb_workfn+0x10/0x10 [ 147.841893][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 147.841916][ T32] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 147.841954][ T32] ? process_one_work+0x8bb/0x1780 [ 147.841975][ T32] process_one_work+0x9ab/0x1780 [ 147.842016][ T32] ? __pfx_process_one_work+0x10/0x10 [ 147.842037][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 147.842070][ T32] worker_thread+0xb49/0x1140 [ 147.842094][ T32] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 147.842124][ T32] kthread+0x388/0x470 [ 147.842143][ T32] ? __pfx_worker_thread+0x10/0x10 [ 147.842156][ T32] ? __pfx_kthread+0x10/0x10 [ 147.842176][ T32] ret_from_fork+0x51e/0xb90 [ 147.842206][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 147.842226][ T32] ? __switch_to+0xc7d/0x1450 [ 147.842250][ T32] ? __pfx_kthread+0x10/0x10 [ 147.842269][ T32] ret_from_fork_asm+0x1a/0x30 [ 147.842300][ T32] [ 148.120349][ T6506] loop3: detected capacity change from 0 to 64 [ 148.128624][ T32] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 151.920740][ T6532] orangefs_mount: mount request failed with -4 [ 152.139695][ T6543] overlayfs: missing 'lowerdir' [ 152.202389][ T6544] overlayfs: overlapping lowerdir path [ 152.693870][ T6550] loop2: detected capacity change from 0 to 40427 [ 152.709693][ T6550] F2FS-fs (loop2): invalid crc value [ 152.823222][ T6550] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 152.834810][ T6550] F2FS-fs (loop2): Start checkpoint disabled! [ 152.841972][ T5922] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 152.853548][ T6550] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 152.861528][ T6550] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 152.878624][ T29] audit: type=1800 audit(1773674752.857:19): pid=6550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.154" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 152.882791][ T6550] syz.2.154: attempt to access beyond end of device [ 152.882791][ T6550] loop2: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 152.915214][ T6550] syz.2.154: attempt to access beyond end of device [ 152.915214][ T6550] loop2: rw=2049, sector=45224, nr_sectors = 128 limit=40427 [ 152.931675][ T6550] syz.2.154: attempt to access beyond end of device [ 152.931675][ T6550] loop2: rw=2049, sector=45352, nr_sectors = 128 limit=40427 [ 152.947438][ T6550] syz.2.154: attempt to access beyond end of device [ 152.947438][ T6550] loop2: rw=2049, sector=45480, nr_sectors = 128 limit=40427 [ 152.964135][ T6550] syz.2.154: attempt to access beyond end of device [ 152.964135][ T6550] loop2: rw=2049, sector=45608, nr_sectors = 128 limit=40427 [ 152.979748][ T6550] syz.2.154: attempt to access beyond end of device [ 152.979748][ T6550] loop2: rw=2049, sector=45736, nr_sectors = 128 limit=40427 [ 152.995911][ T6550] syz.2.154: attempt to access beyond end of device [ 152.995911][ T6550] loop2: rw=2049, sector=45864, nr_sectors = 128 limit=40427 [ 153.012218][ T6550] syz.2.154: attempt to access beyond end of device [ 153.012218][ T6550] loop2: rw=2049, sector=45992, nr_sectors = 128 limit=40427 [ 153.028866][ T6550] syz.2.154: attempt to access beyond end of device [ 153.028866][ T6550] loop2: rw=2049, sector=46120, nr_sectors = 128 limit=40427 [ 153.046507][ T6550] syz.2.154: attempt to access beyond end of device [ 153.046507][ T6550] loop2: rw=2049, sector=46248, nr_sectors = 128 limit=40427 [ 153.198435][ T5922] usb 1-1: Using ep0 maxpacket: 8 [ 153.305016][ T5922] usb 1-1: unable to get BOS descriptor or descriptor too short [ 153.387619][ T6060] CPU: 1 UID: 0 PID: 6060 Comm: kworker/u8:10 Tainted: G L syzkaller #0 PREEMPT(full) [ 153.387652][ T6060] Tainted: [L]=SOFTLOCKUP [ 153.387659][ T6060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 153.387670][ T6060] Workqueue: writeback wb_workfn (flush-7:2) [ 153.387700][ T6060] Call Trace: [ 153.387708][ T6060] [ 153.387715][ T6060] dump_stack_lvl+0xe8/0x150 [ 153.387746][ T6060] f2fs_handle_critical_error+0x37c/0x540 [ 153.387777][ T6060] f2fs_write_end_io+0x1274/0x1740 [ 153.387876][ T6060] __submit_merged_bio+0x256/0x700 [ 153.387906][ T6060] __submit_merged_write_cond+0x3c9/0x4e0 [ 153.387939][ T6060] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 153.387984][ T6060] f2fs_write_data_pages+0x287e/0x34f0 [ 153.388045][ T6060] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 153.388069][ T6060] ? do_raw_spin_lock+0x12b/0x2f0 [ 153.388136][ T6060] ? finish_task_switch+0x41f/0xbe0 [ 153.388165][ T6060] ? lockdep_hardirqs_on+0x7a/0x110 [ 153.388187][ T6060] ? finish_task_switch+0x41f/0xbe0 [ 153.388249][ T6060] ? lockdep_hardirqs_on+0x7a/0x110 [ 153.388269][ T6060] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 153.388297][ T6060] do_writepages+0x32e/0x550 [ 153.388366][ T6060] ? preempt_schedule_thunk+0x16/0x30 [ 153.388398][ T6060] __writeback_single_inode+0x133/0x11a0 [ 153.388429][ T6060] writeback_sb_inodes+0x992/0x1a20 [ 153.388477][ T6060] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 153.388538][ T6060] ? rcu_is_watching+0x15/0xb0 [ 153.388566][ T6060] wb_writeback+0x456/0xb70 [ 153.388593][ T6060] ? queue_io+0x1e1/0x4a0 [ 153.388624][ T6060] ? __pfx_wb_writeback+0x10/0x10 [ 153.388646][ T6060] ? do_raw_spin_lock+0x12b/0x2f0 [ 153.388697][ T6060] wb_workfn+0x414/0xf50 [ 153.388720][ T6060] ? look_up_lock_class+0x57/0x110 [ 153.388763][ T6060] ? __pfx_wb_workfn+0x10/0x10 [ 153.388787][ T6060] ? do_raw_spin_lock+0x12b/0x2f0 [ 153.388813][ T6060] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 153.388858][ T6060] ? process_one_work+0x8bb/0x1780 [ 153.388887][ T6060] process_one_work+0x9ab/0x1780 [ 153.388933][ T6060] ? __pfx_process_one_work+0x10/0x10 [ 153.388958][ T6060] ? do_raw_spin_lock+0x12b/0x2f0 [ 153.388998][ T6060] worker_thread+0xb49/0x1140 [ 153.389027][ T6060] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 153.389061][ T6060] kthread+0x388/0x470 [ 153.389085][ T6060] ? __pfx_worker_thread+0x10/0x10 [ 153.389101][ T6060] ? __pfx_kthread+0x10/0x10 [ 153.389125][ T6060] ret_from_fork+0x51e/0xb90 [ 153.389155][ T6060] ? __pfx_ret_from_fork+0x10/0x10 [ 153.389181][ T6060] ? __switch_to+0xc7d/0x1450 [ 153.389209][ T6060] ? __pfx_kthread+0x10/0x10 [ 153.389234][ T6060] ret_from_fork_asm+0x1a/0x30 [ 153.389267][ T6060] [ 153.902034][ T6060] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 154.404275][ T5922] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.755841][ T5922] usb 1-1: config 0 has no interfaces? [ 156.762475][ T5922] usb 1-1: string descriptor 0 read error: -71 [ 156.768976][ T5922] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 156.778443][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.790756][ T5922] usb 1-1: config 0 descriptor?? [ 156.798194][ T5922] usb 1-1: can't set config #0, error -71 [ 156.806000][ T5922] usb 1-1: USB disconnect, device number 2 [ 158.573897][ T6579] orangefs_mount: mount request failed with -4 [ 158.790299][ T6587] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.799973][ T6587] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.815704][ T6587] overlayfs: overlapping lowerdir path [ 159.697013][ T6593] loop0: detected capacity change from 0 to 131072 [ 159.726416][ T6593] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 159.734664][ T6593] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 159.744719][ T6593] F2FS-fs (loop0): invalid crc value [ 159.788305][ T6593] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 159.805988][ T6593] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 159.813304][ T6593] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 160.409430][ T6601] loop3: detected capacity change from 0 to 40427 [ 160.427818][ T6601] F2FS-fs (loop3): invalid crc value [ 160.516163][ T6601] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 160.530672][ T6601] F2FS-fs (loop3): Start checkpoint disabled! [ 160.538440][ T6601] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 160.546617][ T6601] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 160.563825][ T29] audit: type=1800 audit(1773674760.537:20): pid=6601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.167" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 160.566010][ T6601] bio_check_eod: 102 callbacks suppressed [ 160.566028][ T6601] syz.3.167: attempt to access beyond end of device [ 160.566028][ T6601] loop3: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 160.606586][ T6601] syz.3.167: attempt to access beyond end of device [ 160.606586][ T6601] loop3: rw=2049, sector=45224, nr_sectors = 128 limit=40427 [ 160.624087][ T6601] syz.3.167: attempt to access beyond end of device [ 160.624087][ T6601] loop3: rw=2049, sector=45352, nr_sectors = 128 limit=40427 [ 160.639715][ T6601] syz.3.167: attempt to access beyond end of device [ 160.639715][ T6601] loop3: rw=2049, sector=45480, nr_sectors = 128 limit=40427 [ 160.655637][ T6601] syz.3.167: attempt to access beyond end of device [ 160.655637][ T6601] loop3: rw=2049, sector=45608, nr_sectors = 128 limit=40427 [ 160.671322][ T6601] syz.3.167: attempt to access beyond end of device [ 160.671322][ T6601] loop3: rw=2049, sector=45736, nr_sectors = 128 limit=40427 [ 160.687203][ T6601] syz.3.167: attempt to access beyond end of device [ 160.687203][ T6601] loop3: rw=2049, sector=45864, nr_sectors = 128 limit=40427 [ 160.703043][ T6601] syz.3.167: attempt to access beyond end of device [ 160.703043][ T6601] loop3: rw=2049, sector=45992, nr_sectors = 128 limit=40427 [ 160.719755][ T6601] syz.3.167: attempt to access beyond end of device [ 160.719755][ T6601] loop3: rw=2049, sector=46120, nr_sectors = 128 limit=40427 [ 160.735480][ T6601] syz.3.167: attempt to access beyond end of device [ 160.735480][ T6601] loop3: rw=2049, sector=46248, nr_sectors = 128 limit=40427 [ 161.021219][ T138] CPU: 0 UID: 0 PID: 138 Comm: kworker/u8:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 161.021240][ T138] Tainted: [L]=SOFTLOCKUP [ 161.021244][ T138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 161.021250][ T138] Workqueue: writeback wb_workfn (flush-7:3) [ 161.021270][ T138] Call Trace: [ 161.021274][ T138] [ 161.021278][ T138] dump_stack_lvl+0xe8/0x150 [ 161.021297][ T138] f2fs_handle_critical_error+0x37c/0x540 [ 161.021315][ T138] f2fs_write_end_io+0x1274/0x1740 [ 161.021341][ T138] __submit_merged_bio+0x256/0x700 [ 161.021358][ T138] __submit_merged_write_cond+0x3c9/0x4e0 [ 161.021375][ T138] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 161.021400][ T138] f2fs_write_data_pages+0x287e/0x34f0 [ 161.021432][ T138] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 161.021483][ T138] ? __lock_acquire+0x6b5/0x2cf0 [ 161.021508][ T138] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 161.021524][ T138] do_writepages+0x32e/0x550 [ 161.021540][ T138] ? reacquire_held_locks+0x104/0x190 [ 161.021551][ T138] ? writeback_sb_inodes+0x477/0x1a20 [ 161.021568][ T138] __writeback_single_inode+0x133/0x11a0 [ 161.021582][ T138] ? do_raw_spin_unlock+0xf5/0x210 [ 161.021597][ T138] writeback_sb_inodes+0x992/0x1a20 [ 161.021632][ T138] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 161.021644][ T138] ? do_raw_spin_lock+0x12b/0x2f0 [ 161.021677][ T138] ? rcu_is_watching+0x15/0xb0 [ 161.021692][ T138] wb_writeback+0x456/0xb70 [ 161.021706][ T138] ? queue_io+0x1e1/0x4a0 [ 161.021723][ T138] ? __pfx_wb_writeback+0x10/0x10 [ 161.021735][ T138] ? do_raw_spin_lock+0x12b/0x2f0 [ 161.021756][ T138] wb_workfn+0x414/0xf50 [ 161.021767][ T138] ? look_up_lock_class+0x57/0x110 [ 161.021798][ T138] ? __pfx_wb_workfn+0x10/0x10 [ 161.021819][ T138] ? do_raw_spin_lock+0x12b/0x2f0 [ 161.021835][ T138] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 161.021872][ T138] ? process_one_work+0x8bb/0x1780 [ 161.021897][ T138] process_one_work+0x9ab/0x1780 [ 161.021943][ T138] ? __pfx_process_one_work+0x10/0x10 [ 161.021968][ T138] ? do_raw_spin_lock+0x12b/0x2f0 [ 161.022007][ T138] worker_thread+0xb49/0x1140 [ 161.022050][ T138] kthread+0x388/0x470 [ 161.022072][ T138] ? __pfx_worker_thread+0x10/0x10 [ 161.022088][ T138] ? __pfx_kthread+0x10/0x10 [ 161.022111][ T138] ret_from_fork+0x51e/0xb90 [ 161.022140][ T138] ? __pfx_ret_from_fork+0x10/0x10 [ 161.022165][ T138] ? __switch_to+0xc7d/0x1450 [ 161.022193][ T138] ? __pfx_kthread+0x10/0x10 [ 161.022217][ T138] ret_from_fork_asm+0x1a/0x30 [ 161.022252][ T138] [ 161.596380][ T138] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 162.681800][ T6619] Zero length message leads to an empty skb [ 163.919983][ T6608] loop0: detected capacity change from 0 to 32768 [ 164.005179][ T6608] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.168 (6608) [ 165.328581][ T6608] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 165.397491][ T6633] orangefs_mount: mount request failed with -4 [ 165.452914][ T6608] BTRFS info (device loop0): using crc32c checksum algorithm [ 165.573932][ T6608] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 165.924690][ T6608] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 165.955424][ T6608] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 166.059067][ T6608] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 166.165173][ T6608] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 166.276475][ T6608] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 166.385213][ T6608] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 166.496078][ T6608] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 166.623234][ T6608] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 166.740879][ T6608] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 166.901134][ T6608] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 167.244776][ T6608] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 167.326681][ T6608] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 167.384714][ T6651] loop3: detected capacity change from 0 to 64 [ 167.472675][ T6630] loop4: detected capacity change from 0 to 32768 [ 167.654987][ T6608] BTRFS error (device loop0): open_ctree failed: -12 [ 168.426651][ T6656] loop2: detected capacity change from 0 to 131072 [ 168.437421][ T6656] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 168.445647][ T6656] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 168.460941][ T6656] F2FS-fs (loop2): invalid crc value [ 168.694689][ T6656] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 168.715001][ T6656] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 168.722221][ T6656] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 169.245117][ T6669] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 171.373933][ T6683] orangefs_mount: mount request failed with -4 [ 172.621135][ T6691] loop4: detected capacity change from 0 to 32768 [ 172.683565][ T6691] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 172.749729][ T6691] XFS (loop4): Ending clean mount [ 172.793204][ T29] audit: type=1800 audit(1773674772.777:21): pid=6691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.184" name="bus" dev="loop4" ino=4425 res=0 errno=0 [ 173.003404][ T6713] loop2: detected capacity change from 0 to 40427 [ 173.034079][ T6713] F2FS-fs (loop2): invalid crc value [ 173.076979][ T6713] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 173.087000][ T6713] F2FS-fs (loop2): Start checkpoint disabled! [ 173.098612][ T6713] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 173.106728][ T6713] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 173.119670][ T29] audit: type=1800 audit(1773674773.097:22): pid=6713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.180" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 173.142686][ T6713] bio_check_eod: 84 callbacks suppressed [ 173.142699][ T6713] syz.2.180: attempt to access beyond end of device [ 173.142699][ T6713] loop2: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 173.163728][ T6713] syz.2.180: attempt to access beyond end of device [ 173.163728][ T6713] loop2: rw=2049, sector=45224, nr_sectors = 128 limit=40427 [ 173.178855][ T6713] syz.2.180: attempt to access beyond end of device [ 173.178855][ T6713] loop2: rw=2049, sector=45352, nr_sectors = 128 limit=40427 [ 173.194538][ T6713] syz.2.180: attempt to access beyond end of device [ 173.194538][ T6713] loop2: rw=2049, sector=45480, nr_sectors = 128 limit=40427 [ 173.211212][ T6713] syz.2.180: attempt to access beyond end of device [ 173.211212][ T6713] loop2: rw=2049, sector=45608, nr_sectors = 128 limit=40427 [ 173.226861][ T6713] syz.2.180: attempt to access beyond end of device [ 173.226861][ T6713] loop2: rw=2049, sector=45736, nr_sectors = 128 limit=40427 [ 173.242862][ T6713] syz.2.180: attempt to access beyond end of device [ 173.242862][ T6713] loop2: rw=2049, sector=45864, nr_sectors = 128 limit=40427 [ 173.258410][ T6713] syz.2.180: attempt to access beyond end of device [ 173.258410][ T6713] loop2: rw=2049, sector=45992, nr_sectors = 128 limit=40427 [ 173.274612][ T6713] syz.2.180: attempt to access beyond end of device [ 173.274612][ T6713] loop2: rw=2049, sector=46120, nr_sectors = 128 limit=40427 [ 173.290278][ T6713] syz.2.180: attempt to access beyond end of device [ 173.290278][ T6713] loop2: rw=2049, sector=46248, nr_sectors = 128 limit=40427 [ 173.621471][ T6711] : renamed from bridge_slave_0 (while UP) [ 173.644622][ T138] CPU: 1 UID: 0 PID: 138 Comm: kworker/u8:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 173.644643][ T138] Tainted: [L]=SOFTLOCKUP [ 173.644647][ T138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 173.644653][ T138] Workqueue: writeback wb_workfn (flush-7:2) [ 173.644673][ T138] Call Trace: [ 173.644677][ T138] [ 173.644683][ T138] dump_stack_lvl+0xe8/0x150 [ 173.644704][ T138] f2fs_handle_critical_error+0x37c/0x540 [ 173.644723][ T138] f2fs_write_end_io+0x1274/0x1740 [ 173.644751][ T138] __submit_merged_bio+0x256/0x700 [ 173.644768][ T138] f2fs_submit_page_write+0x23ab/0x2540 [ 173.644795][ T138] ? __pfx_f2fs_submit_page_write+0x10/0x10 [ 173.644811][ T138] ? __f2fs_is_valid_blkaddr+0xd2a/0x14f0 [ 173.644830][ T138] do_write_page+0x40f/0xab0 [ 173.644845][ T138] f2fs_outplace_write_data+0x11a/0x220 [ 173.644862][ T138] f2fs_do_write_data_page+0x123b/0x16f0 [ 173.644887][ T138] ? __pfx_f2fs_do_write_data_page+0x10/0x10 [ 173.644919][ T138] ? __lock_acquire+0x6b5/0x2cf0 [ 173.644940][ T138] f2fs_write_single_data_page+0x976/0x18b0 [ 173.644963][ T138] ? __pfx_f2fs_write_single_data_page+0x10/0x10 [ 173.644991][ T138] ? folio_clear_dirty_for_io+0x570/0x710 [ 173.645004][ T138] ? folio_clear_dirty_for_io+0x1d4/0x710 [ 173.645018][ T138] f2fs_write_data_pages+0x1a42/0x34f0 [ 173.645051][ T138] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 173.645102][ T138] ? __lock_acquire+0x6b5/0x2cf0 [ 173.645126][ T138] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 173.645142][ T138] do_writepages+0x32e/0x550 [ 173.645157][ T138] ? reacquire_held_locks+0x104/0x190 [ 173.645168][ T138] ? writeback_sb_inodes+0x477/0x1a20 [ 173.645185][ T138] __writeback_single_inode+0x133/0x11a0 [ 173.645202][ T138] ? do_raw_spin_unlock+0xf5/0x210 [ 173.645217][ T138] writeback_sb_inodes+0x992/0x1a20 [ 173.645245][ T138] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 173.645256][ T138] ? do_raw_spin_lock+0x12b/0x2f0 [ 173.645289][ T138] ? rcu_is_watching+0x15/0xb0 [ 173.645304][ T138] wb_writeback+0x456/0xb70 [ 173.645319][ T138] ? queue_io+0x1e1/0x4a0 [ 173.645336][ T138] ? __pfx_wb_writeback+0x10/0x10 [ 173.645348][ T138] ? do_raw_spin_lock+0x12b/0x2f0 [ 173.645368][ T138] wb_workfn+0x414/0xf50 [ 173.645380][ T138] ? look_up_lock_class+0x57/0x110 [ 173.645402][ T138] ? __pfx_wb_workfn+0x10/0x10 [ 173.645417][ T138] ? do_raw_spin_unlock+0xf5/0x210 [ 173.645432][ T138] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 173.645452][ T138] ? process_one_work+0x8bb/0x1780 [ 173.645468][ T138] process_one_work+0x9ab/0x1780 [ 173.645494][ T138] ? __pfx_process_one_work+0x10/0x10 [ 173.645508][ T138] ? do_raw_spin_lock+0x12b/0x2f0 [ 173.645529][ T138] worker_thread+0xb49/0x1140 [ 173.645552][ T138] kthread+0x388/0x470 [ 173.645565][ T138] ? __pfx_worker_thread+0x10/0x10 [ 173.645574][ T138] ? __pfx_kthread+0x10/0x10 [ 173.645587][ T138] ret_from_fork+0x51e/0xb90 [ 173.645607][ T138] ? __pfx_ret_from_fork+0x10/0x10 [ 173.645621][ T138] ? __switch_to+0xc7d/0x1450 [ 173.645636][ T138] ? __pfx_kthread+0x10/0x10 [ 173.645649][ T138] ret_from_fork_asm+0x1a/0x30 [ 173.645668][ T138] [ 173.645682][ T138] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 174.225221][ T5832] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 174.529389][ T5922] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 174.802494][ T5922] usb 2-1: too many configurations: 33, using maximum allowed: 8 [ 174.838716][ T5922] usb 2-1: New USB device found, idVendor=0eb1, idProduct=6668, bcdDevice=57.b8 [ 174.850277][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.860129][ T5922] usb 2-1: Product: syz [ 174.873392][ T5922] usb 2-1: Manufacturer: syz [ 174.886920][ T5922] usb 2-1: SerialNumber: syz [ 174.908202][ T5922] usb 2-1: config 0 descriptor?? [ 175.014622][ T5922] go7007-loader 2-1:0.0: can't handle multiple config [ 175.065166][ T5922] go7007-loader 2-1:0.0: probe failed [ 175.519424][ T6001] usb 2-1: USB disconnect, device number 12 [ 177.718490][ T6727] loop4: detected capacity change from 0 to 32768 [ 179.761826][ T6748] orangefs_mount: mount request failed with -4 [ 180.988719][ T6768] netlink: 20 bytes leftover after parsing attributes in process `syz.4.203'. [ 181.661702][ T5899] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 181.833393][ T5899] usb 3-1: too many configurations: 33, using maximum allowed: 8 [ 181.866717][ T5899] usb 3-1: New USB device found, idVendor=0eb1, idProduct=6668, bcdDevice=57.b8 [ 181.891116][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.927174][ T5899] usb 3-1: Product: syz [ 181.940015][ T5899] usb 3-1: Manufacturer: syz [ 182.066774][ T5899] usb 3-1: SerialNumber: syz [ 182.095676][ T5899] usb 3-1: config 0 descriptor?? [ 182.186319][ T5899] go7007-loader 3-1:0.0: can't handle multiple config [ 182.209599][ T5899] go7007-loader 3-1:0.0: probe failed [ 182.334038][ T5899] usb 3-1: USB disconnect, device number 3 [ 183.124741][ T6790] orangefs_mount: mount request failed with -4 [ 183.662034][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 184.238729][ T6796] gretap0: entered promiscuous mode [ 184.259186][ T6796] vlan2: entered promiscuous mode [ 184.413540][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 184.454478][ T9] usb 3-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba [ 184.482827][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.511946][ T9] usb 3-1: config 0 descriptor?? [ 184.535521][ T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 184.922878][ T6804] loop1: detected capacity change from 0 to 32768 [ 184.947235][ T6804] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.216 (6804) [ 185.047402][ T6804] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 185.071506][ T6804] BTRFS info (device loop1): using crc32c checksum algorithm [ 185.090980][ T6804] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 185.256945][ T6831] netlink: 20 bytes leftover after parsing attributes in process `syz.0.215'. [ 185.480152][ T6804] BTRFS info (device loop1): rebuilding free space tree [ 185.648028][ T6804] BTRFS info (device loop1): disabling free space tree [ 185.672126][ T6804] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 185.694636][ T6804] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 185.755689][ T6804] BTRFS info (device loop1): enabling ssd optimizations [ 185.762988][ T6804] BTRFS info (device loop1): turning on async discard [ 185.770126][ T6804] BTRFS info (device loop1): enabling disk space caching [ 185.779961][ T6804] BTRFS info (device loop1): force clearing of disk cache [ 185.788195][ T6804] BTRFS info (device loop1): use zstd compression, level 3 [ 186.445815][ T29] audit: type=1800 audit(1773674786.427:23): pid=6804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.216" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 186.487083][ T5906] usb 3-1: USB disconnect, device number 4 [ 187.428875][ T6842] orangefs_mount: mount request failed with -4 [ 187.646810][ T5838] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 187.672857][ T6856] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 187.733477][ T6854] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 