last executing test programs: 3m12.979909308s ago: executing program 5 (id=491): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x1}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8010, 0x0, 0x0) r2 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r2, &(0x7f0000f62000/0x1000)=nil, 0x7000) fsetxattr$security_ima(r0, &(0x7f0000000080), &(0x7f0000001200)=@ng={0x4, 0x16}, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x4000, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2cb, &(0x7f0000000ac0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20400, 0x20) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x82, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000100)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@mblk_io_submit}, {@nouid32}, {@barrier_val}, {@grpjquota}, {}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") 3m11.191976827s ago: executing program 5 (id=500): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x9, 0x2a, [@measure_req={0x26, 0x3, {0x0, 0x3, 0x3}}]}]}, 0x34}}, 0x0) 3m10.779556554s ago: executing program 5 (id=504): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000700)=ANY=[@ANYBLOB='journal_async_commit,heartbeat=none,usrquota,barrier=000000000\x000000000007,heartbeat=none,nointr,\x00'], 0x1, 0x4703, &(0x7f0000004800)="$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") r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m8.540971873s ago: executing program 5 (id=510): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000080)='configfs\x00', 0x200, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x28400, 0x3c) 3m6.553497798s ago: executing program 5 (id=513): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xe0ffffff00000000}}, 0x1c) shutdown(r0, 0x1) 3m5.227618013s ago: executing program 5 (id=520): sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f00000006c0)={[{@gquota}, {@nolargeio}, {@uqnoenforce}]}, 0x1, 0x9793, &(0x7f0000012f40)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00'], 0x8842) 3m4.285718292s ago: executing program 32 (id=520): sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f00000006c0)={[{@gquota}, {@nolargeio}, {@uqnoenforce}]}, 0x1, 0x9793, &(0x7f0000012f40)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00'], 0x8842) 14.487543945s ago: executing program 2 (id=1061): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) msgget$private(0x0, 0x6c2) unshare(0x28000600) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00"], 0x48) bpf$BPF_GET_PROG_INFO(0x15, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x7}) readv(r5, &(0x7f0000000000)=[{&(0x7f0000000100)=""/73, 0x49}], 0x1) 14.180587542s ago: executing program 3 (id=1062): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@gcm_128={{0x304}, "bd88818314ff7d84", '\x00', "7f00", "78cb6e6d9d2574d4"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "bb28ced7b820ec2d", "ca08bd91171e6405c84cdc6e52f57229", "f5ce6f37", "fe017c9f4e95f742"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 13.948334635s ago: executing program 0 (id=1064): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000002c0)=0xfffffffc) r3 = socket$pppoe(0x18, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095", @ANYRESDEC=r3], 0x0, 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sk_skb=0x5}, 0x94) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000001c0)=0x1) ioctl$VIDIOC_S_FREQUENCY(r4, 0x402c5639, &(0x7f0000000040)={0x0, 0x2, 0x9b}) ioctl$VIDIOC_S_STD(r4, 0x40085618, &(0x7f0000000480)=0x1000) r5 = syz_clone3(&(0x7f0000000500)={0x28080024, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0xa0) connect$pppoe(r3, &(0x7f0000000340)={0x18, 0x0, {0x2, @multicast, 'tunl0\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x4a200, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x25, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x2, r5}) fcntl$lock(r7, 0x24, &(0x7f0000000140)={0x2, 0x1, 0xd63e, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0cc5605, &(0x7f0000000580)={0x1, @raw_data="b621dc4392aa40ea1f6860811dc796b125a0128a8eecb886eeeb227738bd4b9e3dc0ea04b3635f3a2c5fec612ea64e4a1e1799b134638b5bd5c8ddd8cacad2457ae3cf58ac76ffef472df89571837bd439ff2ae36d61b043dce4e8af6e951f51f963f4b1265f3d18648693b818783f434e9e45a0d6649ba00c965b3edbf0066b7dd1dcbd4557bb63dfcbd4b1d32f47119e2c08a17f238c11d0dcc86d3cc2fdedfa6121799d49010217750adae31f392fd11a224ffbbbbd8e868b9e8a643999c852aeca45d9509852"}) ioctl$PPPIOCSFLAGS1(r6, 0x4004743a, &(0x7f0000000300)) 13.540910673s ago: executing program 3 (id=1066): r0 = epoll_create1(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) getpid() r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000780)={0x10000008}) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x1, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4}, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002240)=ANY=[@ANYBLOB="150000009500"], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) syz_mount_image$squashfs(&(0x7f0000000080), &(0x7f0000000480)='./file1\x00', 0x80, &(0x7f0000000240)=ANY=[], 0xfb, 0x1a5, &(0x7f0000000600)="$eJzs0D9rU1EYx/Hvc+7JnwpVo+JQwQYsxhuqyb1VB6fgFCEXHFwEg4Y0NsVETW8GW1roIgWpdvAN6FRHFXQSUXQuDoKDXpdu0gzFQRwkkpsTwdfQ81l+9/nBPefwNMNOmAL+7C7XKRFz2M8nBA1MyrBTapivzfzD5MYwuGjmdZPPTE6Ei0u3aq1WYyF7IUvmvwL4GXf/qvAFRxU9oYR82V2u1+RGQL9EW80GZCrkH+JU6biPmNDjHLmOQz+3ziVFR3IVOFDotu8WwsWl0/Pt2lxjrnHb92fOF88Wi+f8ws35VqP4CnEfiOIJK7gBqYAxd4VElftbeh/TgrhNFTmS75GssrHlnDox3UO5O/QR3uV6pL7pZlZd4STpa4PHlzksPMUJmKowptDEF5WRy+qlePqz/pVQpFcd50z9Tmt27aqS38nNkuykxdsmkfPw8x4zg9WkDvGetYipiHLEZsT2dyblzeCW0V716gfguZmOcRyS3Kt1uwteEj6KDh4fBPwMjDM4TsXvysBb848Jvo4+LMuyLMuyLMuyrD3gbwAAAP//xflkvA==") chdir(&(0x7f0000000040)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000000000008b}, 0x0) r3 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f00000001c0)={{0x80000000, 0x0, 0x1, [0x0, 0xf7df]}, {0x80000000, 0x0, 0x7, [0x6]}, 0x1, [0x8, 0x3df]}) dup3(r3, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x215000, 0x800, 0x0, 0x1}, 0x20) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) 12.818877814s ago: executing program 2 (id=1068): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = msgget$private(0x0, 0x0) msgsnd(r1, 0x0, 0x8, 0x800) msgrcv(r1, 0x0, 0x0, 0x2, 0x3800) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000001440)={'syzkaller1\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4c, 0x2, 0x7, 0xe, 0xe, 0x8, 0x82, 0x5, 0x4, 0x4, [0x5, 0x5, 0x8, 0x55, 0x20008000, 0xe7, 0x1, 0x2]}}) syz_pidfd_open(0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r6, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r8, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffe, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f00000002c0)=""/99) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800621060090390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000140)=0x5, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000480)={0x98, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffffc}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x6}, @IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x39}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x98}, 0x1, 0x0, 0x0, 0xc040}, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) request_key(&(0x7f0000000400)='asymmetric\x00', 0x0, &(0x7f0000000340)=')\x00', 0x0) 11.812486883s ago: executing program 3 (id=1072): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r3, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfb61cb0106df6c98}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x411, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x14) getpid() 10.381402173s ago: executing program 6 (id=1074): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000140), &(0x7f0000000100)=0x30) 10.071032226s ago: executing program 6 (id=1076): r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 10.069355119s ago: executing program 2 (id=1077): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000", 0x4d}], 0x1) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x191c07, 0xfffffffe, 0x0, 0x9}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r3, &(0x7f0000003480)={0x2020}, 0x2020) r4 = syz_create_resource$binfmt(&(0x7f0000000240)='./file0\x00') execveat$binfmt(r3, r4, &(0x7f0000000640)={[0x0, &(0x7f00000004c0)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', &(0x7f0000000540)=',-\x00', &(0x7f00000005c0)='blkio.bfq.io_service_bytes_recursive\x00', &(0x7f0000000600)='%.\x00']}, &(0x7f0000000740)={[&(0x7f0000000680)='port1\x00', &(0x7f00000006c0)=',\x00', &(0x7f0000000700)='*.^\x00']}, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndctrl(0x0, 0x2, 0x0) r6 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, &(0x7f0000000540), &(0x7f0000001680), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000000)={0x80, 0x20000005, 0x2, 0xe05, 0x5fffd, 0x28e7}) readv(r2, &(0x7f00000000c0)=[{&(0x7f00000011c0)=""/109, 0x6d}], 0x1) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) bind$unix(0xffffffffffffffff, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) 9.251864058s ago: executing program 0 (id=1080): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) 9.118943645s ago: executing program 6 (id=1081): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x7}) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/73, 0x49}], 0x1) 8.929026918s ago: executing program 0 (id=1082): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x2) sendmmsg(r3, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfb61cb0106df6c98}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x411, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 8.895593519s ago: executing program 2 (id=1084): r0 = epoll_create1(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) getpid() r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000780)={0x10000008}) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x1, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4}, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002240)=ANY=[@ANYBLOB="150000009500"], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) syz_mount_image$squashfs(&(0x7f0000000080), &(0x7f0000000480)='./file1\x00', 0x80, &(0x7f0000000240)=ANY=[], 0xfb, 0x1a5, &(0x7f0000000600)="$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") chdir(&(0x7f0000000040)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000000000008b}, 0x0) r3 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f00000001c0)={{0x80000000, 0x0, 0x1, [0x0, 0xf7df]}, {0x80000000, 0x0, 0x7, [0x6]}, 0x1, [0x8, 0x3df]}) dup3(r3, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x215000, 0x800, 0x0, 0x1}, 0x20) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) 8.610155301s ago: executing program 1 (id=1085): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f0000001580)={{0x3, 0xffffffff, 0xfffffffe, 0x2, 0x10, 0x7ff}, 0x172, [0x9, 0xfe, 0x821, 0x2, 0x0, 0x7, 0x6, 0x46, 0x3, 0x7, 0x401, 0x3, 0x2, 0x7, 0x6, 0xd, 0x7, 0x3, 0xfffffff7, 0x5d, 0x8, 0x1, 0x30000, 0x1, 0x0, 0x4, 0x5, 0x9, 0x9, 0x8000000, 0x3, 0xfffffffc, 0x5, 0x2, 0x5, 0x10001, 0xedc4, 0xfffffffb, 0xc, 0x7, 0x9, 0x0, 0xfffffff8, 0x4, 0x85, 0x2, 0x5, 0x1, 0x2, 0x6, 0x9, 0x800, 0xb, 0x5, 0x3, 0x2, 0x2b, 0x2c34, 0x7, 0xdab8, 0xffff, 0x3585, 0x9, 0x5, 0x4, 0x8, 0x0, 0xb, 0x9, 0x4, 0xe70, 0x1, 0x7, 0x0, 0xfffffffd, 0x0, 0x2, 0xc, 0x3ff, 0x8, 0x1, 0x0, 0x8, 0x48b, 0x1, 0x8, 0x5, 0x6, 0x448, 0x6, 0x6, 0xffffffff, 0xe45c, 0xab74, 0x100, 0x7, 0x80000001, 0x8000000, 0x7, 0x0, 0x0, 0x6, 0xfffffff9, 0xb4d, 0xbd, 0xffff, 0x9, 0xfffffd49, 0x2, 0x5, 0x1, 0xfffff6d5, 0x9, 0x4, 0x5, 0xf, 0x3, 0x2000400, 0xe, 0x4800000, 0x7, 0x9, 0x6, 0xfffffff8, 0x8, 0x3, 0x5, 0x0, 0x8, 0xa2, 0xfffffffd, 0xfffffff9, 0x8, 0x3, 0x200, 0xd, 0x6, 0x0, 0x1, 0x0, 0x1, 0x1, 0x10, 0x6, 0x7ff, 0xd, 0x2, 0x5, 0x10000, 0xfffffffe, 0x81, 0x6, 0x0, 0x7fff, 0x1, 0x0, 0x7, 0x9f, 0x6, 0x7, 0x1, 0x8, 0x2, 0x2027, 0x8000, 0x8, 0x5, 0x5c79, 0x9, 0x4, 0x7, 0x3d, 0x53, 0xffffffff, 0xfffffff7, 0x2, 0x8, 0x6, 0x37, 0x3ff, 0x1, 0x7, 0x10001, 0x0, 0xffff, 0x500000, 0x40000000, 0x6, 0xfffffffe, 0x1, 0x9, 0x5, 0x966e, 0x1, 0xfffffffe, 0x0, 0x10000, 0x0, 0x2, 0x9, 0xb7a, 0x9, 0x2, 0x5, 0xa1c3, 0x80, 0x6, 0x9, 0x3, 0x4, 0x10, 0x9, 0x200, 0xa6, 0x2, 0x703e, 0x9, 0x0, 0x6, 0x7ff, 0x7ff, 0x4, 0x2, 0xfffffffb, 0x8a, 0x100, 0x4, 0x0, 0x80000000, 0x5, 0x4, 0x5, 0x6, 0x6, 0x3, 0x2dfb68ba, 0x3, 0x6, 0x5, 0x9, 0x9, 0x8, 0x7, 0x15, 0x8, 0x5, 0x238, 0xd5, 0xb3f1, 0x5, 0xdf, 0x6a4a1f7, 0x0, 0x0, 0x10, 0x8, 0x5, 0xe527, 0xf0d3, 0x5, 0x5, 0x0, 0xcd9, 0x8000, 0x7, 0x1, 0xffffffff, 0xfffffff9, 0x7, 0x3, 0x6a79, 0x5, 0x2, 0x2, 0x0, 0x3, 0x1, 0x6, 0xfffffffe, 0x5, 0x6, 0xd7, 0x4, 0x4, 0x1, 0x6, 0x4, 0xac5, 0x9, 0x5, 0xcc, 0x1, 0x3, 0x7, 0xf1f7, 0x4, 0x7, 0xb5ad, 0x74c36f13, 0xc89, 0x2, 0xbf, 0x1, 0x3da, 0x0, 0xffff, 0x7, 0x5, 0x8, 0x4, 0x7, 0x2, 0x5, 0x6, 0x80, 0x0, 0x17, 0x81, 0x4, 0x3, 0xfffffff7, 0x7, 0x0, 0x80000000, 0xa9, 0x7, 0x0, 0x1, 0x4, 0x10001, 0x5b8e, 0x7fffffff, 0x97, 0xb, 0x7, 0x9, 0x3, 0x4, 0x8, 0x6, 0x4, 0x2, 0x4, 0x8000000, 0x0, 0xd8b4, 0x2, 0x2, 0xbbf2, 0x800, 0x5, 0x2, 0x8, 0x2, 0x5f, 0xfd9c, 0x3cfa, 0x1, 0x2, 0x7, 0x5a6, 0x8, 0x8, 0xfffffff1, 0x0, 0x669ccda, 0xff, 0x9, 0x71c5, 0x6, 0x7, 0xff, 0x6, 0x5, 0xe232, 0x40, 0xa, 0xb4f8, 0x8, 0x9, 0x3, 0xd38e, 0x1ff, 0x7, 0x54a8, 0xc, 0xfffffff8, 0x1, 0x4, 0x1, 0x3bd, 0x6, 0xffffffff, 0x7f, 0x4, 0x6, 0x1, 0x0, 0xd, 0xe35, 0x3aa03290, 0x2, 0x9, 0x0, 0x4, 0x5, 0x200, 0x9, 0x1, 0xe3, 0xa, 0x7fffffff, 0x7, 0x7, 0x5, 0x7, 0x1, 0x7, 0x8, 0x4, 0x0, 0x7b6, 0x0, 0x6, 0x2, 0xe0, 0x3, 0x8, 0x0, 0x3, 0xc, 0x1, 0x6, 0x0, 0xb, 0x3ff, 0x80000, 0x5, 0x4, 0x4, 0x7, 0x3, 0x1, 0x4f3aff91, 0x83, 0x7f, 0x800, 0x4, 0xfff, 0x4, 0x80000000, 0x8, 0x5, 0x6, 0x2, 0x1, 0x80000000, 0x976, 0xe3, 0x2ea31eba, 0xffffffff, 0x9, 0x2, 0x7, 0xfffffff8, 0x10, 0x9, 0x8000, 0x7, 0x0, 0x6, 0xffffffff, 0x6db, 0x0, 0x8, 0x2, 0x7, 0x2, 0x3, 0xf, 0x4, 0xe9c7, 0x2, 0x7f, 0x73, 0xd2, 0x5, 0x1, 0x2, 0x9, 0x101, 0xef, 0x649, 0x100, 0x8, 0x7ff, 0x10, 0x1, 0x9, 0x2, 0x6a, 0x3, 0x1, 0x100, 0x8, 0x1, 0x7, 0x9, 0x24, 0xfff, 0x3, 0x0, 0xf, 0x8, 0xcc, 0xfff, 0x22, 0x7, 0x10001, 0x7ff, 0xcf12, 0x9, 0x542, 0x10, 0x400, 0x8001, 0x5, 0x197, 0xeafa, 0x5, 0x64c, 0x0, 0x8, 0x1000, 0xd2, 0xff, 0xfffffffb, 0x2d, 0x3, 0x6, 0x8000, 0x7fffffff, 0x98c, 0x6, 0x4, 0x8, 0x2, 0x455, 0x2, 0x6, 0xcb5, 0x800, 0x981, 0x0, 0x5, 0x3621, 0x7fff, 0x9, 0x4, 0x7, 0x5, 0x3, 0x4, 0x0, 0xfc, 0x7, 0x1, 0x1, 0x5, 0x6ead, 0x7, 0x6, 0x360, 0x81, 0x2, 0x13400, 0xfff, 0x6, 0xfffffffc, 0x4, 0x800, 0x1, 0x7, 0x6, 0x1, 0x17e, 0x4, 0x9, 0x5, 0x1, 0x9, 0x1, 0xf15, 0x8, 0x401, 0x9, 0x401, 0x6, 0x1, 0x8001, 0x400, 0x5, 0x0, 0x2, 0x26b, 0x5, 0x7, 0xf, 0x8, 0x0, 0x9, 0x7fff, 0x9, 0x2, 0x1, 0x9, 0x3, 0xc9, 0x400, 0x5, 0x2, 0x1f, 0x2, 0xf, 0x40, 0x8, 0x6, 0x5, 0xcf, 0x8001, 0x30, 0x98, 0x2, 0x3b0, 0x2f9df6e1, 0x10, 0x401, 0xfffffffb, 0x6, 0xfffffffb, 0x6, 0x7, 0x47e1, 0x8, 0xfffffff9, 0x2, 0x10, 0x1, 0x5, 0x0, 0x8, 0xff, 0x0, 0x4, 0x682b, 0x82, 0x0, 0xfffffffe, 0x7, 0x8, 0x78c3, 0x2, 0x4d, 0xd95, 0x80e9, 0xd, 0x7e, 0x1, 0x3, 0x9, 0x10001, 0x3, 0x53, 0x1, 0x7, 0xfff, 0x2, 0xffffffba, 0x9, 0x3, 0x4, 0x8, 0x1, 0x523, 0x7, 0x7fff, 0xc, 0x6, 0x7, 0x1, 0x101, 0x7, 0x59aa284c, 0x3, 0x1, 0xd, 0xfffff800, 0x5, 0x46aa, 0x7, 0x5, 0x6, 0x1, 0x12, 0x9, 0x9, 0x5, 0x4, 0x4, 0x80, 0x4, 0x2, 0x8, 0x3ff, 0x9, 0x401, 0x3, 0x4, 0xd, 0x0, 0x0, 0x5ba, 0x204000, 0x3, 0x5, 0x9, 0xfffffff9, 0x1ff, 0x7fffffff, 0x8, 0x8, 0x6e5, 0x8, 0xa1, 0x3ff, 0x5, 0xbb22, 0xbe, 0x8, 0x1, 0x2, 0x3, 0x1a3b71d0, 0x6, 0xf, 0x5, 0xfffffffc, 0x3, 0x5, 0xdc4e, 0x80000001, 0x2, 0x7, 0x1, 0x4, 0x3, 0x10001, 0x2, 0xffffffff, 0x5, 0x401, 0x6, 0x0, 0x7, 0x3, 0x3, 0x4, 0xffffff26, 0x3, 0x4cd, 0x2, 0xffffffff, 0x8, 0x5, 0x70, 0x1, 0x1, 0x8, 0x8, 0x8, 0xc1b, 0x7fff, 0x2, 0x3, 0x100, 0x6b3, 0x132d, 0x894, 0x84e, 0x4, 0x5, 0x9, 0x6, 0x4, 0x86bf, 0x7, 0x6, 0x5339, 0x4, 0x81, 0xf, 0x2, 0xfffffffe, 0xb7da, 0x1, 0x2, 0x1, 0x3, 0x8, 0x8, 0x6, 0xfff, 0xffffffff, 0x7, 0x7, 0xffffffff, 0xf25, 0x400, 0xffff, 0x9, 0xffff, 0x7, 0x3, 0x4, 0x5, 0x101, 0x0, 0x1, 0x2, 0xfff, 0x3, 0x6, 0x4, 0x1, 0x2, 0x40, 0x69, 0x7, 0x9, 0x0, 0x70cecd6, 0x80, 0x80000000, 0x1, 0x115, 0x7, 0x8, 0x5, 0x7, 0x3, 0x200, 0x5, 0x40, 0x101, 0x1, 0x6, 0x2, 0x6, 0xef36, 0xa, 0x6, 0x834, 0x3, 0x1, 0x34c17020, 0xb63, 0x2, 0x80000000, 0x7, 0x1, 0x5, 0x7, 0x4, 0x4, 0x2, 0x9, 0x4, 0x1, 0x1, 0x2, 0xa, 0x0, 0x6, 0x80000000, 0x4, 0x7, 0x8001, 0x5, 0x0, 0x9, 0xfffffff7, 0x8, 0xfffffff6, 0x1, 0x8, 0x3, 0xe2c, 0x6, 0x9, 0x81, 0x9, 0x80000001, 0x7, 0x6, 0xb1, 0x7f, 0xfffffff9, 0xe, 0x4, 0x4, 0x1, 0x78000, 0x3, 0x3, 0x2, 0x0, 0x3, 0x3, 0xb915, 0x3, 0x8, 0x6, 0x6, 0x6, 0x0, 0x7, 0x4, 0x6, 0x1, 0x7, 0x0, 0x400, 0x2, 0x4, 0x5, 0x750, 0x6, 0x2, 0x7, 0x9, 0x400, 0x8, 0x5, 0x5256, 0x80000001, 0x1, 0x4, 0x8, 0x0, 0x6, 0xffffff7f, 0xff0, 0xf6, 0x3, 0xa, 0x4, 0x1, 0x4, 0xfffff220, 0x1, 0x8000, 0x2, 0x0, 0x7, 0x1, 0x8, 0x4, 0x7, 0x0, 0x3, 0x9, 0xf, 0x0, 0x3, 0x7, 0x2, 0x6, 0xbe, 0xfffffffc, 0x9, 0x1, 0xf5d4, 0xf9, 0x6, 0x3, 0x7ed6, 0x2, 0x7, 0xbb, 0x9, 0x9, 0x2a7, 0x0, 0x2, 0x4, 0x5, 0x8, 0x4, 0x0, 0x10, 0x6, 0xd, 0x3, 0x4, 0x1000, 0xffffffff, 0xe, 0xb6, 0x2, 0x8, 0x80, 0x4, 0xfffffffa, 0x9079, 0x9, 0xfffffff8, 0x3, 0x9c6, 0x80000001, 0xffff, 0x6f4, 0x7, 0x8, 0x8]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) ftruncate(r2, 0x200c17a) 8.139322138s ago: executing program 3 (id=1086): creat(0x0, 0xc7) r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x1}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8010, 0x0, 0x0) r2 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r2, &(0x7f0000f62000/0x1000)=nil, 0x7000) fsetxattr$security_ima(r0, &(0x7f0000000080), &(0x7f0000001200)=@ng={0x4, 0x16}, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x4000, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2cb, &(0x7f0000000ac0)="$eJzs3U9LW1kYx/GfJmNiHE0Ww8AMDHOY2cxsgpN5ATNhUBgmMMUaabsoXOtNG3KbyL3BEik1m9JtX4d02V2h7RtwU7rpvjspFLpxUXqL9yaaaJLGkD9avx+Q8yTPeXKO5ihPLiTuX3t8t1Tw0gWrqum40bRU14GUOowaphrjdBDPqFVdv899ePPT1es3/svmcksrxixnV//MGGMWfn5+7/6TX15W59aeLjyLaS91c/995u3ezN4P+59W7xQ9U/RMuVI1llmvVKrWumObjaJXShtzxbEtzzbFsme7bfmCU9ncrBmrvDGf2HRtzzNWuWZKds1UK6bq1ox12yqWTTqdNvMJXW7RPubkd1dWrGzXtB8Z6o4wcrOd7nTdbL1zMr87hj0BAIBzpnf/H/b63fv/3Fo4nqX///7L/b9E/z8i9bZbXfr/b8e4IYyc62atROP3tx39PwAAAAAAAAAAAAAAAAAAAAAAF8GB7yd9308ejo27gtsxSXFJfiN/VNDP28pxYbQ+/37LV9fnP/TXhLaLIWt5415cch5t5bfy4RjmswUV5cjWopL6GJyHhjBe/je3tGgCKb1wdhr1O1v5iGLN+qZUp/qpqBQ+QHv9N0q0rp9RUt91Xj9jOtXP6LdfW+rTSurVLVXkaCM418f1D/4w5p//cyfqZ4N5AAAAAAB8DdLmyKnX70E+mBDX6XxY33J9wPf9nV7XB068vo7qR64lAgAAAAAwFl5tu2Q5ju0OEMQkDVYuDbxor8D3paE+4EBBRJNcvVvwt6RzsI1xBXE1z5gZpPydznRE/T7mRCVN/MdyhmDSf5kAAAAADJtX2z7+Bz/9ev1wRLsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBy6vfzwJrzT6WaiZ6f9nckMvZvEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADhHPgcAAP//ps0YVA==") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20400, 