last executing test programs: 41.915319976s ago: executing program 3 (id=392): gettid() r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x20910, r0, 0x456b000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) modify_ldt$write2(0x11, &(0x7f0000000040), 0x10) modify_ldt$read(0x0, &(0x7f0000000280)=""/66, 0x42) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') 41.06688079s ago: executing program 3 (id=396): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x1f) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r0], 0x18}, 0x40c0) 40.35932704s ago: executing program 3 (id=398): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440080001000900010073797a30000000000800034000000001140000001100010000000000000000000000000a"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0) 40.187873673s ago: executing program 3 (id=401): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1a4) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000480)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101242, 0x0) syz_clone3(&(0x7f0000000480)={0x42200280, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) sendmmsg$sock(r0, &(0x7f0000002e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="9e35de5b8d47cc167069ff6232bc4f44f5935c550d595f95bedf615b2d85bdb4fc881d26aab5ddbe97d62d15c82e71321ccc27c8c8e9a7c144225da5511f6b4f604228b505cfe2a7017631e6018a2f8b79434e6dd2e2862c41533fe18cd4f1476849741ddb379e67135de1e080d7b84005a236405eaafb6ad3db8694d46ccfb7d7957b31cce7c5d7221ff7da9132da", 0x8f}], 0x2, &(0x7f0000000140)=[@txtime={{0x18, 0x1, 0x3d, 0x3ff}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x4}}], 0x48}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001540)="ac95179738e3f2439801161c248a12ddc5d7ec6ea5a17c9968aba88f57b4d1898b7305621dba2dec940c754c4b2f2101c1c2a818eab8a3c767f233d2db1890a686be533f8dcf3e17ac66802bcb4be82d077ae873be2ed3e1605f607e8b966923c108422c731a7173295e0ed504d564150175e54ce979ff56a3d6810d56b39bba012fa581356e303a5b4c2bfb91bf8e14e3030e1603913a9b32f9534c8be74006a46f36ab17c31404f5db7014ec7f40b16857b9980a6fef874d343688f0f82622a7b4449238c14241eff8265e8e9ff3ed70999b126a", 0xd5}, {&(0x7f0000001640)="508229eba3eff32228ef8e09682a9478f45d277b7136ecaa0ba25a03863450825cf26f42ad94a7d42b52b5f95cd37c2e16c5db606d4d6e464ebcac94bdb71d2fff80468f9ce4dc141dfafa907997386ae24333d29f326f6c3bb9abe909625e8f88ac4f9cf946f6af543a03c29cec03b07423b947fb5faec70e52c07e0184de9b13f079efec7827b42e6a73ea4482794a04c9973ae89148780495232878f25b40ae8b1424bcf81f929e8d23bf212ba35416854b4c0ecc9bcdd3a00cecf9113b087ec9de6bf35e591f1f6996fb8e0b64199a79d351cc6c71a96e744f5967a6614ae25069b7e002f0a9b0ca8a76e74e6582e3a34290e885b60684", 0xf9}, {&(0x7f0000001740)="50ecbeca5f15a3dc3b4c37c91a8661c9839d73ff20194b139264341680cd40ad74b88bd6a0aa62f75d183862dcf1a3e53212ad94d1cac552c8d9d5fb130dde8aeaa43cc5a334a013ffd460cc272f3d844dfdbdc0653fdff18b07b8b89ab2ce665f306ecde6130f1b9876548f64164bdec436e94b62e5222fd7c22f13b4ac180cce667df06e15d6bb4e5e355a5d26e9f861f4c7769d290d9d7afe56ed8c1bd9198cc01ce1f6ad58eeeeb91bd4eb0af741e2a6dff04d23d76053ddfae05446a50d77c5f20b47495826659f", 0xca}, {&(0x7f0000001840)="26e09abc3828e76efff4a9b6dc8c609a08dd552a62edc579fbf75ee7359033b1b1a1c374d81a8ba8f0256e8c4518f11f961674efe7a4085965b199438340b8362984183880271a178a10349cca611bcc289c645bbd38a6f87465d6fad36bd885b779577189bc80b211be4e769ecaa0ba9589ae542199fbc90852b54aeffc7db058a0164c2ce52bbeca922f", 0x8b}, {&(0x7f0000001900)="d165c341a7db81f70d428f2a82e07e2ae0a728bb3791f4a9632b0e8f815284216031bf19d21214b9463ed227d0c37e975b656aa575e04a9594b64a754308bda583170abaa7b07f23c7f7e4b8a981561274e886ab52b0c42bfe24297ff7205e26578d97f401a34135679c9dbfd1a64a8d4e1b580841f97b75672f01915386136682744ba5e11e9ad43bd8e7eee122de90bbca0df321d7a3acf28e1035e0f030ae94c8d5d91ab6d019c816bd15e167acd7b67f4255389f933cbb8ea5b2bf66de5013", 0xc1}, {&(0x7f0000000040)="7e297489a5e3f6f60493f5e9818563242a70bfd7d31f", 0x16}], 0x6}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001a00)="4dd411e1fed3d39ed11cc89f5166487a6a440c71fcbaa47d9f0b983b3a01f580809222f0030af7444161a6ce7cebbbdb57c78dc5444f8117268ea2bde61495aaaee8d530ef1dca4a0d8d05ed9a8ae7fd51d5a44ce4bfa98a100324f0a99979ab6844f58f191d0f38c8565e74186989ccb3548e08a56d3f8806d6d543b03a0fac26b6ed0b821e9211123444176e75ee8b6dd875b8378d8d974dbfcc9694d55e42fa3365d7a7776ce47c05bcdfb1bb6ec4a85e4406d6e6117164e58568e079cc1cd6a3267fe2f485a3a0e6fe23990b049a9fc016bcc095c066ec", 0xd9}, {&(0x7f0000001b00)="bf618d2cfd244fcdfd919e8304e6cc175ed900dc3a38dcd2b7515bf7a5d7a0ace11f55848962b84e8c5e8450ce172aad67d3a02e8bee9885b9195e7c8ff68a55e46958671180b9fc59a1c3fee250a4dcbe7ab92baa05ab5b712b240fcf52954298de068704f32ce883", 0x69}, {&(0x7f0000001b80)="8c8c659d9052ed1a62283f46b9ab9d7d5bccdc7b8b642aa192db83f86d7ebb729363b86fdfa6172903095b41bcfe49cd025b861266da3aee90f5fc69899c7b82183059b6c2da1bb7d4e2ed7eff2c81bd1fa1b5979b8fd51f4a86ab87cdf1d3cb6a748f90152b30c4ad9fa845213c0c222ff248c59c563f85ce63", 0x7a}, {&(0x7f0000001c00)="f9ad09551d8f07bff2edb4a381f6d6440df3aacd1fde1f82c062913193c1bafdf6fd5d03acbfc3b44dafa8850666494873f8ce849639522bc55c7528df1afa6d8b8d34df93b9c28a72db20917c8490f13950126003f71add1667680464084e55d2e27439a4d8f101bc20d8a966b8588f955c51a394100bba0f8e126ec084d4cffad00705c5", 0x85}], 0x4, &(0x7f0000000400)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x3ff}}], 0x30}}, {{&(0x7f0000001cc0)=@generic={0x18, "3e1a8d4a6e99236b2de2d3df94e69f4d80b312fb5a7e2b9ef370d52697bc26fa5f4bb3438a2fa92902fd22b691b61dbb40b80bb4a210bbee3fcb5785c99faa13dc9bca768f4b248e5021828c27f5eed38f47767ce4cf8e6539298fd69908a22fc1633175d5798d67612f2523f3da5c6baa62c582b3df2a614041cf9f146b"}, 0x80, &(0x7f0000002d40)=[{&(0x7f0000001d40)="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", 0x1000}], 0x1, &(0x7f0000002d80)=[@txtime={{0x18, 0x1, 0x3d, 0xffffffffffffffff}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffeffffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0xfff}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffffd}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0xbbd}}], 0xd8}}], 0x4, 0x4001) fcntl$setlease(r0, 0x400, 0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f00004cd000/0x1000)=nil, 0x1000, 0x558af6cc015a28aa, 0x12, r1, 0x5bc7000) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 38.981404966s ago: executing program 3 (id=403): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@data_writeback}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00089aafc727346c3e0d8728525a2641b3b31621730c58dcf8e0ca2e6767a45a978776e9d2c689feab83a160d00a77ae5112cd4e7141cad333d7cbb69dc6b314609d3827059c11066ba0b4b95c12d2d9ff9c8896d9e247bd55f9ff578a14e0e9d0ca07693396b00d2ef44adb4858475a07d5e8fa3ef5b306fe8a5d1cd2d8e06e7f88226ece092c6aabf8870e140124d5a48670513e0c419c99b7c5105959e7a535f12694634cf272490e0000"], 0x81, 0x4ac, &(0x7f00000011c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) syz_emit_ethernet(0xd2, &(0x7f00000004c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, @local, @void, {@llc={0x4, {@llc={0x6, 0xf0, '$', "fcf3a51fc6eb54af34ee4df9c16f79252a616aed83c82811cc08ab24f4a20cdf5eff7f482b607cdca106c4cc59c5bad29db3f95e72ff6b4959eada1456ae7052988ae13b3cc66b3fbd1f68fe0ad1860b7bb13f95f8dae700980e0cf089de0015aece974f29af9c038a6960bc462dbf159fef982c26309d452d8ba37f1b8852f5ef0258b52bfc6b39335f27dbd23762a133b91c7a027493d741e078d8ed55cc0af00d6a18d3f9a194bc43cfcae14a22c0c06453bd208169ff4507fc84933b483ef9"}}}}}, &(0x7f0000000300)={0x1, 0x1, [0x59a, 0x282, 0x3de, 0x48e]}) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x3200890, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) syz_usb_connect(0x6, 0xe55, &(0x7f0000001680)={{0x12, 0x1, 0x110, 0x22, 0x3, 0x66, 0x0, 0x67b, 0x4bb, 0xae75, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe43, 0x3, 0x7, 0x5, 0x60, 0x9, [{{0x9, 0x4, 0x86, 0x5, 0xb, 0x6b, 0xfc, 0x33, 0x3, [], [{{0x9, 0x5, 0x3, 0x10, 0x40, 0x3, 0x7, 0x2}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x8, 0x4, 0x10}}, {{0x9, 0x5, 0x7, 0x3, 0x200, 0x4, 0x8, 0xd}}, {{0x9, 0x5, 0x7, 0xc, 0x20, 0x3, 0xfa, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0xcf1}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x6}]}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x7f, 0x2, 0xb3, [@generic={0x9b, 0x2, "9c72aa6ec55db570b284036d06e32f1d52535d146a5c3ee5a5dc6ba2c17693e4f059b556f1f0df8832118a81ab67754b69e336ac5e01e0d3afae699aa12e793afd39e2377f7b1f3b8aff5911295f81a4ab57790cc714f55c54221fdbf0bcea36a4f193e24438f31fe5a5909cab1c54e67cb905301698c3d46f7ea9bcad622819961a739569120c8a9a0a7749844025ce14cc7b3ebf0ccd49ff"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x20, 0xf9, 0xf, 0xe8, [@uac_iso={0x7, 0x25, 0x1, 0xc3, 0x9e, 0x4}, @generic={0x78, 0x10, "c281067105478c3dda7318ec5fc3225c9c5fa85d2512f6c0954735b3ef74de1d296108be83fb440998f8aef709a4f99c9c0f289ff9917d1bd8a579385d0d7a5fb90cb00b5802deb54ac5ec40400584d3cce199db8c0a50adb0420bc4a530da2780bcc1b5356f7c558ac30016e077cb2591be01b8975a"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x10, 0xe, 0xb9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x99, 0xab}, @generic={0x48, 0x23, "c8b7b51f1e9c33dd0ea106ea2c0abb140f17e766ff65d26560ea3d1d91da6e05f5692f09e112e779f0dc8ea6a1f5bf0eee6de5e317b5f3a5c6e767e89fdb095de5b5edcd7dea"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x32, 0x8, 0x1, [@generic={0xd8, 0x24, "e0a409019fccc403c3464fb5dfd27e0dd1bd2cc3c020359f51eba33c6c2954403c88ee0f1cd214b6d063074bc17970dfd2ecc7a483f1d7c7109f403e88ca46385d95f8cab2120d947d4b5305ac4c05744fa6a0ce385d27e0de42b34034b29ae3e5d108c0db540bf46fcca096774cd4830c8b58b3fdeb747df616ac90f1fbd66f28db991071f719d891e493ec91555fc405c37deb3461a348cb6c2f1b3453a3ec398c4812073cf542c37d3413f887ff2d7cf7a616416006a3f92b9ef385b70af087e839e6c0eabefa9945a2a4e756f899983b09ca0f55"}, @generic={0xbd, 0xc, "af3e30ec28c4aa1e2961f3acd94b334caa552a53ef9f73bec01b5c89f7163bea59bce80ab22e99b2756ff8bb4c205f5cdca28d40e9b024528447368fc0df44990195de7ea3dd277be8c47a2930a72dd53cd15f28b595bcaf3a389e5e99f4662046b975946dcd1688396305eb12582ae78d6894f9f5a027d7240354129388b89cc0e4917907a98cbc596cea763b62373d56948082e0315fd5e58910487219cfd55a4ee2c69809be55ed533241db98d031015a42f5bc32ebfe016985"}]}}, {{0x9, 0x5, 0x80, 0x8, 0x3ff, 0xff, 0x40, 0x5, [@generic={0x90, 0x21, "0f9c10a23109002a5faa9367b8695e3a22210fc81b62cf458ca503485541c119e80a356c3476e81516ff47bfc9d2b51227c14fba6272d5df8112490d2841eeb03f565dabb483d5a7825cefc97b9bd497da79e420338e1ca479d9cd339a4f396a492e36a8bf13c06a2b4e45b3850b81697e7d5aad3a0c30d591f8137df08cc5acee8ab01bbf7ce9f62c4ec95eca95"}, @generic={0xf0, 0x10, "24a901b3fba247f1c16e0c9efb946debdae849a3c7725b37a992a1be3cc8cac25cab578db3a78b8c7e931c6f91fc03748bb6ed1793339340b42c3aa96b1bfb951cfef2737f636316695ef03abf6f44f8927fb4d847d3ebb6abd4e08c53b89dc84aaf62519564e2ccf8b1411a8b259ed693062426b28728df93fe55684f0d8da586f7410b3a84628ed98715bb3280c0343b602a1f92959eb405c6dd66f56acdd7bfb381461b7c126cbfef9e6fd357f658b4995cb5254195276f6aa8e66d9e0bba27cfd3214f7481858c5b801360a50bf188b5ea1c7db58a92e8d2a652f945fde776c4b9207285413449b155a64104"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x5, 0x5, 0x4, [@generic={0x30, 0x8, "90091c644dd35aff24934eaef64f1fe7f23311770a830b0c5dcc8710459b6343b387d6d48735e07cc85eddbcd204"}, @generic={0xff, 0x22, "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"}]}}, {{0x9, 0x5, 0x6, 0x23, 0x40, 0x0, 0x7, 0xa}}]}}, {{0x9, 0x4, 0xaa, 0x9, 0x10, 0x69, 0xdd, 0x8b, 0x8, [@uac_control={{0xa, 0x24, 0x1, 0x9, 0x2}, [@mixer_unit={0x9, 0x24, 0x4, 0x3, 0x4, "3b4cbbe2"}, @extension_unit={0x7, 0x24, 0x8, 0x6, 0xa00, 0x8}, @extension_unit={0xb, 0x24, 0x8, 0x1, 0x4, 0x3, "7d9e1543"}, @extension_unit={0xd, 0x24, 0x8, 0x1, 0x2, 0x9, "94d36167f3b9"}, @processing_unit={0xa, 0x24, 0x7, 0x2, 0x6, 0x7, "67d56a"}]}], [{{0x9, 0x5, 0x8, 0x10, 0x8, 0x8, 0xff, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0x8}, @generic={0x101, 0x22, "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"}]}}, {{0x9, 0x5, 0x0, 0x12, 0x200, 0x40, 0xf, 0x2}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x0, 0x10, 0xe5, [@generic={0xf7, 0x31, "0da9a939807b2159a7d975c915e9dfc60cd8f121fca708986491860e177b54e14fa5b9756d5e673c43745f181d25017c0466f63cafde60c2e5292fb89d6a1f7a4afd840a2acd757f987548980bfcd9562dbc6e397bf5a9ed58842b55b922ad92d2b0cf68b32159dd1d154b3ba2c5d760f8e9885e858f901820e9c53376ad62eba57c7c3dc509a80b2913f4c33ce2c111582a1ee98be4a09fa09ec9d79b2dc81f466bfcfc20c4397956874045a3479760a2d3e4ddf2567d7a7fc85600f09d461bcc5e8173a896d1a3a3e6ae4cb0907ab5fb46a7dcb99dd286834c219207cddb6a359cb8577ca9611b72090f9651b6b3dc6ab1f6bdaa"}, @generic={0x57, 0x6, "11b1abff7829cd450805f365ba70095722b0c5f44d1a30aa6b7ef879464c5dd5157de9fb3c4e1bbdf35074afe364c90e55dc92fc40ec2833a83d0047c8868fe8dd7332f02df98603f3423c77e10613e6984bb8421e"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x0, 0x3, 0x4, [@generic={0x99, 0xc, "0054310d04fba97dd6e948d69c29139b4169f3b0a150246b9e5bb5142dea67a74a6e1a0b568f3384e02b175d417028f699723b9ab46cf1c37d64fe1e7b865b578cec4debacfd36c29923e10914e7d029ab5de96b41512cdba36700b8e69c39d4b8e0e61b6eedff104e98a29f756b17ebd664363e54e32e44cac81c791f72a7a539bda3533ca4223b9b7c394bd9b08f9478872aa9ba45a1"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x6, 0x3ff}]}}, {{0x9, 0x5, 0xd, 0x2, 0x3ff, 0x5, 0x7, 0xff}}, {{0x9, 0x5, 0xd, 0x4, 0x200, 0x10, 0x3, 0x53, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x62, 0x9}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x0, 0xf, 0xe5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x10}]}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x8, 0x1, 0xc4}}, {{0x9, 0x5, 0xd, 0xc, 0x3ff, 0x6, 0x3, 0xc4, [@generic={0xac, 0x22, "fcc1fee8f6833c83de6e61173e2f2d091441de2b9a578cbd63875720b1124289293f9a1330fb465b43d3649c23a5917c11e24c1b53601798f77d8965a79b625b5a90b35d942817e2455f3a7a3dc0202a4580fb04d115f91de95ad2902472c36cc47a2ba522e648f844a67c1c02717e2320e081947e49ee0805745a708f99d917ff43d106c7ffe803b1b7e0c3fd5d59c4ea57fb4432089d2f16af36668879bdc54d6271ad93e65628e1d4"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x101}]}}, {{0x9, 0x5, 0xf, 0x1c, 0x200, 0xb, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xb4, 0xfff0}]}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x3, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0xd}]}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x5a, 0xc, 0x60}}, {{0x9, 0x5, 0xf, 0x1, 0x200, 0x8, 0x2, 0xb}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x9, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9d}]}}, {{0x9, 0x5, 0x4, 0x8, 0x10, 0x2, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x7}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x3, 0xd, 0x2, [@generic={0xdb, 0x6, "882bd6d2b02f16699fc3c65962ba944fdc57e7f026de7f2db0d947d23a1dbbc402595200071977f8a26e8a1b8e0f30dfb34f07a3bd2e0230e4c63db9b35bb040750eab729e3313f31cdd0f55fb23abcf2f17262d908e82703d5e17e5db743e3a4321c096e94358d768db919bc40ed53011a94bb5165f4493215df49e2a91b82372a719a034296c7610f89cc47e74e844024e637846e8d52bdaf16f251a6c82af1ef481e98878f2bac9e6900def1586c2dbdaaa69b312e76e9cf8ab8f4f1c8dbe7b5607ea2e99e31854657075485b9f1a672b04b5c286dfa5e0"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0xff}]}}]}}, {{0x9, 0x4, 0x78, 0x3, 0x3, 0xff, 0xff, 0xff, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x152, 0x2}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x101, 0x2, 0x2, 0xc, 0x2, 0x1}, @mixer_unit={0x6, 0x24, 0x4, 0x2, 0x1, "84"}, @selector_unit={0xb, 0x24, 0x5, 0x4, 0x8, "7df6e5a46ef2"}]}, @cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "ecf2cf"}, {0x5, 0x24, 0x0, 0x14d}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x9, 0x7fff, 0x3}, {0x6, 0x24, 0x1a, 0x4a, 0x2e}, [@mbim={0xc, 0x24, 0x1b, 0xffff, 0x5, 0x6, 0xc, 0x800, 0x5}, @mdlm={0x15, 0x24, 0x12, 0x40}, @dmm={0x7, 0x24, 0x14, 0x8, 0x400}, @mdlm_detail={0xab, 0x24, 0x13, 0xec, "174b61737f678bc52799f967fe918445f46570f37acb512792074061a85b777a4434b769fd77f495430ccee0ceee5013c7d5848a4dafbeeb1331fe39b14fcadf43b1d58f5310381eb3337e3255c13f59cfa9b3e9491e5f584b22f46f3f49cf2d24662e58b57ff7e73d3941b5fc4763ecd7cf7e4fa58f935e5c25195538c8481e66387a73a9def625546e9ee24fc78ae59555ba6b54c895d3855b237ce33d4fac6316462c69a992"}, @obex={0x5, 0x24, 0x15, 0xa8}]}], [{{0x9, 0x5, 0xd, 0x10, 0x10, 0x4b, 0x9, 0x6, [@generic={0x15, 0x0, "509b125cc3cab826ba63d6b266ad15606ed049"}]}}, {{0x9, 0x5, 0x6, 0x8, 0x400, 0x7, 0x0, 0x2, [@generic={0xf9, 0x10, "01265557af512c61bbc51ed2b83bbe098d1f9bb5329da9f103c210f82e3867be56f21239fdbde232d1cd75e3fcf452aceae7ff6d88fdd6b471dcdd659989b05f34b762d0d281cef7e4419ee66c012c2b963d3fd202cb88e4a2ca099af9e910dfeefee1e638f103caa34ec12a4e46f45a9579327f4f89ff1106836947f189449e6d6ca1ecdf15ec3cead345c2456bbe5f84639cf61e98e3960ff884d1e2d55aa4dea785d6359291bbf1d744d9655fcb0ff8425ef10ead6dd21d4ab0b8ebee11c322cf6d4ca93e3c1c55190aaa2bcdbfded876e44a7e071626a3a3ddaa8a901908416739abaa737fbb9e587cdbc94352024d32105c648d85"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0xb1, 0x1, 0x5, [@generic={0x33, 0x10, "53162381c70c7007f5010b41861012f8de7d046342a8636f01ba0831f547b43102f04b80fb563a146a10c5b7344027413f"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xf, 0xfffc}]}}]}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x8, 0x6, 0x22, 0x10, 0xa2}, 0x3a, &(0x7f0000000100)={0x5, 0xf, 0x3a, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0xc, "9ccb39584f52547a96bfa3c33e00d0f9"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x8, 0xfb, 0xe5d}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "70e3a64069bdcf9b39b91ce965ee2d89"}]}, 0x2, [{0xaa, &(0x7f00000003c0)=@string={0xaa, 0x3, "d73bbf07ceef63f8ed05e0f2106fbbace0785d0edf214b4822fc11874bea211b9156d671b141361e057136ca8b874662e3410e89c8f489488512b514836117e1dca8826f47b95caf20a1f5e15cd9a9c1dbfd14aeca3f5c78ba045b53c888d224d4586983707b68e69a0b61d4fa934048f384d171073904bb08f8faf1f0d803cb2fd8360415ee374985203e376828347dbc792330d0aa24799bfec6f9b1b29ad9d1f7967362d2dbaa"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x423}}]}) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) 37.770901798s ago: executing program 3 (id=405): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x14, 0x6000, @fd, 0x0, 0x20000003, 0x8020, 0x0, 0x1, {0x2}}) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) 37.061950839s ago: executing program 32 (id=405): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x14, 0x6000, @fd, 0x0, 0x20000003, 0x8020, 0x0, 0x1, {0x2}}) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) 12.435018747s ago: executing program 0 (id=463): gettid() r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x20910, r0, 0x456b000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) modify_ldt$write2(0x11, &(0x7f0000000040), 0x10) modify_ldt$read(0x0, &(0x7f0000000280)=""/66, 0x42) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') mount(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0xa00022, &(0x7f00000001c0)='grpquota') 9.887145324s ago: executing program 0 (id=468): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="ea", 0x1) sendmmsg$alg(r1, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="95", 0x1}], 0x1, 0x0, 0x0, 0x400401c}], 0x1, 0x8000) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) close(r1) fcntl$getown(r0, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000040)={[{@acl}, {@nodatacow}, {@flushoncommit}, {@noacl}, {@nodatasum}, {@autodefrag}, {@rescue={'rescue', 0x3d, 'usebackuproot'}}, {@discard_async}]}, 0x3, 0x5133, &(0x7f000000f380)="$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") 7.401308476s ago: executing program 2 (id=474): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x39, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000005e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f00000000c0)={0x90000005}) connect$unix(r3, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x78283d8c, 0x10000, 0x6, 0x800}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 7.327931302s ago: executing program 0 (id=476): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="400e02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "0100"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000180)={0x20, 