187.780602][ T6854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.226'. [ 189.902660][ T6882] netlink: 'syz.1.234': attribute type 58 has an invalid length. [ 189.963707][ T6882] netlink: 20 bytes leftover after parsing attributes in process `syz.1.234'. [ 190.555378][ T6894] loop1: detected capacity change from 0 to 40427 [ 190.574916][ T6894] F2FS-fs (loop1): invalid crc value [ 190.619124][ T6894] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 190.629486][ T6894] F2FS-fs (loop1): Start checkpoint disabled! [ 190.642402][ T6894] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 190.650377][ T6894] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 190.683322][ T6894] bio_check_eod: 189 callbacks suppressed [ 190.683340][ T6894] syz.1.237: attempt to access beyond end of device [ 190.683340][ T6894] loop1: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 190.705524][ T6894] syz.1.237: attempt to access beyond end of device [ 190.705524][ T6894] loop1: rw=2049, sector=45224, nr_sectors = 128 limit=40427 [ 190.721286][ T6894] syz.1.237: attempt to access beyond end of device [ 190.721286][ T6894] loop1: rw=2049, sector=45352, nr_sectors = 128 limit=40427 [ 190.736284][ T6894] syz.1.237: attempt to access beyond end of device [ 190.736284][ T6894] loop1: rw=2049, sector=45480, nr_sectors = 128 limit=40427 [ 190.752130][ T6894] syz.1.237: attempt to access beyond end of device [ 190.752130][ T6894] loop1: rw=2049, sector=45608, nr_sectors = 128 limit=40427 [ 190.767429][ T6894] syz.1.237: attempt to access beyond end of device [ 190.767429][ T6894] loop1: rw=2049, sector=45736, nr_sectors = 128 limit=40427 [ 190.783392][ T6894] syz.1.237: attempt to access beyond end of device [ 190.783392][ T6894] loop1: rw=2049, sector=45864, nr_sectors = 128 limit=40427 [ 190.798544][ T6894] syz.1.237: attempt to access beyond end of device [ 190.798544][ T6894] loop1: rw=2049, sector=45992, nr_sectors = 128 limit=40427 [ 190.813834][ T6894] syz.1.237: attempt to access beyond end of device [ 190.813834][ T6894] loop1: rw=2049, sector=46120, nr_sectors = 128 limit=40427 [ 190.829216][ T6894] syz.1.237: attempt to access beyond end of device [ 190.829216][ T6894] loop1: rw=2049, sector=46248, nr_sectors = 128 limit=40427 [ 191.061936][ T29] audit: type=1800 audit(1773674790.657:24): pid=6894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.237" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 191.249550][ T29] audit: type=1800 audit(1773674790.657:25): pid=6894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.237" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 191.488905][ T6060] CPU: 0 UID: 0 PID: 6060 Comm: kworker/u8:10 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.488927][ T6060] Tainted: [L]=SOFTLOCKUP [ 191.488930][ T6060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 191.488937][ T6060] Workqueue: writeback wb_workfn (flush-7:1) [ 191.488963][ T6060] Call Trace: [ 191.488967][ T6060] [ 191.488972][ T6060] dump_stack_lvl+0xe8/0x150 [ 191.488991][ T6060] f2fs_handle_critical_error+0x37c/0x540 [ 191.489008][ T6060] f2fs_write_end_io+0x1274/0x1740 [ 191.489035][ T6060] __submit_merged_bio+0x256/0x700 [ 191.489051][ T6060] f2fs_submit_page_write+0x23ab/0x2540 [ 191.489079][ T6060] ? __pfx_f2fs_submit_page_write+0x10/0x10 [ 191.489095][ T6060] ? __f2fs_is_valid_blkaddr+0xd2a/0x14f0 [ 191.489114][ T6060] do_write_page+0x40f/0xab0 [ 191.489129][ T6060] f2fs_outplace_write_data+0x11a/0x220 [ 191.489152][ T6060] f2fs_do_write_data_page+0x123b/0x16f0 [ 191.489173][ T6060] ? __pfx_f2fs_do_write_data_page+0x10/0x10 [ 191.489195][ T6060] ? __lock_acquire+0x6b5/0x2cf0 [ 191.489216][ T6060] f2fs_write_single_data_page+0x976/0x18b0 [ 191.489239][ T6060] ? __pfx_f2fs_write_single_data_page+0x10/0x10 [ 191.489267][ T6060] ? folio_clear_dirty_for_io+0x570/0x710 [ 191.489281][ T6060] ? folio_clear_dirty_for_io+0x1d4/0x710 [ 191.489295][ T6060] f2fs_write_data_pages+0x1a42/0x34f0 [ 191.489328][ T6060] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 191.489379][ T6060] ? __lock_acquire+0x6b5/0x2cf0 [ 191.489403][ T6060] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 191.489419][ T6060] do_writepages+0x32e/0x550 [ 191.489434][ T6060] ? reacquire_held_locks+0x104/0x190 [ 191.489445][ T6060] ? writeback_sb_inodes+0x477/0x1a20 [ 191.489462][ T6060] __writeback_single_inode+0x133/0x11a0 [ 191.489476][ T6060] ? do_raw_spin_unlock+0xf5/0x210 [ 191.489491][ T6060] writeback_sb_inodes+0x992/0x1a20 [ 191.489518][ T6060] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 191.489530][ T6060] ? do_raw_spin_lock+0x12b/0x2f0 [ 191.489562][ T6060] ? rcu_is_watching+0x15/0xb0 [ 191.489578][ T6060] wb_writeback+0x456/0xb70 [ 191.489593][ T6060] ? queue_io+0x1e1/0x4a0 [ 191.489609][ T6060] ? __pfx_wb_writeback+0x10/0x10 [ 191.489621][ T6060] ? do_raw_spin_lock+0x12b/0x2f0 [ 191.489643][ T6060] wb_workfn+0x414/0xf50 [ 191.489657][ T6060] ? look_up_lock_class+0x57/0x110 [ 191.489676][ T6060] ? __pfx_wb_workfn+0x10/0x10 [ 191.489688][ T6060] ? do_raw_spin_lock+0x12b/0x2f0 [ 191.489703][ T6060] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 191.489726][ T6060] ? process_one_work+0x8bb/0x1780 [ 191.489742][ T6060] process_one_work+0x9ab/0x1780 [ 191.489784][ T6060] ? __pfx_process_one_work+0x10/0x10 [ 191.489798][ T6060] ? do_raw_spin_lock+0x12b/0x2f0 [ 191.489820][ T6060] worker_thread+0xb49/0x1140 [ 191.489834][ T6060] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 191.489852][ T6060] kthread+0x388/0x470 [ 191.489865][ T6060] ? __pfx_worker_thread+0x10/0x10 [ 191.489874][ T6060] ? __pfx_kthread+0x10/0x10 [ 191.489887][ T6060] ret_from_fork+0x51e/0xb90 [ 191.489904][ T6060] ? __pfx_ret_from_fork+0x10/0x10 [ 191.489918][ T6060] ? __switch_to+0xc7d/0x1450 [ 191.489933][ T6060] ? __pfx_kthread+0x10/0x10 [ 191.489946][ T6060] ret_from_fork_asm+0x1a/0x30 [ 191.489965][ T6060] [ 191.823869][ T6060] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 192.030911][ T6902] loop3: detected capacity change from 0 to 32768 [ 192.043567][ T6902] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.238 (6902) [ 192.066986][ T6902] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 192.077510][ T6902] BTRFS info (device loop3): using crc32c checksum algorithm [ 192.085278][ T6902] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 192.160813][ T6902] BTRFS info (device loop3): rebuilding free space tree [ 192.193531][ T6902] BTRFS info (device loop3): disabling free space tree [ 192.200632][ T6902] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 192.211809][ T6902] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 192.244261][ T6902] BTRFS info (device loop3): enabling ssd optimizations [ 192.252571][ T6902] BTRFS info (device loop3): turning on async discard [ 192.266322][ T6902] BTRFS info (device loop3): enabling disk space caching [ 192.275328][ T6902] BTRFS info (device loop3): force clearing of disk cache [ 192.285591][ T6902] BTRFS info (device loop3): use zstd compression, level 3 [ 192.399535][ T29] audit: type=1800 audit(1773674792.377:26): pid=6902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.238" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 192.524786][ T5839] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 193.540365][ T6929] loop4: detected capacity change from 0 to 2048 [ 194.222957][ T6926] orangefs_mount: mount request failed with -4 [ 194.321130][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.327599][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.437503][ T6929] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.190664][ T5832] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.098013][ T6963] loop1: detected capacity change from 0 to 40427 [ 197.113999][ T6963] F2FS-fs (loop1): invalid crc value [ 197.161250][ T6963] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 197.176989][ T6963] F2FS-fs (loop1): Start checkpoint disabled! [ 197.186986][ T6963] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 197.195368][ T6963] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 197.220028][ T29] audit: type=1800 audit(1773674797.197:27): pid=6963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.249" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 197.244706][ T6963] bio_check_eod: 189 callbacks suppressed [ 197.244727][ T6963] syz.1.249: attempt to access beyond end of device [ 197.244727][ T6963] loop1: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 197.266149][ T6963] syz.1.249: attempt to access beyond end of device [ 197.266149][ T6963] loop1: rw=2049, sector=45224, nr_sectors = 128 limit=40427 [ 197.282777][ T6963] syz.1.249: attempt to access beyond end of device [ 197.282777][ T6963] loop1: rw=2049, sector=45352, nr_sectors = 128 limit=40427 [ 197.297737][ T6963] syz.1.249: attempt to access beyond end of device [ 197.297737][ T6963] loop1: rw=2049, sector=45480, nr_sectors = 128 limit=40427 [ 197.313216][ T6963] syz.1.249: attempt to access beyond end of device [ 197.313216][ T6963] loop1: rw=2049, sector=45608, nr_sectors = 128 limit=40427 [ 197.328386][ T6963] syz.1.249: attempt to access beyond end of device [ 197.328386][ T6963] loop1: rw=2049, sector=45736, nr_sectors = 128 limit=40427 [ 197.343778][ T6963] syz.1.249: attempt to access beyond end of device [ 197.343778][ T6963] loop1: rw=2049, sector=45864, nr_sectors = 128 limit=40427 [ 197.358902][ T6963] syz.1.249: attempt to access beyond end of device [ 197.358902][ T6963] loop1: rw=2049, sector=45992, nr_sectors = 128 limit=40427 [ 197.375194][ T6963] syz.1.249: attempt to access beyond end of device [ 197.375194][ T6963] loop1: rw=2049, sector=46120, nr_sectors = 128 limit=40427 [ 197.390192][ T6963] syz.1.249: attempt to access beyond end of device [ 197.390192][ T6963] loop1: rw=2049, sector=46248, nr_sectors = 128 limit=40427 [ 197.671700][ T29] audit: type=1800 audit(1773674797.217:28): pid=6963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.249" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 198.041980][ T49] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 198.214608][ T49] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 198.231933][ T77] CPU: 1 UID: 0 PID: 77 Comm: kworker/u8:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 198.231963][ T77] Tainted: [L]=SOFTLOCKUP [ 198.231969][ T77] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 198.231979][ T77] Workqueue: writeback wb_workfn (flush-7:1) [ 198.232009][ T77] Call Trace: [ 198.232016][ T77] [ 198.232024][ T77] dump_stack_lvl+0xe8/0x150 [ 198.232064][ T77] f2fs_handle_critical_error+0x37c/0x540 [ 198.232094][ T77] f2fs_write_end_io+0x1274/0x1740 [ 198.232139][ T77] __submit_merged_bio+0x256/0x700 [ 198.232168][ T77] f2fs_submit_page_write+0x23ab/0x2540 [ 198.232217][ T77] ? __pfx_f2fs_submit_page_write+0x10/0x10 [ 198.232245][ T77] ? __f2fs_is_valid_blkaddr+0xd2a/0x14f0 [ 198.232278][ T77] do_write_page+0x40f/0xab0 [ 198.232305][ T77] f2fs_outplace_write_data+0x11a/0x220 [ 198.232327][ T77] f2fs_do_write_data_page+0x123b/0x16f0 [ 198.232350][ T77] ? rcu_is_watching+0x15/0xb0 [ 198.232376][ T77] ? __pfx_f2fs_do_write_data_page+0x10/0x10 [ 198.232414][ T77] ? __lock_acquire+0x6b5/0x2cf0 [ 198.232463][ T77] f2fs_write_single_data_page+0x976/0x18b0 [ 198.232501][ T77] ? __pfx_f2fs_write_single_data_page+0x10/0x10 [ 198.232546][ T77] ? folio_clear_dirty_for_io+0x570/0x710 [ 198.232570][ T77] ? folio_clear_dirty_for_io+0x1d4/0x710 [ 198.232593][ T77] f2fs_write_data_pages+0x1a42/0x34f0 [ 198.232647][ T77] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 198.232732][ T77] ? __lock_acquire+0x6b5/0x2cf0 [ 198.232770][ T77] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 198.232796][ T77] do_writepages+0x32e/0x550 [ 198.232824][ T77] ? reacquire_held_locks+0x104/0x190 [ 198.232843][ T77] ? writeback_sb_inodes+0x477/0x1a20 [ 198.232869][ T77] __writeback_single_inode+0x133/0x11a0 [ 198.232894][ T77] ? do_raw_spin_unlock+0xf5/0x210 [ 198.232921][ T77] writeback_sb_inodes+0x992/0x1a20 [ 198.232976][ T77] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 198.232997][ T77] ? do_raw_spin_lock+0x12b/0x2f0 [ 198.233065][ T77] ? rcu_is_watching+0x15/0xb0 [ 198.233094][ T77] wb_writeback+0x456/0xb70 [ 198.233124][ T77] ? queue_io+0x1e1/0x4a0 [ 198.233155][ T77] ? __pfx_wb_writeback+0x10/0x10 [ 198.233176][ T77] ? do_raw_spin_lock+0x12b/0x2f0 [ 198.233215][ T77] wb_workfn+0x414/0xf50 [ 198.233236][ T77] ? look_up_lock_class+0x57/0x110 [ 198.233270][ T77] ? __pfx_wb_workfn+0x10/0x10 [ 198.233293][ T77] ? do_raw_spin_lock+0x12b/0x2f0 [ 198.233318][ T77] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 198.233356][ T77] ? process_one_work+0x8bb/0x1780 [ 198.233381][ T77] process_one_work+0x9ab/0x1780 [ 198.233429][ T77] ? __pfx_process_one_work+0x10/0x10 [ 198.233454][ T77] ? do_raw_spin_lock+0x12b/0x2f0 [ 198.233490][ T77] worker_thread+0xb49/0x1140 [ 198.233530][ T77] kthread+0x388/0x470 [ 198.233553][ T77] ? __pfx_worker_thread+0x10/0x10 [ 198.233568][ T77] ? __pfx_kthread+0x10/0x10 [ 198.233591][ T77] ret_from_fork+0x51e/0xb90 [ 198.233619][ T77] ? __pfx_ret_from_fork+0x10/0x10 [ 198.233642][ T77] ? __switch_to+0xc7d/0x1450 [ 198.233669][ T77] ? __pfx_kthread+0x10/0x10 [ 198.233692][ T77] ret_from_fork_asm+0x1a/0x30 [ 198.233726][ T77] [ 198.240236][ T77] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 198.398637][ T6974] loop4: detected capacity change from 0 to 128 [ 198.401913][ T49] usb 4-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba [ 198.590308][ T6974] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 198.622889][ T6974] ext4 filesystem being mounted at /56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 198.685269][ T49] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.177398][ T49] usb 4-1: config 0 descriptor?? [ 199.496160][ T49] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 199.499635][ T6972] orangefs_mount: mount request failed with -4 [ 199.528810][ T5832] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 201.228161][ T5899] usb 4-1: USB disconnect, device number 4 [ 201.506795][ T6996] netlink: 12 bytes leftover after parsing attributes in process `syz.0.258'. [ 201.532061][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 201.532932][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 201.539531][ T5853] Bluetooth: hci3: command 0x0406 tx timeout [ 201.546906][ T5847] Bluetooth: hci2: command 0x0406 tx timeout [ 201.551242][ T5849] Bluetooth: hci0: command 0x0406 tx timeout [ 201.856186][ T7018] loop4: detected capacity change from 0 to 40427 [ 201.868698][ T7018] F2FS-fs (loop4): invalid crc value [ 201.930858][ T7018] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 201.942628][ T7018] F2FS-fs (loop4): Start checkpoint disabled! [ 201.954075][ T7018] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 201.961918][ T7018] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 201.987489][ T29] audit: type=1800 audit(1773674801.967:29): pid=7018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.262" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 202.252942][ T7018] bio_check_eod: 385 callbacks suppressed [ 202.252956][ T7018] syz.4.262: attempt to access beyond end of device [ 202.252956][ T7018] loop4: rw=2049, sector=71424, nr_sectors = 128 limit=40427 [ 202.274243][ T7018] syz.4.262: attempt to access beyond end of device [ 202.274243][ T7018] loop4: rw=2049, sector=71552, nr_sectors = 128 limit=40427 [ 202.290437][ T7018] syz.4.262: attempt to access beyond end of device [ 202.290437][ T7018] loop4: rw=2049, sector=71680, nr_sectors = 128 limit=40427 [ 202.306220][ T7018] syz.4.262: attempt to access beyond end of device [ 202.306220][ T7018] loop4: rw=2049, sector=71808, nr_sectors = 128 limit=40427 [ 202.321167][ T7018] syz.4.262: attempt to access beyond end of device [ 202.321167][ T7018] loop4: rw=2049, sector=71936, nr_sectors = 128 limit=40427 [ 202.336381][ T7018] syz.4.262: attempt to access beyond end of device [ 202.336381][ T7018] loop4: rw=2049, sector=72064, nr_sectors = 128 limit=40427 [ 202.351478][ T7018] syz.4.262: attempt to access beyond end of device [ 202.351478][ T7018] loop4: rw=2049, sector=72192, nr_sectors = 128 limit=40427 [ 202.366771][ T7018] syz.4.262: attempt to access beyond end of device [ 202.366771][ T7018] loop4: rw=2049, sector=72320, nr_sectors = 128 limit=40427 [ 202.381778][ T7018] syz.4.262: attempt to access beyond end of device [ 202.381778][ T7018] loop4: rw=2049, sector=72448, nr_sectors = 128 limit=40427 [ 202.398427][ T7018] syz.4.262: attempt to access beyond end of device [ 202.398427][ T7018] loop4: rw=2049, sector=72576, nr_sectors = 128 limit=40427 [ 202.635998][ T29] audit: type=1800 audit(1773674801.997:30): pid=7018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.262" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 203.626006][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 203.626027][ T13] Tainted: [L]=SOFTLOCKUP [ 203.626031][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 203.626037][ T13] Workqueue: writeback wb_workfn (flush-7:4) [ 203.626057][ T13] Call Trace: [ 203.626063][ T13] [ 203.626068][ T13] dump_stack_lvl+0xe8/0x150 [ 203.626087][ T13] f2fs_handle_critical_error+0x37c/0x540 [ 203.626105][ T13] f2fs_write_end_io+0x1274/0x1740 [ 203.626136][ T13] __submit_merged_bio+0x256/0x700 [ 203.626154][ T13] f2fs_submit_page_write+0x23ab/0x2540 [ 203.626183][ T13] ? __pfx_f2fs_submit_page_write+0x10/0x10 [ 203.626200][ T13] ? __f2fs_is_valid_blkaddr+0xd2a/0x14f0 [ 203.626220][ T13] do_write_page+0x40f/0xab0 [ 203.626236][ T13] f2fs_outplace_write_data+0x11a/0x220 [ 203.626249][ T13] f2fs_do_write_data_page+0x123b/0x16f0 [ 203.626271][ T13] ? __pfx_f2fs_do_write_data_page+0x10/0x10 [ 203.626311][ T13] ? __lock_acquire+0x6b5/0x2cf0 [ 203.626344][ T13] f2fs_write_single_data_page+0x976/0x18b0 [ 203.626384][ T13] ? __pfx_f2fs_write_single_data_page+0x10/0x10 [ 203.626438][ T13] ? folio_clear_dirty_for_io+0x570/0x710 [ 203.626462][ T13] ? folio_clear_dirty_for_io+0x1d4/0x710 [ 203.626488][ T13] f2fs_write_data_pages+0x1a42/0x34f0 [ 203.626549][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 203.626688][ T13] ? __lock_acquire+0x6b5/0x2cf0 [ 203.626736][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 203.626765][ T13] do_writepages+0x32e/0x550 [ 203.626796][ T13] ? reacquire_held_locks+0x104/0x190 [ 203.626816][ T13] ? writeback_sb_inodes+0x477/0x1a20 [ 203.626841][ T13] __writeback_single_inode+0x133/0x11a0 [ 203.626864][ T13] ? do_raw_spin_unlock+0xf5/0x210 [ 203.626891][ T13] writeback_sb_inodes+0x992/0x1a20 [ 203.626942][ T13] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 203.626960][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 203.627021][ T13] ? rcu_is_watching+0x15/0xb0 [ 203.627049][ T13] wb_writeback+0x456/0xb70 [ 203.627075][ T13] ? queue_io+0x1e1/0x4a0 [ 203.627103][ T13] ? __pfx_wb_writeback+0x10/0x10 [ 203.627123][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 203.627165][ T13] wb_workfn+0x414/0xf50 [ 203.627188][ T13] ? look_up_lock_class+0x57/0x110 [ 203.627223][ T13] ? __pfx_wb_workfn+0x10/0x10 [ 203.627246][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 203.627271][ T13] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 203.627315][ T13] ? process_one_work+0x8bb/0x1780 [ 203.627340][ T13] process_one_work+0x9ab/0x1780 [ 203.627391][ T13] ? __pfx_process_one_work+0x10/0x10 [ 203.627415][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 203.627454][ T13] worker_thread+0xb49/0x1140 [ 203.627494][ T13] kthread+0x388/0x470 [ 203.627517][ T13] ? __pfx_worker_thread+0x10/0x10 [ 203.627534][ T13] ? __pfx_kthread+0x10/0x10 [ 203.627566][ T13] ret_from_fork+0x51e/0xb90 [ 203.627596][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 203.627619][ T13] ? __switch_to+0xc7d/0x1450 [ 203.627648][ T13] ? __pfx_kthread+0x10/0x10 [ 203.627672][ T13] ret_from_fork_asm+0x1a/0x30 [ 203.627711][ T13] [ 203.629204][ T13] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 205.067064][ T7034] orangefs_mount: mount request failed with -4 [ 205.420476][ T7043] loop1: detected capacity change from 0 to 2048 [ 205.483686][ T7043] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.902120][ T5906] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 207.063802][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.202577][ T7051] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 207.259542][ T5906] usb 3-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba [ 207.274363][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.288077][ T5906] usb 3-1: config 0 descriptor?? [ 207.297494][ T5906] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 207.757269][ T5838] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.839302][ T7061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.272'. [ 208.685378][ T5899] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 208.845590][ T5899] usb 5-1: too many configurations: 33, using maximum allowed: 8 [ 209.125206][ T5899] usb 5-1: New USB device found, idVendor=0eb1, idProduct=6668, bcdDevice=57.b8 [ 209.168205][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.179810][ T5899] usb 5-1: Product: syz [ 209.184495][ T5899] usb 5-1: Manufacturer: syz [ 209.191769][ T5899] usb 5-1: SerialNumber: syz [ 209.213188][ T5899] usb 5-1: config 0 descriptor?? [ 209.235040][ T5899] go7007-loader 5-1:0.0: can't handle multiple config [ 209.243652][ T5899] go7007-loader 5-1:0.0: probe failed [ 209.366581][ T7086] netlink: 164 bytes leftover after parsing attributes in process `syz.0.277'. [ 209.444653][ T5899] usb 5-1: USB disconnect, device number 6 [ 209.645312][ T5906] usb 3-1: USB disconnect, device number 5 [ 210.924641][ T7093] orangefs_mount: mount request failed with -4 [ 212.909385][ T7114] loop4: detected capacity change from 0 to 2048 [ 212.977029][ T7114] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.131171][ T5832] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.197065][ T7129] : renamed from bridge_slave_0 (while UP) [ 214.362019][ T5914] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 215.063549][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.178876][ T5914] usb 5-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba [ 215.235429][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.279058][ T5914] usb 5-1: config 0 descriptor?? [ 215.324266][ T5914] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 216.841694][ T7170] tipc: Started in network mode [ 216.846933][ T7170] tipc: Node identity 4, cluster identity 4711 [ 216.853632][ T7170] tipc: Node number set to 4 [ 216.957504][ T7170] loop2: detected capacity change from 0 to 2048 [ 217.291102][ T7170] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.308908][ T5899] usb 5-1: USB disconnect, device number 7 [ 217.473614][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.600434][ T7176] openvswitch: netlink: Message has 57 unknown bytes. [ 217.612532][ T7176] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.658451][ T7204] binder: 7196:7204 ioctl 4018620d 0 returned -22 [ 220.268451][ T49] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 220.341274][ T7225] gre1: entered promiscuous mode [ 220.425379][ T49] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.469725][ T49] usb 2-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba [ 220.503069][ T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.552092][ T5899] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 220.589408][ T49] usb 2-1: config 0 descriptor?? [ 220.665909][ T49] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 220.943054][ T7230] 8021q: VLANs not supported on caif0 [ 223.144869][ T5906] usb 2-1: USB disconnect, device number 13 [ 228.853310][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 229.022680][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 229.040466][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 229.061179][ T9] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 229.094927][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.123068][ T9] usb 4-1: config 0 descriptor?? [ 229.544396][ T7333] loop4: detected capacity change from 0 to 512 [ 229.564760][ T7333] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 229.597361][ T9] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 229.877183][ T809] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 230.204234][ T7342] netlink: 132 