0x20) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x82, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000100)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@mblk_io_submit}, {@nouid32}, {@barrier_val}, {@grpjquota}, {}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") 8.07375218s ago: executing program 0 (id=1087): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x4, 0xfa11, 0x10}, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) openat$dlm_control(0xffffff9c, 0x0, 0x400, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23d, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x4, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x960, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x3, 0x3, 0x1010001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x3, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9388, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) ioctl$UI_SET_RELBIT(r4, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$alg(r5, 0x0, 0x2c000054) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r5) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$UI_DEV_DESTROY(r4, 0x5502) bpf$MAP_CREATE(0x0, 0x0, 0x50) 7.800382671s ago: executing program 6 (id=1088): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000140), &(0x7f0000000100)=0x30) 6.980893712s ago: executing program 6 (id=1089): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3c) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008081}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) writev(r2, &(0x7f00000000c0), 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800682237b36630000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4004095}, 0xc080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = accept4$inet(r1, 0x0, &(0x7f0000000140), 0x80000) recvmmsg(r7, 0x0, 0x0, 0x13122, &(0x7f0000003c80)) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff0000000002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) 6.966955977s ago: executing program 2 (id=1090): ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x60, 0x0, 0xb7a006d1969b963b, 0x1, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @probe_request={{{}, {}, @device_a, @device_b}, @val, @val, @void, @val={0x2d, 0x1a, {0x8802, 0x3, 0x6, 0x0, {0x6, 0xd, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x1, 0x95ce, 0x9}}, @val={0x72, 0x6}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8011}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 6.803607939s ago: executing program 3 (id=1091): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f00000000c0)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) 6.410849185s ago: executing program 4 (id=1093): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x44004}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00'}) getsockopt(0xffffffffffffffff, 0x182f2, 0xfffffffd, &(0x7f0000000380)=""/186, 0x0) 6.036814523s ago: executing program 3 (id=1094): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x7, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f00000001c0)={0x2c, 0x8, r5}, 0x10) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r6, 0x4b63, 0x3) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='cubic', 0x5) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FIONCLEX(r7, 0x5450) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010025bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="380904000300000808001b0000000000e07fa7c9157fbd9e02393beef3c5718fa17abd7e9dddc82a3f544f1ae0a47c4538fbef2c0caa9bbe5cf6ebaf7dbc4763555680ad041092d3809fefad2816b387f25773cddcb960c75224c6aee7c69f7a5316899a851ec6801e3c0a77c6d1afde434cceed52a80e0a76237c42f7456f33007cdfdd5dfe4d7c8ca416c325ad05833cfc243d06456de9b45dcefe9bfe2d97a4cc8ad575aa36e6fccda5ee8f5e45dbe7"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x400, 0x40, 0x20, 0x1}]}) close_range(r8, 0xffffffffffffffff, 0x0) statfs(&(0x7f0000000040)='./cgroup.net/cgroup.procs\x00', &(0x7f00000002c0)=""/166) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) bind$alg(r9, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(generic-gcm-aesni)\x00'}, 0x58) 5.553553311s ago: executing program 2 (id=1095): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) lseek(r0, 0x7fff, 0x2) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b0200000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x3, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x3, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1fb}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0x7e, 0xa}}}, 0x130) syz_emit_ethernet(0x3a2, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x36c, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x12, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/dev_snmp6\x00') socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d40)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="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"/1887], 0x76c}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000070605000a00000000000000010000020500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r5, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) 4.867825036s ago: executing program 1 (id=1096): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000", 0x4d}], 0x1) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x191c07, 0xfffffffe, 0x0, 0x9}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r3, &(0x7f0000003480)={0x2020}, 0x2020) r4 = syz_create_resource$binfmt(&(0x7f0000000240)='./file0\x00') execveat$binfmt(r3, r4, &(0x7f0000000640)={[0x0, &(0x7f00000004c0)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', &(0x7f0000000540)=',-\x00', &(0x7f00000005c0)='blkio.bfq.io_service_bytes_recursive\x00', &(0x7f0000000600)='%.\x00']}, &(0x7f0000000740)={[&(0x7f0000000680)='port1\x00', &(0x7f00000006c0)=',\x00', &(0x7f0000000700)='*.^\x00']}, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndctrl(0x0, 0x2, 0x0) r6 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, &(0x7f0000000540), &(0x7f0000001680), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000000)={0x80, 0x20000005, 0x2, 0xe05, 0x5fffd, 0x28e7}) readv(r2, &(0x7f00000000c0)=[{&(0x7f00000011c0)=""/109, 0x6d}], 0x1) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) bind$unix(0xffffffffffffffff, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) 4.816930515s ago: executing program 4 (id=1097): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xd, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0xfff, 0x0, 0xa, 0x3}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x4}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 3.595445573s ago: executing program 1 (id=1098): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f00000000c0)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) r2 = openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$cgroup_pid(r2, &(0x7f00000005c0), 0x12) 3.145472061s ago: executing program 4 (id=1099): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x110}, 0x2}, 0x0) 2.84354047s ago: executing program 1 (id=1100): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x7}) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/73, 0x49}], 0x1) 2.469259281s ago: executing program 4 (id=1101): setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000000)=0x200000, 0x4) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000140), &(0x7f0000000100)=0x30) 2.245142769s ago: executing program 0 (id=1102): r0 = syz_io_uring_setup(0x4af0, &(0x7f00000001c0)={0x0, 0xb7a2, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000), 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x2000000, 0x0) 1.800047355s ago: executing program 4 (id=1103): creat(0x0, 0xc7) r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x1}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8010, 0x0, 0x0) r2 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r2, &(0x7f0000f62000/0x1000)=nil, 0x7000) fsetxattr$security_ima(r0, &(0x7f0000000080), &(0x7f0000001200)=@ng={0x4, 0x16}, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x4000, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2cb, &(0x7f0000000ac0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20400, 0x20) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x82, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000100)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@mblk_io_submit}, {@nouid32}, {@barrier_val}, {@grpjquota}, {}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") 1.630541472s ago: executing program 6 (id=1104): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0x4000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000180), &(0x7f0000000780)='./file0\x00', 0x8, 0x3) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) socket(0x1e, 0x4, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newqdisc={0x84, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x9, 0x3, 0x0, 0x6, 0xfffffffa, 0x22}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x68, 0x1611, 0x2, 0x87d7, 0x200020000000000, 0xf}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x70, 0x82}}]}}}]}, 0x84}}, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) fallocate(r1, 0xa, 0xab28, 0x7) ioctl$FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2adc0, 0x1c1}, 0x18) r5 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x9, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101240, 0x10a) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_ABS_SETUP(r6, 0x401c5504, &(0x7f0000000800)={0x0, {0xfffffff9, 0x0, 0x8, 0x3, 0x3, 0xbb}}) write$uinput_user_dev(r6, &(0x7f0000000240)={'syz0\x00', {0x9, 0x1, 0x2, 0x3}, 0x2, [0x5, 0x5, 0x81, 0x8, 0x4, 0x1000, 0x50000, 0x1, 0x10001, 0xffffa103, 0x3, 0x6, 0x6, 0x6, 0x7, 0x3, 0x6, 0x0, 0x40, 0x5, 0x1cac, 0x3eb, 0xb8f, 0x3, 0x400, 0x40, 0x6, 0x0, 0xfffffffa, 0xdc, 0xffffffff, 0xa1bc, 0x200, 0x7, 0x6, 0x6, 0x3, 0x1, 0x2, 0x0, 0x2, 0x400, 0x7a08, 0x200, 0x3, 0x6, 0x7ff, 0x7f, 0x1c, 0x7, 0xe, 0x9, 0x5, 0xa, 0x3, 0x2, 0xf7, 0xfff, 0x71, 0x5, 0x1ac0, 0x4f, 0x6, 0x8], [0x5, 0x3ff, 0x6, 0xea, 0x3, 0x0, 0xca, 0x1c5936c5, 0x9, 0xfffffff8, 0x4, 0x1, 0x7, 0x6, 0xa, 0x4, 0x2, 0x0, 0x5, 0x2, 0x0, 0x6, 0x0, 0x1, 0x9, 0x6, 0x5e5893ee, 0xfffffff7, 0x9, 0x10000, 0x3, 0x8001, 0x2e6d, 0x7ff, 0x1, 0x9000, 0x877, 0x9, 0x8, 0x8, 0x80000000, 0xfff, 0x5, 0x7, 0x8, 0x5, 0x75da, 0x2, 0x5, 0xe8, 0x3, 0x9, 0x5, 0x7, 0xb99c, 0x2, 0x1000001, 0x4, 0x4, 0x1, 0x1, 0x9, 0x2, 0xc406], [0x80000001, 0x2, 0x9, 0x9, 0x0, 0xb9, 0x897, 0x5, 0x3, 0x4, 0x2, 0x5, 0x3, 0x9, 0x9, 0x7, 0x9, 0x61, 0x9, 0x5, 0x9, 0x8, 0x2, 0x6, 0x8001, 0x4, 0xc, 0x80000000, 0x7fffffff, 0x1, 0x1, 0x6, 0x8, 0x3, 0x2, 0x5, 0x3, 0x2, 0x1, 0x24, 0x9, 0x2000000, 0x4, 0xff, 0x7, 0x3eef6cc9, 0x1, 0x7, 0x7, 0x8bd, 0x9, 0xfffffff9, 0x80000001, 0x5, 0xffffff1d, 0x6, 0x0, 0xa, 0xfff, 0xfff, 0x1, 0x1, 0x19ee, 0xfffffff9], [0x0, 0x10, 0x101, 0x2, 0x4, 0x9c500, 0x8ef, 0x8, 0xc61, 0x7, 0x1d, 0x358, 0xd567, 0x1d5, 0xc8b, 0x658, 0xcbfd, 0x101, 0x6, 0x5, 0xb, 0x5, 0x6, 0x3, 0x75d6, 0xb26, 0x3ff, 0x6, 0x9, 0x0, 0x1, 0xf412, 0x2, 0x2, 0x2000002, 0x3, 0x3, 0x9, 0x3, 0x5, 0x3, 0x3, 0xfffffff3, 0x8000, 0x6, 0x6, 0xffff, 0x80, 0xf, 0xfff, 0xfff, 0xffff, 0xfffffffe, 0x80, 0xb975, 0x5, 0x5e1, 0xa, 0xffff58ee, 0x2, 0x2530, 0x4, 0x26da282, 0xc]}, 0x45c) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) write$uinput_user_dev(r6, &(0x7f0000000d80)={'syz0\x00', {0xb, 0x3, 0x4, 0x9}, 0x3, [0xfffff47e, 0x0, 0x0, 0x3, 0xf, 0x0, 0x7ff, 0xa, 0x5, 0x3, 0x5, 0x40, 0x1, 0x1, 0x7, 0x6, 0x0, 0x7, 0x1, 0xdef, 0x9, 0x7, 0x200, 0x5, 0x73c, 0x5, 0x4, 0x7f, 0x4, 0x6, 0xfffffff9, 0x8, 0x6, 0x4, 0x7, 0x7, 0x1939, 0x8, 0x7, 0x2, 0xe12c, 0x8162, 0x4, 0x3, 0x1, 0x41, 0x7, 0x10000, 0x101, 0x8, 0xc000, 0x6, 0x4, 0x4, 0x5, 0x6, 0xfff, 0x0, 0x104, 0xf8ad, 0x2, 0x3, 0x7fffdfff], [0xfffffff8, 0xff, 0x4, 0x8, 0x1e0f, 0xfffffff7, 0x5, 0x7, 0xffffffff, 0x0, 0x6, 0x100, 0x8, 0xe63, 0x1, 0xa3a5, 0x2, 0x2, 0xb9, 0x6, 0x3, 0x43d, 0x6, 0xe, 0x4, 0x3, 0x6, 0x9, 0x1, 0x11, 0x5, 0x4, 0x8, 0x30000, 0x81, 0xfffffe00, 0x0, 0x10001, 0x7ff, 0x9, 0x8, 0xffffa467, 0x5, 0xfffffffb, 0x0, 0xff, 0x9, 0x6aac, 0x0, 0x3, 0x4, 0xfff, 0x200, 0xc1a, 0xe456, 0x100, 0x2, 0x0, 0x1c00000, 0x6, 0x3, 0xfffffff6, 0xffff1068, 0xffff9241], [0x9, 0x611, 0x6, 0xff, 0x101, 0x5, 0x0, 0x2, 0x80000001, 0x96, 0x7, 0x1, 0xfffffffa, 0x1, 0x4, 0xfb, 0x10001, 0x8, 0x8, 0x3, 0x1, 0x100001, 0x1, 0x7, 0x3, 0x40000000, 0x8, 0x3, 0x5, 0x3, 0xb89, 0xf, 0x0, 0x9, 0x3, 0xff, 0x0, 0x2, 0x1ff, 0x4501, 0x9, 0x0, 0x9, 0x7, 0x966, 0x6, 0x10000, 0xf, 0xffffffff, 0x9, 0xe2, 0x1, 0x8, 0x1, 0x8, 0x3ff, 0x5, 0xfffeffff, 0x3, 0x0, 0x80, 0x6, 0x7, 0xc], [0x5, 0x7f, 0x7, 0x9, 0x2, 0x6, 0x45c, 0x5, 0xab73, 0x5, 0x7, 0x0, 0x5, 0xed5a, 0x9, 0x4, 0x9, 0x8, 0x8, 0x3, 0xeb, 0x6, 0x5, 0xff, 0xffffffff, 0x7fff, 0x4, 0xcb7, 0xa3, 0xffff, 0x8, 0x80000000, 0x3, 0x1ff, 0xfffff26e, 0xf81e, 0x6, 0x9, 0x3, 0x8, 0x5, 0xe5, 0x2, 0x4, 0x4, 0x3, 0x0, 0xfffffff9, 0x7, 0x1ff, 0x204000, 0x5, 0x80, 0x9, 0x7, 0x5078, 0xd, 0x8001, 0x8000, 0x3000000, 0x200, 0x45, 0x0, 0x3]}, 0x45c) 1.521143721s ago: executing program 0 (id=1105): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x101, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)='3', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)="b458", 0x2}], 0x1}}], 0x2, 0x20e8086) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 1.520643114s ago: executing program 1 (id=1106): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000cc0)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x4, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x800, 0x7, 0x1}, {{0x0, 0x0, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x3, 0x6e4, 0xc}, {0x4, 0x80000000, 0x3, 0x1, 0xf, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xee4}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) 143.916873ms ago: executing program 4 (id=1107): ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x60, r3, 0xb7a006d1969b963b, 0x1, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @probe_request={{{}, {}, @device_a, @device_b}, @val, @val, @void, @val={0x2d, 0x1a, {0x8802, 0x3, 0x6, 0x0, {0x6, 0xd, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x1, 0x95ce, 0x9}}, @val={0x72, 0x6}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8011}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 0s ago: executing program 1 (id=1108): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_int(r0, &(0x7f0000000240)=0x2, 0x12) kernel console output (not intermixed with test programs): C1] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of bio_endio+0x755/0x8b0 [ 289.027123][ C1] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of bio_endio+0x755/0x8b0 [ 289.146086][ T5826] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 289.649117][ T8441] overlayfs: failed to resolve './bus': -2 [ 289.809244][ T8389] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 289.856189][ T8389] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_recover_fsync_data+0x453/0xa1d0 [ 294.175397][ T8473] loop0: detected capacity change from 0 to 32768 [ 294.219278][ T8473] (syz.0.639,8473,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 294.307054][ T8473] (syz.0.639,8473,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 294.468387][ T8473] JBD2: Ignoring recovery information on journal [ 294.490982][ T8499] xt_hashlimit: size too large, truncated to 1048576 [ 294.538934][ T8494] loop2: detected capacity change from 0 to 4096 [ 294.612566][ T8494] ntfs3: Unknown parameter '‡e‚ÑvuåZyƒ„WÜ™K¦^eælë<…ù3Øä²‚t܈Ӳ¹.Α—UFÝ.ñª#8×9üŸÕ讲Sü€Nwønü§%[Æ„Ý9i)Rw{þ*5à5º²UâR?fùÏ)쀙!