0x17, 0x7, "01d52373839698"}, 0x0, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x40}, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1, 0x5}}) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_mount_image$fuse(&(0x7f00000002c0), &(0x7f0000000640)='./file0\x00', 0x20000, &(0x7f0000000680)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@default_permissions}, {@allow_other}, {@blksize={'blksize', 0x3d, 0xe00}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x70}}], [{@seclabel}, {@euid_lt={'euid<', 0xee00}}, {@smackfsroot}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, ':$*'}}, {@euid_lt={'euid<', 0xee01}}, {@flag='posixacl'}, {@measure}]}}, 0x1, 0x0, &(0x7f0000000880)="17819153fcda2e0dff3248b467d04d93a8145a89ce2c765c5a94d69dbb82bd2a8d3877f9912a146d76c9eb41e15c8d87f6a024bd33bdd2c90bddd108f6e54e0a96d4780388f9b5a2930dbcbed984efc0ac2471fdbd0b2a1f4277e09e747dea60eb8d96c120ef06eecc8359fa59b1c6f2ff54547862965a08c9a8db5ec68c6ff1bc9936c90cf6e008f6219313532ff0095b3f67a8425bdf89e5095db97b1349ebc356904ecb463570d5048fa61476a41643740fd801d39145c2aae8a0273e56bc0f2288c857a5bba2f5770d5c0b1610d6fb53a550e7e3") execveat(r2, &(0x7f0000000800)='./file0\x00', &(0x7f0000000980), &(0x7f0000000a40)={[&(0x7f00000009c0)='}/[\x00', &(0x7f0000000a00)='aegis128-generic\x00']}, 0x1880) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000340)={0x40, 0x0, 0x4, "92602830"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000380)={0x1c, &(0x7f00000001c0)={0x40, 0x11, 0x4, "6aabdaf3"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000cc0)={0x14, &(0x7f0000000b40)={0x20, 0xd, 0x101, {0x101, 0x23, "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"}}, &(0x7f0000000c80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000f80)={0x44, &(0x7f0000000d00)={0x0, 0x18, 0x93, "1f841e1a7ea143e98cbb270da07e153e9275914feec304f53e7300c645992f0357b6aca1c99882c3e302dded83485d18a2393cba06555daef9712155c9d7c9db57e24020c8e62f474fd8110940e3af1080c2796aeaa1701802eeafbf05e8b95d39a1f2e8522178789a00b05dbf7f11ed6e617af6a84230c4c2696050f93d6c0524b139d72f086e1bfd44f7aaa6b5c330a5d9de"}, &(0x7f0000000dc0)={0x0, 0xa, 0x1}, &(0x7f0000000e00)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000e40)={0x20, 0x80, 0x1c, {0x7ff, 0x9, 0x2, 0x2, 0x1, 0x400, 0xfffe, 0x101, 0x8, 0x8000, 0x9, 0x9}}, &(0x7f0000000e80)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000ec0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000f00)={0x20, 0x87, 0x2, 0xcb18}, &(0x7f0000000f40)={0x20, 0x89, 0x2}}) r4 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000400)={0x40, 0x16, 0x1, "0e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r5 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r5, &(0x7f0000000280)={0x14, &(0x7f00000000c0)={0x0, 0x15, 0x85, {0x85, 0x7, "e5596cdb5216f1fdf0c2d90628dcf6e657d99c980fd2af58650b3042b697883e5e0fb34782f2e22b5483fa8f546749e9b9dd23417ae7d039a422e05ff6fd716881c9708fa89d8b8ee6fcec18253e90183de35fd9f849177c80313b7cf3b474a517ce43ddb9f1e0ab70e82f3af62c1b121af78ddd5265b7b7f9456faa1527c59412bc25"}}, &(0x7f00000001c0)={0x0, 0x3, 0x61, @string={0x61, 0x3, "41e96280022c2ea52ffa1ca4fbe4f78f0a382a8beaf5aa97ae6172629311681b3acb3d1198ccdf7d9495e7dee220dfe4520b42479f8bdd0f0130d7de1ad18159af18ab698e74d3a7a05d713fdd98906824d19e029654b1db6204cf0a751ae3"}}}, &(0x7f0000000580)={0x2c, &(0x7f00000005c0)=ANY=[], &(0x7f0000000300)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000480)={0xc0, 0x5, 0x6, "bb7956576c86"}, &(0x7f00000004c0)={0x40, 0x5, 0x1e, "e2843c5d65"}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0xe, 0x4, 0x310, 0xffffffff, 0x0, 0xf8, 0x1d8, 0xffffffff, 0xffffffff, 0x278, 0x278, 0x278, 0xffffffff, 0x4, &(0x7f00000005c0), {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0xffffffff, 0x0, 'bond_slave_1\x00', 'geneve0\x00', {}, {}, 0x89, 0x1, 0x68}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x40}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x0, 0x4, 0x0, 0x1], 0x2, 0x7}, {0x1, [0x6, 0x7, 0x1, 0x0, 0x5, 0x2], 0x5, 0x7}}}}, {{@ip={@empty, @loopback, 0xff000000, 0xffffffff, 'team_slave_1\x00', 'bridge_slave_1\x00', {0xff}, {0xff}, 0x0, 0x0, 0x1}, 0x0, 0xa0, 0xe0, 0x0, {}, [@common=@addrtype={{0x30}, {0x0, 0x479, 0x0, 0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x37e, 0xc, 0x6, 0x0, 0x5, 0x9f3b, 0x6, 0x2]}}}, {{@ip={@private=0xa010100, @local, 0xff000000, 0xff000000, 'xfrm0\x00', 'ip6erspan0\x00', {}, {0xff}, 0x8, 0x0, 0x4}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x4, 0x9, 0x6, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) 6.045524414s ago: executing program 4 (id=480): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0xfffffffffffffcda, r0}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) bind$x25(r1, &(0x7f0000000300)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) getrlimit(0x6, &(0x7f0000000180)) syz_mount_image$ocfs2(&(0x7f0000000600), &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10000, &(0x7f0000000100)=ANY=[@ANYRES64=r2, @ANYRES64=r2, @ANYRESOCT=r2], 0x1, 0x4717, &(0x7f0000005d40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 5.987817136s ago: executing program 1 (id=481): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f00000000c0)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1}) close_range(r1, 0xffffffffffffffff, 0x0) 5.719040555s ago: executing program 1 (id=482): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}, 0x67}]}, &(0x7f0000000300)=0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_dev$vim2m(&(0x7f0000000340), 0x40, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000140)={0x0, 0x2000bb22, 0x2, {0x1, @raw_data="3d924b827139e8a4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc331c96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a700"}}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000000c0)=@userptr={0x7, 0x1, 0x4, 0xd08b012a, 0x0, {0x0, 0xea60}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4, "f1439fae"}, 0x0, 0x2, {0x0}, 0x20000, 0x0, r4}) 4.695242327s ago: executing program 1 (id=483): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x56}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x14, 0x6000, @fd, 0x0, 0x20000003, 0x8020, 0x0, 0x1, {0x2}}) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) 4.340301132s ago: executing program 4 (id=484): r0 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x800008, &(0x7f0000000200)) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$COMEDI_INSNLIST(r3, 0x8010640b, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x4000000, 0x0, 0x0, 0x0, 0x7}]}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 3.222493133s ago: executing program 2 (id=485): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getpeername(r5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r4, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x5, 0x4, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r6, &(0x7f0000000080), &(0x7f0000001500)=@udp6}, 0x20) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f0000000440)={0x20080522}, &(0x7f00000004c0)={0x40, 0x8, 0x0, 0x82, 0x6, 0x7}) setsockopt$inet6_tcp_buf(r7, 0x6, 0xd, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x6ee80, 0x0) io_setup(0x1, &(0x7f00000004c0)) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x60, &(0x7f0000001ac0)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf250400000004000d80a684c752d1e9096281f1a5f453d294f770b18f62334d209b3150ace0929f551931020007805e8e65d7e7f69b45f0f1d48f1724094d267978791a4d9eb9fd1679ee19b9da84faf884de4a369273c376d6da4309306904a4432f0b773c02497b2e3e8da30a934e9020ed3e5b35eb3b9ff2dc2e339850cee220eb578fe76c5da01e"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 3.141972477s ago: executing program 4 (id=486): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x1100408, &(0x7f0000000480)={[{@delalloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@auto_da_alloc}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@measure}]}, 0x0, 0x248, &(0x7f0000000940)="$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") socket$can_raw(0x1d, 0x3, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r4, 0x3b8c, &(0x7f0000000040)={0x30, r5, 0x0, 0x0, 0x2000000, 0x0, 0x100, 0x0}) sendmmsg$unix(r2, 0x0, 0x0, 0x44804) r6 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) r7 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f0000000000)=0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r7, 0xc0745645, &(0x7f0000000100)={0x8d, [0x27e, 0x1, 0x3, 0x4, 0xc95, 0x9, 0x6, 0x0, 0xa4f, 0x4, 0x0, 0xffff, 0x6, 0x7, 0x3, 0x3, 0x4, 0x5, 0x81, 0x9, 0x5, 0x8, 0x0, 0xf6c, 0x0, 0xd, 0xfffe, 0x7, 0xd, 0x8, 0xfc00, 0x731e, 0x1, 0x2000, 0x2, 0x2, 0x8801, 0x200, 0x6101, 0x7, 0x9, 0x200, 0x8, 0xe66, 0x4, 0x8, 0x5, 0x1], 0x6}) pipe2$watch_queue(&(0x7f00000001c0), 0x80) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) keyctl$setperm(0x5, r6, 0x800) socket$phonet(0x23, 0x2, 0x1) 2.640593677s ago: executing program 1 (id=487): fsopen(&(0x7f0000000000)='cifs\x00', 0x0) syz_emit_ethernet(0x82, &(0x7f0000000240)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1=0xe0000029}, {@private}, {@local}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000006800010002000000fcffff7f00000000000000000c0002000100000004000000313af138583ef9d49f028eeb1b75283c459f51a37ec8e8721adfe334904da2cac782ec97b8c066b9cbd839e0e9aa8685b165ceffcee293b692119fbb12342c274cbe05f911bca8f8e1d187801239bbdc8af25b2aa895dd2de7527389432b5779d16c3a50a3"], 0x24}, 0x1, 0x0, 0x0, 0xc004}, 0x4000) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0x2, 0x20}, 0x10}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000400)={'gre0\x00', &(0x7f0000000500)={'gre0\x00', 0x0, 0x8000, 0x700, 0x7fff, 0x5, {{0xe, 0x4, 0x0, 0xc, 0x38, 0x64, 0x0, 0x6, 0x29, 0x0, @private=0xa010100, @local, {[@timestamp_addr={0x44, 0x1c, 0x1d, 0x1, 0xb, [{@dev={0xac, 0x14, 0x14, 0xf}, 0x3}, {@broadcast, 0x401}, {@remote, 0x30}]}, @noop, @ra={0x94, 0x4, 0x1}]}}}}}) memfd_secret(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', r2, @tracing=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x24040880}, 0x800) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x2000000) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000080)='./file0\x00', 0xa00004, &(0x7f0000000100)={[{@adinicb}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@utf8}, {@uid}, {}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@mode={'mode', 0x3d, 0x1000}}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@adinicb}, {@volume={'volume', 0x3d, 0x1}}, {@unhide}, {@gid_forget}, {@unhide}]}, 0x1, 0xc4d, &(0x7f0000000f40)="$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") r4 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r4, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 2.103758592s ago: executing program 2 (id=488): r0 = socket(0x2a, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, 0x0, &(0x7f00000002c0)='GPL\x00'}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20040845}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x600) 1.978545091s ago: executing program 0 (id=489): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000002b40)='cubic', 0x4) setsockopt$inet6_buf(r1, 0x29, 0x2b, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x46, [0x25, 0x2, 0x1, 0x6, 0x13, 0x1, 0xb, 0x6, 0x2, 0x5, 0xc, 0xd, 0x9, 0x4, 0xb, 0xd], 0x1, [0x9, 0x9, 0x101, 0x7, 0x688, 0x8001, 0x8, 0x5, 0x8, 0x401, 0xb, 0x3, 0x6c9a, 0x5, 0x6, 0xbd], [0xc, 0x8, 0x3, 0x0, 0x2488, 0x0, 0x614, 0x3, 0x3, 0x5, 0x0, 0x4562, 0x5, 0x6, 0x6, 0x4351]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x8044090}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2, 0xa, 0x300) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) splice(r4, 0x0, r3, &(0x7f0000000180)=0x40000008008, 0x9, 0x5) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000003600"], 0x1c}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000003600"], 0x1c}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040) 1.977586396s ago: executing program 4 (id=490): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x40, 0xff, 0x0, 0xffeffffe}, {0x6, 0x60, 0x0, 0x8}]}) write$ppp(r1, &(0x7f0000000300)="5af9", 0x2) r2 = fsmount(r0, 0x0, 0x1) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058565d, &(0x7f00000000c0)=@userptr={0x0, 0xa, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0xd, 0x0, 0x0, 0x0, "f1439fae"}, 0x0, 0x2, {0x0}}) lseek(r3, 0x100, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getdents64(r3, &(0x7f0000000340)=""/206, 0xce) 1.795692232s ago: executing program 2 (id=491): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000940)=[@code={0x1, 0x5d, {"640f07440f0766b813018ec8264c0fc7ad00000100b9800000c00f3235000400000f30c4a135691e730048b864000000000000000f23c80f21f8350400c0000f23f8c401e9d0c4c4411914c2"}}], 0x5d}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x7c, 0x0, @multicast1}}}}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000100)}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.623556207s ago: executing program 0 (id=492): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}, 0x67}]}, &(0x7f0000000300)=0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_dev$vim2m(&(0x7f0000000340), 0x40, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000140)={0x0, 0x2000bb22, 0x2, {0x1, @raw_data="3d924b827139e8a4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc331c96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a700"}}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000000c0)=@userptr={0x7, 0x1, 0x4, 0xd08b012a, 0x0, {0x0, 0xea60}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4, "f1439fae"}, 0x0, 0x2, {0x0}, 0x20000, 0x0, r4}) 1.622927931s ago: executing program 1 (id=493): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) 1.622353348s ago: executing program 4 (id=494): r0 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0xc, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = memfd_secret(0x80000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f00000002c0)) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000040)=0x2, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @loopback, 0x627bcafb}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x3, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002700), 0x0, 0x12000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000000314010000000000fbdbdf250900020073797a3200000000080041007278650014003300636169663000003e6193acedc480a3fd490484d644000000000800000000"], 0x38}, 0x1, 0x0, 0x0, 0x200808e4}, 0x4008000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f0000000140)={@desc={0x1, 0x0, @desc1}}) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x2, 0x0, 0x1, 0x8f, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) 657.149321ms ago: executing program 0 (id=495): r0 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x800008, &(0x7f0000000200)) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$COMEDI_INSNLIST(r3, 0x8010640b, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x4000000, 0x0, 0x0, 0x0, 0x7}]}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 351.239671ms ago: executing program 2 (id=496): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f00000000c0)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1}) close_range(r1, 0xffffffffffffffff, 0x0) 307.157185ms ago: executing program 1 (id=497): gettid() r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x20910, r0, 0x456b000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) modify_ldt$write2(0x11, &(0x7f0000000040), 0x10) modify_ldt$read(0x0, &(0x7f0000000280)=""/66, 0x42) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') 38.900327ms ago: executing program 4 (id=498): syz_init_net_socket$llc(0x1a, 0x2, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) fsopen(0x0, 0x1) socket$packet(0x11, 0x3, 0x300) r6 = add_key$fscrypt_v1(&(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, 0x0, r6, r6, 0x0) keyctl$chown(0x4, r6, 0xee01, 0x0) mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/17) r7 = syz_open_procfs(r2, &(0x7f0000000000)='personality\x00') ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000400)={0x1d, r8, 0x2, {0x3, 0xf0}, 0xff}, 0x18) r9 = syz_open_dev$sndpcmp(0x0, 0xb, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r9, 0xc2604110, &(0x7f0000001280)={0x0, [[0x7ffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f3], [0x2, 0x5, 0x0, 0x0, 0x0, 0xecdc, 0xfffffffc, 0xfffffffc], [0xb, 0x3, 0x8, 0x0, 0xffffffff, 0x0, 0x0, 0x20001]], '\x00', [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3, 0x4}, {0x0, 0x3}, {0x1000}, {0x0, 0x1000}, {0x1ffffc}, {}, {0x0, 0x4}, {0x5, 0xffffffff}, {0xd, 0x400000}, {0xe}], '\x00', 0x401, 0x0, 0x0, 0x2}) socket$inet_tcp(0x2, 0x1, 0x0) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r10, 0x560a, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x4, 0x4}) sendmmsg$inet(r0, &(0x7f0000000100)=[{{&(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000180)=[{0x0, 0xa00}, {&(0x7f0000000340)="89c0", 0x2}], 0x2}}], 0x1, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x1c, 0x800) 0s ago: executing program 2 (id=499): gettid() r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x20910, r0, 0x456b000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) modify_ldt$write2(0x11, &(0x7f0000000040), 0x10) modify_ldt$read(0x0, &(0x7f0000000280)=""/66, 0x42) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') kernel console output (not intermixed with test programs): state [ 79.282315][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.346917][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.412823][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.424659][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.483086][ T3016] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.491068][ T3016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.522201][ T3016] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.531149][ T3016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.568011][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.597326][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.653398][ T3522] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.661034][ T3522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.721292][ T2948] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.730556][ T2948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.748210][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.782478][ T2977] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.791036][ T2977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.854982][ T2977] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.864070][ T2977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.935088][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.089755][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.146296][ T5827] veth0_vlan: entered promiscuous mode [ 80.213031][ T5827] veth1_vlan: entered promiscuous mode [ 80.364966][ T5839] veth0_vlan: entered promiscuous mode [ 80.379758][ T5832] Bluetooth: hci2: command tx timeout [ 80.407009][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.425289][ T5827] veth0_macvtap: entered promiscuous mode [ 80.447553][ T5839] veth1_vlan: entered promiscuous mode [ 80.459072][ T5841] Bluetooth: hci0: command tx timeout [ 80.465120][ T5832] Bluetooth: hci1: command tx timeout [ 80.476901][ T5827] veth1_macvtap: entered promiscuous mode [ 80.541410][ T5841] Bluetooth: hci4: command tx timeout [ 80.547666][ T5832] Bluetooth: hci3: command tx timeout [ 80.550689][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.563764][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.594231][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.613662][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.641620][ T3430] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.665761][ T3430] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.679346][ T3430] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.715850][ T3430] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.746809][ T5839] veth0_macvtap: entered promiscuous mode [ 80.761678][ T5839] veth1_macvtap: entered promiscuous mode [ 80.844229][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.877598][ T5829] veth0_vlan: entered promiscuous mode [ 80.894556][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.953407][ T140] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.967761][ T5829] veth1_vlan: entered promiscuous mode [ 80.991349][ T140] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.020876][ T5828] veth0_vlan: entered promiscuous mode [ 81.044668][ T140] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.054696][ T140] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.106598][ T3016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.121110][ T3016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.143751][ T5828] veth1_vlan: entered promiscuous mode [ 81.221489][ T5829] veth0_macvtap: entered promiscuous mode [ 81.236297][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.252902][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.277423][ T3430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.293719][ T3430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.304227][ T5829] veth1_macvtap: entered promiscuous mode [ 81.368032][ T5842] veth0_vlan: entered promiscuous mode [ 81.404288][ T2977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.411667][ T5828] veth0_macvtap: entered promiscuous mode [ 81.425634][ T2977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.432086][ T5842] veth1_vlan: entered promiscuous mode [ 81.445216][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.465543][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.485111][ T5828] veth1_macvtap: entered promiscuous mode [ 81.524672][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.561457][ T3016] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.590548][ T3016] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.650371][ T3016] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.680718][ T3016] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.726969][ T5952] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.780997][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.873149][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.958166][ T4597] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.994033][ T3016] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.039400][ T3016] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.090920][ T5842] veth0_macvtap: entered promiscuous mode [ 82.385927][ T3016] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.499137][ T5832] Bluetooth: hci2: command tx timeout [ 82.539973][ T5832] Bluetooth: hci1: command tx timeout [ 82.546546][ T5832] Bluetooth: hci0: command tx timeout [ 82.629464][ T5841] Bluetooth: hci3: command tx timeout [ 82.629494][ T5832] Bluetooth: hci4: command tx timeout [ 82.766166][ T5961] IPv6: addrconf: prefix option has invalid lifetime [ 82.774324][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.876534][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 83.054291][ T5842] veth1_macvtap: entered promiscuous mode [ 83.097434][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.106217][ T2977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.112217][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.141116][ T2977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.216991][ T2977] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.243823][ T2977] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.273498][ T2977] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.311336][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.324562][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.359825][ T2977] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.440868][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.467415][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.701557][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.728006][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.740436][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.757178][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.779399][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.882381][ T2948] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.915573][ T2948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.959520][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.004028][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 84.015605][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 84.025750][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.059323][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.129580][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.138424][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.224767][ T5992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16'. [ 85.341842][ T5992] hsr_slave_0: left promiscuous mode [ 85.475667][ T5992] hsr_slave_1: left promiscuous mode [ 86.891655][ T130] cfg80211: failed to load regulatory.db [ 89.431545][ T6030] mmap: syz.3.26 (6030) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 89.552719][ T6030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.26'. [ 92.805151][ T6059] libceph: resolve '0..' (ret=-3): failed [ 95.853370][ T6087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.42'. [ 97.328346][ T6109] loop1: detected capacity change from 0 to 512 [ 99.687823][ T6109] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.702774][ T6109] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.837160][ T6109] ======================================================= [ 99.837160][ T6109] WARNING: The mand mount option has been deprecated and [ 99.837160][ T6109] and is ignored by this kernel. Remove the mand [ 99.837160][ T6109] option from the mount to silence this warning. [ 99.837160][ T6109] ======================================================= [ 99.883742][ T6109] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 100.745827][ T6109] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 101.452838][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.968509][ T6135] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.198826][ T5993] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 102.533472][ T5993] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.605764][ T5993] usb 1-1: config 0 interface 0 has no altsetting 0 [ 102.749296][ T6151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.57'. [ 103.229767][ T5993] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 103.384078][ T5993] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.409222][ T5993] usb 1-1: Product: syz [ 103.450835][ T6153] 9p: Bad value for 'rfdno' [ 104.388853][ T5993] usb 1-1: Manufacturer: syz [ 104.393704][ T5993] usb 1-1: SerialNumber: syz [ 104.405372][ T5993] usb 1-1: config 0 descriptor?? [ 104.435915][ T5993] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 105.412009][ T6146] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 105.419760][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 105.429743][ T5993] dvb-usb: will use the device's hardware PID filter (table count: 8). [ 106.397408][ T5993] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 106.408925][ T6146] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 106.415828][ T5993] usb 1-1: media controller created [ 106.423740][ T5993] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 106.553943][ T6146] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 106.744777][ T5993] DVB: Unable to find symbol tda10046_attach() [ 106.751254][ T5993] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 107.179926][ T6146] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 107.201526][ T5993] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 107.215050][ T6146] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 107.226230][ T5993] dvb_usb_m920x 1-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 107.366017][ T6146] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 107.379435][ T5993] usb 1-1: USB disconnect, device number 2 [ 107.963275][ T6146] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 107.971606][ T6146] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 107.998403][ T6146] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 108.053886][ T6146] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 108.138937][ T6146] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 108.392251][ T6180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.64'. [ 108.401742][ T6180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.64'. [ 108.469139][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 108.677880][ T6146] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 108.830093][ T6177] loop3: detected capacity change from 0 to 1024 [ 108.841022][ T6177] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 108.865993][ T6146] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 108.873150][ T6146] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 109.127329][ T6177] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 109.240534][ T6146] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 109.259092][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout [ 109.304443][ T6177] JBD2: no valid journal superblock found [ 109.491231][ T6185] loop0: detected capacity change from 0 to 40427 [ 109.516247][ T6185] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 109.525584][ T6185] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 109.541287][ T6185] F2FS-fs (loop0): invalid crc value [ 109.600498][ T6185] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 109.619244][ T6185] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 109.626901][ T6185] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 109.790429][ T6177] EXT4-fs (loop3): Could not load journal inode [ 109.999112][ T5841] Bluetooth: hci2: command 0x0c1a tx timeout [ 110.233156][ T5841] Bluetooth: hci3: command 0x0c1a tx timeout [ 110.490740][ T6177] loop3: detected capacity change from 0 to 4096 [ 110.500781][ T6177] ntfs3: Bad value for 'umask' [ 110.678896][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 110.948807][ T5841] Bluetooth: hci4: command 0x0c1a tx timeout [ 111.039387][ T5892] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 111.266145][ T5892] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 111.349555][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout [ 111.528465][ T5892] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 111.545975][ T5892] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 111.600444][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 111.717125][ T5892] usb 4-1: SerialNumber: syz [ 112.027920][ T6196] pimreg: entered allmulticast mode [ 112.059296][ T5841] Bluetooth: hci2: command 0x0c1a tx timeout [ 112.298933][ T5841] Bluetooth: hci3: command 0x0c1a tx timeout [ 112.445867][ C1] hrtimer: interrupt took 53380 ns [ 113.046634][ T5841] Bluetooth: hci4: command 0x0c1a tx timeout [ 113.342932][ T6236] loop9: detected capacity change from 0 to 7 [ 113.358186][ T6236] Dev loop9: unable to read RDB block 7 [ 113.374213][ T6236] loop9: AHDI p1 p2 [ 113.382463][ T6236] loop9: partition table partially beyond EOD, truncated [ 113.418964][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout [ 113.425863][ T6236] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 113.472084][ T5892] usb 4-1: 0:2 : does not exist [ 113.475594][ T6181] pimreg: left allmulticast mode [ 113.477698][ T5892] usb 4-1: unit 255 not found! [ 114.718988][ T5841] Bluetooth: hci2: command 0x0c1a tx timeout [ 114.728423][ T5841] Bluetooth: hci3: command 0x0c1a tx timeout [ 115.035200][ T6218] udevd[6218]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 115.069291][ T5892] usb 4-1: USB disconnect, device number 3 [ 115.121466][ T5832] Bluetooth: hci4: command 0x0c1a tx timeout [ 115.305446][ T6218] udevd[6218]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.498243][ T6253] loop4: detected capacity change from 0 to 40427 [ 115.518362][ T6253] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 115.526931][ T6253] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 115.617971][ T6253] F2FS-fs (loop4): invalid crc value [ 115.768407][ T6253] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 115.821621][ T6253] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 115.829028][ T6253] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 119.498662][ T6288] cgroup: noprefix used incorrectly [ 119.506729][ T6288] syz.4.89 uses obsolete (PF_INET,SOCK_PACKET) [ 122.628085][ T6315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.96'. [ 122.637561][ T6315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.96'. [ 125.086687][ T6340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.101'. [ 128.113546][ T6359] loop2: detected capacity change from 0 to 128 [ 129.450613][ T6370] loop2: detected capacity change from 0 to 40427 [ 129.586605][ T6366] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 129.591281][ T6366] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 129.626383][ T6370] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 129.634486][ T6370] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 129.646379][ T6370] F2FS-fs (loop2): invalid crc value [ 129.653392][ T6366] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 129.671307][ T6366] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 129.731431][ T6370] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 129.943530][ T6378] loop0: detected capacity change from 0 to 40427 [ 129.955583][ T6378] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 129.963926][ T6378] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 129.974505][ T6378] F2FS-fs (loop0): invalid crc value [ 130.009738][ T6370] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 130.016836][ T6370] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 130.144805][ T6378] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 130.206552][ T6366] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 130.225123][ T6378] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 130.233690][ T6378] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 132.186266][ T5151] Bluetooth: hci0: command 0x0c1a tx timeout [ 132.192355][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout [ 132.198370][ T5841] Bluetooth: hci3: command 0x0c1a tx timeout [ 132.204481][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout [ 132.226498][ T5841] Bluetooth: hci4: command 0x0c1a tx timeout [ 132.874826][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.883893][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.477957][ T6397] loop9: detected capacity change from 0 to 7 [ 133.529683][ T6397] Dev loop9: unable to read RDB block 7 [ 133.536379][ T6397] loop9: unable to read partition table [ 133.569067][ T6397] loop9: partition table beyond EOD, truncated [ 133.610968][ T6397] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 137.001821][ T6428] loop2: detected capacity change from 0 to 40427 [ 137.038448][ T6428] F2FS-fs (loop2): invalid crc value [ 137.103307][ T6428] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 137.113676][ T6428] F2FS-fs (loop2): Start checkpoint disabled! [ 137.125145][ T6428] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 137.133731][ T6428] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 137.344565][ T6430] loop3: detected capacity change from 0 to 40427 [ 137.353449][ T6430] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 137.361743][ T6430] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 137.371123][ T6430] F2FS-fs (loop3): invalid crc value [ 137.423987][ T6430] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 137.644852][ T6430] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 137.652252][ T6430] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 137.690402][ T6439] random: crng reseeded on system resumption [ 139.654231][ T6417] kworker/u8:20: attempt to access beyond end of device [ 139.654231][ T6417] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 139.741324][ T6417] CPU: 1 UID: 0 PID: 6417 Comm: kworker/u8:20 Not tainted syzkaller #0 PREEMPT(full) [ 139.741349][ T6417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 139.741359][ T6417] Workqueue: writeback wb_workfn (flush-7:2) [ 139.741400][ T6417] Call Trace: [ 139.741408][ T6417] [ 139.741416][ T6417] dump_stack_lvl+0x189/0x250 [ 139.741442][ T6417] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.741461][ T6417] ? __pfx_queue_work_on+0x10/0x10 [ 139.741477][ T6417] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 139.741500][ T6417] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 139.741538][ T6417] f2fs_handle_critical_error+0x37c/0x540 [ 139.741565][ T6417] f2fs_write_end_io+0x886/0xb60 [ 139.741607][ T6417] __submit_merged_bio+0x256/0x660 [ 139.741639][ T6417] __submit_merged_write_cond+0x269/0x530 [ 139.741665][ T6417] f2fs_write_data_pages+0x2756/0x3290 [ 139.741724][ T6417] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 139.741760][ T6417] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 139.741780][ T6417] ? __pfx_hlock_conflict+0x10/0x10 [ 139.741837][ T6417] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 139.741856][ T6417] ? __lock_acquire+0x6b6/0x2cf0 [ 139.741895][ T6417] ? __lock_acquire+0x6b6/0x2cf0 [ 139.741920][ T6417] ? __lock_acquire+0x6b6/0x2cf0 [ 139.741944][ T6417] ? __lock_acquire+0x6b6/0x2cf0 [ 139.741966][ T6417] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 139.741997][ T6417] do_writepages+0x32e/0x550 [ 139.742025][ T6417] ? reacquire_held_locks+0x121/0x1c0 [ 139.742044][ T6417] ? writeback_sb_inodes+0x3bd/0x1870 [ 139.742073][ T6417] __writeback_single_inode+0x133/0x1240 [ 139.742094][ T6417] ? do_raw_spin_unlock+0x122/0x240 [ 139.742120][ T6417] writeback_sb_inodes+0x93a/0x1870 [ 139.742149][ T6417] ? rcu_is_watching+0x15/0xb0 [ 139.742188][ T6417] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 139.742259][ T6417] ? rcu_is_watching+0x15/0xb0 [ 139.742289][ T6417] wb_writeback+0x42b/0xaa0 [ 139.742318][ T6417] ? queue_io+0x1f1/0x450 [ 139.742341][ T6417] ? __pfx_wb_writeback+0x10/0x10 [ 139.742370][ T6417] ? _raw_spin_unlock_irq+0x23/0x50 [ 139.742398][ T6417] wb_workfn+0x3f9/0xed0 [ 139.742439][ T6417] ? __pfx_wb_workfn+0x10/0x10 [ 139.742485][ T6417] ? process_one_work+0x868/0x15a0 [ 139.742511][ T6417] ? _raw_spin_unlock_irq+0x23/0x50 [ 139.742538][ T6417] ? process_one_work+0x868/0x15a0 [ 139.742554][ T6417] process_one_work+0x93a/0x15a0 [ 139.742598][ T6417] ? __pfx_process_one_work+0x10/0x10 [ 139.742632][ T6417] ? assign_work+0x3a1/0x410 [ 139.742656][ T6417] worker_thread+0x9b0/0xee0 [ 139.742705][ T6417] kthread+0x711/0x8a0 [ 139.742731][ T6417] ? __pfx_worker_thread+0x10/0x10 [ 139.742765][ T6417] ? __pfx_kthread+0x10/0x10 [ 139.742788][ T6417] ? _raw_spin_unlock_irq+0x23/0x50 [ 139.742809][ T6417] ? lockdep_hardirqs_on+0x98/0x140 [ 139.742823][ T6417] ? __pfx_kthread+0x10/0x10 [ 139.742846][ T6417] ret_from_fork+0x599/0xb30 [ 139.742868][ T6417] ? __pfx_ret_from_fork+0x10/0x10 [ 139.742899][ T6417] ? __switch_to_asm+0x39/0x70 [ 139.742917][ T6417] ? __switch_to_asm+0x33/0x70 [ 139.742935][ T6417] ? __pfx_kthread+0x10/0x10 [ 139.742957][ T6417] ret_from_fork_asm+0x1a/0x30 [ 139.742997][ T6417] [ 139.743006][ T6417] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 141.335471][ T6449] loop0: detected capacity change from 0 to 40427 [ 141.399835][ T6449] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 141.407784][ T6449] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 141.417930][ T6449] F2FS-fs (loop0): invalid crc value [ 141.496986][ T6449] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 141.668437][ T6449] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 