bytes leftover after parsing attributes in process `syz.4.346'. [ 230.768623][ T5899] usb 4-1: USB disconnect, device number 6 [ 238.169734][ T7447] loop4: detected capacity change from 0 to 128 [ 238.246035][ T7447] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 238.306854][ T7447] ext4 filesystem being mounted at /81/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 238.541489][ T5832] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 239.778967][ T7471] 8021q: VLANs not supported on caif0 [ 239.842711][ T5892] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 240.024992][ T5892] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.066132][ T5892] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 240.105450][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.162105][ T5892] usb 3-1: config 0 descriptor?? [ 240.196610][ T5892] pwc: Askey VC010 type 2 USB webcam detected. [ 240.602770][ T5892] pwc: recv_control_msg error -32 req 02 val 2b00 [ 240.633370][ T7483] netlink: 20 bytes leftover after parsing attributes in process `syz.0.390'. [ 240.652936][ T7483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.390'. [ 240.705700][ T5892] pwc: recv_control_msg error -32 req 02 val 2700 [ 240.725727][ T5892] pwc: recv_control_msg error -32 req 02 val 2c00 [ 240.783185][ T5892] pwc: recv_control_msg error -32 req 04 val 1000 [ 240.790821][ T5892] pwc: recv_control_msg error -32 req 04 val 1300 [ 240.800582][ T5892] pwc: recv_control_msg error -32 req 04 val 1400 [ 240.813679][ T5892] pwc: recv_control_msg error -32 req 02 val 2000 [ 240.824957][ T5892] pwc: recv_control_msg error -32 req 02 val 2100 [ 240.844326][ T5892] pwc: recv_control_msg error -71 req 04 val 1500 [ 240.853588][ T5892] pwc: recv_control_msg error -71 req 02 val 2500 [ 240.867062][ T5892] pwc: recv_control_msg error -71 req 02 val 2400 [ 240.876162][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 240.878360][ T5892] pwc: recv_control_msg error -71 req 02 val 2600 [ 240.897030][ T5892] pwc: recv_control_msg error -71 req 02 val 2900 [ 240.912555][ T5892] pwc: recv_control_msg error -71 req 02 val 2800 [ 240.932561][ T5892] pwc: recv_control_msg error -71 req 04 val 1100 [ 240.954610][ T5892] pwc: recv_control_msg error -71 req 04 val 1200 [ 241.035045][ T5892] pwc: Registered as video103. [ 241.059323][ T9] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 241.076419][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.098788][ T9] usb 2-1: Product: syz [ 241.112345][ T9] usb 2-1: Manufacturer: syz [ 241.121649][ T9] usb 2-1: SerialNumber: syz [ 241.130682][ T9] usb 2-1: config 0 descriptor?? [ 241.159320][ T5892] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 241.303852][ T5892] usb 3-1: USB disconnect, device number 6 [ 241.713517][ T9] usb 2-1: USB disconnect, device number 14 [ 243.689542][ T7527] netlink: 16 bytes leftover after parsing attributes in process `syz.0.401'. [ 243.763101][ T7529] netlink: 24 bytes leftover after parsing attributes in process `syz.3.402'. [ 243.843469][ T7529] ip6gre1: entered allmulticast mode [ 244.281990][ T5922] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 244.460136][ T5922] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 244.499652][ T5922] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.525321][ T5922] usb 1-1: config 0 has no interfaces? [ 244.548583][ T5922] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 244.597774][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.652851][ T5922] usb 1-1: config 0 descriptor?? [ 245.026590][ T7545] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 245.956802][ T7561] netlink: 16 bytes leftover after parsing attributes in process `syz.4.411'. [ 246.428658][ T7568] syz.2.413 uses obsolete (PF_INET,SOCK_PACKET) [ 246.461974][ T5906] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 246.693898][ T5906] usb 5-1: config 0 has no interfaces? [ 246.718346][ T5906] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 246.759106][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.872892][ T5906] usb 5-1: config 0 descriptor?? [ 247.135047][ T7581] netlink: 64 bytes leftover after parsing attributes in process `syz.2.417'. [ 247.398080][ T7585] openvswitch: netlink: Message has 57 unknown bytes. [ 247.429099][ T7585] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.880660][ T9] usb 1-1: USB disconnect, device number 3 [ 249.372116][ T5922] usb 5-1: USB disconnect, device number 8 [ 250.341970][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 250.498193][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.516749][ T9] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 250.545333][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.595906][ T9] usb 1-1: config 0 descriptor?? [ 250.656446][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 251.055861][ T7623] input: syz1 as /devices/virtual/input/input7 [ 251.098576][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 251.122048][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 251.158489][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 251.209612][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 251.248037][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 251.271437][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 251.306281][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 251.409846][ T7616] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 251.419268][ T7616] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 251.429799][ T7616] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 251.649156][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 251.661878][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 251.745442][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 251.798365][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 251.824345][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 251.863263][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 251.911238][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 251.931463][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 252.055075][ T9] pwc: Registered as video103. [ 252.092208][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 252.162347][ T9] usb 1-1: USB disconnect, device number 4 [ 252.535452][ T7650] overlay: Unknown parameter '/' [ 253.932275][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 254.110162][ T9] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 254.141562][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.168980][ T5922] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 254.197852][ T9] usb 1-1: Product: syz [ 254.219744][ T9] usb 1-1: Manufacturer: syz [ 254.250932][ T9] usb 1-1: SerialNumber: syz [ 254.267470][ T9] usb 1-1: config 0 descriptor?? [ 254.352838][ T5922] usb 4-1: Using ep0 maxpacket: 8 [ 254.363818][ T5922] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 254.388266][ T5922] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 254.402268][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.411979][ T5922] usb 4-1: Product: syz [ 254.416267][ T5922] usb 4-1: Manufacturer: syz [ 254.420917][ T5922] usb 4-1: SerialNumber: syz [ 254.528952][ T9] usb 1-1: USB disconnect, device number 5 [ 254.558061][ T5922] usb 4-1: config 0 descriptor?? [ 254.630305][ T7682] ipip0: entered promiscuous mode [ 254.636390][ T7682] ipip0: entered allmulticast mode [ 254.651392][ T5922] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 254.666952][ T5922] usb 4-1: setting power ON [ 254.722252][ T5922] dvb-usb: bulk message failed: -22 (2/0) [ 254.791184][ T5922] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 254.829540][ T5922] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 254.857202][ T7676] dvb-usb: bulk message failed: -22 (3/0) [ 254.878617][ T5922] usb 4-1: media controller created [ 254.940349][ T7676] dvb-usb: bulk message failed: -22 (14/0) [ 254.981618][ T5922] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 255.099173][ T5922] usb 4-1: selecting invalid altsetting 6 [ 255.126504][ T5922] usb 4-1: digital interface selection failed (-22) [ 255.154654][ T5922] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 255.196453][ T5922] usb 4-1: setting power OFF [ 255.335400][ T5922] dvb-usb: bulk message failed: -22 (2/0) [ 255.411884][ T5922] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 255.742066][ T5922] (NULL device *): no alternate interface [ 255.783314][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.796676][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.953124][ T5922] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 255.965603][ T7690] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 256.052862][ T5922] usb 4-1: USB disconnect, device number 7 [ 257.371993][ T5922] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 257.576963][ T5922] usb 2-1: Using ep0 maxpacket: 8 [ 257.608944][ T5922] usb 2-1: unable to get BOS descriptor or descriptor too short [ 257.633743][ T5922] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.659132][ T5922] usb 2-1: config 0 has no interfaces? [ 257.696193][ T5922] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 257.740565][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.762940][ T5922] usb 2-1: Product: syz [ 257.774847][ T5922] usb 2-1: Manufacturer: syz [ 257.803445][ T5922] usb 2-1: SerialNumber: syz [ 257.820949][ T5922] usb 2-1: config 0 descriptor?? [ 258.669066][ T5922] usb 2-1: USB disconnect, device number 15 [ 258.757193][ T7724] orangefs_mount: mount request failed with -4 [ 259.269923][ T7731] loop3: detected capacity change from 0 to 2048 [ 259.470724][ T7731] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.664708][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.130407][ T7742] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 260.674958][ T7760] syz_tun: entered allmulticast mode [ 260.976293][ T7772] loop2: detected capacity change from 0 to 7 [ 261.032427][ T49] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 261.220730][ T7772] Dev loop2: unable to read RDB block 7 [ 261.237103][ T49] usb 4-1: Using ep0 maxpacket: 32 [ 261.297076][ T7772] loop2: AHDI p1 p2 p3 [ 261.346794][ T49] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 261.366419][ T7772] loop2: partition table partially beyond EOD, truncated [ 261.376806][ T7772] loop2: p1 start 1601398130 is beyond EOD, truncated [ 261.401019][ T7772] loop2: p2 start 1702059890 is beyond EOD, truncated [ 261.426786][ T49] usb 4-1: config 0 has no interface number 0 [ 261.595453][ T49] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 261.717908][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.855462][ T49] usb 4-1: Product: syz [ 261.906441][ T49] usb 4-1: Manufacturer: syz [ 261.977567][ T49] usb 4-1: SerialNumber: syz [ 262.020431][ T49] usb 4-1: config 0 descriptor?? [ 262.055275][ T49] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 262.105916][ T49] usb 4-1: selecting invalid altsetting 1 [ 262.122859][ T49] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 262.156148][ T5201] Dev loop2: unable to read RDB block 7 [ 262.162651][ T7777] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.192079][ T5201] loop2: AHDI p1 p2 p3 [ 262.197161][ T5201] loop2: partition table partially beyond EOD, truncated [ 262.205703][ T49] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 262.223466][ T49] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 262.242209][ T49] usb 4-1: media controller created [ 262.267648][ T7759] syz_tun: left allmulticast mode [ 262.282614][ T5952] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 262.317023][ T49] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 262.327334][ T5201] loop2: p1 start 1601398130 is beyond EOD, truncated [ 262.398755][ T49] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 262.407296][ T5201] loop2: p2 start 1702059890 is beyond EOD, truncated [ 262.417142][ T7767] loop4: detected capacity change from 0 to 40427 [ 262.424067][ T5952] usb 1-1: device descriptor read/64, error -71 [ 262.430628][ T49] zl10353_read_register: readreg error (reg=127, ret==-71) [ 262.576732][ T5201] Dev loop2: unable to read RDB block 7 [ 262.582834][ T5201] loop2: AHDI p1 p2 p3 [ 262.588055][ T5201] loop2: partition table partially beyond EOD, truncated [ 262.600500][ T5201] loop2: p1 start 1601398130 is beyond EOD, truncated [ 262.610248][ T7767] F2FS-fs (loop4): invalid crc value [ 262.616935][ T49] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 262.626272][ T5201] loop2: p2 start 1702059890 is beyond EOD, truncated [ 262.682225][ T5952] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 262.760599][ T49] usb 4-1: USB disconnect, device number 8 [ 262.822924][ T5952] usb 1-1: device descriptor read/64, error -71 [ 262.963577][ T5952] usb usb1-port1: attempt power cycle [ 263.064647][ T7767] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 263.116670][ T7767] F2FS-fs (loop4): Start checkpoint disabled! [ 263.186398][ T7767] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 263.229947][ T7767] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 263.320985][ T29] audit: type=1800 audit(1773674863.297:31): pid=7767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.470" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 263.349866][ T5952] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 263.380793][ T7767] bio_check_eod: 11 callbacks suppressed [ 263.380814][ T7767] syz.4.470: attempt to access beyond end of device [ 263.380814][ T7767] loop4: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 263.423294][ T5952] usb 1-1: device descriptor read/8, error -71 [ 263.438029][ T29] audit: type=1800 audit(1773674863.297:32): pid=7789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.470" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 263.506565][ T7789] syz.4.470: attempt to access beyond end of device [ 263.506565][ T7789] loop4: rw=2049, sector=45224, nr_sectors = 8 limit=40427 [ 263.692511][ T5952] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 263.755914][ T7794] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 263.796897][ T5952] usb 1-1: device descriptor read/8, error -71 [ 263.921745][ T5952] usb usb1-port1: unable to enumerate USB device [ 264.029020][ T7767] syz.4.470: attempt to access beyond end of device [ 264.029020][ T7767] loop4: rw=2049, sector=45232, nr_sectors = 128 limit=40427 [ 264.052398][ T7767] syz.4.470: attempt to access beyond end of device [ 264.052398][ T7767] loop4: rw=2049, sector=45360, nr_sectors = 128 limit=40427 [ 264.070961][ T7767] syz.4.470: attempt to access beyond end of device [ 264.070961][ T7767] loop4: rw=2049, sector=45488, nr_sectors = 128 limit=40427 [ 264.099208][ T7767] syz.4.470: attempt to access beyond end of device [ 264.099208][ T7767] loop4: rw=2049, sector=45616, nr_sectors = 128 limit=40427 [ 264.210648][ T7767] syz.4.470: attempt to access beyond end of device [ 264.210648][ T7767] loop4: rw=2049, sector=45744, nr_sectors = 128 limit=40427 [ 264.277853][ T7767] syz.4.470: attempt to access beyond end of device [ 264.277853][ T7767] loop4: rw=2049, sector=45872, nr_sectors = 128 limit=40427 [ 264.321719][ T7767] syz.4.470: attempt to access beyond end of device [ 264.321719][ T7767] loop4: rw=2049, sector=46000, nr_sectors = 128 limit=40427 [ 264.622226][ T5952] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 264.799992][ T5952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.825937][ T5952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.848808][ T5952] usb 2-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba [ 264.875869][ T5952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.926305][ T5952] usb 2-1: config 0 descriptor?? [ 265.014820][ T7816] loop2: detected capacity change from 0 to 512 [ 265.591242][ T5952] usbhid 2-1:0.0: can't add hid device: -71 [ 265.696102][ T5952] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 265.823270][ T7816] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 266.221386][ T5952] usb 2-1: USB disconnect, device number 16 [ 266.393390][ T6001] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 266.720487][ T6001] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 266.727310][ T138] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 266.732473][ T6001] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.732499][ T6001] usb 4-1: Product: syz [ 266.732512][ T6001] usb 4-1: Manufacturer: syz [ 266.732525][ T6001] usb 4-1: SerialNumber: syz [ 267.032328][ T7824] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 267.130128][ T6001] usb 4-1: config 0 descriptor?? [ 267.354287][ T6001] usb 4-1: USB disconnect, device number 9 [ 267.561086][ T7842] loop1: detected capacity change from 0 to 128 [ 267.595344][ T7842] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 267.643708][ T7842] ext4 filesystem being mounted at /92/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 269.132472][ T6001] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 269.301760][ T6001] usb 4-1: device descriptor read/64, error -71 [ 269.352362][ T5952] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 269.518927][ T5838] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 269.527130][ T5952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.554551][ T5952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.566782][ T6001] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 269.576289][ T5952] usb 3-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba [ 269.590429][ T5952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.608067][ T5952] usb 3-1: config 0 descriptor?? [ 269.712662][ T6001] usb 4-1: device descriptor read/64, error -71 [ 269.743239][ T7865] loop1: detected capacity change from 0 to 512 [ 269.844766][ T7865] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 269.860301][ T6001] usb usb4-port1: attempt power cycle [ 270.161379][ T5952] usbhid 3-1:0.0: can't add hid device: -71 [ 270.216088][ T5952] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 270.342541][ T6001] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 270.464250][ T6001] usb 4-1: device descriptor read/8, error -71 [ 270.488100][ T5952] usb 3-1: USB disconnect, device number 7 [ 270.752686][ T6001] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 270.890906][ T6001] usb 4-1: device descriptor read/8, error -71 [ 270.897078][ T7869] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 271.028714][ T6001] usb usb4-port1: unable to enumerate USB device [ 271.325064][ T138] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 272.296792][ T5952] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 272.470262][ T5952] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 272.518129][ T5952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.565459][ T5952] usb 3-1: Product: syz [ 272.578259][ T5952] usb 3-1: Manufacturer: syz [ 272.599816][ T5952] usb 3-1: SerialNumber: syz [ 272.619540][ T5952] usb 3-1: config 0 descriptor?? [ 272.919131][ T5952] usb 3-1: USB disconnect, device number 8 [ 273.111958][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 273.141987][ T5922] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 273.317212][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.372403][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.408579][ T5922] usb 4-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba [ 273.449064][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.527208][ T5922] usb 4-1: config 0 descriptor?? [ 273.771588][ T7907] loop2: detected capacity change from 0 to 512 [ 273.807383][ T7907] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 274.261465][ T5922] usbhid 4-1:0.0: can't add hid device: -71 [ 274.327303][ T5922] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 274.600725][ T5922] usb 4-1: USB disconnect, device number 14 [ 275.027183][ T6060] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 275.062086][ T7912] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 275.652663][ T5952] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 275.873107][ T5952] usb 3-1: device descriptor read/64, error -71 [ 276.552688][ T5952] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 276.703346][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 276.712422][ T5952] usb 3-1: device descriptor read/64, error -71 [ 276.729090][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 276.858650][ T5952] usb usb3-port1: attempt power cycle [ 276.874389][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 276.885002][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 276.893159][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 277.492699][ T5952] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 277.513293][ T5952] usb 3-1: device descriptor read/8, error -71 [ 277.762393][ T5952] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 277.813520][ T5952] usb 3-1: device descriptor read/8, error -71 [ 277.923633][ T5922] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 277.947112][ T5952] usb usb3-port1: unable to enumerate USB device [ 277.990341][ T7935] chnl_net:caif_netlink_parms(): no params data found [ 278.121423][ T5922] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 278.152409][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.174411][ T5922] usb 4-1: Product: syz [ 278.189023][ T5922] usb 4-1: Manufacturer: syz [ 278.207534][ T5922] usb 4-1: SerialNumber: syz [ 278.228668][ T5922] usb 4-1: config 0 descriptor?? [ 278.286253][ T7935] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.315253][ T7935] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.342290][ T7935] bridge_slave_0: entered allmulticast mode [ 278.380505][ T7935] bridge_slave_0: entered promiscuous mode [ 278.428757][ T7935] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.450029][ T7935] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.470801][ T7954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.525'. [ 278.480210][ T7935] bridge_slave_1: entered allmulticast mode [ 278.498924][ T5952] usb 4-1: USB disconnect, device number 15 [ 278.518023][ T7935] bridge_slave_1: entered promiscuous mode [ 278.744043][ T7935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.768191][ T7935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.853582][ T7935] team0: Port device team_slave_0 added [ 278.876302][ T7935] team0: Port device team_slave_1 added [ 278.952386][ T7935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.965074][ T7935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 278.992535][ T5952] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 279.005237][ T7935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.035298][ T7935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.035318][ T7935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.035345][ T7935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.149992][ T6001] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 279.150340][ T5837] Bluetooth: hci5: command tx timeout [ 279.164305][ T5952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.164339][ T5952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.164376][ T5952] usb 2-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba [ 279.164399][ T5952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.167390][ T5952] usb 2-1: config 0 descriptor?? [ 279.313686][ T6001] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 279.780432][ T6001] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 279.803027][ T6001] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.828498][ T7935] hsr_slave_0: entered promiscuous mode [ 279.836035][ T6001] usb 3-1: Product: syz [ 279.837877][ T7935] hsr_slave_1: entered promiscuous mode [ 279.851377][ T6001] usb 3-1: Manufacturer: syz [ 279.864972][ T6001] usb 3-1: SerialNumber: syz [ 279.871759][ T7935] debugfs: 'hsr0' already exists in 'hsr' [ 279.886178][ T7935] Cannot create hsr debugfs directory [ 279.908551][ T7964] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 279.925365][ T5952] usbhid 2-1:0.0: can't add hid device: -71 [ 279.933606][ T5952] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 279.950445][ T6001] usb 3-1: config 0 descriptor?? [ 279.969674][ T5952] usb 2-1: USB disconnect, device number 18 [ 280.318591][ T6001] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 280.385409][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 