¿ø' [ 294.754162][ T8473] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 295.018744][ T8513] overlayfs: failed to resolve './bus': -2 [ 295.072652][ T8514] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.649'. [ 295.091597][ T8514] openvswitch: netlink: Flow actions attr not present in new flow. [ 295.550098][ T792] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 295.670617][ T8521] loop2: detected capacity change from 0 to 40427 [ 295.706353][ T5827] ocfs2: Unmounting device (7,0) on (node local) [ 295.761341][ T8521] F2FS-fs (loop2): build fault injection rate: 14 [ 295.769184][ T8521] F2FS-fs (loop2): build fault injection type: 0x3bfe8c [ 295.777622][ T8521] F2FS-fs (loop2): invalid crc value [ 295.800425][ C1] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of bio_endio+0x755/0x8b0 [ 295.839460][ C0] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of bio_endio+0x755/0x8b0 [ 295.999375][ T8521] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 296.008397][ T8521] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_recover_fsync_data+0x453/0xa1d0 [ 296.037065][ T8521] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 296.041369][ T792] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 296.149384][ T792] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.168943][ T8521] F2FS-fs (loop2): inject no more block in inc_valid_node_count of f2fs_new_node_folio+0x243/0x1110 [ 296.186031][ T8521] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0x114c/0x2fd0 [ 296.200107][ T792] usb 7-1: Product: syz [ 296.205699][ T792] usb 7-1: Manufacturer: syz [ 296.271182][ T792] usb 7-1: SerialNumber: syz [ 296.362065][ T792] usb 7-1: config 0 descriptor?? [ 296.487140][ C1] F2FS-fs (loop2): inject write IO error in f2fs_write_end_io of bio_endio+0x755/0x8b0 [ 296.496987][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 296.497054][ C1] Tainted: [L]=SOFTLOCKUP [ 296.497068][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 296.497091][ C1] Call Trace: [ 296.497103][ C1] [ 296.497117][ C1] dump_stack_lvl+0x100/0x190 [ 296.497169][ C1] f2fs_handle_critical_error+0x5d7/0x970 [ 296.497233][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.497294][ C1] ? f2fs_build_fault_attr+0x53/0x1f0 [ 296.497356][ C1] f2fs_write_end_io+0xc24/0xf00 [ 296.497421][ C1] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 296.497488][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.497544][ C1] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 296.497606][ C1] bio_endio+0x755/0x8b0 [ 296.497667][ C1] blk_update_request+0x741/0x1330 [ 296.497733][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.497793][ C1] blk_mq_end_request+0x5b/0x420 [ 296.497863][ C1] lo_complete_rq+0x1d4/0x2a0 [ 296.497923][ C1] blk_complete_reqs+0xb1/0xf0 [ 296.497981][ C1] handle_softirqs+0x1ea/0x910 [ 296.498048][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 296.498103][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.498153][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 296.498205][ C1] run_ksoftirqd+0x38/0x60 [ 296.498253][ C1] smpboot_thread_fn+0x3d3/0xaa0 [ 296.498322][ C1] ? kthread+0x17d/0x730 [ 296.498355][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 296.498415][ C1] kthread+0x3b3/0x730 [ 296.498452][ C1] ? __pfx_kthread+0x10/0x10 [ 296.498486][ C1] ? ret_from_fork+0x79/0xaf0 [ 296.498526][ C1] ? ret_from_fork+0x79/0xaf0 [ 296.498565][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.498612][ C1] ? rcu_is_watching+0x12/0xc0 [ 296.498662][ C1] ? __pfx_kthread+0x10/0x10 [ 296.498701][ C1] ret_from_fork+0x754/0xaf0 [ 296.498745][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 296.498790][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.498838][ C1] ? __switch_to+0x7b9/0x10c0 [ 296.498889][ C1] ? __pfx_kthread+0x10/0x10 [ 296.498929][ C1] ret_from_fork_asm+0x1a/0x30 [ 296.499016][ C1] [ 296.499029][ C1] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 296.714115][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 296.714158][ C1] Tainted: [L]=SOFTLOCKUP [ 296.714169][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 296.714186][ C1] Call Trace: [ 296.714196][ C1] [ 296.714207][ C1] dump_stack_lvl+0x100/0x190 [ 296.714245][ C1] f2fs_handle_critical_error+0x5d7/0x970 [ 296.714293][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.714328][ C1] ? f2fs_build_fault_attr+0x53/0x1f0 [ 296.714377][ C1] f2fs_write_end_io+0xc24/0xf00 [ 296.714426][ C1] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 296.714476][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.714517][ C1] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 296.714562][ C1] bio_endio+0x755/0x8b0 [ 296.714607][ C1] blk_update_request+0x741/0x1330 [ 296.714655][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.714699][ C1] blk_mq_end_request+0x5b/0x420 [ 296.714750][ C1] lo_complete_rq+0x1d4/0x2a0 [ 296.714794][ C1] blk_complete_reqs+0xb1/0xf0 [ 296.714836][ C1] handle_softirqs+0x1ea/0x910 [ 296.714881][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 296.714922][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.714959][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 296.714997][ C1] run_ksoftirqd+0x38/0x60 [ 296.715038][ C1] smpboot_thread_fn+0x3d3/0xaa0 [ 296.715089][ C1] ? kthread+0x17d/0x730 [ 296.715113][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 296.715156][ C1] kthread+0x3b3/0x730 [ 296.715186][ C1] ? __pfx_kthread+0x10/0x10 [ 296.715211][ C1] ? ret_from_fork+0x79/0xaf0 [ 296.715240][ C1] ? ret_from_fork+0x79/0xaf0 [ 296.715269][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.715303][ C1] ? rcu_is_watching+0x12/0xc0 [ 296.715339][ C1] ? __pfx_kthread+0x10/0x10 [ 296.715368][ C1] ret_from_fork+0x754/0xaf0 [ 296.715400][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 296.715433][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.715467][ C1] ? __switch_to+0x7b9/0x10c0 [ 296.715505][ C1] ? __pfx_kthread+0x10/0x10 [ 296.715534][ C1] ret_from_fork_asm+0x1a/0x30 [ 296.715594][ C1] [ 296.715604][ C1] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 296.931617][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 296.931667][ C1] Tainted: [L]=SOFTLOCKUP [ 296.931679][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 296.931702][ C1] Call Trace: [ 296.931716][ C1] [ 296.931730][ C1] dump_stack_lvl+0x100/0x190 [ 296.931791][ C1] f2fs_handle_critical_error+0x5d7/0x970 [ 296.931855][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.931902][ C1] ? f2fs_build_fault_attr+0x53/0x1f0 [ 296.931949][ C1] f2fs_write_end_io+0xc24/0xf00 [ 296.932001][ C1] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 296.932070][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.932112][ C1] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 296.932158][ C1] bio_endio+0x755/0x8b0 [ 296.932205][ C1] blk_update_request+0x741/0x1330 [ 296.932253][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.932297][ C1] blk_mq_end_request+0x5b/0x420 [ 296.932350][ C1] lo_complete_rq+0x1d4/0x2a0 [ 296.932399][ C1] blk_complete_reqs+0xb1/0xf0 [ 296.932441][ C1] handle_softirqs+0x1ea/0x910 [ 296.932487][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 296.932527][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.932565][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 296.932603][ C1] run_ksoftirqd+0x38/0x60 [ 296.932639][ C1] smpboot_thread_fn+0x3d3/0xaa0 [ 296.932693][ C1] ? kthread+0x17d/0x730 [ 296.932719][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 296.932762][ C1] kthread+0x3b3/0x730 [ 296.932791][ C1] ? __pfx_kthread+0x10/0x10 [ 296.932816][ C1] ? ret_from_fork+0x79/0xaf0 [ 296.932846][ C1] ? ret_from_fork+0x79/0xaf0 [ 296.932875][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.932910][ C1] ? rcu_is_watching+0x12/0xc0 [ 296.932948][ C1] ? __pfx_kthread+0x10/0x10 [ 296.932977][ C1] ret_from_fork+0x754/0xaf0 [ 296.933014][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 296.933047][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.933081][ C1] ? __switch_to+0x7b9/0x10c0 [ 296.933122][ C1] ? __pfx_kthread+0x10/0x10 [ 296.933150][ C1] ret_from_fork_asm+0x1a/0x30 [ 296.933216][ C1] [ 296.933226][ C1] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 297.148971][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 297.149062][ C1] Tainted: [L]=SOFTLOCKUP [ 297.149074][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 297.149092][ C1] Call Trace: [ 297.149106][ C1] [ 297.149117][ C1] dump_stack_lvl+0x100/0x190 [ 297.149159][ C1] f2fs_handle_critical_error+0x5d7/0x970 [ 297.149209][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.149244][ C1] ? f2fs_build_fault_attr+0x53/0x1f0 [ 297.149290][ C1] f2fs_write_end_io+0xc24/0xf00 [ 297.149340][ C1] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 297.149390][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.149431][ C1] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 297.149477][ C1] bio_endio+0x755/0x8b0 [ 297.149527][ C1] blk_update_request+0x741/0x1330 [ 297.149583][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.149627][ C1] blk_mq_end_request+0x5b/0x420 [ 297.149679][ C1] lo_complete_rq+0x1d4/0x2a0 [ 297.149728][ C1] blk_complete_reqs+0xb1/0xf0 [ 297.149770][ C1] handle_softirqs+0x1ea/0x910 [ 297.149836][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 297.149877][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.149915][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 297.149953][ C1] run_ksoftirqd+0x38/0x60 [ 297.149998][ C1] smpboot_thread_fn+0x3d3/0xaa0 [ 297.150073][ C1] ? kthread+0x17d/0x730 [ 297.150104][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 297.150161][ C1] kthread+0x3b3/0x730 [ 297.150200][ C1] ? __pfx_kthread+0x10/0x10 [ 297.150234][ C1] ? ret_from_fork+0x79/0xaf0 [ 297.150273][ C1] ? ret_from_fork+0x79/0xaf0 [ 297.150308][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.150355][ C1] ? rcu_is_watching+0x12/0xc0 [ 297.150405][ C1] ? __pfx_kthread+0x10/0x10 [ 297.150445][ C1] ret_from_fork+0x754/0xaf0 [ 297.150488][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 297.150532][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.150578][ C1] ? __switch_to+0x7b9/0x10c0 [ 297.150633][ C1] ? __pfx_kthread+0x10/0x10 [ 297.150672][ C1] ret_from_fork_asm+0x1a/0x30 [ 297.150755][ C1] [ 297.358970][ C1] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 297.365871][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 297.365912][ C1] Tainted: [L]=SOFTLOCKUP [ 297.365923][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 297.365941][ C1] Call Trace: [ 297.365951][ C1] [ 297.365961][ C1] dump_stack_lvl+0x100/0x190 [ 297.366001][ C1] f2fs_handle_critical_error+0x5d7/0x970 [ 297.366053][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.366088][ C1] ? f2fs_build_fault_attr+0x53/0x1f0 [ 297.366134][ C1] f2fs_write_end_io+0xc24/0xf00 [ 297.366183][ C1] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 297.366233][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.366274][ C1] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 297.366320][ C1] bio_endio+0x755/0x8b0 [ 297.366365][ C1] blk_update_request+0x741/0x1330 [ 297.366413][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.366456][ C1] blk_mq_end_request+0x5b/0x420 [ 297.366508][ C1] lo_complete_rq+0x1d4/0x2a0 [ 297.366553][ C1] blk_complete_reqs+0xb1/0xf0 [ 297.366595][ C1] handle_softirqs+0x1ea/0x910 [ 297.366639][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 297.366679][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.366717][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 297.366754][ C1] run_ksoftirqd+0x38/0x60 [ 297.366791][ C1] smpboot_thread_fn+0x3d3/0xaa0 [ 297.366841][ C1] ? kthread+0x17d/0x730 [ 297.366866][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 297.366909][ C1] kthread+0x3b3/0x730 [ 297.366938][ C1] ? __pfx_kthread+0x10/0x10 [ 297.366968][ C1] ? ret_from_fork+0x79/0xaf0 [ 297.366998][ C1] ? ret_from_fork+0x79/0xaf0 [ 297.367032][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.367066][ C1] ? rcu_is_watching+0x12/0xc0 [ 297.367102][ C1] ? __pfx_kthread+0x10/0x10 [ 297.367131][ C1] ret_from_fork+0x754/0xaf0 [ 297.367163][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 297.367196][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.367230][ C1] ? __switch_to+0x7b9/0x10c0 [ 297.367268][ C1] ? __pfx_kthread+0x10/0x10 [ 297.367296][ C1] ret_from_fork_asm+0x1a/0x30 [ 297.367357][ C1] [ 297.367367][ C1] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 297.611344][ T5840] F2FS-fs (loop2): do_checkpoint failed err:-5, stop checkpoint [ 297.664603][ T792] dvb_usb_rtl28xxu 7-1:0.0: chip type detection failed -110 [ 297.672939][ T792] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 298.968728][ T5926] usb 7-1: USB disconnect, device number 3 [ 300.709637][ T8565] loop3: detected capacity change from 0 to 4096 [ 300.792742][ T8565] ntfs3: Unknown parameter '‡e‚ÑvuåZyƒ„WÜ™K¦^eælë<…ù3Øä²‚t܈Ӳ¹.Α—UFÝ.ñª#8×9üŸÕ讲Sü€Nwønü§%[Æ„Ý9i)Rw{þ*5à5º²UâR?fùÏ)쀙!¿ø' [ 300.991181][ T8569] xt_hashlimit: size too large, truncated to 1048576 [ 301.304612][ T8552] loop6: detected capacity change from 0 to 32768 [ 301.341651][ T8552] btrfs: Deprecated parameter 'usebackuproot' [ 301.378019][ T8552] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 301.445203][ T8552] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.662 (8552) [ 301.561281][ T8552] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 301.616129][ T8552] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm [ 301.832371][ T7373] BTRFS warning (device loop6): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 301.950204][ T8552] BTRFS error (device loop6): failed to load root extent [ 301.982976][ T8552] BTRFS warning (device loop6): try to load backup roots slot 1 [ 302.019648][ T7376] BTRFS warning (device loop6): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 302.064343][ T8552] BTRFS warning (device loop6): couldn't read tree root [ 302.090153][ T8552] BTRFS warning (device loop6): try to load backup roots slot 2 [ 302.142465][ T7376] BTRFS error (device loop6): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 302.190212][ T8552] BTRFS warning (device loop6): couldn't read tree root [ 302.270203][ T8552] BTRFS warning (device loop6): try to load backup roots slot 3 [ 302.547687][ T8552] BTRFS error (device loop6): open_ctree failed: -4 [ 302.547876][ T8603] netlink: 'syz.3.673': attribute type 1 has an invalid length. [ 302.845198][ T8603] 8021q: adding VLAN 0 to HW filter on device bond1 [ 302.959716][ T8606] bond1: (slave ip6gretap1): making interface the new active one [ 303.072326][ T8606] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 304.502768][ T8635] loop6: detected capacity change from 0 to 4096 [ 304.569575][ T8635] ntfs3: Unknown parameter '‡e‚ÑvuåZyƒ„WÜ™K¦^eælë<…ù3Øä²‚t܈Ӳ¹.Α—UFÝ.ñª#8×9üŸÕ讲Sü€Nwønü§%[Æ„Ý9i)Rw{þ*5à5º²UâR?fùÏ)쀙!¿ø' [ 305.994182][ T8659] netlink: 'syz.3.692': attribute type 3 has an invalid length. [ 306.111322][ T8662] binder: BINDER_SET_CONTEXT_MGR already set [ 306.148142][ T8662] binder: 8660:8662 ioctl 4018620d 200000000100 returned -16 [ 306.200755][ T8662] binder: BINDER_SET_CONTEXT_MGR already set [ 306.206822][ T8662] binder: 8660:8662 ioctl 4018620d 2000000002c0 returned -16 [ 306.428572][ T8651] loop4: detected capacity change from 0 to 32768 [ 306.436848][ T8651] btrfs: Deprecated parameter 'usebackuproot' [ 306.456917][ T8651] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 306.525956][ T8651] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.688 (8651) [ 306.660919][ T8651] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 306.691332][ T8651] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 307.090739][ T49] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 307.140992][ T8694] netlink: 24 bytes leftover after parsing attributes in process `syz.3.696'. [ 307.187404][ T8651] BTRFS error (device loop4): failed to load root extent [ 307.222391][ T8651] BTRFS warning (device loop4): try to load backup roots slot 1 [ 307.266055][ T7373] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 307.570397][ T8651] BTRFS warning (device loop4): couldn't read tree root [ 307.583618][ T8651] BTRFS warning (device loop4): try to load backup roots slot 2 [ 307.620235][ T49] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 307.673864][ T8651] BTRFS warning (device loop4): couldn't read tree root [ 307.690197][ T8651] BTRFS warning (device loop4): try to load backup roots slot 3 [ 307.809152][ T8651] BTRFS info (device loop4): rebuilding free space tree [ 307.904621][ T8651] BTRFS info (device loop4): checking UUID tree [ 307.934528][ T8651] BTRFS info (device loop4): enabling ssd optimizations [ 307.968748][ T8651] BTRFS info (device loop4): turning on sync discard [ 307.992595][ T8651] BTRFS info (device loop4): enabling free space tree [ 308.052308][ T8651] BTRFS info (device loop4): force clearing of disk cache [ 308.099540][ T8651] BTRFS info (device loop4): enabling auto defrag [ 308.152630][ T8651] BTRFS info (device loop4): trying to use backup root at mount time [ 308.198756][ T8651] BTRFS info (device loop4): use zstd compression, level 3 [ 308.657647][ T5842] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 309.098994][ T8711] loop0: detected capacity change from 0 to 4096 [ 309.197690][ T8711] ntfs3: Unknown parameter '‡e‚ÑvuåZyƒ„WÜ™K¦^eælë<…ù3Øä²‚t܈Ӳ¹.Α—UFÝ.ñª#8×9üŸÕ讲Sü€Nwønü§%[Æ„Ý9i)Rw{þ*5à5º²UâR?fùÏ)쀙!¿ø' [ 309.810762][ T8721] netlink: 'syz.6.705': attribute type 1 has an invalid length. [ 310.092137][ T8730] netlink: 'syz.2.707': attribute type 10 has an invalid length. [ 310.260579][ T8727] vlan2: entered allmulticast mode [ 310.279323][ T8727] veth1: entered allmulticast mode [ 310.426799][ T8734] kAFS: unable to lookup cell 'ÿ' [ 310.687230][ T8730] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 310.860419][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 311.100735][ T24] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 311.140138][ T24] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 311.174850][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.196835][ T8749] binder: BINDER_SET_CONTEXT_MGR already set [ 311.290067][ T8749] binder: 8748:8749 ioctl 4018620d 200000000100 returned -16 [ 311.329556][ T24] usb 2-1: config 0 descriptor?? [ 311.397224][ T8749] binder: BINDER_SET_CONTEXT_MGR already set [ 311.440136][ T8749] binder: 8748:8749 ioctl 4018620d 2000000002c0 returned -16 [ 311.678311][ T8734] bridge0: entered allmulticast mode [ 312.104153][ T8757] loop4: detected capacity change from 0 to 40427 [ 312.138848][ T8757] F2FS-fs (loop4): build fault injection rate: 14 [ 312.145402][ T8757] F2FS-fs (loop4): build fault injection type: 0x3bfe8c [ 312.154040][ T8757] F2FS-fs (loop4): invalid crc value [ 312.197821][ C0] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of bio_endio+0x755/0x8b0 [ 312.214716][ C0] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of bio_endio+0x755/0x8b0 [ 312.282345][ T8757] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 312.291512][ T8757] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_recover_fsync_data+0x453/0xa1d0 [ 312.307122][ T8757] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 312.387277][ T8757] F2FS-fs (loop4): inject no more block in inc_valid_node_count of f2fs_new_node_folio+0x243/0x1110 [ 312.632271][ C0] F2FS-fs (loop4): inject write IO error in f2fs_write_end_io of bio_endio+0x755/0x8b0 [ 312.642110][ C0] CPU: 0 UID: 0 PID: 5840 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 312.642168][ C0] Tainted: [L]=SOFTLOCKUP [ 312.642181][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 312.642205][ C0] Call Trace: [ 312.642217][ C0] [ 312.642230][ C0] dump_stack_lvl+0x100/0x190 [ 312.642286][ C0] f2fs_handle_critical_error+0x5d7/0x970 [ 312.642352][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 312.642399][ C0] ? f2fs_build_fault_attr+0x53/0x1f0 [ 312.642465][ C0] f2fs_write_end_io+0xc24/0xf00 [ 312.642533][ C0] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 312.642602][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 312.642659][ C0] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 312.642722][ C0] bio_endio+0x755/0x8b0 [ 312.642783][ C0] blk_update_request+0x741/0x1330 [ 312.642849][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 312.642910][ C0] blk_mq_end_request+0x5b/0x420 [ 312.642981][ C0] lo_complete_rq+0x1d4/0x2a0 [ 312.643042][ C0] blk_complete_reqs+0xb1/0xf0 [ 312.643100][ C0] handle_softirqs+0x1ea/0x910 [ 312.643161][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 312.643217][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 312.643275][ C0] __irq_exit_rcu+0xef/0x150 [ 312.643326][ C0] irq_exit_rcu+0x9/0x30 [ 312.643378][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 312.643426][ C0] [ 312.643439][ C0] [ 312.643453][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 312.643498][ C0] RIP: 0010:srso_alias_safe_ret+0x0/0x7 [ 312.643546][ C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc <48> 8d 64 24 08 c3 