141.675717][ T6449] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 141.911560][ T6466] loop4: detected capacity change from 0 to 128 [ 142.179043][ T6465] loop2: detected capacity change from 0 to 40427 [ 142.321196][ T6465] F2FS-fs (loop2): invalid crc value [ 142.481245][ T39] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 142.493629][ T6465] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 142.730266][ T6465] F2FS-fs (loop2): Start checkpoint disabled! [ 142.747528][ T6465] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 142.814638][ T6465] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 143.708777][ T39] usb 2-1: Using ep0 maxpacket: 8 [ 143.717520][ T6471] tipc: Started in network mode [ 143.722746][ T6471] tipc: Node identity ac14140f, cluster identity 4711 [ 143.733354][ T6471] tipc: New replicast peer: 255.255.255.255 [ 143.744787][ T6471] tipc: Enabled bearer , priority 10 [ 143.760352][ T39] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 143.778767][ T39] usb 2-1: config 0 has no interface number 0 [ 143.785334][ T39] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 144.238828][ T39] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 42911, setting to 1024 [ 144.395129][ T6478] random: crng reseeded on system resumption [ 144.404724][ T39] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 144.496547][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.791157][ T39] usb 2-1: config 0 descriptor?? [ 144.810303][ T39] usb 2-1: can't set config #0, error -71 [ 144.827858][ T39] usb 2-1: USB disconnect, device number 2 [ 144.870749][ T6027] tipc: Node number set to 2886997007 [ 147.670479][ T6482] loop4: detected capacity change from 0 to 40427 [ 147.698864][ T6482] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 147.706644][ T6482] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 147.732818][ T6482] F2FS-fs (loop4): invalid crc value [ 147.829051][ T3072] kworker/u8:12: attempt to access beyond end of device [ 147.829051][ T3072] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 148.028936][ T3072] CPU: 0 UID: 0 PID: 3072 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) [ 148.028962][ T3072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 148.028973][ T3072] Workqueue: writeback wb_workfn (flush-7:2) [ 148.029005][ T3072] Call Trace: [ 148.029013][ T3072] [ 148.029021][ T3072] dump_stack_lvl+0x189/0x250 [ 148.029048][ T3072] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.029068][ T3072] ? __pfx_queue_work_on+0x10/0x10 [ 148.029085][ T3072] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 148.029108][ T3072] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 148.029143][ T3072] f2fs_handle_critical_error+0x37c/0x540 [ 148.029170][ T3072] f2fs_write_end_io+0x886/0xb60 [ 148.029211][ T3072] __submit_merged_bio+0x256/0x660 [ 148.029236][ T3072] __submit_merged_write_cond+0x269/0x530 [ 148.029262][ T3072] f2fs_write_data_pages+0x2756/0x3290 [ 148.029321][ T3072] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 148.029356][ T3072] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 148.029416][ T3072] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 148.029434][ T3072] ? __lock_acquire+0x6b6/0x2cf0 [ 148.029472][ T3072] ? __lock_acquire+0x6b6/0x2cf0 [ 148.029493][ T3072] ? __lock_acquire+0x6b6/0x2cf0 [ 148.029516][ T3072] ? __lock_acquire+0x6b6/0x2cf0 [ 148.029540][ T3072] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 148.029560][ T3072] do_writepages+0x32e/0x550 [ 148.029588][ T3072] ? reacquire_held_locks+0x121/0x1c0 [ 148.029606][ T3072] ? writeback_sb_inodes+0x3bd/0x1870 [ 148.029634][ T3072] __writeback_single_inode+0x133/0x1240 [ 148.029655][ T3072] ? do_raw_spin_unlock+0x122/0x240 [ 148.029682][ T3072] writeback_sb_inodes+0x93a/0x1870 [ 148.029711][ T3072] ? rcu_is_watching+0x15/0xb0 [ 148.029756][ T3072] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 148.029824][ T3072] ? rcu_is_watching+0x15/0xb0 [ 148.029854][ T3072] wb_writeback+0x42b/0xaa0 [ 148.029883][ T3072] ? queue_io+0x1f1/0x450 [ 148.029906][ T3072] ? __pfx_wb_writeback+0x10/0x10 [ 148.029935][ T3072] ? _raw_spin_unlock_irq+0x23/0x50 [ 148.029963][ T3072] wb_workfn+0x3f9/0xed0 [ 148.030004][ T3072] ? __pfx_wb_workfn+0x10/0x10 [ 148.030028][ T3072] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 148.030050][ T3072] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 148.030088][ T3072] ? process_one_work+0x868/0x15a0 [ 148.030131][ T3072] ? _raw_spin_unlock_irq+0x23/0x50 [ 148.030158][ T3072] ? process_one_work+0x868/0x15a0 [ 148.030174][ T3072] process_one_work+0x93a/0x15a0 [ 148.030218][ T3072] ? __pfx_process_one_work+0x10/0x10 [ 148.030246][ T3072] ? assign_work+0x3a1/0x410 [ 148.030269][ T3072] worker_thread+0x9b0/0xee0 [ 148.030317][ T3072] kthread+0x711/0x8a0 [ 148.030341][ T3072] ? __pfx_worker_thread+0x10/0x10 [ 148.030357][ T3072] ? __pfx_kthread+0x10/0x10 [ 148.030380][ T3072] ? _raw_spin_unlock_irq+0x23/0x50 [ 148.030401][ T3072] ? lockdep_hardirqs_on+0x98/0x140 [ 148.030414][ T3072] ? __pfx_kthread+0x10/0x10 [ 148.030435][ T3072] ret_from_fork+0x599/0xb30 [ 148.030456][ T3072] ? __pfx_ret_from_fork+0x10/0x10 [ 148.030484][ T3072] ? __switch_to_asm+0x39/0x70 [ 148.030502][ T3072] ? __switch_to_asm+0x33/0x70 [ 148.030519][ T3072] ? __pfx_kthread+0x10/0x10 [ 148.030540][ T3072] ret_from_fork_asm+0x1a/0x30 [ 148.030580][ T3072] [ 148.030588][ T3072] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 148.158041][ T6482] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 151.579391][ T5832] Bluetooth: hci4: command 0x0c1a tx timeout [ 151.713426][ T6516] loop2: detected capacity change from 0 to 128 [ 152.517583][ T6521] loop4: detected capacity change from 0 to 40427 [ 152.535867][ T6521] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 152.543708][ T6521] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 152.563554][ T6521] F2FS-fs (loop4): invalid crc value [ 152.642385][ T6521] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 152.659802][ T6521] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 152.666960][ T6521] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 153.684085][ T6532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.146'. [ 154.399985][ T6541] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 155.138803][ T39] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 155.431583][ T6548] loop4: detected capacity change from 0 to 40427 [ 155.449246][ T6548] F2FS-fs (loop4): invalid crc value [ 155.516131][ T6548] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 155.526182][ T39] usb 3-1: Using ep0 maxpacket: 8 [ 155.531580][ T6548] F2FS-fs (loop4): Start checkpoint disabled! [ 155.541051][ T6548] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 155.549030][ T6548] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 155.561662][ T39] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 155.570974][ T39] usb 3-1: config 0 has no interface number 0 [ 155.577189][ T39] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 155.589329][ T39] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 42911, setting to 1024 [ 155.606147][ T39] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 155.763546][ T6555] random: crng reseeded on system resumption [ 156.189610][ T6556] netlink: 104 bytes leftover after parsing attributes in process `syz.0.152'. [ 156.390332][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.401792][ T39] usb 3-1: config 0 descriptor?? [ 156.412571][ T6544] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 156.427539][ T39] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 156.616312][ T6559] loop1: detected capacity change from 0 to 40427 [ 156.633209][ T6559] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 156.641444][ T6559] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 156.651846][ T6559] F2FS-fs (loop1): invalid crc value [ 156.653712][ T24] usb 3-1: USB disconnect, device number 2 [ 156.727010][ T3016] kworker/u8:11: attempt to access beyond end of device [ 156.727010][ T3016] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 156.756439][ T3016] CPU: 1 UID: 0 PID: 3016 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 156.756463][ T3016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 156.756474][ T3016] Workqueue: writeback wb_workfn (flush-7:4) [ 156.756506][ T3016] Call Trace: [ 156.756513][ T3016] [ 156.756521][ T3016] dump_stack_lvl+0x189/0x250 [ 156.756547][ T3016] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.756568][ T3016] ? __pfx_queue_work_on+0x10/0x10 [ 156.756585][ T3016] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 156.756608][ T3016] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 156.756644][ T3016] f2fs_handle_critical_error+0x37c/0x540 [ 156.756672][ T3016] f2fs_write_end_io+0x886/0xb60 [ 156.756714][ T3016] __submit_merged_bio+0x256/0x660 [ 156.756741][ T3016] __submit_merged_write_cond+0x269/0x530 [ 156.756768][ T3016] f2fs_write_data_pages+0x2756/0x3290 [ 156.756829][ T3016] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 156.756871][ T3016] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 156.756934][ T3016] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 156.756953][ T3016] ? __lock_acquire+0x6b6/0x2cf0 [ 156.756988][ T3016] ? __lock_acquire+0x6b6/0x2cf0 [ 156.757010][ T3016] ? __lock_acquire+0x6b6/0x2cf0 [ 156.757041][ T3016] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 156.757060][ T3016] do_writepages+0x32e/0x550 [ 156.757085][ T3016] ? reacquire_held_locks+0x121/0x1c0 [ 156.757102][ T3016] ? writeback_sb_inodes+0x3bd/0x1870 [ 156.757129][ T3016] __writeback_single_inode+0x133/0x1240 [ 156.757149][ T3016] ? do_raw_spin_unlock+0x122/0x240 [ 156.757176][ T3016] writeback_sb_inodes+0x93a/0x1870 [ 156.757227][ T3016] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 156.757295][ T3016] ? rcu_is_watching+0x15/0xb0 [ 156.757327][ T3016] wb_writeback+0x42b/0xaa0 [ 156.757356][ T3016] ? queue_io+0x1f1/0x450 [ 156.757379][ T3016] ? __pfx_wb_writeback+0x10/0x10 [ 156.757408][ T3016] ? _raw_spin_unlock_irq+0x23/0x50 [ 156.757436][ T3016] wb_workfn+0x3f9/0xed0 [ 156.757478][ T3016] ? __pfx_wb_workfn+0x10/0x10 [ 156.757525][ T3016] ? process_one_work+0x868/0x15a0 [ 156.757550][ T3016] ? _raw_spin_unlock_irq+0x23/0x50 [ 156.757576][ T3016] ? process_one_work+0x868/0x15a0 [ 156.757590][ T3016] process_one_work+0x93a/0x15a0 [ 156.757627][ T3016] ? __pfx_process_one_work+0x10/0x10 [ 156.757650][ T3016] ? assign_work+0x3a1/0x410 [ 156.757671][ T3016] worker_thread+0x9b0/0xee0 [ 156.757714][ T3016] kthread+0x711/0x8a0 [ 156.757738][ T3016] ? __pfx_worker_thread+0x10/0x10 [ 156.757754][ T3016] ? __pfx_kthread+0x10/0x10 [ 156.757777][ T3016] ? _raw_spin_unlock_irq+0x23/0x50 [ 156.757814][ T3016] ? lockdep_hardirqs_on+0x98/0x140 [ 156.757827][ T3016] ? __pfx_kthread+0x10/0x10 [ 156.757853][ T3016] ret_from_fork+0x599/0xb30 [ 156.757874][ T3016] ? __pfx_ret_from_fork+0x10/0x10 [ 156.757909][ T3016] ? __switch_to_asm+0x39/0x70 [ 156.757927][ T3016] ? __switch_to_asm+0x33/0x70 [ 156.757946][ T3016] ? __pfx_kthread+0x10/0x10 [ 156.757968][ T3016] ret_from_fork_asm+0x1a/0x30 [ 156.758010][ T3016] [ 156.758018][ T3016] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 156.897023][ T6559] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 156.922383][ T6563] Zero length message leads to an empty skb [ 157.087821][ T6559] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 157.095027][ T6559] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 158.061763][ T6573] loop2: detected capacity change from 0 to 40427 [ 158.070487][ T6573] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 158.078392][ T6573] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 158.088506][ T6573] F2FS-fs (loop2): invalid crc value [ 158.142423][ T6573] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 158.157887][ T6573] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 158.165436][ T6573] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 159.349202][ T6587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.161'. [ 161.639453][ T6599] tipc: Started in network mode [ 161.644408][ T6599] tipc: Node identity ac14140f, cluster identity 4711 [ 161.651623][ T6599] tipc: New replicast peer: 255.255.255.255 [ 161.658383][ T6599] tipc: Enabled bearer , priority 10 [ 162.839219][ T6009] tipc: Node number set to 2886997007 [ 164.036841][ T6608] random: crng reseeded on system resumption [ 166.481191][ T6605] loop1: detected capacity change from 0 to 40427 [ 166.492380][ T6605] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 166.500190][ T6605] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 166.511600][ T6605] F2FS-fs (loop1): invalid crc value [ 166.611715][ T6605] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 166.638455][ T6605] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 166.648846][ T6605] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 167.625956][ T6619] loop4: detected capacity change from 0 to 40427 [ 167.696518][ T6619] F2FS-fs (loop4): invalid crc value [ 167.828589][ T6619] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 167.843458][ T6619] F2FS-fs (loop4): Start checkpoint disabled! [ 167.888311][ T6619] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 167.922641][ T6619] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 168.279046][ T6027] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 168.329584][ T6629] loop3: detected capacity change from 0 to 40427 [ 168.404839][ T6629] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 168.404863][ T6629] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 168.405884][ T6629] F2FS-fs (loop3): invalid crc value [ 168.467916][ T6619] random: crng reseeded on system resumption [ 168.509078][ T6629] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 168.535362][ T6629] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 168.542679][ T6629] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 168.701430][ T6027] usb 3-1: Using ep0 maxpacket: 8 [ 169.175201][ T6027] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 169.198792][ T6027] usb 3-1: config 0 has no interface number 0 [ 169.205506][ T6027] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 169.248752][ T6027] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 42911, setting to 1024 [ 169.302804][ T43] kworker/u8:3: attempt to access beyond end of device [ 169.302804][ T43] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 169.327448][ T6027] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 169.351624][ T6027] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.371380][ T43] CPU: 1 UID: 0 PID: 43 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 169.371406][ T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 169.371417][ T43] Workqueue: writeback wb_workfn (flush-7:4) [ 169.371450][ T43] Call Trace: [ 169.371457][ T43] [ 169.371464][ T43] dump_stack_lvl+0x189/0x250 [ 169.371491][ T43] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.371511][ T43] ? __pfx_queue_work_on+0x10/0x10 [ 169.371528][ T43] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 169.371552][ T43] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 169.371588][ T43] f2fs_handle_critical_error+0x37c/0x540 [ 169.371616][ T43] f2fs_write_end_io+0x886/0xb60 [ 169.371657][ T43] __submit_merged_bio+0x256/0x660 [ 169.371684][ T43] __submit_merged_write_cond+0x269/0x530 [ 169.371711][ T43] f2fs_write_data_pages+0x2756/0x3290 [ 169.371772][ T43] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 169.371809][ T43] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 169.371871][ T43] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 169.371889][ T43] ? __lock_acquire+0x6b6/0x2cf0 [ 169.371928][ T43] ? __lock_acquire+0x6b6/0x2cf0 [ 169.371952][ T43] ? __lock_acquire+0x6b6/0x2cf0 [ 169.371976][ T43] ? __lock_acquire+0x6b6/0x2cf0 [ 169.372001][ T43] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 169.372022][ T43] do_writepages+0x32e/0x550 [ 169.372051][ T43] ? reacquire_held_locks+0x121/0x1c0 [ 169.372069][ T43] ? writeback_sb_inodes+0x3bd/0x1870 [ 169.372098][ T43] __writeback_single_inode+0x133/0x1240 [ 169.372119][ T43] ? do_raw_spin_unlock+0x122/0x240 [ 169.372147][ T43] writeback_sb_inodes+0x93a/0x1870 [ 169.372175][ T43] ? rcu_is_watching+0x15/0xb0 [ 169.372222][ T43] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 169.372292][ T43] ? rcu_is_watching+0x15/0xb0 [ 169.372323][ T43] wb_writeback+0x42b/0xaa0 [ 169.372352][ T43] ? queue_io+0x1f1/0x450 [ 169.372376][ T43] ? __pfx_wb_writeback+0x10/0x10 [ 169.372406][ T43] ? _raw_spin_unlock_irq+0x23/0x50 [ 169.372434][ T43] wb_workfn+0x3f9/0xed0 [ 169.372475][ T43] ? __pfx_wb_workfn+0x10/0x10 [ 169.372499][ T43] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 169.372521][ T43] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 169.372561][ T43] ? process_one_work+0x868/0x15a0 [ 169.372586][ T43] ? _raw_spin_unlock_irq+0x23/0x50 [ 169.372613][ T43] ? process_one_work+0x868/0x15a0 [ 169.372628][ T43] process_one_work+0x93a/0x15a0 [ 169.372674][ T43] ? __pfx_process_one_work+0x10/0x10 [ 169.372703][ T43] ? assign_work+0x3a1/0x410 [ 169.372728][ T43] worker_thread+0x9b0/0xee0 [ 169.372778][ T43] kthread+0x711/0x8a0 [ 169.372804][ T43] ? __pfx_worker_thread+0x10/0x10 [ 169.372821][ T43] ? __pfx_kthread+0x10/0x10 [ 169.372845][ T43] ? _raw_spin_unlock_irq+0x23/0x50 [ 169.372866][ T43] ? lockdep_hardirqs_on+0x98/0x140 [ 169.372880][ T43] ? __pfx_kthread+0x10/0x10 [ 169.372902][ T43] ret_from_fork+0x599/0xb30 [ 169.372924][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 169.372955][ T43] ? __switch_to_asm+0x39/0x70 [ 169.372974][ T43] ? __switch_to_asm+0x33/0x70 [ 169.372992][ T43] ? __pfx_kthread+0x10/0x10 [ 169.373015][ T43] ret_from_fork_asm+0x1a/0x30 [ 169.373056][ T43] [ 169.373064][ T43] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 169.619273][ T6646] loop0: detected capacity change from 0 to 40427 [ 169.719940][ T6646] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 169.727791][ T6646] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 169.741036][ T6027] usb 3-1: config 0 descriptor?? [ 169.746622][ T6630] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 169.774165][ T6646] F2FS-fs (loop0): invalid crc value [ 169.804271][ T6027] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 169.894982][ T6646] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 169.939411][ T6646] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 169.946576][ T6646] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 169.987236][ T6027] usb 3-1: USB disconnect, device number 3 [ 170.447453][ T6663] loop1: detected capacity change from 0 to 128 [ 170.692254][ T6655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.172'. [ 170.758035][ T6663] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 170.855905][ T6663] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 171.212080][ T6671] caif0 speed is unknown, defaulting to 1000 [ 171.233760][ T6671] caif0 speed is unknown, defaulting to 1000 [ 171.264150][ T6671] caif0 speed is unknown, defaulting to 1000 [ 171.782866][ T6671] infiniband syz2: set down [ 171.787538][ T6671] infiniband syz2: added caif0 [ 171.796734][ T5915] caif0 speed is unknown, defaulting to 1000 [ 171.829322][ T6671] RDS/IB: syz2: added [ 171.833770][ T6671] smc: adding ib device syz2 with port count 1 [ 171.840233][ T6671] smc: ib device syz2 port 1 has no pnetid [ 171.849173][ T6671] caif0 speed is unknown, defaulting to 1000 [ 171.973775][ T6671] caif0 speed is unknown, defaulting to 1000 [ 172.095947][ T6671] caif0 speed is unknown, defaulting to 1000 [ 172.110396][ T5915] caif0 speed is unknown, defaulting to 1000 [ 172.291559][ T6671] caif0 speed is unknown, defaulting to 1000 [ 172.412725][ T6671] caif0 speed is unknown, defaulting to 1000 [ 173.074816][ T6676] loop3: detected capacity change from 0 to 40427 [ 173.101175][ T6676] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 173.109497][ T6676] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 173.122423][ T6676] F2FS-fs (loop3): invalid crc value [ 173.280273][ T6676] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 173.312620][ T6676] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 173.319802][ T6676] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 174.311798][ T5828] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 175.458323][ T6695] loop1: detected capacity change from 0 to 2048 [ 175.544057][ T6695] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 175.571677][ T6695] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 176.140781][ T6703] loop4: detected capacity change from 0 to 40427 [ 176.154508][ T6703] F2FS-fs (loop4): invalid crc value [ 176.224606][ T6703] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 176.235332][ T6703] F2FS-fs (loop4): Start checkpoint disabled! [ 176.242924][ T6703] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 176.250748][ T6703] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 176.452116][ T6710] random: crng reseeded on system resumption [ 178.306144][ T12] kworker/u8:0: attempt to access beyond end of device [ 178.306144][ T12] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 178.356001][ T6110] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 178.462670][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 178.462696][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 178.462706][ T12] Workqueue: writeback wb_workfn (flush-7:4) [ 178.462737][ T12] Call Trace: [ 178.462744][ T12] [ 178.462752][ T12] dump_stack_lvl+0x189/0x250 [ 178.462776][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.462794][ T12] ? __pfx_queue_work_on+0x10/0x10 [ 178.462810][ T12] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 178.462831][ T12] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 178.462861][ T12] f2fs_handle_critical_error+0x37c/0x540 [ 178.462885][ T12] f2fs_write_end_io+0x886/0xb60 [ 178.462922][ T12] __submit_merged_bio+0x256/0x660 [ 178.462947][ T12] __submit_merged_write_cond+0x269/0x530 [ 178.462972][ T12] f2fs_write_data_pages+0x2756/0x3290 [ 178.463025][ T12] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 178.463056][ T12] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 178.463111][ T12] ? bpf_get_current_cgroup_id+0x1d/0x340 [ 178.463160][ T12] ? __lock_acquire+0x6b6/0x2cf0 [ 178.463184][ T12] ? __lock_acquire+0x6b6/0x2cf0 [ 178.463206][ T12] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 178.463227][ T12] do_writepages+0x32e/0x550 [ 178.463254][ T12] ? reacquire_held_locks+0x121/0x1c0 [ 178.463272][ T12] ? writeback_sb_inodes+0x3bd/0x1870 [ 178.463296][ T12] __writeback_single_inode+0x133/0x1240 [ 178.463317][ T12] ? do_raw_spin_unlock+0x122/0x240 [ 178.463343][ T12] writeback_sb_inodes+0x93a/0x1870 [ 178.463371][ T12] ? rcu_is_watching+0x15/0xb0 [ 178.463407][ T12] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 178.463469][ T12] ? rcu_is_watching+0x15/0xb0 [ 178.463499][ T12] wb_writeback+0x42b/0xaa0 [ 178.463533][ T12] ? queue_io+0x1f1/0x450 [ 178.463556][ T12] ? __pfx_wb_writeback+0x10/0x10 [ 178.463582][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 178.463608][ T12] wb_workfn+0x3f9/0xed0 [ 178.463646][ T12] ? __pfx_wb_workfn+0x10/0x10 [ 178.463669][ T12] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 178.463691][ T12] ? preempt_schedule+0xae/0xc0 [ 178.463715][ T12] ? preempt_schedule_common+0x83/0xd0 [ 178.463748][ T12] ? process_one_work+0x868/0x15a0 [ 178.463778][ T12] ? process_one_work+0x868/0x15a0 [ 178.463794][ T12] process_one_work+0x93a/0x15a0 [ 178.463833][ T12] ? __pfx_process_one_work+0x10/0x10 [ 178.463861][ T12] ? assign_work+0x3a1/0x410 [ 178.463884][ T12] worker_thread+0x9b0/0xee0 [ 178.463930][ T12] kthread+0x711/0x8a0 [ 178.463953][ T12] ? __pfx_worker_thread+0x10/0x10 [ 178.463971][ T12] ? __pfx_kthread+0x10/0x10 [ 178.463992][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 178.464012][ T12] ? lockdep_hardirqs_on+0x98/0x140 [ 178.464026][ T12] ? __pfx_kthread+0x10/0x10 [ 178.464048][ T12] ret_from_fork+0x599/0xb30 [ 178.464068][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 178.464097][ T12] ? __switch_to_asm+0x39/0x70 [ 178.464116][ T12] ? __switch_to_asm+0x33/0x70 [ 178.464134][ T12] ? __pfx_kthread+0x10/0x10 [ 178.464155][ T12] ret_from_fork_asm+0x1a/0x30 [ 178.464193][ T12] [ 178.464252][ T12] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 178.855997][ T6733] loop0: detected capacity change from 0 to 1024 [ 179.012024][ T6730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.188'. [ 179.052733][ T6110] usb 3-1: Using ep0 maxpacket: 8 [ 179.073517][ T6110] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 179.082377][ T6110] usb 3-1: config 0 has no interface number 0 [ 179.094779][ T6110] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 179.109112][ T6110] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 42911, setting to 1024 [ 179.173955][ T6110] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 179.195921][ T6110] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.421063][ T6735] loop3: detected capacity change from 0 to 512 [ 179.427995][ T6110] usb 3-1: config 0 descriptor?? [ 179.458079][ T6727] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 179.481847][ T6735] EXT4-fs: inline encryption not supported [ 179.487728][ T6735] EXT4-fs: Ignoring removed i_version option [ 179.494794][ T6110] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 179.559897][ T6735] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.191: inode has both inline data and extents flags [ 179.612360][ T6735] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.191: couldn't read orphan inode 15 (err -117) [ 179.658994][ T6735] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.689057][ T5915] usb 3-1: USB disconnect, device number 4 [ 179.956514][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.217131][ T6758] process 'syz.2.196' launched '/dev/fd/4' with NULL argv: empty string added [ 181.264308][ T6753] capability: warning: `syz.4.190' uses 32-bit capabilities (legacy support in use) [ 181.839179][ T6765] loop3: detected capacity change from 0 to 40427 [ 181.892868][ T6765] F2FS-fs (loop3): invalid crc value [ 181.945398][ T6765] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 181.955354][ T6765] F2FS-fs (loop3): Start checkpoint disabled! [ 181.965751][ T6765] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 181.977138][ T6765] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 182.226601][ T6772] random: crng reseeded on system resumption [ 182.972990][ T6048] kworker/u8:18: attempt to access beyond end of device [ 182.972990][ T6048] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 184.178789][ T6048] CPU: 1 UID: 0 PID: 6048 Comm: kworker/u8:18 Not tainted syzkaller #0 PREEMPT(full) [ 184.178814][ T6048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 184.178824][ T6048] Workqueue: writeback wb_workfn (flush-7:3) [ 184.178855][ T6048] Call Trace: [ 184.178865][ T6048] [ 184.178873][ T6048] dump_stack_lvl+0x189/0x250 [ 184.178894][ T6048] ? preempt_schedule_thunk+0x16/0x30 [ 184.178914][ T6048] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.178933][ T6048] ? __pfx_queue_work_on+0x10/0x10 [ 184.178949][ T6048] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 184.178973][ T6048] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 184.179007][ T6048] f2fs_handle_critical_error+0x37c/0x540 [ 184.179032][ T6048] f2fs_write_end_io+0x886/0xb60 [ 184.179071][ T6048] __submit_merged_bio+0x256/0x660 [ 184.179095][ T6048] __submit_merged_write_cond+0x269/0x530 [ 184.179121][ T6048] f2fs_write_data_pages+0x2756/0x3290 [ 184.179174][ T6048] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 184.179207][ T6048] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 184.179260][ T6048] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 184.179278][ T6048] ? __lock_acquire+0x6b6/0x2cf0 [ 184.179313][ T6048] ? __lock_acquire+0x6b6/0x2cf0 [ 184.179336][ T6048] ? __lock_acquire+0x6b6/0x2cf0 [ 184.179358][ T6048] ? __lock_acquire+0x6b6/0x2cf0 [ 184.179381][ T6048] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 184.179401][ T6048] do_writepages+0x32e/0x550 [ 184.179429][ T6048] ? reacquire_held_locks+0x121/0x1c0 [ 184.179447][ T6048] ? writeback_sb_inodes+0x3bd/0x1870 [ 184.179474][ T6048] __writeback_single_inode+0x133/0x1240 [ 184.179495][ T6048] ? do_raw_spin_unlock+0x122/0x240 [ 184.179521][ T6048] writeback_sb_inodes+0x93a/0x1870 [ 184.179549][ T6048] ? rcu_is_watching+0x15/0xb0 [ 184.179584][ T6048] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 184.179645][ T6048] ? rcu_is_watching+0x15/0xb0 [ 184.179674][ T6048] wb_writeback+0x42b/0xaa0 [ 184.179709][ T6048] ? queue_io+0x1f1/0x450 [ 184.179730][ T6048] ? __pfx_wb_writeback+0x10/0x10 [ 184.179761][ T6048] ? _raw_spin_unlock_irq+0x23/0x50 [ 184.179786][ T6048] wb_workfn+0x3f9/0xed0 [ 184.179822][ T6048] ? __pfx_wb_workfn+0x10/0x10 [ 184.179860][ T6048] ? process_one_work+0x868/0x15a0 [ 184.179883][ T6048] ? _raw_spin_unlock_irq+0x23/0x50 [ 184.179908][ T6048] ? process_one_work+0x868/0x15a0 [ 184.179923][ T6048] process_one_work+0x93a/0x15a0 [ 184.179963][ T6048] ? __pfx_process_one_work+0x10/0x10 [ 184.179990][ T6048] ? assign_work+0x3a1/0x410 [ 184.180013][ T6048] worker_thread+0x9b0/0xee0 [ 184.180059][ T6048] kthread+0x711/0x8a0 [ 184.180084][ T6048] ? __pfx_worker_thread+0x10/0x10 [ 184.180101][ T6048] ? __pfx_kthread+0x10/0x10 [ 184.180123][ T6048] ? _raw_spin_unlock_irq+0x23/0x50 [ 184.180144][ T6048] ? lockdep_hardirqs_on+0x98/0x140 [ 184.180159][ T6048] ? __pfx_kthread+0x10/0x10 [ 184.180180][ T6048] ret_from_fork+0x599/0xb30 [ 184.180200][ T6048] ? __pfx_ret_from_fork+0x10/0x10 [ 184.180229][ T6048] ? __switch_to_asm+0x39/0x70 [ 184.180247][ T6048] ? __switch_to_asm+0x33/0x70 [ 184.180265][ T6048] ? __pfx_kthread+0x10/0x10 [ 184.180287][ T6048] ret_from_fork_asm+0x1a/0x30 [ 184.180333][ T6048] [ 184.494447][ T6048] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 185.509593][ T6788] loop1: detected capacity change from 0 to 8192 [ 186.592193][ T6110] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 186.745655][ T6808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.202'. [ 187.178965][ T6110] usb 3-1: Using ep0 maxpacket: 8 [ 187.187109][ T6110] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 187.205805][ T6110] usb 3-1: config 0 has no interface number 0 [ 187.224864][ T6110] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 187.258742][ T6110] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 42911, setting to 1024 [ 187.269348][ T6810] 9pnet_fd: Insufficient options for proto=fd [ 187.298789][ T6110] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 187.326636][ T6110] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.355710][ T6110] usb 3-1: config 0 descriptor?? [ 187.376333][ T6799] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 187.393797][ T6110] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 187.598586][ T6792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.607688][ T6792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.629260][ T5979] usb 3-1: USB disconnect, device number 5 [ 188.869010][ T6817] loop2: detected capacity change from 0 to 40427 [ 188.900748][ T6817] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 188.908692][ T6817] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 188.919662][ T6817] F2FS-fs (loop2): invalid crc value [ 189.123166][ T6819] loop0: detected capacity change from 0 to 40427 [ 189.181652][ T6819] F2FS-fs (loop0): invalid crc value [ 189.312401][ T6817] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 189.326243][ T6819] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 189.519947][ T6819] F2FS-fs (loop0): Start checkpoint disabled! [ 189.637721][ T6817] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 189.644863][ T6817] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 189.661671][ T6819] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 189.841256][ T6819] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 190.476095][ T6838] random: crng reseeded on system resumption [ 192.207549][ T60] kworker/u8:4: attempt to access beyond end of device [ 192.207549][ T60] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 192.423243][ T60] CPU: 0 UID: 0 PID: 60 Comm: kworker/u8:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 192.423273][ T60] Tainted: [L]=SOFTLOCKUP [ 192.423280][ T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 192.423291][ T60] Workqueue: writeback wb_workfn (flush-7:0) [ 192.423322][ T60] Call Trace: [ 192.423329][ T60] [ 192.423338][ T60] dump_stack_lvl+0x189/0x250 [ 192.423367][ T60] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.423388][ T60] ? __pfx_queue_work_on+0x10/0x10 [ 192.423406][ T60] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 192.423430][ T60] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 192.423468][ T60] f2fs_handle_critical_error+0x37c/0x540 [ 192.423497][ T60] f2fs_write_end_io+0x886/0xb60 [ 192.423539][ T60] __submit_merged_bio+0x256/0x660 [ 192.423566][ T60] __submit_merged_write_cond+0x269/0x530 [ 192.423594][ T60] f2fs_write_data_pages+0x2756/0x3290 [ 192.423656][ T60] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 192.423693][ T60] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 192.423757][ T60] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 192.423775][ T60] ? __lock_acquire+0x6b6/0x2cf0 [ 192.423826][ T60] ? __lock_acquire+0x6b6/0x2cf0 [ 192.423861][ T60] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 192.423883][ T60] do_writepages+0x32e/0x550 [ 192.423913][ T60] ? reacquire_held_locks+0x121/0x1c0 [ 192.423932][ T60] ? writeback_sb_inodes+0x3bd/0x1870 [ 192.423962][ T60] __writeback_single_inode+0x133/0x1240 [ 192.423984][ T60] ? do_raw_spin_unlock+0x122/0x240 [ 192.424012][ T60] writeback_sb_inodes+0x93a/0x1870 [ 192.424071][ T60] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 192.424142][ T60] ? rcu_is_watching+0x15/0xb0 [ 192.424175][ T60] wb_writeback+0x42b/0xaa0 [ 192.424205][ T60] ? queue_io+0x1f1/0x450 [ 192.424230][ T60] ? __pfx_wb_writeback+0x10/0x10 [ 192.424261][ T60] ? _raw_spin_unlock_irq+0x23/0x50 [ 192.424290][ T60] wb_workfn+0x3f9/0xed0 [ 192.424333][ T60] ? __pfx_wb_workfn+0x10/0x10 [ 192.424380][ T60] ? process_one_work+0x868/0x15a0 [ 192.424406][ T60] ? _raw_spin_unlock_irq+0x23/0x50 [ 192.424432][ T60] ? process_one_work+0x868/0x15a0 [ 192.424448][ T60] process_one_work+0x93a/0x15a0 [ 192.424494][ T60] ? __pfx_process_one_work+0x10/0x10 [ 192.424523][ T60] ? assign_work+0x3a1/0x410 [ 192.424547][ T60] worker_thread+0x9b0/0xee0 [ 192.424598][ T60] kthread+0x711/0x8a0 [ 192.424624][ T60] ? __pfx_worker_thread+0x10/0x10 [ 192.424641][ T60] ? __pfx_kthread+0x10/0x10 [ 192.424665][ T60] ? _raw_spin_unlock_irq+0x23/0x50 [ 192.424686][ T60] ? lockdep_hardirqs_on+0x98/0x140 [ 192.424700][ T60] ? __pfx_kthread+0x10/0x10 [ 192.424722][ T60] ret_from_fork+0x599/0xb30 [ 192.424743][ T60] ? __pfx_ret_from_fork+0x10/0x10 [ 192.424774][ T60] ? __switch_to_asm+0x39/0x70 [ 192.424793][ T60] ? __switch_to_asm+0x33/0x70 [ 192.424811][ T60] ? __pfx_kthread+0x10/0x10 [ 192.424833][ T60] ret_from_fork_asm+0x1a/0x30 [ 192.424876][ T60] [ 192.424883][ T60] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 194.409905][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.439259][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.607423][ T6862] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.223'. [ 195.036658][ T6870] rdma_rxe: rxe_newlink: failed to add caif0 [ 195.251681][ T6858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.260602][ T6858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.550436][ T6878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.221'. [ 196.445059][ T6887] loop0: detected capacity change from 0 to 40427 [ 196.477881][ T6887] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 196.485765][ T6887] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 196.503636][ T6887] F2FS-fs (loop0): invalid crc value [ 196.573809][ T6887] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 197.045614][ T6887] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 197.053369][ T6887] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 197.979638][ T6890] Driver unsupported XDP return value 0 on prog (id 38) dev N/A, expect packet loss! [ 198.002862][ T6883] loop4: detected capacity change from 0 to 32768 [ 198.057617][ T6905] /dev/loop0: Can't open blockdev [ 199.353164][ T6923] loop2: detected capacity change from 0 to 512 [ 199.405887][ T6923] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 199.445247][ T6923] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 199.467313][ T6927] loop3: detected capacity change from 0 to 164 [ 199.518784][ T6923] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 199.547730][ T6927] Unable to read rock-ridge attributes [ 199.581926][ T6923] EXT4-fs (loop2): 1 truncate cleaned up [ 199.585045][ T6927] Unable to read rock-ridge attributes [ 199.593046][ T6923] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.141867][ T6936] loop0: detected capacity change from 0 to 16 [ 200.168582][ T6927] syz.3.238: attempt to access beyond end of device [ 200.168582][ T6927] loop3: rw=8912896, sector=263328, nr_sectors = 4 limit=164 [ 200.199298][ T6941] EXT4-fs error (device loop2): __ext4_iget:5426: inode #12: block 2: comm syz.2.236: invalid block [ 200.218344][ T6927] syz.3.238: attempt to access beyond end of device [ 200.218344][ T6927] loop3: rw=8388608, sector=263328, nr_sectors = 4 limit=164 [ 200.312296][ T30] audit: type=1800 audit(1764998850.212:2): pid=6927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.238" name="file0" dev="loop3" ino=1862 res=0 errno=0 [ 200.343407][ T6941] EXT4-fs (loop2): Remounting filesystem read-only [ 200.704636][ T6945] loop1: detected capacity change from 0 to 40427 [ 200.712142][ T5915] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 200.723406][ T6945] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 200.731244][ T6945] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 200.732391][ T6945] F2FS-fs (loop1): invalid crc value [ 200.840096][ T6945] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 200.866484][ T6945] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 200.866512][ T6945] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 200.989771][ T5915] usb 5-1: Using ep0 maxpacket: 8 [ 200.991746][ T5915] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 200.991770][ T5915] usb 5-1: config 0 has no interface number 0 [ 200.991807][ T5915] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 200.991831][ T5915] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 42911, setting to 1024 [ 200.991876][ T5915] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 200.991897][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.002897][ T5915] usb 5-1: config 0 descriptor?? [ 201.003627][ T6937] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 201.016314][ T5915] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 201.207549][ T6937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.208489][ T6937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.581043][ T6958] netlink: 'syz.3.244': attribute type 1 has an invalid length. [ 201.696371][ T6962] netlink: 28 bytes leftover after parsing attributes in process `syz.3.244'. [ 201.699822][ T6958] bond1 (unregistering): Released all slaves [ 201.830436][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.962269][ T6964] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 202.644615][ T5915] usb 5-1: USB disconnect, device number 2 [ 204.497278][ T6987] loop4: detected capacity change from 0 to 128 [ 204.576788][ T6990] loop0: detected capacity change from 0 to 256 [ 