281.195855][ T5837] Bluetooth: hci5: command tx timeout [ 281.887213][ T7989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.169121][ T7935] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 282.224150][ T7935] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 282.254742][ T7935] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 282.302439][ T5952] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 282.356368][ T7935] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 282.386751][ T5922] usb 3-1: USB disconnect, device number 13 [ 282.524337][ T7996] netlink: 12 bytes leftover after parsing attributes in process `syz.0.536'. [ 282.539044][ T5952] usb 4-1: device descriptor read/64, error -71 [ 282.802752][ T5952] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 282.903660][ T5922] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 282.962349][ T5952] usb 4-1: device descriptor read/64, error -71 [ 283.032652][ T8004] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 283.198155][ T7935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.253476][ T5952] usb usb4-port1: attempt power cycle [ 283.272485][ T5837] Bluetooth: hci5: command tx timeout [ 283.296402][ T7935] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.302970][ T5922] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 283.316468][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.323841][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.340821][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.359847][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.367057][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.397532][ T5922] usb 3-1: Product: syz [ 283.411893][ T5922] usb 3-1: Manufacturer: syz [ 283.419484][ T5922] usb 3-1: SerialNumber: syz [ 283.450512][ T5922] usb 3-1: config 0 descriptor?? [ 283.602604][ T5952] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 283.647427][ T5952] usb 4-1: device descriptor read/8, error -71 [ 283.688088][ T5922] usb 3-1: USB disconnect, device number 14 [ 283.923375][ T5952] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 283.963019][ T5952] usb 4-1: device descriptor read/8, error -71 [ 284.096605][ T5952] usb usb4-port1: unable to enumerate USB device [ 284.107773][ T7935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.492173][ T5922] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 284.672055][ T5922] usb 1-1: Using ep0 maxpacket: 8 [ 284.689259][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 284.715104][ T5922] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 284.753371][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.776355][ T7935] veth0_vlan: entered promiscuous mode [ 284.784788][ T5922] usb 1-1: config 0 descriptor?? [ 284.837036][ T7935] veth1_vlan: entered promiscuous mode [ 284.975091][ T7935] veth0_macvtap: entered promiscuous mode [ 284.999150][ T7935] veth1_macvtap: entered promiscuous mode [ 285.011531][ T5922] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 285.086816][ T7935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.164258][ T7935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.226705][ T138] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.261672][ T138] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.299849][ T138] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.319431][ T138] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.352127][ T5837] Bluetooth: hci5: command tx timeout [ 285.661630][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.697088][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.789901][ T6060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.815531][ T6060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.488954][ T5952] usb 1-1: USB disconnect, device number 10 [ 286.954238][ T8055] netlink: 16 bytes leftover after parsing attributes in process `syz.0.548'. [ 287.367593][ T8059] loop1: detected capacity change from 0 to 512 [ 287.440309][ T8059] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 288.267327][ T5952] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 288.546026][ T5952] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 288.567202][ T5952] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.636137][ T5952] usb 1-1: config 0 has no interfaces? [ 288.656184][ T5952] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 288.683110][ T5952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.685349][ T7057] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 288.720742][ T802] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 288.774885][ T5952] usb 1-1: config 0 descriptor?? [ 288.791688][ T8073] netlink: 20 bytes leftover after parsing attributes in process `syz.2.555'. [ 288.932577][ T802] usb 6-1: no configurations [ 288.938776][ T802] usb 6-1: can't read configurations, error -22 [ 289.088923][ T802] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 289.348662][ T802] usb 6-1: no configurations [ 289.359073][ T802] usb 6-1: can't read configurations, error -22 [ 289.375281][ T802] usb usb6-port1: attempt power cycle [ 289.732535][ T802] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 289.803777][ T802] usb 6-1: no configurations [ 289.818780][ T802] usb 6-1: can't read configurations, error -22 [ 289.982432][ T802] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 290.023537][ T802] usb 6-1: no configurations [ 290.038485][ T802] usb 6-1: can't read configurations, error -22 [ 290.060075][ T802] usb usb6-port1: unable to enumerate USB device [ 290.072777][ T5914] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 290.272402][ T5914] usb 2-1: Using ep0 maxpacket: 8 [ 290.288340][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 290.318218][ T5914] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 290.355426][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.393359][ T5914] usb 2-1: config 0 descriptor?? [ 290.639368][ T5914] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 290.877108][ T802] usb 1-1: USB disconnect, device number 11 [ 292.677426][ T802] usb 2-1: USB disconnect, device number 19 [ 293.214217][ T8123] netlink: 16 bytes leftover after parsing attributes in process `syz.5.571'. [ 293.312455][ T802] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 293.493104][ T802] usb 2-1: Using ep0 maxpacket: 16 [ 293.510762][ T802] usb 2-1: config 0 has no interfaces? [ 293.527942][ T802] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 293.553008][ T802] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 293.561375][ T802] usb 2-1: Manufacturer: syz [ 293.573306][ T6001] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 293.582744][ T802] usb 2-1: config 0 descriptor?? [ 293.733013][ T6001] usb 4-1: no configurations [ 293.738039][ T6001] usb 4-1: can't read configurations, error -22 [ 293.881982][ T5914] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 293.947343][ T5924] usb 2-1: USB disconnect, device number 20 [ 294.032508][ T6001] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 294.068020][ T5914] usb 6-1: config index 0 descriptor too short (expected 28277, got 36) [ 294.078701][ T5914] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.090298][ T5914] usb 6-1: config 0 has no interfaces? [ 294.096173][ T5914] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 294.108535][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.120719][ T5914] usb 6-1: config 0 descriptor?? [ 294.203257][ T6001] usb 4-1: no configurations [ 294.218035][ T6001] usb 4-1: can't read configurations, error -22 [ 294.230852][ T6001] usb usb4-port1: attempt power cycle [ 294.249509][ T8146] netlink: 44 bytes leftover after parsing attributes in process `syz.2.578'. [ 294.260440][ T8146] netlink: 12 bytes leftover after parsing attributes in process `syz.2.578'. [ 294.645465][ T6001] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 294.704162][ T6001] usb 4-1: no configurations [ 294.721055][ T6001] usb 4-1: can't read configurations, error -22 [ 294.862688][ T6001] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 294.894598][ T6001] usb 4-1: no configurations [ 294.905426][ T6001] usb 4-1: can't read configurations, error -22 [ 294.926739][ T8152] netlink: 16 bytes leftover after parsing attributes in process `syz.0.580'. [ 294.945259][ T6001] usb usb4-port1: unable to enumerate USB device [ 295.532567][ T6001] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 295.702476][ T6001] usb 2-1: Using ep0 maxpacket: 8 [ 295.722573][ T6001] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 295.746293][ T6001] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 295.800457][ T6001] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.840083][ T6001] usb 2-1: config 0 descriptor?? [ 296.088460][ T6001] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 296.255221][ T5914] usb 6-1: USB disconnect, device number 6 [ 296.628676][ T8164] netlink: 12 bytes leftover after parsing attributes in process `syz.3.584'. [ 296.684784][ T8166] bridge0: entered promiscuous mode [ 296.705714][ T8166] bridge0: port 3(macvlan0) entered blocking state [ 296.739640][ T8166] bridge0: port 3(macvlan0) entered disabled state [ 296.768211][ T8166] macvlan0: entered allmulticast mode [ 296.811385][ T8166] bridge0: entered allmulticast mode [ 296.858463][ T8166] macvlan0: left allmulticast mode [ 296.878759][ T8166] bridge0: left allmulticast mode [ 296.906560][ T8166] bridge0: left promiscuous mode [ 296.985884][ T6001] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 297.176349][ T6001] usb 1-1: config 0 has no interfaces? [ 297.189553][ T6001] usb 1-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 297.199837][ T6001] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.224670][ T6001] usb 1-1: config 0 descriptor?? [ 297.479103][ T6001] usb 1-1: USB disconnect, device number 12 [ 297.729015][ T802] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 297.908327][ T5914] usb 2-1: USB disconnect, device number 21 [ 298.332721][ T8193] netlink: 16 bytes leftover after parsing attributes in process `syz.0.592'. [ 298.385167][ T8191] netlink: 64 bytes leftover after parsing attributes in process `syz.2.591'. [ 298.501917][ T988] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 298.649124][ T8203] netlink: 12 bytes leftover after parsing attributes in process `syz.5.596'. [ 298.678416][ T8196] gre1: entered promiscuous mode [ 298.726793][ T988] usb 2-1: no configurations [ 298.735675][ T988] usb 2-1: can't read configurations, error -22 [ 298.892154][ T988] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 298.906893][ T6001] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 299.084785][ T988] usb 2-1: no configurations [ 299.098992][ T988] usb 2-1: can't read configurations, error -22 [ 299.127234][ T988] usb usb2-port1: attempt power cycle [ 299.160209][ T6001] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 299.199545][ T6001] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.253265][ T6001] usb 1-1: config 0 has no interfaces? [ 299.276843][ T6001] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 299.305843][ T6001] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.350903][ T6001] usb 1-1: config 0 descriptor?? [ 299.491984][ T988] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 299.535664][ T988] usb 2-1: no configurations [ 299.546294][ T988] usb 2-1: can't read configurations, error -22 [ 299.691898][ T988] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 299.744928][ T988] usb 2-1: no configurations [ 299.752590][ T988] usb 2-1: can't read configurations, error -22 [ 299.777923][ T988] usb usb2-port1: unable to enumerate USB device [ 300.711930][ T5906] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 300.901965][ T5906] usb 6-1: Using ep0 maxpacket: 8 [ 300.921490][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 300.936523][ T5906] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 300.948835][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.989186][ T5906] usb 6-1: config 0 descriptor?? [ 301.248856][ T5906] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 301.452409][ T6001] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 