cc e8 f4 ff ff ff 0f 0b cc cc cc cc cc cc cc cc [ 312.643585][ C0] RSP: 0018:ffffc9000400f548 EFLAGS: 00000293 [ 312.643616][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff827cd50f [ 312.643641][ C0] RDX: ffff88802fdedb80 RSI: ffffffff827cd97f RDI: ffff88802fdedb80 [ 312.643668][ C0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 312.643693][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88801e608be0 [ 312.643718][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000006826 [ 312.643754][ C0] ? page_table_check_set+0x47f/0xa10 [ 312.643817][ C0] ? page_table_check_set+0x8ef/0xa10 [ 312.643885][ C0] srso_alias_return_thunk+0x5/0xfbef5 [ 312.643933][ C0] page_table_check_set+0x8ef/0xa10 [ 312.644002][ C0] __page_table_check_ptes_set+0x27a/0x4e0 [ 312.644067][ C0] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 312.644131][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 312.644188][ C0] copy_page_range+0x249e/0x6ba0 [ 312.644297][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 312.644364][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 312.644420][ C0] ? __pfx___might_resched+0x10/0x10 [ 312.644465][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 312.644517][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 312.644566][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 312.644620][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 312.644668][ C0] ? up_write+0x290/0x4f0 [ 312.644705][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 312.644761][ C0] dup_mmap+0xbea/0x1e20 [ 312.644826][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 312.644871][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 312.644936][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 312.644996][ C0] copy_process+0x7451/0x7890 [ 312.645053][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 312.645122][ C0] ? __pfx_copy_process+0x10/0x10 [ 312.645178][ C0] ? do_raw_spin_lock+0x128/0x260 [ 312.645226][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 312.645290][ C0] kernel_clone+0xfc/0x930 [ 312.645351][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 312.645407][ C0] ? __lock_acquire+0x4a5/0x2630 [ 312.645480][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 312.645527][ C0] ? find_held_lock+0x2b/0x80 [ 312.645575][ C0] ? __might_fault+0xc5/0x140 [ 312.645639][ C0] __do_sys_clone+0xd9/0x120 [ 312.645697][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 312.645780][ C0] ? do_user_addr_fault+0x8d6/0x12f0 [ 312.645839][ C0] do_syscall_64+0xc9/0xf80 [ 312.645891][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.645931][ C0] RIP: 0033:0x7fa752bc3952 [ 312.645960][ C0] Code: 89 e7 e8 f1 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 312.645998][ C0] RSP: 002b:00007ffc79ae8620 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 312.646033][ C0] RAX: ffffffffffffffda RBX: 00007ffc79ae8620 RCX: 00007fa752bc3952 [ 312.646060][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 312.646085][ C0] RBP: 00007ffc79ae87ac R08: 0000000000000000 R09: 0000000000000001 [ 312.646109][ C0] R10: 000055558590c7d0 R11: 0000000000000246 R12: 0000000000000001 [ 312.646134][ C0] R13: 00000000000927c0 R14: 000000000004c3f2 R15: 00007ffc79ae8800 [ 312.646183][ C0] [ 312.646205][ C0] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 313.138704][ C0] CPU: 0 UID: 0 PID: 5840 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 313.138747][ C0] Tainted: [L]=SOFTLOCKUP [ 313.138757][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 313.138775][ C0] Call Trace: [ 313.138784][ C0] [ 313.138795][ C0] dump_stack_lvl+0x100/0x190 [ 313.138834][ C0] f2fs_handle_critical_error+0x5d7/0x970 [ 313.138882][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.138917][ C0] ? f2fs_build_fault_attr+0x53/0x1f0 [ 313.138962][ C0] f2fs_write_end_io+0xc24/0xf00 [ 313.139011][ C0] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 313.139061][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.139103][ C0] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 313.139148][ C0] bio_endio+0x755/0x8b0 [ 313.139193][ C0] blk_update_request+0x741/0x1330 [ 313.139242][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.139290][ C0] blk_mq_end_request+0x5b/0x420 [ 313.139342][ C0] lo_complete_rq+0x1d4/0x2a0 [ 313.139386][ C0] blk_complete_reqs+0xb1/0xf0 [ 313.139428][ C0] handle_softirqs+0x1ea/0x910 [ 313.139472][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 313.139513][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.139551][ C0] __irq_exit_rcu+0xef/0x150 [ 313.139589][ C0] irq_exit_rcu+0x9/0x30 [ 313.139625][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 313.139660][ C0] [ 313.139669][ C0] [ 313.139680][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 313.139712][ C0] RIP: 0010:srso_alias_safe_ret+0x0/0x7 [ 313.139747][ C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc <48> 8d 64 24 08 c3 cc e8 f4 ff ff ff 0f 0b cc cc cc cc cc cc cc cc [ 313.139776][ C0] RSP: 0018:ffffc9000400f548 EFLAGS: 00000293 [ 313.139798][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff827cd50f [ 313.139817][ C0] RDX: ffff88802fdedb80 RSI: ffffffff827cd97f RDI: ffff88802fdedb80 [ 313.139837][ C0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 313.139854][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88801e608be0 [ 313.139872][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000006826 [ 313.139898][ C0] ? page_table_check_set+0x47f/0xa10 [ 313.139943][ C0] ? page_table_check_set+0x8ef/0xa10 [ 313.140005][ C0] srso_alias_return_thunk+0x5/0xfbef5 [ 313.140053][ C0] page_table_check_set+0x8ef/0xa10 [ 313.140105][ C0] __page_table_check_ptes_set+0x27a/0x4e0 [ 313.140153][ C0] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 313.140198][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 313.140239][ C0] copy_page_range+0x249e/0x6ba0 [ 313.140320][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 313.140368][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.140409][ C0] ? __pfx___might_resched+0x10/0x10 [ 313.140441][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.140479][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.140514][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.140553][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.140587][ C0] ? up_write+0x290/0x4f0 [ 313.140614][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.140653][ C0] dup_mmap+0xbea/0x1e20 [ 313.140700][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 313.140733][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.140780][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.140824][ C0] copy_process+0x7451/0x7890 [ 313.140865][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.140914][ C0] ? __pfx_copy_process+0x10/0x10 [ 313.140955][ C0] ? do_raw_spin_lock+0x128/0x260 [ 313.140990][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.141034][ C0] kernel_clone+0xfc/0x930 [ 313.141078][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 313.141119][ C0] ? __lock_acquire+0x4a5/0x2630 [ 313.141172][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.141207][ C0] ? find_held_lock+0x2b/0x80 [ 313.141241][ C0] ? __might_fault+0xc5/0x140 [ 313.141291][ C0] __do_sys_clone+0xd9/0x120 [ 313.141334][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 313.141395][ C0] ? do_user_addr_fault+0x8d6/0x12f0 [ 313.141438][ C0] do_syscall_64+0xc9/0xf80 [ 313.141477][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.141506][ C0] RIP: 0033:0x7fa752bc3952 [ 313.141528][ C0] Code: 89 e7 e8 f1 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 313.141556][ C0] RSP: 002b:00007ffc79ae8620 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 313.141583][ C0] RAX: ffffffffffffffda RBX: 00007ffc79ae8620 RCX: 00007fa752bc3952 [ 313.141602][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 313.141619][ C0] RBP: 00007ffc79ae87ac R08: 0000000000000000 R09: 0000000000000001 [ 313.141637][ C0] R10: 000055558590c7d0 R11: 0000000000000246 R12: 0000000000000001 [ 313.141655][ C0] R13: 00000000000927c0 R14: 000000000004c3f2 R15: 00007ffc79ae8800 [ 313.141692][ C0] [ 313.625273][ C0] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 313.656044][ C0] CPU: 0 UID: 0 PID: 5840 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 313.656086][ C0] Tainted: [L]=SOFTLOCKUP [ 313.656097][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 313.656114][ C0] Call Trace: [ 313.656123][ C0] [ 313.656134][ C0] dump_stack_lvl+0x100/0x190 [ 313.656173][ C0] f2fs_handle_critical_error+0x5d7/0x970 [ 313.656220][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.656255][ C0] ? f2fs_build_fault_attr+0x53/0x1f0 [ 313.656301][ C0] f2fs_write_end_io+0xc24/0xf00 [ 313.656349][ C0] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 313.656399][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.656441][ C0] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 313.656486][ C0] bio_endio+0x755/0x8b0 [ 313.656531][ C0] blk_update_request+0x741/0x1330 [ 313.656580][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.656623][ C0] blk_mq_end_request+0x5b/0x420 [ 313.656674][ C0] lo_complete_rq+0x1d4/0x2a0 [ 313.656719][ C0] blk_complete_reqs+0xb1/0xf0 [ 313.656760][ C0] handle_softirqs+0x1ea/0x910 [ 313.656805][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 313.656845][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.656884][ C0] __irq_exit_rcu+0xef/0x150 [ 313.656921][ C0] irq_exit_rcu+0x9/0x30 [ 313.656957][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 313.656992][ C0] [ 313.657001][ C0] [ 313.657011][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 313.657049][ C0] RIP: 0010:srso_alias_safe_ret+0x0/0x7 [ 313.657083][ C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc <48> 8d 64 24 08 c3 cc e8 f4 ff ff ff 0f 0b cc cc cc cc cc cc cc cc [ 313.657112][ C0] RSP: 0018:ffffc9000400f548 EFLAGS: 00000293 [ 313.657134][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff827cd50f [ 313.657152][ C0] RDX: ffff88802fdedb80 RSI: ffffffff827cd97f RDI: ffff88802fdedb80 [ 313.657172][ C0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 313.657190][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88801e608be0 [ 313.657208][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000006826 [ 313.657234][ C0] ? page_table_check_set+0x47f/0xa10 [ 313.657278][ C0] ? page_table_check_set+0x8ef/0xa10 [ 313.657327][ C0] srso_alias_return_thunk+0x5/0xfbef5 [ 313.657362][ C0] page_table_check_set+0x8ef/0xa10 [ 313.657412][ C0] __page_table_check_ptes_set+0x27a/0x4e0 [ 313.657460][ C0] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 313.657505][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 313.657546][ C0] copy_page_range+0x249e/0x6ba0 [ 313.657623][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 313.657671][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.657712][ C0] ? __pfx___might_resched+0x10/0x10 [ 313.657744][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.657782][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.657817][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.657856][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.657890][ C0] ? up_write+0x290/0x4f0 [ 313.657917][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.657957][ C0] dup_mmap+0xbea/0x1e20 [ 313.658003][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 313.658041][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.658088][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.658132][ C0] copy_process+0x7451/0x7890 [ 313.658173][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.658222][ C0] ? __pfx_copy_process+0x10/0x10 [ 313.658263][ C0] ? do_raw_spin_lock+0x128/0x260 [ 313.658298][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.658342][ C0] kernel_clone+0xfc/0x930 [ 313.658387][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 313.658427][ C0] ? __lock_acquire+0x4a5/0x2630 [ 313.658481][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.658515][ C0] ? find_held_lock+0x2b/0x80 [ 313.658550][ C0] ? __might_fault+0xc5/0x140 [ 313.658596][ C0] __do_sys_clone+0xd9/0x120 [ 313.658639][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 313.658700][ C0] ? do_user_addr_fault+0x8d6/0x12f0 [ 313.658743][ C0] do_syscall_64+0xc9/0xf80 [ 313.658782][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.658811][ C0] RIP: 0033:0x7fa752bc3952 [ 313.658833][ C0] Code: 89 e7 e8 f1 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 313.658860][ C0] RSP: 002b:00007ffc79ae8620 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 313.658886][ C0] RAX: ffffffffffffffda RBX: 00007ffc79ae8620 RCX: 00007fa752bc3952 [ 313.658906][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 313.658923][ C0] RBP: 00007ffc79ae87ac R08: 0000000000000000 R09: 0000000000000001 [ 313.658941][ C0] R10: 000055558590c7d0 R11: 0000000000000246 R12: 0000000000000001 [ 313.658959][ C0] R13: 00000000000927c0 R14: 000000000004c3f2 R15: 00007ffc79ae8800 [ 313.658996][ C0] [ 313.659006][ C0] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 314.150711][ C0] CPU: 0 UID: 0 PID: 5840 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 314.150756][ C0] Tainted: [L]=SOFTLOCKUP [ 314.150767][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 314.150785][ C0] Call Trace: [ 314.150798][ C0] [ 314.150810][ C0] dump_stack_lvl+0x100/0x190 [ 314.150852][ C0] f2fs_handle_critical_error+0x5d7/0x970 [ 314.150899][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.150934][ C0] ? f2fs_build_fault_attr+0x53/0x1f0 [ 314.150980][ C0] f2fs_write_end_io+0xc24/0xf00 [ 314.151040][ C0] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 314.151090][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.151132][ C0] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 314.151177][ C0] bio_endio+0x755/0x8b0 [ 314.151223][ C0] blk_update_request+0x741/0x1330 [ 314.151272][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.151315][ C0] blk_mq_end_request+0x5b/0x420 [ 314.151367][ C0] lo_complete_rq+0x1d4/0x2a0 [ 314.151412][ C0] blk_complete_reqs+0xb1/0xf0 [ 314.151454][ C0] handle_softirqs+0x1ea/0x910 [ 314.151499][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 314.151539][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.151578][ C0] __irq_exit_rcu+0xef/0x150 [ 314.151616][ C0] irq_exit_rcu+0x9/0x30 [ 314.151652][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 314.151688][ C0] [ 314.151697][ C0] [ 314.151708][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 314.151740][ C0] RIP: 0010:srso_alias_safe_ret+0x0/0x7 [ 314.151776][ C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc <48> 8d 64 24 08 c3 cc e8 f4 ff ff ff 0f 0b cc cc cc cc cc cc cc cc [ 314.151804][ C0] RSP: 0018:ffffc9000400f548 EFLAGS: 00000293 [ 314.151827][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff827cd50f [ 314.151846][ C0] RDX: ffff88802fdedb80 RSI: ffffffff827cd97f RDI: ffff88802fdedb80 [ 314.151865][ C0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 314.151882][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88801e608be0 [ 314.151900][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000006826 [ 314.151927][ C0] ? page_table_check_set+0x47f/0xa10 [ 314.151972][ C0] ? page_table_check_set+0x8ef/0xa10 [ 314.152027][ C0] srso_alias_return_thunk+0x5/0xfbef5 [ 314.152062][ C0] page_table_check_set+0x8ef/0xa10 [ 314.152112][ C0] __page_table_check_ptes_set+0x27a/0x4e0 [ 314.152160][ C0] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 314.152205][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 314.152247][ C0] copy_page_range+0x249e/0x6ba0 [ 314.152323][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 314.152372][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.152412][ C0] ? __pfx___might_resched+0x10/0x10 [ 314.152445][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.152483][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.152518][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.152557][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.152590][ C0] ? up_write+0x290/0x4f0 [ 314.152617][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.152657][ C0] dup_mmap+0xbea/0x1e20 [ 314.152704][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 314.152737][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.152785][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.152828][ C0] copy_process+0x7451/0x7890 [ 314.152870][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.152919][ C0] ? __pfx_copy_process+0x10/0x10 [ 314.152960][ C0] ? do_raw_spin_lock+0x128/0x260 [ 314.152996][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.153045][ C0] kernel_clone+0xfc/0x930 [ 314.153089][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 314.153129][ C0] ? __lock_acquire+0x4a5/0x2630 [ 314.153183][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.153217][ C0] ? find_held_lock+0x2b/0x80 [ 314.153252][ C0] ? __might_fault+0xc5/0x140 [ 314.153299][ C0] __do_sys_clone+0xd9/0x120 [ 314.153341][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 314.153403][ C0] ? do_user_addr_fault+0x8d6/0x12f0 [ 314.153446][ C0] do_syscall_64+0xc9/0xf80 [ 314.153486][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.153515][ C0] RIP: 0033:0x7fa752bc3952 [ 314.153538][ C0] Code: 89 e7 e8 f1 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 314.153566][ C0] RSP: 002b:00007ffc79ae8620 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 314.153591][ C0] RAX: ffffffffffffffda RBX: 00007ffc79ae8620 RCX: 00007fa752bc3952 [ 314.153611][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 314.153629][ C0] RBP: 00007ffc79ae87ac R08: 0000000000000000 R09: 0000000000000001 [ 314.153647][ C0] R10: 000055558590c7d0 R11: 0000000000000246 R12: 0000000000000001 [ 314.153664][ C0] R13: 00000000000927c0 R14: 000000000004c3f2 R15: 00007ffc79ae8800 [ 314.153701][ C0] [ 314.153712][ C0] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 314.645895][ C0] CPU: 0 UID: 0 PID: 5840 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 314.645938][ C0] Tainted: [L]=SOFTLOCKUP [ 314.645949][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 314.645966][ C0] Call Trace: [ 314.645977][ C0] [ 314.645988][ C0] dump_stack_lvl+0x100/0x190 [ 314.646033][ C0] f2fs_handle_critical_error+0x5d7/0x970 [ 314.646080][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.646115][ C0] ? f2fs_build_fault_attr+0x53/0x1f0 [ 314.646161][ C0] f2fs_write_end_io+0xc24/0xf00 [ 314.646209][ C0] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 314.646260][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.646301][ C0] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 314.646346][ C0] bio_endio+0x755/0x8b0 [ 314.646391][ C0] blk_update_request+0x741/0x1330 [ 314.646440][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.646483][ C0] blk_mq_end_request+0x5b/0x420 [ 314.646534][ C0] lo_complete_rq+0x1d4/0x2a0 [ 314.646578][ C0] blk_complete_reqs+0xb1/0xf0 [ 314.646620][ C0] handle_softirqs+0x1ea/0x910 [ 314.646665][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 314.646705][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.646744][ C0] __irq_exit_rcu+0xef/0x150 [ 314.646781][ C0] irq_exit_rcu+0x9/0x30 [ 314.646818][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 314.646853][ C0] [ 314.646862][ C0] [ 314.646872][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 314.646905][ C0] RIP: 0010:srso_alias_safe_ret+0x0/0x7 [ 314.646940][ C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc <48> 8d 64 24 08 c3 cc e8 f4 ff ff ff 0f 0b cc cc cc cc cc cc cc cc [ 314.646969][ C0] RSP: 0018:ffffc9000400f548 EFLAGS: 00000293 [ 314.646992][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff827cd50f [ 314.647018][ C0] RDX: ffff88802fdedb80 RSI: ffffffff827cd97f RDI: ffff88802fdedb80 [ 314.647037][ C0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 314.647054][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88801e608be0 [ 314.647072][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000006826 [ 314.647099][ C0] ? page_table_check_set+0x47f/0xa10 [ 314.647143][ C0] ? page_table_check_set+0x8ef/0xa10 [ 314.647192][ C0] srso_alias_return_thunk+0x5/0xfbef5 [ 314.647226][ C0] page_table_check_set+0x8ef/0xa10 [ 314.647277][ C0] __page_table_check_ptes_set+0x27a/0x4e0 [ 314.647325][ C0] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 314.647370][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 314.647411][ C0] copy_page_range+0x249e/0x6ba0 [ 314.647488][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 314.647536][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.647577][ C0] ? __pfx___might_resched+0x10/0x10 [ 314.647609][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.647647][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.647682][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.647721][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.647755][ C0] ? up_write+0x290/0x4f0 [ 314.647782][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.647821][ C0] dup_mmap+0xbea/0x1e20 [ 314.647868][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 314.647901][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.647949][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.647992][ C0] copy_process+0x7451/0x7890 [ 314.648037][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.648086][ C0] ? __pfx_copy_process+0x10/0x10 [ 314.648128][ C0] ? do_raw_spin_lock+0x128/0x260 [ 314.648163][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.648207][ C0] kernel_clone+0xfc/0x930 [ 314.648251][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 314.648291][ C0] ? __lock_acquire+0x4a5/0x2630 [ 314.648346][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.648380][ C0] ? find_held_lock+0x2b/0x80 [ 314.648414][ C0] ? __might_fault+0xc5/0x140 [ 314.648462][ C0] __do_sys_clone+0xd9/0x120 [ 314.648504][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 314.648565][ C0] ? do_user_addr_fault+0x8d6/0x12f0 [ 314.648608][ C0] do_syscall_64+0xc9/0xf80 [ 314.648647][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.648676][ C0] RIP: 0033:0x7fa752bc3952 [ 314.648698][ C0] Code: 89 e7 e8 f1 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 314.648726][ C0] RSP: 002b:00007ffc79ae8620 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 314.648752][ C0] RAX: ffffffffffffffda RBX: 00007ffc79ae8620 RCX: 00007fa752bc3952 [ 314.648771][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 314.648789][ C0] RBP: 00007ffc79ae87ac R08: 0000000000000000 R09: 0000000000000001 [ 314.648807][ C0] R10: 000055558590c7d0 R11: 0000000000000246 R12: 0000000000000001 [ 314.648825][ C0] R13: 00000000000927c0 R14: 000000000004c3f2 R15: 00007ffc79ae8800 [ 314.648861][ C0] [ 314.648872][ C0] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 315.257162][ T5842] F2FS-fs (loop4): do_checkpoint failed err:-5, stop checkpoint [ 315.441717][ T9] usb 2-1: USB disconnect, device number 6 [ 315.944745][ T8768] loop2: detected capacity change from 0 to 4096 [ 316.077957][ T8768] ntfs3: Unknown parameter '‡e‚ÑvuåZyƒ„WÜ™K¦^eælë<…ù3Øä²‚t܈Ӳ¹.Α—UFÝ.ñª#8×9üŸÕ讲Sü€Nwønü§%[Æ„Ý9i)Rw{þ*5à5º²UâR?fùÏ)쀙!¿ø' [ 316.180129][ T5926] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 316.406418][ T5926] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 316.429268][ T5926] usb 2-1: config 0 has no interface number 0 [ 316.485011][ T5926] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 316.613352][ T5926] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 316.633143][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 316.656661][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.692337][ T5926] usb 2-1: Product: syz [ 316.713488][ T5926] usb 2-1: Manufacturer: syz [ 316.718168][ T5926] usb 2-1: SerialNumber: syz [ 316.761822][ T5926] usb 2-1: config 0 descriptor?? [ 316.793078][ T5926] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 316.857717][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 316.904375][ T9] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 316.928044][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.968809][ T9] usb 4-1: Product: syz [ 316.986814][ T9] usb 4-1: Manufacturer: syz [ 317.018789][ T9] usb 4-1: SerialNumber: syz [ 317.285686][ T8777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.721'. [ 317.394189][ T9] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 317.438992][ T9] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 317.497109][ T9] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 317.600541][ T9] usb 4-1: media controller created [ 317.657577][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 317.932184][ T9] zl10353_read_register: readreg error (reg=127, ret==-32) [ 318.423356][ T8798] binder: BINDER_SET_CONTEXT_MGR already set [ 318.433374][ T8798] binder: 8797:8798 ioctl 4018620d 200000000100 returned -16 [ 318.493150][ T9] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 318.559876][ T8798] binder: BINDER_SET_CONTEXT_MGR already set [ 318.672304][ T8798] binder: 8797:8798 ioctl 4018620d 2000000002c0 returned -16 [ 318.690936][ T9] usb 4-1: USB disconnect, device number 6 [ 318.862859][ T8801] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 319.561279][ T8803] loop0: detected capacity change from 0 to 40427 [ 319.640180][ T8803] F2FS-fs (loop0): build fault injection rate: 14 [ 319.647014][ T8803] F2FS-fs (loop0): build fault injection type: 0x3bfe8c [ 319.680327][ T8803] F2FS-fs (loop0): invalid crc value [ 319.739539][ C0] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of bio_endio+0x755/0x8b0 [ 319.767089][ C0] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of bio_endio+0x755/0x8b0 [ 319.844098][ T8803] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 319.853118][ T8803] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_recover_fsync_data+0x453/0xa1d0 [ 319.871454][ T8803] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 319.911658][ T8803] F2FS-fs (loop0): inject no more block in inc_valid_node_count of f2fs_new_node_folio+0x243/0x1110 [ 320.055032][ C1] F2FS-fs (loop0): inject write IO error in f2fs_write_end_io of bio_endio+0x755/0x8b0 [ 320.064836][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 320.064877][ C1] Tainted: [L]=SOFTLOCKUP [ 320.064888][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 320.064905][ C1] Call Trace: [ 320.064914][ C1] [ 320.064925][ C1] dump_stack_lvl+0x100/0x190 [ 320.064962][ C1] f2fs_handle_critical_error+0x5d7/0x970 [ 320.065014][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.065049][ C1] ? f2fs_build_fault_attr+0x53/0x1f0 [ 320.065095][ C1] f2fs_write_end_io+0xc24/0xf00 [ 320.065143][ C1] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 320.065193][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.065234][ C1] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 320.065281][ C1] bio_endio+0x755/0x8b0 [ 320.065326][ C1] blk_update_request+0x741/0x1330 [ 320.065374][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.065417][ C1] blk_mq_end_request+0x5b/0x420 [ 320.065468][ C1] lo_complete_rq+0x1d4/0x2a0 [ 320.065512][ C1] blk_complete_reqs+0xb1/0xf0 [ 320.065554][ C1] handle_softirqs+0x1ea/0x910 [ 320.065598][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 320.065638][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.065677][ C1] __irq_exit_rcu+0xef/0x150 [ 320.065714][ C1] irq_exit_rcu+0x9/0x30 [ 320.065751][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 320.065792][ C1] [ 320.065804][ C1] [ 320.065819][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 320.065854][ C1] RIP: 0010:smpboot_thread_fn+0x250/0xaa0 [ 320.065900][ C1] Code: 8b 75 00 e8 02 3b a3 09 89 c6 44 89 f7 89 04 24 e8 05 b2 34 00 8b 04 24 41 39 c6 0f 85 30 06 00 00 e8 04 b8 34 00 4c 8d 75 04 <4c> 89 f0 48 c1 e8 03 42 0f b6 14 20 4c 89 f0 83 e0 07 83 c0 03 38 [ 320.065929][ C1] RSP: 0018:ffffc900001d7d90 EFLAGS: 00000293 [ 320.065951][ C1] RAX: 0000000000000000 RBX: ffff88801de9db80 RCX: ffffffff81d2222b [ 320.065970][ C1] RDX: ffff88801de9db80 RSI: ffffffff81d2223c RDI: ffff88801de9db80 [ 320.065990][ C1] RBP: ffff88813fe335a0 R08: 0000000000000004 R09: 0000000000000001 [ 320.066012][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000 [ 320.066030][ C1] R13: ffffffff8e483260 R14: ffff88813fe335a4 R15: ffffed1003bd3e67 [ 320.066059][ C1] ? smpboot_thread_fn+0x23b/0xaa0 [ 320.066102][ C1] ? smpboot_thread_fn+0x24c/0xaa0 [ 320.066157][ C1] ? kthread+0x17d/0x730 [ 320.066181][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 320.066229][ C1] kthread+0x3b3/0x730 [ 320.066257][ C1] ? __pfx_kthread+0x10/0x10 [ 320.066282][ C1] ? ret_from_fork+0x79/0xaf0 [ 320.066311][ C1] ? ret_from_fork+0x79/0xaf0 [ 320.066340][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.066378][ C1] ? rcu_is_watching+0x12/0xc0 [ 320.066413][ C1] ? __pfx_kthread+0x10/0x10 [ 320.066442][ C1] ret_from_fork+0x754/0xaf0 [ 320.066474][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 320.066506][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.066540][ C1] ? __switch_to+0x7b9/0x10c0 [ 320.066578][ C1] ? __pfx_kthread+0x10/0x10 [ 320.066607][ C1] ret_from_fork_asm+0x1a/0x30 [ 320.066667][ C1] [ 320.066677][ C1] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 320.375285][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 320.375359][ C1] Tainted: [L]=SOFTLOCKUP [ 320.375374][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 320.375399][ C1] Call Trace: [ 320.375434][ C1] [ 320.375456][ C1] dump_stack_lvl+0x100/0x190 [ 320.375550][ C1] f2fs_handle_critical_error+0x5d7/0x970 [ 320.375631][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.375675][ C1] ? f2fs_build_fault_attr+0x53/0x1f0 [ 320.375727][ C1] f2fs_write_end_io+0xc24/0xf00 [ 320.375812][ C1] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 320.375863][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.375906][ C1] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 320.375953][ C1] bio_endio+0x755/0x8b0 [ 320.376036][ C1] blk_update_request+0x741/0x1330 [ 320.376133][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.376180][ C1] blk_mq_end_request+0x5b/0x420 [ 320.376233][ C1] lo_complete_rq+0x1d4/0x2a0 [ 320.376293][ C1] blk_complete_reqs+0xb1/0xf0 [ 320.376339][ C1] handle_softirqs+0x1ea/0x910 [ 320.376392][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 320.376434][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.376473][ C1] __irq_exit_rcu+0xef/0x150 [ 320.376511][ C1] irq_exit_rcu+0x9/0x30 [ 320.376547][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 320.376583][ C1] [ 320.376592][ C1] [ 320.376603][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 320.376636][ C1] RIP: 0010:smpboot_thread_fn+0x250/0xaa0 [ 320.376690][ C1] Code: 8b 75 00 e8 02 3b a3 09 89 c6 44 89 f7 89 04 24 e8 05 b2 34 00 8b 04 24 41 39 c6 0f 85 30 06 00 00 e8 04 b8 34 00 4c 8d 75 04 <4c> 89 f0 48 c1 e8 03 42 0f b6 14 20 4c 89 f0 83 e0 07 83 c0 03 38 [ 320.376719][ C1] RSP: 0018:ffffc900001d7d90 EFLAGS: 00000293 [ 320.376743][ C1] RAX: 0000000000000000 RBX: ffff88801de9db80 RCX: ffffffff81d2222b [ 320.376762][ C1] RDX: ffff88801de9db80 RSI: ffffffff81d2223c RDI: ffff88801de9db80 [ 320.376782][ C1] RBP: ffff88813fe335a0 R08: 0000000000000004 R09: 0000000000000001 [ 320.376800][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000 [ 320.376818][ C1] R13: ffffffff8e483260 R14: ffff88813fe335a4 R15: ffffed1003bd3e67 [ 320.376847][ C1] ? smpboot_thread_fn+0x23b/0xaa0 [ 320.376891][ C1] ? smpboot_thread_fn+0x24c/0xaa0 [ 320.376946][ C1] ? kthread+0x17d/0x730 [ 320.376972][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 320.377032][ C1] kthread+0x3b3/0x730 [ 320.377060][ C1] ? __pfx_kthread+0x10/0x10 [ 320.377086][ C1] ? ret_from_fork+0x79/0xaf0 [ 320.377116][ C1] ? ret_from_fork+0x79/0xaf0 [ 320.377145][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.377180][ C1] ? rcu_is_watching+0x12/0xc0 [ 320.377216][ C1] ? __pfx_kthread+0x10/0x10 [ 320.377246][ C1] ret_from_fork+0x754/0xaf0 [ 320.377277][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 320.377310][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.377344][ C1] ? __switch_to+0x7b9/0x10c0 [ 320.377382][ C1] ? __pfx_kthread+0x10/0x10 [ 320.377412][ C1] ret_from_fork_asm+0x1a/0x30 [ 320.377475][ C1] [ 320.377486][ C1] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 320.686456][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 320.686499][ C1] Tainted: [L]=SOFTLOCKUP [ 320.686509][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 320.686527][ C1] Call Trace: [ 320.686537][ C1] [ 320.686548][ C1] dump_stack_lvl+0x100/0x190 [ 320.686587][ C1] f2fs_handle_critical_error+0x5d7/0x970 [ 320.686634][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.686669][ C1] ? f2fs_build_fault_attr+0x53/0x1f0 [ 320.686715][ C1] f2fs_write_end_io+0xc24/0xf00 [ 320.686763][ C1] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 320.686813][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.686854][ C1] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 320.686900][ C1] bio_endio+0x755/0x8b0 [ 320.686944][ C1] blk_update_request+0x741/0x1330 [ 320.686993][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.687041][ C1] blk_mq_end_request+0x5b/0x420 [ 320.687092][ C1] lo_complete_rq+0x1d4/0x2a0 [ 320.687137][ C1] blk_complete_reqs+0xb1/0xf0 [ 320.687179][ C1] handle_softirqs+0x1ea/0x910 [ 320.687224][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 320.687264][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.687303][ C1] __irq_exit_rcu+0xef/0x150 [ 320.687340][ C1] irq_exit_rcu+0x9/0x30 [ 320.687377][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 320.687412][ C1] [ 320.687421][ C1] [ 320.687431][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 320.687464][ C1] RIP: 0010:smpboot_thread_fn+0x250/0xaa0 [ 320.687511][ C1] Code: 8b 75 00 e8 02 3b a3 09 89 c6 44 89 f7 89 04 24 e8 05 b2 34 00 8b 04 24 41 39 c6 0f 85 30 06 00 00 e8 04 b8 34 00 4c 8d 75 04 <4c> 89 f0 48 c1 e8 03 42 0f b6 14 20 4c 89 f0 83 e0 07 83 c0 03 38 [ 320.687539][ C1] RSP: 0018:ffffc900001d7d90 EFLAGS: 00000293 [ 320.687562][ C1] RAX: 0000000000000000 RBX: ffff88801de9db80 RCX: ffffffff81d2222b [ 320.687581][ C1] RDX: ffff88801de9db80 RSI: ffffffff81d2223c RDI: ffff88801de9db80 [ 320.687601][ C1] RBP: ffff88813fe335a0 R08: 0000000000000004 R09: 0000000000000001 [ 320.687619][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000 [ 320.687637][ C1] R13: ffffffff8e483260 R14: ffff88813fe335a4 R15: ffffed1003bd3e67 [ 320.687665][ C1] ? smpboot_thread_fn+0x23b/0xaa0 [ 320.687709][ C1] ? smpboot_thread_fn+0x24c/0xaa0 [ 320.687764][ C1] ? kthread+0x17d/0x730 [ 320.687789][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 320.687833][ C1] kthread+0x3b3/0x730 [ 320.687861][ C1] ? __pfx_kthread+0x10/0x10 [ 320.687886][ C1] ? ret_from_fork+0x79/0xaf0 [ 320.687916][ C1] ? ret_from_fork+0x79/0xaf0 [ 320.687945][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.687980][ C1] ? rcu_is_watching+0x12/0xc0 [ 320.688019][ C1] ? __pfx_kthread+0x10/0x10 [ 320.688049][ C1] ret_from_fork+0x754/0xaf0 [ 320.688084][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 320.688124][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.688159][ C1] ? __switch_to+0x7b9/0x10c0 [ 320.688197][ C1] ? __pfx_kthread+0x10/0x10 [ 320.688226][ C1] ret_from_fork_asm+0x1a/0x30 [ 320.688289][ C1] [ 320.688300][ C1] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 320.997042][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 320.997089][ C1] Tainted: [L]=SOFTLOCKUP [ 320.997100][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 320.997118][ C1] Call Trace: [ 320.997133][ C1] [ 320.997145][ C1] dump_stack_lvl+0x100/0x190 [ 320.997190][ C1] f2fs_handle_critical_error+0x5d7/0x970 [ 320.997240][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.997276][ C1] ? f2fs_build_fault_attr+0x53/0x1f0 [ 320.997322][ C1] f2fs_write_end_io+0xc24/0xf00 [ 320.997371][ C1] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 320.997421][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.997462][ C1] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 320.997508][ C1] bio_endio+0x755/0x8b0 [ 320.997554][ C1] blk_update_request+0x741/0x1330 [ 320.997603][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.997647][ C1] blk_mq_end_request+0x5b/0x420 [ 320.997698][ C1] lo_complete_rq+0x1d4/0x2a0 [ 320.997744][ C1] blk_complete_reqs+0xb1/0xf0 [ 320.997786][ C1] handle_softirqs+0x1ea/0x910 [ 320.997831][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 320.997872][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.997911][ C1] __irq_exit_rcu+0xef/0x150 [ 320.997947][ C1] irq_exit_rcu+0x9/0x30 [ 320.997984][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 320.998029][ C1] [ 320.998038][ C1] [ 320.998049][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 320.998082][ C1] RIP: 