204.686034][ T6990] exfat: Unknown parameter 'io‹' [ 205.102920][ T6996] loop2: detected capacity change from 0 to 40427 [ 205.127854][ T6996] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 205.135822][ T6996] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 205.149051][ T6996] F2FS-fs (loop2): invalid crc value [ 205.253113][ T6996] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 205.273520][ T6996] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 205.274064][ T6991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.280718][ T6996] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 205.289589][ T6991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.048759][ T1210] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 206.228804][ T1210] usb 1-1: device descriptor read/64, error -71 [ 206.307408][ T7013] netlink: 20 bytes leftover after parsing attributes in process `syz.3.256'. [ 206.339555][ T7013] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2225463490 (142429663360 ns) > initial count (63815086272 ns). Using initial count to start timer. [ 206.528825][ T1210] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 206.734887][ T1210] usb 1-1: device descriptor read/64, error -71 [ 206.950061][ T1210] usb usb1-port1: attempt power cycle [ 207.060154][ T7024] netlink: 48 bytes leftover after parsing attributes in process `syz.3.261'. [ 207.222058][ T5979] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 207.398384][ T7027] loop3: detected capacity change from 0 to 40427 [ 207.419126][ T7027] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 207.426901][ T7027] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 207.453623][ T7027] F2FS-fs (loop3): invalid crc value [ 207.459491][ T1210] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 207.508981][ T7027] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 207.520166][ T1210] usb 1-1: device descriptor read/8, error -71 [ 207.530063][ T7027] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 207.537130][ T7027] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 207.598768][ T5979] usb 3-1: Using ep0 maxpacket: 8 [ 207.650463][ T5979] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 207.724492][ T5979] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 208.308805][ T5979] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 208.319263][ T5979] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 208.329980][ T5979] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 208.375362][ T5979] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 208.398741][ T5979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.767566][ T5979] usb 3-1: usb_control_msg returned -32 [ 208.795174][ T5979] usbtmc 3-1:16.0: can't read capabilities [ 209.754409][ T7036] loop0: detected capacity change from 0 to 32768 [ 209.803332][ T7036] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 209.863913][ T7052] RDS: rds_bind could not find a transport for ae0c:91e3:ccfb:11d2:0:5efe:150.125.240.108, load rds_tcp or rds_rdma? [ 209.908181][ T7036] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 210.025340][ T7036] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 210.047298][ T5979] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 210.056441][ T5979] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 210.145207][ T7056] /dev/loop0: Can't open blockdev [ 210.334021][ T5979] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 277ms [ 210.371532][ T5979] gfs2: fsid=syz:syz.0: jid=0: Done [ 210.381664][ T7036] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 210.408099][ T7036] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2338 (type: exp=4, found=6), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 210.445607][ T7036] CPU: 1 UID: 0 PID: 7036 Comm: syz.0.263 Tainted: G L syzkaller #0 PREEMPT(full) [ 210.445634][ T7036] Tainted: [L]=SOFTLOCKUP [ 210.445639][ T7036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 210.445645][ T7036] Call Trace: [ 210.445650][ T7036] [ 210.445655][ T7036] dump_stack_lvl+0x189/0x250 [ 210.445675][ T7036] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.445685][ T7036] ? gfs2_meta_read+0x775/0x8b0 [ 210.445700][ T7036] ? __pfx_gfs2_meta_read+0x10/0x10 [ 210.445715][ T7036] gfs2_withdraw+0xc3/0x1b0 [ 210.445726][ T7036] gfs2_meta_buffer+0x250/0x2e0 [ 210.445742][ T7036] inode_go_instantiate+0xe4/0x1210 [ 210.445761][ T7036] ? __pfx_inode_go_instantiate+0x10/0x10 [ 210.445776][ T7036] ? gfs2_glock_nq+0xedd/0x15f0 [ 210.445788][ T7036] gfs2_instantiate+0x168/0x220 [ 210.445799][ T7036] gfs2_glock_wait+0x1d4/0x2a0 [ 210.445810][ T7036] gfs2_statfs_init+0x100/0x490 [ 210.445822][ T7036] ? __pfx_gfs2_statfs_init+0x10/0x10 [ 210.445831][ T7036] ? init_per_node+0x2c8/0x3e0 [ 210.445843][ T7036] ? gfs2_fill_super+0x1a5b/0x21b0 [ 210.445854][ T7036] ? init_inodes+0x26f/0x320 [ 210.445898][ T7036] gfs2_fill_super+0x1a5b/0x21b0 [ 210.445918][ T7036] ? __pfx_gfs2_fill_super+0x10/0x10 [ 210.445929][ T7036] ? init_locking+0xb8/0x210 [ 210.445951][ T7036] ? sb_set_blocksize+0x155/0x240 [ 210.445963][ T7036] ? setup_bdev_super+0x4c1/0x5b0 [ 210.445980][ T7036] get_tree_bdev_flags+0x40e/0x4d0 [ 210.445991][ T7036] ? __pfx_gfs2_fill_super+0x10/0x10 [ 210.446000][ T7036] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 210.446009][ T7036] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 210.446030][ T7036] gfs2_get_tree+0x51/0x1e0 [ 210.446041][ T7036] vfs_get_tree+0x92/0x2a0 [ 210.446052][ T7036] do_new_mount+0x302/0xa10 [ 210.446062][ T7036] ? apparmor_capable+0x137/0x1a0 [ 210.446077][ T7036] ? __pfx_do_new_mount+0x10/0x10 [ 210.446088][ T7036] ? ns_capable+0x8a/0xf0 [ 210.446099][ T7036] ? kmem_cache_free+0x197/0x620 [ 210.446124][ T7036] __se_sys_mount+0x313/0x410 [ 210.446140][ T7036] ? __pfx___se_sys_mount+0x10/0x10 [ 210.446154][ T7036] ? do_syscall_64+0xbe/0xf80 [ 210.446163][ T7036] ? __x64_sys_mount+0x20/0xc0 [ 210.446175][ T7036] do_syscall_64+0xfa/0xf80 [ 210.446185][ T7036] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.446194][ T7036] ? clear_bhb_loop+0x60/0xb0 [ 210.446205][ T7036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.446216][ T7036] RIP: 0033:0x7f51f8790eea [ 210.446238][ T7036] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.446248][ T7036] RSP: 002b:00007f51f966de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 210.446259][ T7036] RAX: ffffffffffffffda RBX: 00007f51f966def0 RCX: 00007f51f8790eea [ 210.446266][ T7036] RDX: 00002000000124c0 RSI: 0000200000012500 RDI: 00007f51f966deb0 [ 210.446273][ T7036] RBP: 00002000000124c0 R08: 00007f51f966def0 R09: 0000000000000000 [ 210.446280][ T7036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 210.446285][ T7036] R13: 00007f51f966deb0 R14: 00000000000124ab R15: 0000200000012540 [ 210.446301][ T7036] [ 210.446961][ T7036] gfs2: fsid=syz:syz.0: can't initialize statfs subsystem: -5 [ 210.846867][ T5915] usb 3-1: USB disconnect, device number 6 [ 211.080792][ T7060] overlay: filesystem on ./bus is read-only [ 211.251893][ T7058] loop3: detected capacity change from 0 to 40427 [ 211.408454][ T7058] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 211.416788][ T7058] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 211.425974][ T7058] F2FS-fs (loop3): invalid crc value [ 211.502609][ T7058] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 211.521360][ T7058] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 211.528499][ T7058] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 212.501485][ T7055] loop1: detected capacity change from 0 to 32768 [ 212.763409][ T7077] loop0: detected capacity change from 0 to 40427 [ 212.798859][ T7077] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 212.806660][ T7077] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 212.817440][ T7077] F2FS-fs (loop0): invalid crc value [ 212.879856][ T7077] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 212.897969][ T7077] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 212.905178][ T7077] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 215.903034][ T7100] kAFS: unable to lookup cell '.S²jË¡8' [ 216.296431][ T7104] loop2: detected capacity change from 0 to 40427 [ 216.322247][ T7104] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 216.331116][ T7104] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 216.387228][ T7104] F2FS-fs (loop2): invalid crc value [ 216.686418][ T7104] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 216.761453][ T7104] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 216.768574][ T7104] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 219.312352][ T7133] RDS: rds_bind could not find a transport for ae0c:91e3:ccfb:11d2:0:5efe:150.125.240.108, load rds_tcp or rds_rdma? [ 219.342467][ T7135] rdma_rxe: rxe_newlink: failed to add caif0 [ 219.383063][ T7140] input: syz1 as /devices/virtual/input/input5 [ 219.637061][ T7143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.288'. [ 221.076395][ T7148] loop4: detected capacity change from 0 to 40427 [ 221.084661][ T7148] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 221.093429][ T7148] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 221.116184][ T7148] F2FS-fs (loop4): invalid crc value [ 221.176959][ T7148] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 221.191992][ T7148] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 221.199089][ T7148] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 222.197358][ T7153] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 222.279166][ T7153] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 222.703262][ T7159] loop2: detected capacity change from 0 to 8192 [ 222.727107][ T7146] loop1: detected capacity change from 0 to 32768 [ 222.807374][ T6218] loop2: AHDI p1 p2 p3 p4 [ 222.873843][ T7146] XFS (loop1): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 222.875280][ T6218] loop2: p1 start 9043968 is beyond EOD, truncated [ 222.919645][ T6218] loop2: p3 size 4294967040 extends beyond EOD, truncated [ 223.001848][ T6218] loop2: p4 size 101123072 extends beyond EOD, truncated [ 223.287016][ T7159] loop2: AHDI p1 p2 p3 p4 [ 223.318584][ T7159] loop2: p1 start 9043968 is beyond EOD, truncated [ 223.444301][ T7159] loop2: p3 size 4294967040 extends beyond EOD, truncated [ 223.478534][ T7159] loop2: p4 size 101123072 extends beyond EOD, truncated [ 223.591714][ T7146] XFS (loop1): Starting recovery (logdev: internal) [ 223.783758][ T7146] XFS (loop1): Ending recovery (logdev: internal) [ 223.787664][ T6218] udevd[6218]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 223.804254][ T5877] udevd[5877]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 224.596919][ T5828] XFS (loop1): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 224.614327][ T5877] udevd[5877]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 224.639890][ T6218] udevd[6218]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 224.808755][ T6110] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 224.999119][ T6110] usb 4-1: Using ep0 maxpacket: 8 [ 225.018231][ T6110] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 225.078955][ T6110] usb 4-1: config 0 has no interface number 0 [ 225.092756][ T6110] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 225.421689][ T7196] loop0: detected capacity change from 0 to 40427 [ 225.431117][ T6110] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 42911, setting to 1024 [ 225.442610][ T6110] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 225.451857][ T7196] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 225.460068][ T7196] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 225.469120][ T7199] /dev/loop0: Can't open blockdev [ 225.469515][ T6110] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.483146][ T7196] F2FS-fs (loop0): invalid crc value [ 225.494067][ T6110] usb 4-1: config 0 descriptor?? [ 225.501849][ T7186] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 225.612217][ T7196] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 225.630710][ T6110] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 225.643681][ T7196] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 225.651113][ T7196] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 225.721962][ T7182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.731524][ T7182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.845887][ T6110] usb 4-1: USB disconnect, device number 4 [ 226.844191][ T7207] loop3: detected capacity change from 0 to 40427 [ 226.854726][ T7207] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 226.862670][ T7207] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 226.901664][ T7207] F2FS-fs (loop3): invalid crc value [ 226.981027][ T7207] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 227.025851][ T7197] loop1: detected capacity change from 0 to 32768 [ 227.037098][ T7207] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 227.044250][ T7207] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 228.037630][ T7220] loop2: detected capacity change from 0 to 764 [ 228.126691][ T7220] Symlink component flag not implemented [ 228.133046][ T7220] Symlink component flag not implemented (116) [ 229.995915][ T7242] libceph: resolve '0..' (ret=-3): failed [ 230.005817][ T7235] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 230.066139][ T7235] loop1: detected capacity change from 0 to 736 [ 230.363765][ T7248] loop3: detected capacity change from 0 to 40427 [ 230.387675][ T7248] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 230.395685][ T7248] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 230.407343][ T7248] F2FS-fs (loop3): invalid crc value [ 230.472789][ T7248] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 230.492429][ T7248] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 230.499586][ T7248] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 234.580425][ T7285] netlink: 16 bytes leftover after parsing attributes in process `syz.1.325'. [ 235.502546][ T39] IPVS: starting estimator thread 0... [ 235.828881][ T7286] IPVS: using max 27 ests per chain, 64800 per kthread [ 235.961793][ T7291] loop2: detected capacity change from 0 to 40427 [ 235.973632][ T7291] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 235.981556][ T7291] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 235.993133][ T7291] F2FS-fs (loop2): invalid crc value [ 236.183007][ T7291] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 236.195076][ T7291] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 236.202297][ T7291] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 237.108613][ T7300] tmpfs: Unknown parameter 'grpquota/#/msr' [ 238.920661][ T39] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 239.242193][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.259837][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.285630][ T39] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 239.389516][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.456846][ T39] usb 2-1: config 0 descriptor?? [ 239.931665][ T39] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 239.943782][ T39] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 240.135203][ T7306] overlayfs: failed to resolve './file0': -2 [ 240.880849][ T39] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0001/input/input6 [ 240.968209][ T39] cm6533_jd 0003:0D8C:0022.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 241.321051][ T6009] usb 2-1: USB disconnect, device number 3 [ 241.361469][ T7328] fido_id[7328]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 241.907775][ T7337] netlink: 32 bytes leftover after parsing attributes in process `syz.3.336'. [ 242.247268][ T7336] loop3: detected capacity change from 0 to 32768 [ 250.206685][ T7354] loop2: detected capacity change from 0 to 40427 [ 250.217656][ T7354] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 250.225570][ T7354] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 251.372173][ T7354] F2FS-fs (loop2): invalid crc value [ 251.462551][ T7354] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 251.484025][ T7354] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 251.491139][ T7354] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 251.639385][ T7369] fuse: Bad value for 'fd' [ 253.303617][ T7383] loop0: detected capacity change from 0 to 40427 [ 253.351988][ T7383] F2FS-fs (loop0): invalid crc value [ 253.433744][ T7383] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 253.455295][ T7383] F2FS-fs (loop0): Start checkpoint disabled! [ 253.462711][ T7383] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 253.471585][ T7383] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 253.590538][ T7383] random: crng reseeded on system resumption [ 253.666448][ T1135] kworker/u8:7: attempt to access beyond end of device [ 253.666448][ T1135] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 253.725509][ T1135] CPU: 0 UID: 0 PID: 1135 Comm: kworker/u8:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 253.725538][ T1135] Tainted: [L]=SOFTLOCKUP [ 253.725543][ T1135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 253.725553][ T1135] Workqueue: writeback wb_workfn (flush-7:0) [ 253.725593][ T1135] Call Trace: [ 253.725600][ T1135] [ 253.725608][ T1135] dump_stack_lvl+0x189/0x250 [ 253.725634][ T1135] ? __pfx_dump_stack_lvl+0x10/0x10 [ 253.725653][ T1135] ? __pfx_queue_work_on+0x10/0x10 [ 253.725670][ T1135] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 253.725693][ T1135] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 253.725728][ T1135] f2fs_handle_critical_error+0x37c/0x540 [ 253.725754][ T1135] f2fs_write_end_io+0x886/0xb60 [ 253.725792][ T1135] __submit_merged_bio+0x256/0x660 [ 253.725818][ T1135] __submit_merged_write_cond+0x269/0x530 [ 253.725841][ T1135] f2fs_write_data_pages+0x2756/0x3290 [ 253.725907][ T1135] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 253.725940][ T1135] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 253.725993][ T1135] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 253.726007][ T1135] ? __lock_acquire+0x6b6/0x2cf0 [ 253.726037][ T1135] ? __lock_acquire+0x6b6/0x2cf0 [ 253.726055][ T1135] ? __lock_acquire+0x6b6/0x2cf0 [ 253.726073][ T1135] ? __lock_acquire+0x6b6/0x2cf0 [ 253.726091][ T1135] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 253.726108][ T1135] do_writepages+0x32e/0x550 [ 253.726131][ T1135] ? reacquire_held_locks+0x121/0x1c0 [ 253.726147][ T1135] ? writeback_sb_inodes+0x3bd/0x1870 [ 253.726170][ T1135] __writeback_single_inode+0x133/0x1240 [ 253.726187][ T1135] ? do_raw_spin_unlock+0x122/0x240 [ 253.726213][ T1135] writeback_sb_inodes+0x93a/0x1870 [ 253.726236][ T1135] ? rcu_is_watching+0x15/0xb0 [ 253.726269][ T1135] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 253.726329][ T1135] ? rcu_is_watching+0x15/0xb0 [ 253.726358][ T1135] wb_writeback+0x42b/0xaa0 [ 253.726386][ T1135] ? queue_io+0x1f1/0x450 [ 253.726408][ T1135] ? __pfx_wb_writeback+0x10/0x10 [ 253.726436][ T1135] ? _raw_spin_unlock_irq+0x23/0x50 [ 253.726463][ T1135] wb_workfn+0x3f9/0xed0 [ 253.726497][ T1135] ? __pfx_wb_workfn+0x10/0x10 [ 253.726533][ T1135] ? process_one_work+0x868/0x15a0 [ 253.726551][ T1135] ? _raw_spin_unlock_irq+0x23/0x50 [ 253.726579][ T1135] ? process_one_work+0x868/0x15a0 [ 253.726591][ T1135] process_one_work+0x93a/0x15a0 [ 253.726623][ T1135] ? __pfx_process_one_work+0x10/0x10 [ 253.726644][ T1135] ? assign_work+0x3a1/0x410 [ 253.726668][ T1135] worker_thread+0x9b0/0xee0 [ 253.726714][ T1135] kthread+0x711/0x8a0 [ 253.726737][ T1135] ? __pfx_worker_thread+0x10/0x10 [ 253.726753][ T1135] ? __pfx_kthread+0x10/0x10 [ 253.726776][ T1135] ? _raw_spin_unlock_irq+0x23/0x50 [ 253.726797][ T1135] ? lockdep_hardirqs_on+0x98/0x140 [ 253.726811][ T1135] ? __pfx_kthread+0x10/0x10 [ 253.726831][ T1135] ret_from_fork+0x599/0xb30 [ 253.726851][ T1135] ? __pfx_ret_from_fork+0x10/0x10 [ 253.726879][ T1135] ? __switch_to_asm+0x39/0x70 [ 253.726893][ T1135] ? __switch_to_asm+0x33/0x70 [ 253.726907][ T1135] ? __pfx_kthread+0x10/0x10 [ 253.726925][ T1135] ret_from_fork_asm+0x1a/0x30 [ 253.726960][ T1135] [ 253.726967][ T1135] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 254.383696][ T7392] loop2: detected capacity change from 0 to 40427 [ 254.467451][ T7392] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 254.475294][ T7392] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 254.530493][ T7392] F2FS-fs (loop2): invalid crc value [ 254.621849][ T7392] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 254.639153][ T7392] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 254.646277][ T7392] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 255.875636][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.883146][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.950325][ T7406] libceph: resolve '0..' (ret=-3): failed [ 255.950461][ T7407] netlink: 16 bytes leftover after parsing attributes in process `syz.4.354'. [ 258.005573][ T7420] loop1: detected capacity change from 0 to 40427 [ 258.019801][ T7420] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 258.027573][ T7420] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 258.037703][ T7420] F2FS-fs (loop1): invalid crc value [ 258.107146][ T7420] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 258.119123][ T7420] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 258.126227][ T7420] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 259.374877][ T7412] loop2: detected capacity change from 0 to 32768 [ 259.389071][ T7436] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 259.413606][ T7412] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.355 (7412) [ 259.505145][ T7433] loop1: detected capacity change from 0 to 4096 [ 259.521302][ T7412] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 259.559013][ T7433] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 259.570513][ T7412] BTRFS info (device loop2): using blake2b (blake2b-256-lib) checksum algorithm [ 259.622370][ T7412] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 259.629903][ T7412] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 259.645959][ T7412] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 259.659377][ T7412] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 259.696451][ T7412] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 259.706287][ T7412] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 259.716920][ T7412] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 259.730618][ T7412] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 259.741686][ T7433] ntfs3(loop1): ino=19, mi_enum_attr [ 259.741958][ T7412] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 259.771636][ T7412] BTRFS error (device loop2): open_ctree failed: -12 [ 259.806324][ T7433] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 260.640957][ T7453] loop0: detected capacity change from 0 to 40427 [ 260.670330][ T7453] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 260.678102][ T7453] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 260.692079][ T7453] F2FS-fs (loop0): invalid crc value [ 260.806526][ T7453] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 260.819384][ T7453] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 260.826491][ T7453] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 261.949057][ T7466] netlink: 16 bytes leftover after parsing attributes in process `syz.1.366'. [ 264.880285][ T7483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.887660][ T7495] loop4: detected capacity change from 0 to 128 [ 264.889254][ T7483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.896547][ T7495] msdos: Unknown parameter './file1' [ 266.226899][ T7506] loop4: detected capacity change from 0 to 1024 [ 266.522110][ T36] hfsplus: b-tree write err: -5, ino 4 [ 267.321596][ T7513] rdma_rxe: rxe_newlink: failed to add caif0 [ 267.518060][ T7514] futex_wake_op: syz.3.380 tries to shift op by -1; fix this program [ 268.628747][ T7526] loop3: detected capacity change from 0 to 40427 [ 268.636669][ T7526] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 268.644805][ T7526] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 268.654286][ T7526] F2FS-fs (loop3): invalid crc value [ 268.772683][ T7526] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 268.816185][ T7526] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 268.831506][ T7526] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 269.352905][ T7536] loop4: detected capacity change from 0 to 256 [ 269.378792][ T7520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.389428][ T7520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.402527][ T6028] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 269.487182][ T7536] exFAT-fs (loop4): failed to test first cluster bit of root dir(5) [ 271.839121][ T5915] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 271.900298][ T7556] loop2: detected capacity change from 0 to 256 [ 272.139665][ T5915] usb 1-1: Using ep0 maxpacket: 8 [ 272.146867][ T5915] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 272.162934][ T5915] usb 1-1: config 0 has no interface number 0 [ 272.263146][ T5915] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 272.288501][ T5915] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 42911, setting to 1024 [ 272.316142][ T5915] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 272.336438][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.365606][ T5915] usb 1-1: config 0 descriptor?? [ 272.451482][ T7548] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 272.671353][ T7542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.680021][ T7542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.929181][ T5915] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 272.998313][ T5915] usb 1-1: USB disconnect, device number 7 [ 274.345911][ T7584] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 274.355380][ T7584] team0: Port device batadv1 added [ 274.452173][ T7587] caif0 speed is unknown, defaulting to 1000 [ 274.479641][ T7588] binder: binder_mmap: 7586 2000004cd000-2000004ce000 bad vm_flags failed -1 [ 275.015362][ T5827] overlayfs: failed lookup in lower (newroot/88, name='bus', err=-40): overlapping layers [ 275.055379][ T7595] loop0: detected capacity change from 0 to 64 [ 275.084326][ T5827] overlayfs: failed lookup in lower (newroot/88, name='bus', err=-40): overlapping layers [ 275.311428][ T7580] loop1: detected capacity change from 0 to 32768 [ 275.389131][ T7580] btrfs: Unknown parameter 'rootcontext' [ 276.389537][ T7602] loop4: detected capacity change from 0 to 512 [ 276.528083][ T7602] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.589058][ T7602] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.009702][ T6028] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 277.606193][ T6103] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.630376][ T6028] usb 5-1: config index 0 descriptor too short (expected 50202, got 125) [ 277.650532][ T5915] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 277.658704][ T6028] usb 5-1: config 44 has too many interfaces: 111, using maximum allowed: 32 [ 277.667514][ T6028] usb 5-1: config 44 has an invalid descriptor of length 0, skipping remainder of the config [ 277.699766][ T6028] usb 5-1: config 44 has 0 interfaces, different from the descriptor's value: 111 [ 277.725804][ T6028] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 277.748776][ T6028] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.760151][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 277.767382][ T6028] usb 5-1: Product: syz [ 277.773572][ T6028] usb 5-1: Manufacturer: syz [ 277.778487][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 277.788392][ T6028] usb 5-1: SerialNumber: syz [ 277.793446][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 277.819072][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 277.826904][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 277.828588][ T6103] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.868724][ T5915] usb 1-1: Using ep0 maxpacket: 8 [ 277.882648][ T5915] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 277.900662][ T7626] RDS: rds_bind could not find a transport for ae0c:91e3:ccfb:11d2:0:5efe:150.125.240.108, load rds_tcp or rds_rdma? [ 277.924710][ T5915] usb 1-1: config 0 has no interface number 0 [ 277.960463][ T5915] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 278.032183][ T5915] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 42911, setting to 1024 [ 278.052733][ T6103] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.065475][ T5915] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 278.083867][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.117062][ T5915] usb 1-1: config 0 descriptor?? [ 278.133903][ T7617] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 278.149394][ T5915] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 278.168400][ T7623] caif0 speed is unknown, defaulting to 1000 [ 278.226811][ T6028] usb 5-1: USB disconnect, device number 3 [ 278.260686][ T6103] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.352048][ T7611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.362057][ T7611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.380418][ T5915] usb 1-1: USB disconnect, device number 8 [ 279.543530][ T7637] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 279.562611][ T5842] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.577193][ T6103] bridge_slave_1: left allmulticast mode [ 279.598724][ T6103] bridge_slave_1: left promiscuous mode [ 279.621977][ T6103] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.732662][ T6103] bridge_slave_0: left allmulticast mode [ 279.748339][ T6103] bridge_slave_0: left promiscuous mode [ 279.756756][ T6103] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.908785][ T5832] Bluetooth: hci0: command tx timeout [ 281.245190][ T7646] loop0: detected capacity change from 0 to 32768 [ 281.353837][ T7657] /dev/loop0: Can't open blockdev [ 281.394994][ T6103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.403887][ T7659] loop7: detected capacity change from 0 to 16384 [ 281.670943][ T6103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.674217][ T7646] JBD2: Ignoring recovery information on journal [ 281.692122][ T6103] bond0 (unregistering): Released all slaves [ 281.754813][ T7653] syz_tun: entered allmulticast mode [ 281.837984][ T7661] loop7: detected capacity change from 16384 to 0 [ 281.861648][ C1] I/O error, dev loop7, sector 9728 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 281.872502][ T7646] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 281.912542][ T6103] tipc: Disabling bearer [ 281.935272][ T6103] tipc: Left network mode [ 281.981948][ T5832] Bluetooth: hci0: command tx timeout [ 282.025836][ T30] audit: type=1804 audit(1764998931.942:3): pid=7646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.417" name="/newroot/88/file1/bus" dev="loop0" ino=17058 res=1 errno=0 [ 282.619420][ T5839] ocfs2: Unmounting device (7,0) on (node local) [ 284.062598][ T5832] Bluetooth: hci0: command tx timeout [ 284.402172][ T7675] tmpfs: Unknown parameter 'grpquota/#/msr' [ 284.412720][ T6027] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 284.998922][ T6027] usb 2-1: Using ep0 maxpacket: 8 [ 285.041202][ T6027] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 285.061457][ T6027] usb 2-1: config 0 has no interface number 0 [ 285.068057][ T6027] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 285.097874][ T6027] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 42911, setting to 1024 [ 285.124486][ T6027] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 285.149875][ T6027] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.188208][ T6027] usb 2-1: config 0 descriptor?? [ 285.216537][ T7711] capability: warning: `syz.2.427' uses deprecated v2 capabilities in a way that may be insecure [ 285.228292][ T7689] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 285.230009][ T6110] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 285.265966][ T7711] overlayfs: upper fs does not support file handles, falling back to index=off. [ 285.297698][ T7711] evm: overlay not supported [ 285.436319][ T6110] usb 5-1: Using ep0 maxpacket: 8 [ 285.458813][ T7685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.468359][ T7685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.513897][ T6110] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 285.530727][ T7712] loop0: detected capacity change from 0 to 40427 [ 285.538580][ T7712] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 285.542518][ T6110] usb 5-1: config 0 has no interface number 0 [ 285.546438][ T7712] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 285.562226][ T6027] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 285.573202][ T7712] F2FS-fs (loop0): invalid crc value [ 285.608861][ T6027] usb 2-1: USB disconnect, device number 5 [ 285.618739][ T6110] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 285.670050][ T6110] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 42911, setting to 1024 [ 285.673752][ T7712] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 285.702315][ T7712] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 285.711553][ T7712] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 285.726047][ T7623] chnl_net:caif_netlink_parms(): no params data found [ 285.776094][ T6110] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 285.926516][ T6110] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.449996][ T5832] Bluetooth: hci0: command tx timeout [ 287.000160][ T6110] usb 5-1: config 0 descriptor?? [ 287.031126][ T7706] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 287.043766][ T6110] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 287.272921][ T6113] usb 5-1: USB disconnect, device number 4 [ 287.638878][ T7728] loop1: detected capacity change from 0 to 32768 [ 287.649346][ T7728] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.430 (7728) [ 287.841469][ T7728] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 288.027988][ T7728] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 288.040986][ T6110] hid-generic 0005:0006:5508.0002: item fetching failed at offset 3/6 [ 288.177806][ T6110] hid-generic 0005:0006:5508.0002: probe with driver hid-generic failed with error -22 [ 288.794190][ T7728] BTRFS info (device loop1): rebuilding free space tree [ 289.550767][ T7728] BTRFS info (device loop1): disabling free space tree [ 289.557810][ T7728] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 289.596356][ T7728] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 289.671106][ T7728] BTRFS info (device loop1): setting nodatasum [ 289.688878][ T7728] BTRFS info (device loop1): setting nodatacow [ 289.707330][ T7728] BTRFS info (device loop1): turning off barriers [ 289.714156][ T7728] BTRFS info (device loop1): force clearing of disk cache [ 290.273017][ T7623] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.292842][ T7623] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.305973][ T7623] bridge_slave_0: entered allmulticast mode [ 290.325184][ T7623] bridge_slave_0: entered promiscuous mode [ 290.367816][ T7623] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.380433][ T7623] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.538182][ T7623] bridge_slave_1: entered allmulticast mode [ 290.590999][ T7623] bridge_slave_1: entered promiscuous mode [ 290.730515][ T6103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.765771][ T6103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.782966][ T5828] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 290.825051][ T6103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.932571][ T6103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.290018][ T6103] veth1_macvtap: left promiscuous mode [ 291.295869][ T6103] veth0_macvtap: left promiscuous mode [ 291.357124][ T6103] veth1_vlan: left promiscuous mode [ 291.363355][ T6103] veth0_vlan: left promiscuous mode [ 291.458743][ T6009] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 291.638698][ T6009] usb 1-1: Using ep0 maxpacket: 8 [ 291.639687][ T7790] netlink: 104 bytes leftover after parsing attributes in process `syz.2.441'. [ 291.656713][ T6009] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 291.679896][ T6009] usb 1-1: config 0 has no interface number 0 [ 291.698224][ T6009] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 291.719863][ T6009] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 42911, setting to 1024 [ 291.747203][ T6009] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 291.769260][ T6009] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.826353][ T6009] usb 1-1: config 0 descriptor?? [ 291.849599][ T7786] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 291.863964][ T6009] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 292.071281][ T7777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.081092][ T7777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.094243][ T6027] usb 1-1: USB disconnect, device number 9 [ 292.814468][ T7797] loop1: detected capacity change from 0 to 40427 [ 292.823825][ T7797] F2FS-fs (loop1): invalid crc value [ 292.916635][ T7797] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 292.929342][ T7797] F2FS-fs (loop1): Start checkpoint disabled! [ 292.938325][ T7797] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 292.973635][ T7797] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 293.064315][ T7797] random: crng reseeded on system resumption [ 293.512601][ T7806] loop4: detected capacity change from 0 to 40427 [ 293.522879][ T7809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.445'. [ 293.581516][ T7806] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 293.589480][ T7806] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 293.599213][ T7806] F2FS-fs (loop4): invalid crc value [ 293.640175][ T1135] kworker/u8:7: attempt to access beyond end of device [ 293.640175][ T1135] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 293.746505][ T7806] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 293.767365][ T1135] CPU: 0 UID: 0 PID: 1135 Comm: kworker/u8:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 293.767400][ T1135] Tainted: [L]=SOFTLOCKUP [ 293.767407][ T1135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 293.767418][ T1135] Workqueue: writeback wb_workfn (flush-7:1) [ 293.767452][ T1135] Call Trace: [ 293.767460][ T1135] [ 293.767468][ T1135] dump_stack_lvl+0x189/0x250 [ 293.767495][ T1135] ? __pfx_dump_stack_lvl+0x10/0x10 [ 293.767516][ T1135] ? __pfx_queue_work_on+0x10/0x10 [ 293.767533][ T1135] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 293.767558][ T1135] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 293.767596][ T1135] f2fs_handle_critical_error+0x37c/0x540 [ 293.767624][ T1135] f2fs_write_end_io+0x886/0xb60 [ 293.767666][ T1135] __submit_merged_bio+0x256/0x660 [ 293.767694][ T1135] __submit_merged_write_cond+0x269/0x530 [ 293.767723][ T1135] f2fs_write_data_pages+0x2756/0x3290 [ 293.767784][ T1135] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 293.767822][ T1135] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 293.767886][ T1135] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 293.767905][ T1135] ? __lock_acquire+0x6b6/0x2cf0 [ 293.767955][ T1135] ? __lock_acquire+0x6b6/0x2cf0 [ 293.767991][ T1135] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 293.768013][ T1135] do_writepages+0x32e/0x550 [ 293.768043][ T1135] ? reacquire_held_locks+0x121/0x1c0 [ 293.768062][ T1135] ? writeback_sb_inodes+0x3bd/0x1870 [ 293.768091][ T1135] __writeback_single_inode+0x133/0x1240 [ 293.768112][ T1135] ? do_raw_spin_unlock+0x122/0x240 [ 293.768139][ T1135] writeback_sb_inodes+0x93a/0x1870 [ 293.768192][ T1135] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 293.768264][ T1135] ? rcu_is_watching+0x15/0xb0 [ 293.768298][ T1135] wb_writeback+0x42b/0xaa0 [ 293.768327][ T1135] ? queue_io+0x1f1/0x450 [ 293.768352][ T1135] ? __pfx_wb_writeback+0x10/0x10 [ 293.768388][ T1135] ? _raw_spin_unlock_irq+0x23/0x50 [ 293.768419][ T1135] wb_workfn+0x3f9/0xed0 [ 293.768462][ T1135] ? __pfx_wb_workfn+0x10/0x10 [ 293.768510][ T1135] ? process_one_work+0x868/0x15a0 [ 293.768536][ T1135] ? _raw_spin_unlock_irq+0x23/0x50 [ 293.768563][ T1135] ? process_one_work+0x868/0x15a0 [ 293.768579][ T1135] process_one_work+0x93a/0x15a0 [ 293.768623][ T1135] ? __pfx_process_one_work+0x10/0x10 [ 293.768648][ T1135] ? assign_work+0x3a1/0x410 [ 293.768671][ T1135] worker_thread+0x9b0/0xee0 [ 293.768722][ T1135] kthread+0x711/0x8a0 [ 293.768748][ T1135] ? __pfx_worker_thread+0x10/0x10 [ 293.768766][ T1135] ? __pfx_kthread+0x10/0x10 [ 293.768790][ T1135] ? _raw_spin_unlock_irq+0x23/0x50 [ 293.768812][ T1135] ? lockdep_hardirqs_on+0x98/0x140 [ 293.768826][ T1135] ? __pfx_kthread+0x10/0x10 [ 293.768850][ T1135] ret_from_fork+0x599/0xb30 [ 293.768871][ T1135] ? __pfx_ret_from_fork+0x10/0x10 [ 293.768903][ T1135] ? __switch_to_asm+0x39/0x70 [ 293.768922][ T1135] ? __switch_to_asm+0x33/0x70 [ 293.768940][ T1135] ? __pfx_kthread+0x10/0x10 [ 293.768963][ T1135] ret_from_fork_asm+0x1a/0x30 [ 293.769026][ T1135] [ 294.663597][ T1135] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 294.670747][ T7806] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 294.677801][ T7806] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 294.912999][ T7825] loop0: detected capacity change from 0 to 1024 [ 295.213140][ T7829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.450'. [ 296.344040][ T7831] loop2: detected capacity change from 0 to 40427 [ 296.352025][ T7831] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 296.360042][ T7831] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 296.370834][ T7831] F2FS-fs (loop2): invalid crc value [ 296.459653][ T7831] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 296.480586][ T7831] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 296.489430][ T7831] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 296.718793][ T6027] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 296.802734][ T6103] team0 (unregistering): Port device team_slave_1 removed [ 296.861035][ T6103] team0 (unregistering): Port device team_slave_0 removed [ 296.881530][ T6027] usb 2-1: Using ep0 maxpacket: 8 [ 296.996698][ T6027] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 297.008069][ T6027] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 297.032623][ T6027] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 297.042539][ T6027] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 297.074035][ T6027] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 297.088294][ T6027] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 297.106053][ T6027] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.382734][ T6027] usb 2-1: usb_control_msg returned -32 [ 297.402908][ T6027] usbtmc 2-1:16.0: can't read capabilities [ 298.367953][ T7825] geneve2: entered promiscuous mode [ 298.374947][ T7825] geneve2: entered allmulticast mode [ 298.459463][ T13] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 298.472275][ T7623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.516960][ T13] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 298.544624][ T7623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.738750][ T13] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 298.749925][ T4597] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 299.428760][ T6110] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 299.650781][ T6110] usb 1-1: Using ep0 maxpacket: 8 [ 299.671297][ T6110] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 299.750417][ T7623] team0: Port device team_slave_0 added [ 299.765804][ T7623] team0: Port device team_slave_1 added [ 299.869518][ T6110] usb 1-1: config 0 has no interface number 0 [ 299.954383][ T6110] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 299.978430][ T6110] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 42911, setting to 1024 [ 300.222463][ T6110] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 300.241602][ T7623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.241862][ T6110] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.260745][ T6110] usb 1-1: config 0 descriptor?? [ 300.264491][ T7623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.266500][ T7864] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 300.526625][ T7856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.535606][ T7856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.664031][ T6110] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 300.796393][ T6110] usb 1-1: USB disconnect, device number 10 [ 300.828011][ T7623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.936560][ T7623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.944817][ T7623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.948126][ T6028] usb 2-1: USB disconnect, device number 6 [ 300.991729][ T7623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.726285][ T7623] hsr_slave_0: entered promiscuous mode [ 301.745595][ T7623] hsr_slave_1: entered promiscuous mode [ 301.824973][ T7899] tmpfs: Unknown parameter 'grpquota/#/msr' [ 303.201820][ T7910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.464'. [ 304.096981][ T7903] tmpfs: Unknown parameter 'grpquota/#/msr' [ 304.626390][ T7920] rdma_rxe: rxe_newlink: failed to add caif0 [ 304.654938][ T7925] loop0: detected capacity change from 0 to 32768 [ 304.680402][ T7925] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.468 (7925) [ 304.828381][ T7925] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 304.838685][ T7925] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm [ 305.219415][ T6038] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 305.399292][ T7925] BTRFS error (device loop0): failed to load root extent [ 305.406492][ T7925] BTRFS warning (device loop0): try to load backup roots slot 1 [ 305.414576][ T3522] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 305.430206][ T7944] 9p: Bad value for 'rfdno' [ 306.422622][ T7925] BTRFS warning (device loop0): couldn't read tree root [ 306.429815][ T7925] BTRFS warning (device loop0): try to load backup roots slot 2 [ 306.472428][ T6038] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 306.523789][ T7623] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 306.548806][ T7925] BTRFS warning (device loop0): couldn't read tree root [ 306.555856][ T7925] BTRFS warning (device loop0): try to load backup roots slot 3 [ 306.563962][ T6038] BTRFS warning (device loop0): checksum verify failed on logical 5242880 mirror 1 wanted 0xc0857788 found 0x84455321 level 0 [ 306.577678][ T7925] BTRFS warning (device loop0): couldn't read tree root [ 306.609076][ T7925] BTRFS error (device loop0): open_ctree failed: -5 [ 306.666601][ T7623] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 306.787418][ T7623] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 306.863816][ T7623] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 306.869622][ T6027] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 307.179085][ T6110] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 307.296180][ T6027] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 307.420263][ T6028] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 307.479113][ T6110] usb 3-1: Using ep0 maxpacket: 8 [ 307.503302][ T6110] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 307.504987][ T7968] fido_id[7968]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 307.535263][ T6110] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 307.600063][ T6028] usb 1-1: Using ep0 maxpacket: 32 [ 307.636427][ T7976] loop4: detected capacity change from 0 to 2048 [ 307.665261][ T6110] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 307.678714][ T6028] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 307.695278][ T6028] usb 1-1: config 0 has no interface number 0 [ 307.708815][ T6028] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 307.728681][ T6110] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 307.753483][ T6110] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 307.766992][ T7976] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 307.785904][ T6028] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 307.811371][ T6110] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 307.837151][ T6028] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.851065][ T6110] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.879085][ T6028] usb 1-1: Product: syz [ 307.883379][ T6028] usb 1-1: Manufacturer: syz [ 307.887998][ T6028] usb 1-1: SerialNumber: syz [ 307.930567][ T6028] usb 1-1: config 0 descriptor?? [ 307.937354][ T7623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.977593][ T7961] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 308.043736][ T7623] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.109306][ T4597] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.116567][ T4597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.127026][ T6110] usb 3-1: usb_control_msg returned -32 [ 308.145729][ T6110] usbtmc 3-1:16.0: can't read capabilities [ 308.197259][ T6038] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.204531][ T6038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.223169][ T7961] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 309.552655][ T7988] loop4: detected capacity change from 0 to 32768 [ 309.561786][ T7988] ocfs2: Unknown parameter '' [ 309.584242][ T7961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.624081][ T7623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.629075][ T7961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.851952][ T8019] 9p: Bad value for 'rfdno' [ 310.371513][ T7961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.386233][ T7961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.531505][ T1210] usb 3-1: USB disconnect, device number 7 [ 311.012355][ T8035] loop4: detected capacity change from 0 to 128 [ 311.071546][ T7623] veth0_vlan: entered promiscuous mode [ 311.152239][ T6028] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 311.176451][ T7623] veth1_vlan: entered promiscuous mode [ 311.412892][ T6028] asix 1-1:0.188: probe with driver asix failed with error -71 [ 311.941320][ T6028] usb 1-1: USB disconnect, device number 11 [ 312.116952][ T7623] veth0_macvtap: entered promiscuous mode [ 312.219928][ T7623] veth1_macvtap: entered promiscuous mode [ 312.236344][ T8043] loop1: detected capacity change from 0 to 2048 [ 312.262260][ T8043] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 312.350364][ T7623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.428228][ T7623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.489162][ T73] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.498161][ T73] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.609125][ T73] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.669515][ T73] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.125529][ T8061] rdma_rxe: rxe_newlink: failed to add caif0 [ 313.773017][ T8071] 9p: Bad value for 'rfdno' [ 314.264896][ T2977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.759325][ T2977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.768637][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 419.775649][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8069/1:b..l [ 419.784039][ C1] rcu: (detected by 1, t=10502 jiffies, g=23313, q=726 ncpus=2) [ 419.791780][ C1] task:syz.0.495 state:R running task stack:24536 pid:8069 tgid:8069 ppid:5839 task_flags:0x400040 flags:0x00080000 [ 419.806502][ C1] Call Trace: [ 419.809828][ C1] [ 419.812784][ C1] __schedule+0x14bc/0x5000 [ 419.817332][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 419.822296][ C1] ? __pfx___schedule+0x10/0x10 [ 419.827160][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 419.832114][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 419.837416][ C1] preempt_schedule_irq+0xb5/0x150 [ 419.842588][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 419.848327][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 419.854150][ C1] irqentry_exit+0x5d8/0x660 [ 419.858757][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 419.864757][ C1] RIP: 0010:lock_acquire+0x16c/0x340 [ 419.870323][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 14 17 e0 10 <48> 3b 44 24 58 0f 85 e5 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 419.889954][ C1] RSP: 0018:ffffc9001b507718 EFLAGS: 00000206 [ 419.896053][ C1] RAX: 48bc937b7b823400 RBX: 0000000000000000 RCX: 48bc937b7b823400 [ 419.904034][ C1] RDX: 000000005a44979c RSI: ffffffff8d977b3e RDI: ffffffff8bc07ae0 [ 419.912106][ C1] RBP: ffffffff81743f85 R08: ffffffff81743f85 R09: ffffffff8df419e0 [ 419.920085][ C1] R10: ffffc9001b5078d8 R11: ffffffff81ada290 R12: 0000000000000002 [ 419.928065][ C1] R13: ffffffff8df419e0 R14: 0000000000000000 R15: 0000000000000246 [ 419.936228][ C1] ? unwind_next_frame+0xa5/0x2390 [ 419.941361][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 419.947531][ C1] ? unwind_next_frame+0xa5/0x2390 [ 419.952778][ C1] ? unwind_next_frame+0xa5/0x2390 [ 419.957906][ C1] ? exit_to_user_mode_loop+0xff/0x4f0 [ 419.963386][ C1] ? unwind_next_frame+0xa5/0x2390 [ 419.968505][ C1] unwind_next_frame+0xc2/0x2390 [ 419.973627][ C1] ? unwind_next_frame+0xa5/0x2390 [ 419.978765][ C1] ? unwind_next_frame+0xa5/0x2390 [ 419.983893][ C1] ? task_work_run+0x1d4/0x260 [ 419.988682][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 419.994842][ C1] arch_stack_walk+0x11c/0x150 [ 419.999622][ C1] ? exit_to_user_mode_loop+0xff/0x4f0 [ 420.005181][ C1] stack_trace_save+0x9c/0xe0 [ 420.009904][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 420.015289][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 420.020239][ C1] kasan_save_track+0x3e/0x80 [ 420.024927][ C1] ? kasan_save_track+0x3e/0x80 [ 420.029786][ C1] ? kasan_save_free_info+0x46/0x50 [ 420.034992][ C1] ? __kasan_slab_free+0x5c/0x80 [ 420.040020][ C1] ? kfree+0x1c0/0x660 [ 420.044115][ C1] ? kvm_put_kvm+0x1d0/0xa80 [ 420.048716][ C1] ? kvm_vm_release+0x43/0x50 [ 420.053399][ C1] ? __fput+0x44c/0xa70 [ 420.057564][ C1] ? task_work_run+0x1d4/0x260 [ 420.062334][ C1] ? exit_to_user_mode_loop+0xff/0x4f0 [ 420.067849][ C1] kasan_save_free_info+0x46/0x50 [ 420.072886][ C1] __kasan_slab_free+0x5c/0x80 [ 420.077660][ C1] ? kvm_put_kvm+0x1d0/0xa80 [ 420.082264][ C1] kfree+0x1c0/0x660 [ 420.086179][ C1] ? rcu_is_watching+0x15/0xb0 [ 420.090954][ C1] ? mntput_no_expire+0x1c/0x1c0 [ 420.095904][ C1] kvm_put_kvm+0x1d0/0xa80 [ 420.100354][ C1] ? kvm_irqfd_release+0x196/0x1c0 [ 420.105490][ C1] ? evm_file_release+0x107/0x1e0 [ 420.110524][ C1] ? __pfx_kvm_vm_release+0x10/0x10 [ 420.115729][ C1] kvm_vm_release+0x43/0x50 [ 420.120240][ C1] __fput+0x44c/0xa70 [ 420.124243][ C1] task_work_run+0x1d4/0x260 [ 420.128846][ C1] ? __pfx_task_work_run+0x10/0x10 [ 420.133986][ C1] ? __se_sys_close_range+0x4ed/0x650 [ 420.139373][ C1] ? exit_to_user_mode_loop+0x55/0x4f0 [ 420.144935][ C1] exit_to_user_mode_loop+0xff/0x4f0 [ 420.150228][ C1] ? rcu_is_watching+0x15/0xb0 [ 420.155006][ C1] do_syscall_64+0x2e3/0xf80 [ 420.159607][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.165679][ C1] ? clear_bhb_loop+0x60/0xb0 [ 420.170364][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.176262][ C1] RIP: 0033:0x7f51f878f749 [ 420.180694][ C1] RSP: 002b:00007ffcca6b4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 420.189124][ C1] RAX: 0000000000000000 RBX: 00007f51f89e7da0 RCX: 00007f51f878f749 [ 420.197109][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 420.205085][ C1] RBP: 00007f51f89e7da0 R08: 0000000000000170 R09: 0000000fca6b4f6f [ 420.213063][ C1] R10: 00007f51f89e7cb0 R11: 0000000000000246 R12: 000000000004cc7a [ 420.221043][ C1] R13: 00007f51f89e6090 R14: ffffffffffffffff R15: 00007ffcca6b4d90 [ 420.229128][ C1] [ 420.232154][ C1] rcu: rcu_preempt kthread starved for 10533 jiffies! g23313 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 420.243354][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 420.253408][ C1] rcu: RCU grace-period kthread stack dump: [ 420.259299][ C1] task:rcu_preempt state:R running task stack:27136 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 420.272803][ C1] Call Trace: [ 420.276087][ C1] [ 420.279025][ C1] __schedule+0x14bc/0x5000 [ 420.283560][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 420.288765][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 420.294674][ C1] ? __pfx___schedule+0x10/0x10 [ 420.299554][ C1] ? schedule+0x91/0x360 [ 420.303811][ C1] schedule+0x165/0x360 [ 420.307977][ C1] schedule_timeout+0x12b/0x270 [ 420.312925][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 420.318302][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 420.324205][ C1] ? __pfx_process_timeout+0x10/0x10 [ 420.329512][ C1] ? prepare_to_swait_event+0x341/0x380 [ 420.335072][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 420.339940][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 420.345142][ C1] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 420.351039][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 420.356327][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 420.361543][ C1] ? finish_swait+0xcd/0x1f0 [ 420.366141][ C1] rcu_gp_kthread+0x99/0x390 [ 420.370744][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 420.375949][ C1] ? __kthread_parkme+0x7b/0x200 [ 420.380903][ C1] ? __kthread_parkme+0x1a1/0x200 [ 420.385939][ C1] kthread+0x711/0x8a0 [ 420.390044][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 420.395268][ C1] ? __pfx_kthread+0x10/0x10 [ 420.399869][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 420.405081][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 420.410285][ C1] ? __pfx_kthread+0x10/0x10 [ 420.414882][ C1] ret_from_fork+0x599/0xb30 [ 420.419491][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 420.424654][ C1] ? __switch_to_asm+0x39/0x70 [ 420.429424][ C1] ? __switch_to_asm+0x33/0x70 [ 420.434193][ C1] ? __pfx_kthread+0x10/0x10 [ 420.438791][ C1] ret_from_fork_asm+0x1a/0x30 [ 420.443579][ C1] [ 420.446597][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 420.452936][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 420.463477][ C1] Tainted: [L]=SOFTLOCKUP [ 420.467798][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 420.477858][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 420.483600][ C1] Code: 13 ee 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 00 0d 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 420.503228][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 420.509311][ C1] RAX: ee17e0e84b232b00 RBX: ffffffff8197919a RCX: ee17e0e84b232b00 [ 420.517287][ C1] RDX: 0000000000000001 RSI: ffffffff8d791132 RDI: ffffffff8bc07ae0 [ 420.525260][ C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db [ 420.533236][ C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8f820370 [ 420.541221][ C1] R13: 1ffff11003a5eb70 R14: 0000000000000001 R15: 0000000000000001 [ 420.549197][ C1] FS: 0000000000000000(0000) GS:ffff888125f37000(0000) knlGS:0000000000000000 [ 420.558128][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 420.564715][ C1] CR2: 000020000001b000 CR3: 000000006b78c000 CR4: 00000000003526f0 [ 420.572695][ C1] Call Trace: [ 420.575979][ C1] [ 420.578912][ C1] default_idle+0x13/0x20 [ 420.583253][ C1] default_idle_call+0x73/0xb0 [ 420.588020][ C1] do_idle+0x1ea/0x520 [ 420.592095][ C1] ? irqentry_exit+0x5ba/0x660 [ 420.596867][ C1] ? __pfx_do_idle+0x10/0x10 [ 420.601488][ C1] cpu_startup_entry+0x44/0x60 [ 420.606259][ C1] start_secondary+0x101/0x110 [ 420.611029][ C1] common_startup_64+0x13e/0x147 [ 420.615990][ C1]