301.751833][ T5906] usb 1-1: USB disconnect, device number 13 [ 303.187812][ T988] usb 6-1: USB disconnect, device number 8 [ 303.421958][ T6001] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 303.467039][ T8270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.617'. [ 303.594013][ T6001] usb 4-1: too many configurations: 33, using maximum allowed: 8 [ 303.616185][ T6001] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.632889][ T6001] usb 4-1: config 0 has no interfaces? [ 303.644286][ T6001] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.657966][ T6001] usb 4-1: config 0 has no interfaces? [ 303.669791][ T6001] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.691033][ T6001] usb 4-1: config 0 has no interfaces? [ 303.700172][ T6001] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.711239][ T6001] usb 4-1: config 0 has no interfaces? [ 303.719920][ T6001] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.731996][ T6001] usb 4-1: config 0 has no interfaces? [ 303.740524][ T6001] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.758952][ T6001] usb 4-1: config 0 has no interfaces? [ 303.775602][ T6001] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.794263][ T6001] usb 4-1: config 0 has no interfaces? [ 303.813530][ T6001] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.824510][ T6001] usb 4-1: config 0 has no interfaces? [ 303.833962][ T6001] usb 4-1: New USB device found, idVendor=0eb1, idProduct=6668, bcdDevice=57.b8 [ 303.843872][ T6001] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.852532][ T6001] usb 4-1: Product: syz [ 303.856898][ T6001] usb 4-1: Manufacturer: syz [ 303.861565][ T6001] usb 4-1: SerialNumber: syz [ 303.898466][ T6001] usb 4-1: config 0 descriptor?? [ 304.177296][ T5952] usb 4-1: USB disconnect, device number 25 [ 304.186144][ T8281] fuse: Bad value for 'fd' [ 305.172502][ T5952] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 305.219374][ T8297] netlink: 20 bytes leftover after parsing attributes in process `syz.5.623'. [ 307.092634][ T802] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 307.252473][ T802] usb 6-1: Using ep0 maxpacket: 8 [ 307.280903][ T802] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 307.339875][ T802] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 307.363683][ T802] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.383162][ T802] usb 6-1: config 0 descriptor?? [ 307.436080][ T8341] netlink: 40 bytes leftover after parsing attributes in process `syz.2.632'. [ 307.536745][ T8347] netlink: 48 bytes leftover after parsing attributes in process `syz.3.634'. [ 307.608063][ T802] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 309.163623][ T802] usb 6-1: USB disconnect, device number 9 [ 310.348819][ T29] audit: type=1400 audit(1773674910.327:33): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200DFFFFFFFFFFFFFFFF pid=8394 comm="syz.2.649" [ 310.413463][ T8397] netlink: 164 bytes leftover after parsing attributes in process `syz.2.649'. [ 312.253135][ T802] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 312.442223][ T802] usb 1-1: Using ep0 maxpacket: 8 [ 312.467994][ T802] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 312.496336][ T802] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 312.531188][ T802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.567347][ T802] usb 1-1: config 0 descriptor?? [ 312.792530][ T802] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 314.091041][ T988] usb 1-1: USB disconnect, device number 14 [ 314.317717][ T8463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.316088][ T988] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 315.683628][ T8481] team0 (unregistering): Port device team_slave_0 removed [ 315.714038][ T8481] team0 (unregistering): Port device team_slave_1 removed [ 315.845121][ T8496] loop3: detected capacity change from 0 to 2048 [ 315.880586][ T8496] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.084324][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.002347][ T5914] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 317.199329][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.205857][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.217794][ T5914] usb 3-1: Using ep0 maxpacket: 8 [ 317.270381][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 317.326622][ T5914] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 317.349504][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.385236][ T5914] usb 3-1: config 0 descriptor?? [ 317.536983][ T8521] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 317.567488][ T8521] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 317.650978][ T5914] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 317.779751][ T8521] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 317.799010][ T8521] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 317.926200][ T8521] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 318.035015][ T8521] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 318.195656][ T8521] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 318.201976][ T8521] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 318.344126][ T8521] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 318.354738][ T8521] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 318.426255][ T8521] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 318.442741][ T8521] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 318.540998][ T8521] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 318.748360][ T8540] loop3: detected capacity change from 0 to 2048 [ 318.780968][ T8540] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.845263][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.181200][ T802] usb 3-1: USB disconnect, device number 15 [ 319.305900][ T8548] node ffff888048402ec0 offset 0 parent ffff888048400580 shift 0 count 64 values 0 array ffff8880367bd300 list ffff888048402ed8 ffff888048402ed8 marks 0 0 0 [ 319.347774][ T8548] ------------[ cut here ]------------ [ 319.354047][ T8548] kernel BUG at ./include/linux/xarray.h:1441! [ 319.380965][ T8548] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 319.387346][ T8548] CPU: 0 UID: 0 PID: 8548 Comm: syz.1.689 Tainted: G L syzkaller #0 PREEMPT(full) [ 319.398666][ T8548] Tainted: [L]=SOFTLOCKUP [ 319.403088][ T8548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 319.413229][ T8548] RIP: 0010:hpage_collapse_scan_file+0x4f98/0x5230 [ 319.419736][ T8548] Code: ff 4c 89 e7 48 c7 c6 80 b1 dc 8b e8 82 df f1 fe 90 0f 0b 48 85 db 0f 84 03 01 00 00 e8 01 62 90 ff 48 89 df e8 69 5d 7b 09 90 <0f> 0b e8 f1 61 90 ff 48 89 df 48 c7 c6 80 b1 dc 8b e8 52 df f1 fe [ 319.439782][ T8548] RSP: 0018:ffffc9000553f120 EFLAGS: 00010246 [ 319.445896][ T8548] RAX: 0000000000000000 RBX: ffff888048402ec0 RCX: 62af2102367ff800 [ 319.453958][ T8548] RDX: ffffc90010cbb000 RSI: 0000000000009332 RDI: 0000000000009333 [ 319.462364][ T8548] RBP: ffffc9000553f428 R08: ffffc9000553eea7 R09: 1ffff92000aa7dd4 [ 319.470377][ T8548] R10: dffffc0000000000 R11: fffff52000aa7dd5 R12: ffffea0001a6d5f0 [ 319.478628][ T8548] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc9000553f310 [ 319.486831][ T8548] FS: 00007fdfd65b46c0(0000) GS:ffff888125436000(0000) knlGS:0000000000000000 [ 319.496572][ T8548] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 319.504745][ T8548] CR2: 00007fbbac9e7158 CR3: 000000007be52000 CR4: 00000000003526f0 [ 319.515085][ T8548] Call Trace: [ 319.518417][ T8548] [ 319.521885][ T8548] ? debug_object_free+0x2d7/0x490 [ 319.527923][ T8548] ? hpage_collapse_scan_file+0x1c1/0x5230 [ 319.534344][ T8548] ? __pfx_hpage_collapse_scan_file+0x10/0x10 [ 319.542100][ T8548] ? __flush_work+0xa26/0xc50 [ 319.547264][ T8548] ? __flush_work+0x100/0xc50 [ 319.552418][ T8548] ? __up_read+0x291/0x6b0 [ 319.556968][ T8548] ? __pfx___up_read+0x10/0x10 [ 319.562869][ T8548] ? madvise_collapse+0x41e/0xb80 [ 319.568184][ T8548] madvise_collapse+0x451/0xb80 [ 319.573831][ T8548] madvise_vma_behavior+0x1094/0x4460 [ 319.580004][ T8548] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 319.585730][ T8548] ? __lock_acquire+0x6b5/0x2cf0 [ 319.590886][ T8548] ? unwind_next_frame+0xa5/0x23c0 [ 319.596002][ T8548] ? is_bpf_text_address+0x26/0x2b0 [ 319.601207][ T8548] ? is_bpf_text_address+0x292/0x2b0 [ 319.606528][ T8548] ? is_bpf_text_address+0x26/0x2b0 [ 319.611721][ T8548] ? kernel_text_address+0xa5/0xe0 [ 319.616847][ T8548] ? __kernel_text_address+0xd/0x30 [ 319.622312][ T8548] ? unwind_get_return_address+0x4d/0x90 [ 319.627963][ T8548] ? __lock_acquire+0x6b5/0x2cf0 [ 319.632925][ T8548] ? mas_prev_slot+0xb7b/0xbf0 [ 319.637694][ T8548] ? find_vma_prev+0x123/0x1b0 [ 319.642522][ T8548] ? __pfx_find_vma_prev+0x10/0x10 [ 319.647640][ T8548] ? clockevents_program_event+0x3ba/0x4b0 [ 319.653444][ T8548] ? __pfx_clockevents_program_event+0x10/0x10 [ 319.659588][ T8548] madvise_walk_vmas+0x573/0xae0 [ 319.664693][ T8548] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 319.670230][ T8548] ? blk_start_plug+0x6e/0x1b0 [ 319.674990][ T8548] madvise_do_behavior+0x386/0x540 [ 319.680095][ T8548] ? __pfx_madvise_do_behavior+0x10/0x10 [ 319.685734][ T8548] ? down_read+0x270/0x2e0 [ 319.690698][ T8548] ? madvise_lock+0x146/0x2e0 [ 319.695778][ T8548] do_madvise+0x1fa/0x2e0 [ 319.700350][ T8548] ? __pfx_do_madvise+0x10/0x10 [ 319.705818][ T8548] ? rcu_is_watching+0x15/0xb0 [ 319.710879][ T8548] ? rcu_is_watching+0x15/0xb0 [ 319.715718][ T8548] ? rcu_is_watching+0x15/0xb0 [ 319.720489][ T8548] __x64_sys_madvise+0xa6/0xc0 [ 319.725601][ T8548] do_syscall_64+0x14d/0xf80 [ 319.730296][ T8548] ? trace_irq_disable+0x3b/0x150 [ 319.735440][ T8548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.741592][ T8548] ? clear_bhb_loop+0x40/0x90 [ 319.746874][ T8548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.752758][ T8548] RIP: 0033:0x7fdfd839c799 [ 319.757351][ T8548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.778106][ T8548] RSP: 002b:00007fdfd65b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 319.786515][ T8548] RAX: ffffffffffffffda RBX: 00007fdfd8616180 RCX: 00007fdfd839c799 [ 319.794755][ T8548] RDX: 0000000000000019 RSI: 0000000000600003 RDI: 0000200000000000 [ 319.802730][ T8548] RBP: 00007fdfd8432c99 R08: 0000000000000000 R09: 0000000000000000 [ 319.810708][ T8548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.818781][ T8548] R13: 00007fdfd8616218 R14: 00007fdfd8616180 R15: 00007ffed50452f8 [ 319.827174][ T8548] [ 319.830248][ T8548] Modules linked in: [ 319.834892][ T8548] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 319.865679][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 319.865688][ T5852] Bluetooth: hci0: command 0x0406 tx timeout [ 319.934869][ T8548] RIP: 0010:hpage_collapse_scan_file+0x4f98/0x5230 [ 319.993006][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 320.092617][ T8548] Code: ff 4c 89 e7 48 c7 c6 80 b1 dc 8b e8 82 df f1 fe 90 0f 0b 48 85 db 0f 84 03 01 00 00 e8 01 62 90 ff 48 89 df e8 69 5d 7b 09 90 <0f> 0b e8 f1 61 90 ff 48 89 df 48 c7 c6 80 b1 dc 8b e8 52 df f1 fe [ 320.120784][ T8548] RSP: 0018:ffffc9000553f120 EFLAGS: 00010246 [ 320.132645][ T8548] RAX: 0000000000000000 RBX: ffff888048402ec0 RCX: 62af2102367ff800 [ 320.143502][ T8548] RDX: ffffc90010cbb000 RSI: 0000000000009332 RDI: 0000000000009333 [ 320.177282][ T8548] RBP: ffffc9000553f428 R08: ffffc9000553eea7 R09: 1ffff92000aa7dd4 [ 320.206374][ T8548] R10: dffffc0000000000 R11: fffff52000aa7dd5 R12: ffffea0001a6d5f0 [ 320.232450][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 320.238643][ T8548] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc9000553f310 [ 320.252217][ T5892] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 320.268966][ T8547] Set syz1 is full, maxelem 6117 reached [ 320.292305][ T8548] FS: 00007fdfd65b46c0(0000) GS:ffff888125536000(0000) knlGS:0000000000000000 [ 320.326928][ T8548] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 320.342324][ T8548] CR2: 00007fbbac785900 CR3: 000000007be52000 CR4: 00000000003526f0 [ 320.350585][ T8548] Kernel panic - not syncing: Fatal exception [ 320.357143][ T8548] Kernel Offset: disabled [ 320.361550][ T8548] Rebooting in 86400 seconds..