0010:smpboot_thread_fn+0x250/0xaa0 [ 320.998134][ C1] Code: 8b 75 00 e8 02 3b a3 09 89 c6 44 89 f7 89 04 24 e8 05 b2 34 00 8b 04 24 41 39 c6 0f 85 30 06 00 00 e8 04 b8 34 00 4c 8d 75 04 <4c> 89 f0 48 c1 e8 03 42 0f b6 14 20 4c 89 f0 83 e0 07 83 c0 03 38 [ 320.998163][ C1] RSP: 0018:ffffc900001d7d90 EFLAGS: 00000293 [ 320.998186][ C1] RAX: 0000000000000000 RBX: ffff88801de9db80 RCX: ffffffff81d2222b [ 320.998206][ C1] RDX: ffff88801de9db80 RSI: ffffffff81d2223c RDI: ffff88801de9db80 [ 320.998226][ C1] RBP: ffff88813fe335a0 R08: 0000000000000004 R09: 0000000000000001 [ 320.998245][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000 [ 320.998264][ C1] R13: ffffffff8e483260 R14: ffff88813fe335a4 R15: ffffed1003bd3e67 [ 320.998292][ C1] ? smpboot_thread_fn+0x23b/0xaa0 [ 320.998336][ C1] ? smpboot_thread_fn+0x24c/0xaa0 [ 320.998392][ C1] ? kthread+0x17d/0x730 [ 320.998416][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 320.998459][ C1] kthread+0x3b3/0x730 [ 320.998489][ C1] ? __pfx_kthread+0x10/0x10 [ 320.998514][ C1] ? ret_from_fork+0x79/0xaf0 [ 320.998544][ C1] ? ret_from_fork+0x79/0xaf0 [ 320.998574][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.998607][ C1] ? rcu_is_watching+0x12/0xc0 [ 320.998645][ C1] ? __pfx_kthread+0x10/0x10 [ 320.998674][ C1] ret_from_fork+0x754/0xaf0 [ 320.998706][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 320.998739][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.998773][ C1] ? __switch_to+0x7b9/0x10c0 [ 320.998811][ C1] ? __pfx_kthread+0x10/0x10 [ 320.998840][ C1] ret_from_fork_asm+0x1a/0x30 [ 320.998901][ C1] [ 320.998912][ C1] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 321.307620][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 321.307715][ C1] Tainted: [L]=SOFTLOCKUP [ 321.307731][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 321.307760][ C1] Call Trace: [ 321.307801][ C1] [ 321.307831][ C1] dump_stack_lvl+0x100/0x190 [ 321.307929][ C1] f2fs_handle_critical_error+0x5d7/0x970 [ 321.308034][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 321.308082][ C1] ? f2fs_build_fault_attr+0x53/0x1f0 [ 321.308134][ C1] f2fs_write_end_io+0xc24/0xf00 [ 321.308209][ C1] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 321.308261][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 321.308304][ C1] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 321.308351][ C1] bio_endio+0x755/0x8b0 [ 321.308410][ C1] blk_update_request+0x741/0x1330 [ 321.308481][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 321.308525][ C1] blk_mq_end_request+0x5b/0x420 [ 321.308584][ C1] lo_complete_rq+0x1d4/0x2a0 [ 321.308654][ C1] blk_complete_reqs+0xb1/0xf0 [ 321.308700][ C1] handle_softirqs+0x1ea/0x910 [ 321.308755][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 321.308796][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 321.308835][ C1] __irq_exit_rcu+0xef/0x150 [ 321.308875][ C1] irq_exit_rcu+0x9/0x30 [ 321.308912][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 321.308947][ C1] [ 321.308956][ C1] [ 321.308967][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 321.309000][ C1] RIP: 0010:smpboot_thread_fn+0x250/0xaa0 [ 321.309058][ C1] Code: 8b 75 00 e8 02 3b a3 09 89 c6 44 89 f7 89 04 24 e8 05 b2 34 00 8b 04 24 41 39 c6 0f 85 30 06 00 00 e8 04 b8 34 00 4c 8d 75 04 <4c> 89 f0 48 c1 e8 03 42 0f b6 14 20 4c 89 f0 83 e0 07 83 c0 03 38 [ 321.309092][ C1] RSP: 0018:ffffc900001d7d90 EFLAGS: 00000293 [ 321.309125][ C1] RAX: 0000000000000000 RBX: ffff88801de9db80 RCX: ffffffff81d2222b [ 321.309146][ C1] RDX: ffff88801de9db80 RSI: ffffffff81d2223c RDI: ffff88801de9db80 [ 321.309166][ C1] RBP: ffff88813fe335a0 R08: 0000000000000004 R09: 0000000000000001 [ 321.309185][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000 [ 321.309204][ C1] R13: ffffffff8e483260 R14: ffff88813fe335a4 R15: ffffed1003bd3e67 [ 321.309232][ C1] ? smpboot_thread_fn+0x23b/0xaa0 [ 321.309276][ C1] ? smpboot_thread_fn+0x24c/0xaa0 [ 321.309332][ C1] ? kthread+0x17d/0x730 [ 321.309357][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 321.309401][ C1] kthread+0x3b3/0x730 [ 321.309430][ C1] ? __pfx_kthread+0x10/0x10 [ 321.309455][ C1] ? ret_from_fork+0x79/0xaf0 [ 321.309485][ C1] ? ret_from_fork+0x79/0xaf0 [ 321.309515][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 321.309549][ C1] ? rcu_is_watching+0x12/0xc0 [ 321.309586][ C1] ? __pfx_kthread+0x10/0x10 [ 321.309616][ C1] ret_from_fork+0x754/0xaf0 [ 321.309648][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 321.309681][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 321.309715][ C1] ? __switch_to+0x7b9/0x10c0 [ 321.309754][ C1] ? __pfx_kthread+0x10/0x10 [ 321.309783][ C1] ret_from_fork_asm+0x1a/0x30 [ 321.309865][ C1] [ 321.309875][ C1] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 321.635271][ T5827] F2FS-fs (loop0): do_checkpoint failed err:-5, stop checkpoint [ 323.169183][ T24] usb 2-1: USB disconnect, device number 7 [ 323.206349][ T24] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 323.901534][ T8843] loop3: detected capacity change from 0 to 40427 [ 323.958294][ T8843] F2FS-fs (loop3): build fault injection rate: 14 [ 323.966630][ T8843] F2FS-fs (loop3): build fault injection type: 0x3bfe8c [ 324.032757][ T8843] F2FS-fs (loop3): invalid crc value [ 324.049934][ C0] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of bio_endio+0x755/0x8b0 [ 324.071800][ C0] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of bio_endio+0x755/0x8b0 [ 324.165121][ T8843] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 324.174320][ T8843] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_recover_fsync_data+0x453/0xa1d0 [ 324.202615][ T8843] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 324.245783][ T8843] F2FS-fs (loop3): inject no more block in inc_valid_node_count of f2fs_new_node_folio+0x243/0x1110 [ 324.745896][ C0] F2FS-fs (loop3): inject write IO error in f2fs_write_end_io of bio_endio+0x755/0x8b0 [ 324.755765][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 324.755826][ C0] Tainted: [L]=SOFTLOCKUP [ 324.755841][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 324.755866][ C0] Call Trace: [ 324.755878][ C0] [ 324.755892][ C0] dump_stack_lvl+0x100/0x190 [ 324.755944][ C0] f2fs_handle_critical_error+0x5d7/0x970 [ 324.756011][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.756067][ C0] ? f2fs_build_fault_attr+0x53/0x1f0 [ 324.756131][ C0] f2fs_write_end_io+0xc24/0xf00 [ 324.756198][ C0] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 324.756269][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.756326][ C0] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 324.756391][ C0] bio_endio+0x755/0x8b0 [ 324.756453][ C0] blk_update_request+0x741/0x1330 [ 324.756521][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.756582][ C0] blk_mq_end_request+0x5b/0x420 [ 324.756654][ C0] lo_complete_rq+0x1d4/0x2a0 [ 324.756715][ C0] blk_complete_reqs+0xb1/0xf0 [ 324.756774][ C0] handle_softirqs+0x1ea/0x910 [ 324.756836][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 324.756893][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.756946][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 324.757000][ C0] run_ksoftirqd+0x38/0x60 [ 324.757054][ C0] smpboot_thread_fn+0x3d3/0xaa0 [ 324.757125][ C0] ? kthread+0x17d/0x730 [ 324.757160][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 324.757222][ C0] kthread+0x3b3/0x730 [ 324.757262][ C0] ? __pfx_kthread+0x10/0x10 [ 324.757297][ C0] ? ret_from_fork+0x79/0xaf0 [ 324.757337][ C0] ? ret_from_fork+0x79/0xaf0 [ 324.757379][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.757427][ C0] ? rcu_is_watching+0x12/0xc0 [ 324.757478][ C0] ? __pfx_kthread+0x10/0x10 [ 324.757518][ C0] ret_from_fork+0x754/0xaf0 [ 324.757562][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 324.757608][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.757656][ C0] ? __switch_to+0x7b9/0x10c0 [ 324.757710][ C0] ? __pfx_kthread+0x10/0x10 [ 324.757750][ C0] ret_from_fork_asm+0x1a/0x30 [ 324.757834][ C0] [ 324.757848][ C0] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 324.974176][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 324.974237][ C0] Tainted: [L]=SOFTLOCKUP [ 324.974256][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 324.974280][ C0] Call Trace: [ 324.974293][ C0] [ 324.974307][ C0] dump_stack_lvl+0x100/0x190 [ 324.974361][ C0] f2fs_handle_critical_error+0x5d7/0x970 [ 324.974429][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.974478][ C0] ? f2fs_build_fault_attr+0x53/0x1f0 [ 324.974542][ C0] f2fs_write_end_io+0xc24/0xf00 [ 324.974611][ C0] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 324.974680][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.974738][ C0] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 324.974800][ C0] bio_endio+0x755/0x8b0 [ 324.974864][ C0] blk_update_request+0x741/0x1330 [ 324.974934][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.974994][ C0] blk_mq_end_request+0x5b/0x420 [ 324.975066][ C0] lo_complete_rq+0x1d4/0x2a0 [ 324.975128][ C0] blk_complete_reqs+0xb1/0xf0 [ 324.975187][ C0] handle_softirqs+0x1ea/0x910 [ 324.975250][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 324.975310][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.975362][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 324.975416][ C0] run_ksoftirqd+0x38/0x60 [ 324.975466][ C0] smpboot_thread_fn+0x3d3/0xaa0 [ 324.975539][ C0] ? kthread+0x17d/0x730 [ 324.975573][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 324.975635][ C0] kthread+0x3b3/0x730 [ 324.975675][ C0] ? __pfx_kthread+0x10/0x10 [ 324.975709][ C0] ? ret_from_fork+0x79/0xaf0 [ 324.975750][ C0] ? ret_from_fork+0x79/0xaf0 [ 324.975790][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.975837][ C0] ? rcu_is_watching+0x12/0xc0 [ 324.975888][ C0] ? __pfx_kthread+0x10/0x10 [ 324.975927][ C0] ret_from_fork+0x754/0xaf0 [ 324.975972][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 324.976016][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.976064][ C0] ? __switch_to+0x7b9/0x10c0 [ 324.976118][ C0] ? __pfx_kthread+0x10/0x10 [ 324.976158][ C0] ret_from_fork_asm+0x1a/0x30 [ 324.976244][ C0] [ 324.976265][ C0] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 325.193028][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 325.193087][ C0] Tainted: [L]=SOFTLOCKUP [ 325.193102][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 325.193127][ C0] Call Trace: [ 325.193140][ C0] [ 325.193155][ C0] dump_stack_lvl+0x100/0x190 [ 325.193210][ C0] f2fs_handle_critical_error+0x5d7/0x970 [ 325.193285][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.193335][ C0] ? f2fs_build_fault_attr+0x53/0x1f0 [ 325.193399][ C0] f2fs_write_end_io+0xc24/0xf00 [ 325.193471][ C0] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 325.193541][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.193601][ C0] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 325.193666][ C0] bio_endio+0x755/0x8b0 [ 325.193731][ C0] blk_update_request+0x741/0x1330 [ 325.193803][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.193864][ C0] blk_mq_end_request+0x5b/0x420 [ 325.193937][ C0] lo_complete_rq+0x1d4/0x2a0 [ 325.194001][ C0] blk_complete_reqs+0xb1/0xf0 [ 325.194060][ C0] handle_softirqs+0x1ea/0x910 [ 325.194124][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 325.194180][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.194233][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 325.194292][ C0] run_ksoftirqd+0x38/0x60 [ 325.194344][ C0] smpboot_thread_fn+0x3d3/0xaa0 [ 325.194417][ C0] ? kthread+0x17d/0x730 [ 325.194453][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 325.194515][ C0] kthread+0x3b3/0x730 [ 325.194556][ C0] ? __pfx_kthread+0x10/0x10 [ 325.194592][ C0] ? ret_from_fork+0x79/0xaf0 [ 325.194633][ C0] ? ret_from_fork+0x79/0xaf0 [ 325.194675][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.194723][ C0] ? rcu_is_watching+0x12/0xc0 [ 325.194776][ C0] ? __pfx_kthread+0x10/0x10 [ 325.194816][ C0] ret_from_fork+0x754/0xaf0 [ 325.194860][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 325.194907][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.194955][ C0] ? __switch_to+0x7b9/0x10c0 [ 325.195010][ C0] ? __pfx_kthread+0x10/0x10 [ 325.195050][ C0] ret_from_fork_asm+0x1a/0x30 [ 325.195137][ C0] [ 325.195151][ C0] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 325.411068][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 325.411132][ C0] Tainted: [L]=SOFTLOCKUP [ 325.411146][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 325.411170][ C0] Call Trace: [ 325.411182][ C0] [ 325.411196][ C0] dump_stack_lvl+0x100/0x190 [ 325.411254][ C0] f2fs_handle_critical_error+0x5d7/0x970 [ 325.411333][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.411381][ C0] ? f2fs_build_fault_attr+0x53/0x1f0 [ 325.411444][ C0] f2fs_write_end_io+0xc24/0xf00 [ 325.411511][ C0] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 325.411577][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.411634][ C0] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 325.411697][ C0] bio_endio+0x755/0x8b0 [ 325.411759][ C0] blk_update_request+0x741/0x1330 [ 325.411830][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.411889][ C0] blk_mq_end_request+0x5b/0x420 [ 325.411960][ C0] lo_complete_rq+0x1d4/0x2a0 [ 325.412023][ C0] blk_complete_reqs+0xb1/0xf0 [ 325.412080][ C0] handle_softirqs+0x1ea/0x910 [ 325.412143][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 325.412198][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.412250][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 325.412309][ C0] run_ksoftirqd+0x38/0x60 [ 325.412359][ C0] smpboot_thread_fn+0x3d3/0xaa0 [ 325.412432][ C0] ? kthread+0x17d/0x730 [ 325.412466][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 325.412523][ C0] kthread+0x3b3/0x730 [ 325.412559][ C0] ? __pfx_kthread+0x10/0x10 [ 325.412592][ C0] ? ret_from_fork+0x79/0xaf0 [ 325.412630][ C0] ? ret_from_fork+0x79/0xaf0 [ 325.412668][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.412715][ C0] ? rcu_is_watching+0x12/0xc0 [ 325.412765][ C0] ? __pfx_kthread+0x10/0x10 [ 325.412805][ C0] ret_from_fork+0x754/0xaf0 [ 325.412845][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 325.412887][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.412933][ C0] ? __switch_to+0x7b9/0x10c0 [ 325.412987][ C0] ? __pfx_kthread+0x10/0x10 [ 325.413026][ C0] ret_from_fork_asm+0x1a/0x30 [ 325.413113][ C0] [ 325.413127][ C0] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 325.628657][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 325.628718][ C0] Tainted: [L]=SOFTLOCKUP [ 325.628732][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 325.628757][ C0] Call Trace: [ 325.628770][ C0] [ 325.628785][ C0] dump_stack_lvl+0x100/0x190 [ 325.628838][ C0] f2fs_handle_critical_error+0x5d7/0x970 [ 325.628905][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.628954][ C0] ? f2fs_build_fault_attr+0x53/0x1f0 [ 325.629017][ C0] f2fs_write_end_io+0xc24/0xf00 [ 325.629084][ C0] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 325.629154][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.629212][ C0] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 325.629280][ C0] bio_endio+0x755/0x8b0 [ 325.629343][ C0] blk_update_request+0x741/0x1330 [ 325.629411][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.629471][ C0] blk_mq_end_request+0x5b/0x420 [ 325.629542][ C0] lo_complete_rq+0x1d4/0x2a0 [ 325.629604][ C0] blk_complete_reqs+0xb1/0xf0 [ 325.629661][ C0] handle_softirqs+0x1ea/0x910 [ 325.629724][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 325.629780][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.629848][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 325.629900][ C0] run_ksoftirqd+0x38/0x60 [ 325.629951][ C0] smpboot_thread_fn+0x3d3/0xaa0 [ 325.630027][ C0] ? kthread+0x17d/0x730 [ 325.630059][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 325.630119][ C0] kthread+0x3b3/0x730 [ 325.630157][ C0] ? __pfx_kthread+0x10/0x10 [ 325.630191][ C0] ? ret_from_fork+0x79/0xaf0 [ 325.630232][ C0] ? ret_from_fork+0x79/0xaf0 [ 325.630277][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.630325][ C0] ? rcu_is_watching+0x12/0xc0 [ 325.630374][ C0] ? __pfx_kthread+0x10/0x10 [ 325.630414][ C0] ret_from_fork+0x754/0xaf0 [ 325.630457][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 325.630502][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.630549][ C0] ? __switch_to+0x7b9/0x10c0 [ 325.630601][ C0] ? __pfx_kthread+0x10/0x10 [ 325.630641][ C0] ret_from_fork_asm+0x1a/0x30 [ 325.630723][ C0] [ 325.839316][ C0] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 325.890184][ T5826] F2FS-fs (loop3): do_checkpoint failed err:-5, stop checkpoint [ 326.108551][ T8864] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 326.500562][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 326.710700][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.717060][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.733686][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 326.762544][ T9] usb 2-1: config 0 has no interfaces? [ 326.804355][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 326.830391][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.903633][ T9] usb 2-1: Product: syz [ 326.910216][ T9] usb 2-1: Manufacturer: syz [ 326.980089][ T9] usb 2-1: SerialNumber: syz [ 327.015044][ T9] usb 2-1: config 0 descriptor?? [ 327.299225][ T5846] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 327.346811][ T9] usb 2-1: USB disconnect, device number 8 [ 327.505228][ T5846] usb 7-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 327.514621][ T5846] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.562016][ T5846] usb 7-1: Product: syz [ 327.578541][ T5846] usb 7-1: Manufacturer: syz [ 327.592835][ T5846] usb 7-1: SerialNumber: syz [ 327.639426][ T5846] hub 7-1:24.0: bad descriptor, ignoring hub [ 327.654618][ T5846] hub 7-1:24.0: probe with driver hub failed with error -5 [ 327.844020][ T5846] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 328.048433][ T5846] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 328.060600][ T5846] dib0700: firmware download failed at 7 with -22 [ 328.117264][ T5846] usb 7-1: USB disconnect, device number 4 [ 328.816753][ T8901] netlink: 8 bytes leftover after parsing attributes in process `syz.6.760'. [ 329.631463][ T8920] F2FS-fs: Conflicting test_dummy_encryption options [ 330.004152][ T8927] usb usb8: usbfs: process 8927 (syz.6.771) did not claim interface 0 before use [ 330.095716][ T8928] binder: BINDER_SET_CONTEXT_MGR already set [ 330.121633][ T8928] binder: 8925:8928 ioctl 4018620d 200000000100 returned -16 [ 330.162294][ T8928] binder: BINDER_SET_CONTEXT_MGR already set [ 330.187971][ T8928] binder: 8925:8928 ioctl 4018620d 2000000002c0 returned -16 [ 331.610137][ T8948] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 332.709532][ T8962] loop3: detected capacity change from 0 to 40427 [ 332.756492][ T8962] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 332.764342][ T8962] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 332.910577][ T8962] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 332.934019][ T8962] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 332.942009][ T8962] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 335.105180][ T9005] kAFS: unable to lookup cell 'ÿ' [ 335.208159][ T9008] netlink: 72 bytes leftover after parsing attributes in process `syz.4.798'. [ 335.492755][ T5846] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 335.693953][ T5846] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 335.715813][ T5846] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 335.771279][ T5846] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.828454][ T5846] usb 2-1: config 0 descriptor?? [ 338.479060][ T9023] loop3: detected capacity change from 0 to 40427 [ 338.560068][ T9023] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 338.600109][ T9023] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 338.932835][ T9046] netlink: 'syz.4.806': attribute type 2 has an invalid length. [ 338.980208][ T24] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 339.151026][ T9046] !: entered promiscuous mode [ 339.257656][ T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 339.276714][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.300748][ T24] usb 3-1: Product: syz [ 339.308269][ T24] usb 3-1: Manufacturer: syz [ 339.321430][ T5846] usb 2-1: USB disconnect, device number 9 [ 339.322032][ T24] usb 3-1: SerialNumber: syz [ 339.414880][ T24] usb 3-1: config 0 descriptor?? [ 339.419281][ T9023] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 339.656875][ T24] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 340.994881][ T9073] binder: BINDER_SET_CONTEXT_MGR already set [ 341.004569][ T9073] binder: 9071:9073 ioctl 4018620d 200000000100 returned -16 [ 341.055624][ T9073] binder: BINDER_SET_CONTEXT_MGR already set [ 341.081756][ T9073] binder: 9071:9073 ioctl 4018620d 2000000002c0 returned -16 [ 341.108299][ T24] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 341.126174][ T24] usb 3-1: USB disconnect, device number 5 [ 342.228132][ T9103] loop3: detected capacity change from 0 to 8 [ 342.295085][ T9103] squashfs: Unknown parameter '' [ 342.561266][ T9119] netlink: 72 bytes leftover after parsing attributes in process `syz.2.826'. [ 343.690183][ T9143] loop0: detected capacity change from 0 to 40427 [ 343.778061][ T9143] F2FS-fs (loop0): build fault injection rate: 14 [ 343.784681][ T9143] F2FS-fs (loop0): build fault injection type: 0x3bfe8c [ 343.825893][ T9143] F2FS-fs (loop0): invalid crc value [ 343.924279][ C0] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of bio_endio+0x755/0x8b0 [ 343.935496][ T9148] binder: BINDER_SET_CONTEXT_MGR already set [ 343.946172][ T9148] binder: 9146:9148 ioctl 4018620d 200000000100 returned -16 [ 343.954074][ C0] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of bio_endio+0x755/0x8b0 [ 344.014896][ T9143] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 344.023945][ T9143] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_recover_fsync_data+0x453/0xa1d0 [ 344.047531][ T9143] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 344.152455][ T9148] binder: BINDER_SET_CONTEXT_MGR already set [ 344.158780][ T9148] binder: 9146:9148 ioctl 4018620d 2000000002c0 returned -16 [ 344.169473][ T9143] F2FS-fs (loop0): inject no more block in inc_valid_node_count of f2fs_new_node_folio+0x243/0x1110 [ 344.182354][ T9143] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_get_node_info+0xd68/0x1240 [ 344.218703][ T31] audit: type=1800 audit(1769630103.244:12): pid=9143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.829" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 344.819248][ T5827] F2FS-fs (loop0): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0x1eec/0x2fd0 [ 344.891557][ T5827] F2FS-fs (loop0): inconsistent node block, node_type:1, nid:3, node_footer[nid:3,ino:3,ofs:0,cpver:1219692001,blkaddr:4098] [ 345.215335][ C0] F2FS-fs (loop0): inject write IO error in f2fs_write_end_io of bio_endio+0x755/0x8b0 [ 345.225112][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 345.225153][ C0] Tainted: [L]=SOFTLOCKUP [ 345.225164][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 345.225181][ C0] Call Trace: [ 345.225190][ C0] [ 345.225201][ C0] dump_stack_lvl+0x100/0x190 [ 345.225238][ C0] f2fs_handle_critical_error+0x5d7/0x970 [ 345.225285][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.225320][ C0] ? f2fs_build_fault_attr+0x53/0x1f0 [ 345.225366][ C0] f2fs_write_end_io+0xc24/0xf00 [ 345.225414][ C0] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 345.225465][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.225506][ C0] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 345.225551][ C0] bio_endio+0x755/0x8b0 [ 345.225595][ C0] blk_update_request+0x741/0x1330 [ 345.225653][ C0] blk_mq_end_request+0x5b/0x420 [ 345.225698][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.225737][ C0] blk_flush_complete_seq+0x5e9/0x1050 [ 345.225788][ C0] ? __pfx_blk_flush_complete_seq+0x10/0x10 [ 345.225833][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.225867][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.225901][ C0] ? ktime_get+0x1a7/0x300 [ 345.225947][ C0] flush_end_io+0x832/0x10e0 [ 345.225999][ C0] blk_mq_end_request+0x216/0x420 [ 345.226061][ C0] lo_complete_rq+0x1d4/0x2a0 [ 345.226106][ C0] blk_complete_reqs+0xb1/0xf0 [ 345.226147][ C0] handle_softirqs+0x1ea/0x910 [ 345.226192][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 345.226232][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.226269][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 345.226306][ C0] run_ksoftirqd+0x38/0x60 [ 345.226342][ C0] smpboot_thread_fn+0x3d3/0xaa0 [ 345.226392][ C0] ? kthread+0x17d/0x730 [ 345.226417][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 345.226461][ C0] kthread+0x3b3/0x730 [ 345.226489][ C0] ? __pfx_kthread+0x10/0x10 [ 345.226513][ C0] ? ret_from_fork+0x79/0xaf0 [ 345.226543][ C0] ? ret_from_fork+0x79/0xaf0 [ 345.226572][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.226606][ C0] ? rcu_is_watching+0x12/0xc0 [ 345.226642][ C0] ? __pfx_kthread+0x10/0x10 [ 345.226671][ C0] ret_from_fork+0x754/0xaf0 [ 345.226702][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 345.226734][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.226768][ C0] ? __switch_to+0x7b9/0x10c0 [ 345.226805][ C0] ? __pfx_kthread+0x10/0x10 [ 345.226834][ C0] ret_from_fork_asm+0x1a/0x30 [ 345.226894][ C0] [ 345.226904][ C0] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 345.512890][ T5827] F2FS-fs (loop0): do_checkpoint failed err:-5, stop checkpoint [ 345.720147][ T791] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 345.917169][ T791] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 345.937839][ T791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.957040][ T791] usb 3-1: Product: syz [ 345.971965][ T791] usb 3-1: Manufacturer: syz [ 345.976594][ T791] usb 3-1: SerialNumber: syz [ 346.017019][ T791] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 346.081462][ T5907] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 346.261335][ T9165] netlink: 'syz.6.828': attribute type 33 has an invalid length. [ 346.468980][ T9158] random: crng reseeded on system resumption [ 346.531256][ T5926] usb 3-1: USB disconnect, device number 6 [ 346.654064][ T9165] netlink: 51 bytes leftover after parsing attributes in process `syz.6.828'. [ 347.173161][ T5907] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 347.183334][ T5907] ath9k_htc: Failed to initialize the device [ 347.200334][ T5926] usb 3-1: ath9k_htc: USB layer deinitialized [ 347.425740][ T9187] netlink: 56 bytes leftover after parsing attributes in process `syz.1.842'. [ 347.588102][ T9195] loop2: detected capacity change from 0 to 8 [ 347.752311][ T9193] sctp: [Deprecated]: syz.4.844 (pid 9193) Use of struct sctp_assoc_value in delayed_ack socket option. [ 347.752311][ T9193] Use struct sctp_sack_info instead [ 347.773158][ T9195] squashfs: Unknown parameter '' [ 350.068351][ T9198] CIFS: Unable to determine destination address [ 350.195595][ T9217] loop2: detected capacity change from 0 to 7 [ 350.517037][ T9217] Dev loop2: unable to read RDB block 7 [ 350.549723][ T9217] loop2: unable to read partition table [ 350.598475][ T9217] loop2: partition table beyond EOD, truncated [ 350.620042][ T9217] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 350.854204][ T9226] netlink: 'syz.4.855': attribute type 10 has an invalid length. [ 350.893767][ T9226] macvlan0: entered allmulticast mode [ 350.948309][ T9226] veth1_vlan: entered allmulticast mode [ 350.968538][ T9226] team0: Port device macvlan0 added [ 351.086585][ T31] audit: type=1326 audit(1769630110.134:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9230 comm="syz.3.856" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd8fd79aeb9 code=0x0 [ 351.445013][ T9237] netlink: 12 bytes leftover after parsing attributes in process `syz.4.857'. [ 351.609737][ T9237] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 351.651461][ T9237] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 351.727313][ T9242] netlink: 56 bytes leftover after parsing attributes in process `syz.0.858'. [ 351.770315][ T9240] macvlan2: entered promiscuous mode [ 351.775887][ T9240] macvlan2: entered allmulticast mode [ 351.807848][ T9240] vlan1: entered promiscuous mode [ 351.838120][ T9240] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 352.257738][ T9247] loop0: detected capacity change from 0 to 8 [ 352.303884][ T9247] squashfs: Unknown parameter '' [ 352.810395][ T9251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.861'. [ 353.008777][ T9253] syzkaller0: entered promiscuous mode [ 353.035626][ T9253] syzkaller0: entered allmulticast mode [ 354.445393][ T9246] loop3: detected capacity change from 0 to 40427 [ 354.510181][ T9246] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 354.517940][ T9246] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 354.558990][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 354.631884][ T9269] overlayfs: missing 'workdir' [ 354.760236][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 354.798125][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.839490][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.880092][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 354.926236][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 355.010127][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.056844][ T9246] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 355.087639][ T9] usb 2-1: config 0 descriptor?? [ 355.831137][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0003/input/input12 [ 356.003043][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0003/input/input13 [ 356.221179][ T9] kye 0003:0458:5011.0003: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 356.489701][ T9] usb 2-1: USB disconnect, device number 10 [ 356.789762][ T9283] fido_id[9283]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 357.469371][ T9302] faux_driver vgem: [drm] Unknown color mode 3; guessing buffer size. [ 357.494891][ T9302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.663537][ T9318] overlayfs: missing 'workdir' [ 359.216700][ T9324] CIFS: Unable to determine destination address [ 359.382769][ T9325] loop2: detected capacity change from 0 to 7 [ 359.390582][ T9325] Dev loop2: unable to read RDB block 7 [ 359.396379][ T9325] loop2: unable to read partition table [ 359.409276][ T9325] loop2: partition table beyond EOD, truncated [ 359.842599][ T9325] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 360.441543][ T9330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.886'. [ 361.100659][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.887'. [ 361.878807][ T9322] loop2: detected capacity change from 0 to 40427 [ 361.924198][ T9322] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 361.937989][ T9330] vlan1 (unregistering): left promiscuous mode [ 361.988787][ T9322] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 362.019183][ T9322] F2FS-fs (loop2): Failed to start F2FS issue_checkpoint_thread (-4) [ 362.043240][ T9351] netlink: 64 bytes leftover after parsing attributes in process `syz.0.889'. [ 363.108213][ T5907] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 363.163692][ T9330] bond1: (slave macvlan2): Releasing backup interface [ 363.497467][ T5907] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.558024][ T5907] usb 2-1: config 0 has no interfaces? [ 363.567559][ T5907] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 363.584142][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.605365][ T5907] usb 2-1: config 0 descriptor?? [ 363.927692][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057614c00: rx timeout, send abort [ 364.130350][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 364.381509][ T9330] veth1_vlan (unregistering): left allmulticast mode [ 364.422194][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 364.428075][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057616400: rx timeout, send abort [ 364.439781][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057614c00: abort rx timeout. Force session deactivation [ 364.470487][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.525721][ T9] usb 4-1: Product: syz [ 364.530223][ T9] usb 4-1: Manufacturer: syz [ 364.535035][ T9] usb 4-1: SerialNumber: syz [ 364.546024][ T9] usb 4-1: config 0 descriptor?? [ 364.567185][ T9] usb 4-1: interface 1 not found [ 364.833754][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888057616400: connection exists (fe ff). last cmd: 20 [ 364.881990][ T9] usb 4-1: USB disconnect, device number 7 [ 365.083698][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807cb1f400: rx timeout, send abort [ 365.384387][ T9330] team0: Port device macvlan0 removed [ 365.592052][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807cb1f400: abort rx timeout. Force session deactivation [ 365.981193][ T9] usb 2-1: USB disconnect, device number 11 [ 370.358804][ T9403] loop1: detected capacity change from 0 to 40427 [ 370.424533][ T9403] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 370.450149][ T9403] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 370.817903][ T9403] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 370.871812][ T9403] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 370.949548][ T9403] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 371.588667][ T9433] netlink: 'syz.2.909': attribute type 8 has an invalid length. [ 371.867555][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802a12b000: rx timeout, send abort [ 372.179668][ T9441] F2FS-fs: Conflicting test_dummy_encryption options [ 372.368084][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802a12a000: rx timeout, send abort [ 372.376436][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802a12b000: abort rx timeout. Force session deactivation [ 372.876395][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802a12a000: abort rx timeout. Force session deactivation [ 374.870558][ T5831] Bluetooth: hci3: command 0x0406 tx timeout [ 376.932661][ T9484] CIFS: Unable to determine destination address [ 376.982460][ T9486] netlink: 'syz.1.926': attribute type 8 has an invalid length. [ 377.035559][ T9487] loop2: detected capacity change from 0 to 7 [ 377.053433][ T9487] Dev loop2: unable to read RDB block 7 [ 377.060374][ T9487] loop2: unable to read partition table [ 377.066235][ T9487] loop2: partition table beyond EOD, truncated [ 377.072534][ T9487] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 377.334194][ T9467] loop3: detected capacity change from 0 to 40427 [ 377.385384][ T9467] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 377.413367][ T9467] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 378.025831][ T9467] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 378.085981][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880582aa000: rx timeout, send abort [ 378.110357][ T9467] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 378.117420][ T9467] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 378.586135][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880582a8c00: rx timeout, send abort [ 378.595176][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880582aa000: abort rx timeout. Force session deactivation [ 378.680523][ T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 378.884628][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 378.978331][ T24] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.025399][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 379.047164][ T24] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 379.094451][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880582a8c00: abort rx timeout. Force session deactivation [ 379.119135][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.189037][ T24] usb 2-1: config 0 descriptor?? [ 379.720706][ T24] nzxt-smart2 0003:1E71:2009.0004: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 380.240102][ T791] usb 2-1: USB disconnect, device number 12 [ 380.289763][ T9510] fido_id[9510]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 382.430388][ T24] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 382.449169][ T791] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 382.659711][ T24] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 382.698039][ T791] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 382.719108][ T24] usb 5-1: config 0 has no interface number 0 [ 382.832412][ T24] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 37279, setting to 8 [ 382.866358][ T24] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 382.889035][ T791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.909653][ T791] usb 2-1: Product: syz [ 382.936518][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.025730][ T24] usb 5-1: config 0 descriptor?? [ 383.035548][ T791] usb 2-1: Manufacturer: syz [ 383.065640][ T791] usb 2-1: SerialNumber: syz [ 383.072196][ T9546] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 383.146536][ T24] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 383.154334][ T9550] batman_adv: batadv0: Adding interface: macvtap1 [ 383.166274][ T9550] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.211376][ T791] usb 2-1: config 0 descriptor?? [ 383.246246][ T9550] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 383.474517][ T791] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 384.898898][ T791] usb 2-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 32) [ 384.910397][ T791] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 384.969119][ T9] usb 5-1: USB disconnect, device number 12 [ 385.013919][ T791] usb 2-1: media controller created [ 385.072510][ T791] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 385.207404][ T791] dvb_usb_rtl28xxu 2-1:0.0: unknown tuner MT2266 [ 385.429203][ T791] usb 2-1: USB disconnect, device number 13 [ 385.730353][ T9575] netlink: 'syz.3.947': attribute type 10 has an invalid length. [ 385.880479][ T9567] syz_tun: entered promiscuous mode [ 385.886146][ T9567] macsec1: entered allmulticast mode [ 385.892620][ T9567] syz_tun: entered allmulticast mode [ 385.992529][ T9567] syz_tun: left allmulticast mode [ 385.997777][ T9567] syz_tun: left promiscuous mode [ 386.683945][ T9575] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 387.374436][ T9594] CIFS: Unable to determine destination address [ 387.503800][ T9596] loop2: detected capacity change from 0 to 7 [ 387.681956][ T9596] Dev loop2: unable to read RDB block 7 [ 387.687601][ T9596] loop2: unable to read partition table [ 387.693658][ T9596] loop2: partition table beyond EOD, truncated [ 387.699855][ T9596] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 388.149009][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.155606][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.320418][ T5927] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 388.490249][ T791] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 388.660153][ T5927] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.693948][ T5927] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 15 [ 388.807199][ T5927] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 388.850312][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.952760][ T5927] usb 5-1: Product: syz [ 388.974607][ T791] usb 7-1: Using ep0 maxpacket: 16 [ 388.978461][ T5927] usb 5-1: Manufacturer: syz [ 388.991242][ T5927] usb 5-1: SerialNumber: syz [ 389.025747][ T5927] usb 5-1: config 0 descriptor?? [ 389.026339][ T791] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 389.066928][ T791] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.162815][ T791] usb 7-1: Product: syz [ 389.250678][ T791] usb 7-1: Manufacturer: syz [ 389.321176][ T791] usb 7-1: SerialNumber: syz [ 389.361423][ T791] usb 7-1: config 0 descriptor?? [ 389.497389][ T5927] usb 5-1: USB disconnect, device number 13 [ 389.778581][ T791] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 389.841222][ T791] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 389.884124][ T791] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 389.917981][ T791] usb 7-1: media controller created [ 389.980977][ T9600] netlink: 28 bytes leftover after parsing attributes in process `syz.6.950'. [ 390.063342][ T791] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 390.266148][ T791] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 390.294925][ T791] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 390.964087][ T5927] usb 7-1: USB disconnect, device number 5 [ 391.231536][ T5927] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 391.259797][ T9642] netlink: 256 bytes leftover after parsing attributes in process `syz.4.959'. [ 391.313058][ T9642] unsupported nlmsg_type 40 [ 391.459152][ T9627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 394.618653][ T9681] CIFS: Unable to determine destination address [ 394.688099][ T9682] loop2: detected capacity change from 0 to 7 [ 394.695868][ T9682] Dev loop2: unable to read RDB block 7 [ 394.701487][ T9682] loop2: unable to read partition table [ 394.707306][ T9682] loop2: partition table beyond EOD, truncated [ 394.713503][ T9682] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 394.914047][ T9684] netlink: 72 bytes leftover after parsing attributes in process `syz.2.968'. [ 394.962417][ T9684] loop5: detected capacity change from 0 to 7 [ 394.990856][ T9684] loop5: [POWERTEC] p1 p2 p3 p4 [ 395.002930][ T9684] loop5: p1 start 16779392 is beyond EOD, truncated [ 395.009551][ T9684] loop5: p2 start 768 is beyond EOD, truncated [ 395.037343][ T9686] loop6: detected capacity change from 0 to 255852543 [ 395.045092][ T9684] loop5: p3 size 1702232064 extends beyond EOD, truncated [ 395.055782][ T5844] Buffer I/O error on dev loop6, logical block 0, async page read [ 395.065366][ T5844] Buffer I/O error on dev loop6, logical block 0, async page read [ 395.087196][ T9684] loop5: p4 start 3675586560 is beyond EOD, truncated [ 395.152767][ T5844] Buffer I/O error on dev loop6, logical block 0, async page read [ 395.188947][ T5844] Buffer I/O error on dev loop6, logical block 0, async page read [ 395.225851][ T5844] Buffer I/O error on dev loop6, logical block 0, async page read [ 395.274410][ T5844] Buffer I/O error on dev loop6, logical block 0, async page read [ 395.334233][ T5844] Buffer I/O error on dev loop6, logical block 0, async page read [ 395.344472][ T5847] udevd[5847]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 395.382399][ T5844] Buffer I/O error on dev loop6, logical block 0, async page read [ 395.446991][ T5844] ldm_validate_partition_table(): Disk read failed. [ 395.510626][ T5844] Buffer I/O error on dev loop6, logical block 0, async page read [ 395.546370][ T5844] Buffer I/O error on dev loop6, logical block 0, async page read [ 395.578107][ T5844] Dev loop6: unable to read RDB block 0 [ 395.602997][ T5844] loop6: unable to read partition table [ 395.630814][ T9686] ldm_validate_partition_table(): Disk read failed. [ 395.671682][ T9686] Dev loop6: unable to read RDB block 0 [ 395.697893][ T9686] loop6: unable to read partition table [ 395.749244][ T9686] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 395.770929][ T9687] ldm_validate_partition_table(): Disk read failed. [ 395.826805][ T9687] Dev loop6: unable to read RDB block 0 [ 395.830688][ T9695] netlink: 'syz.2.973': attribute type 10 has an invalid length. [ 395.840528][ T9687] loop6: unable to read partition table [ 395.840794][ T9687] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 398.070140][ T5846] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 398.237283][ T5846] usb 3-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 398.270091][ T5846] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 398.290399][ T5846] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 398.619267][ T5846] usb 3-1: config 0 interface 0 has no altsetting 0 [ 398.698325][ T5846] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 398.716396][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 398.750202][ T5846] usb 3-1: Product: syz [ 398.760328][ T5846] usb 3-1: Manufacturer: syz [ 398.786160][ T5846] usb 3-1: SerialNumber: syz [ 398.820835][ T5846] usb 3-1: config 0 descriptor?? [ 398.860961][ T9731] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 398.897708][ T5846] usb 3-1: selecting invalid altsetting 0 [ 399.085338][ T9740] netlink: 28 bytes leftover after parsing attributes in process `syz.1.987'. [ 399.505565][ T9747] netlink: 'syz.6.988': attribute type 13 has an invalid length. [ 400.250074][ T9747] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.258377][ T9747] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.825088][ T9747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.878363][ T9747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.978454][ T791] usb 3-1: USB disconnect, device number 7 [ 401.609717][ T9138] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.620763][ T9138] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.654228][ T9138] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.684777][ T9138] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.084244][ T9780] CIFS: Unable to determine destination address [ 402.327298][ T9782] loop2: detected capacity change from 0 to 7 [ 402.364027][ T9782] Dev loop2: unable to read RDB block 7 [ 402.407180][ T9782] loop2: unable to read partition table [ 402.559216][ T9782] loop2: partition table beyond EOD, truncated [ 402.607424][ T9782] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 403.081335][ T9789] syzkaller0: entered promiscuous mode [ 403.087603][ T9789] syzkaller0: entered allmulticast mode [ 403.625043][ T9796] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 403.769140][ T9796] bond2 (unregistering): Released all slaves [ 406.558062][ T9811] loop4: detected capacity change from 0 to 40427 [ 406.586681][ T9811] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 406.752235][ T9811] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 407.503630][ T9811] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 407.598257][ T9811] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 407.625813][ T9811] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 410.040455][ T9] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 410.080448][ T9867] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1021'. [ 410.195262][ T9869] netlink: 'syz.4.1016': attribute type 10 has an invalid length. [ 410.857156][ T9869] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 410.970192][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.080087][ T9] usb 1-1: config 0 has no interfaces? [ 411.100410][ T9] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 411.149946][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.535313][ T9] usb 1-1: config 0 descriptor?? [ 411.921701][ T9875] CIFS: Unable to determine destination address [ 412.025766][ T9876] loop2: detected capacity change from 0 to 7 [ 412.118798][ T9876] Dev loop2: unable to read RDB block 7 [ 412.280119][ T9876] loop2: unable to read partition table [ 412.317340][ T9876] loop2: partition table beyond EOD, truncated [ 412.459516][ T9876] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 413.029635][ T9888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1027'. [ 413.482438][ T5846] usb 1-1: USB disconnect, device number 3 [ 413.497840][ T9894] netlink: 'syz.1.1030': attribute type 13 has an invalid length. [ 414.909804][ T9894] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.917232][ T9894] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.695542][ T9894] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.780218][ T9894] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.670404][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.730106][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.739054][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.821587][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.569179][ T9955] CIFS: Unable to determine destination address [ 418.943860][ T9959] loop2: detected capacity change from 0 to 7 [ 418.985449][ T9959] Dev loop2: unable to read RDB block 7 [ 419.055427][ T9959] loop2: unable to read partition table [ 419.145125][ T9959] loop2: partition table beyond EOD, truncated [ 419.161846][ T9966] netlink: 'syz.0.1051': attribute type 13 has an invalid length. [ 419.200153][ T5927] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 419.230190][ T9959] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 419.412788][ T5927] usb 2-1: Using ep0 maxpacket: 16 [ 419.423100][ T5927] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 419.470153][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.503460][ T5927] usb 2-1: Product: syz [ 419.520277][ T5927] usb 2-1: Manufacturer: syz [ 419.566490][ T5927] usb 2-1: SerialNumber: syz [ 419.611278][ T5927] usb 2-1: config 0 descriptor?? [ 419.772217][ T9966] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.780084][ T9966] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.994488][ T31] audit: type=1326 audit(1769630179.044:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9970 comm="syz.3.1054" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd8fd79aeb9 code=0x0 [ 420.057652][ T5927] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 420.088882][ T5927] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 420.122780][ T5927] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 420.147834][ T5927] usb 2-1: media controller created [ 420.220826][ T5927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 420.258486][ T9960] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1050'. [ 420.326799][ T9966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.382691][ T9966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 420.386125][ T5927] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 420.414958][ T5927] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 420.988926][ T37] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.015653][ T37] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.050118][ T37] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.150621][ T5926] usb 2-1: USB disconnect, device number 14 [ 421.189720][ T37] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.294089][ T5926] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 422.709045][T10007] netlink: 'syz.6.1065': attribute type 13 has an invalid length. [ 422.778323][T10010] loop3: detected capacity change from 0 to 8 [ 422.836715][T10010] squashfs: Unknown parameter '' [ 423.898409][T10023] netlink: 'syz.2.1068': attribute type 2 has an invalid length. [ 424.156775][T10023] !: entered promiscuous mode [ 425.361304][T10033] netlink: 'syz.3.1072': attribute type 13 has an invalid length. [ 425.781250][T10033] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.788639][T10033] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.100097][ T5927] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 426.183651][T10046] CIFS: Unable to determine destination address [ 426.280572][T10047] loop2: detected capacity change from 0 to 7 [ 426.297711][T10047] Dev loop2: unable to read RDB block 7 [ 426.303376][T10047] loop2: unable to read partition table [ 426.309212][T10047] loop2: partition table beyond EOD, truncated [ 426.315442][T10047] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 426.384133][ T5927] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 426.403065][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.435115][ T5927] usb 5-1: Product: syz [ 426.459215][ T5927] usb 5-1: Manufacturer: syz [ 426.482322][ T5927] usb 5-1: SerialNumber: syz [ 426.510282][ T5927] usb 5-1: config 0 descriptor?? [ 426.609019][T10033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.638838][T10033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.739314][ T5927] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 427.100617][T10061] netlink: 'syz.0.1082': attribute type 13 has an invalid length. [ 427.197074][T10063] loop2: detected capacity change from 0 to 8 [ 427.204851][T10063] squashfs: Unknown parameter '' [ 427.568807][ T7369] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.580580][ T5987] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 427.590784][ T7369] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.614171][ T7369] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.650056][ T7369] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.817168][ T5987] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 427.835029][ T5987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 427.883728][ T5987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 427.936873][T10069] loop3: detected capacity change from 0 to 128 [ 427.978957][ T5987] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 428.008675][T10069] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 428.023191][T10069] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 428.028378][ T5987] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 428.102734][ T5987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.458907][ T5987] usb 2-1: config 0 descriptor?? [ 428.466008][ T5927] usb 5-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 32) [ 428.544331][ T5927] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 428.568797][ T5927] usb 5-1: media controller created [ 428.577539][ T5927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 428.605890][ T5927] dvb_usb_rtl28xxu 5-1:0.0: unknown tuner MT2266 [ 428.747656][ T5927] usb 5-1: USB disconnect, device number 14 [ 428.956351][ T5987] plantronics 0003:047F:FFFF.0005: ignoring exceeding usage max [ 429.022108][ T12] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 429.044576][ T5987] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 429.096713][T10080] netlink: 'syz.2.1090': attribute type 10 has an invalid length. [ 429.117867][T10081] netlink: 'syz.6.1089': attribute type 2 has an invalid length. [ 429.286652][T10081] ‚#{6c: entered promiscuous mode [ 429.512856][T10088] netlink: 'syz.6.1089': attribute type 2 has an invalid length. [ 429.635709][T10088] ‚#{6c: left promiscuous mode [ 430.490192][ T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 430.675633][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 430.856606][ T24] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 430.871287][ T24] usb 4-1: config 179 has no interface number 0 [ 430.901578][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 430.967097][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 431.044805][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 431.067079][ T5927] usb 2-1: USB disconnect, device number 15 [ 431.155631][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 431.218816][ T24] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 431.448521][ T24] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 431.457979][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.467063][T10104] CIFS: Unable to determine destination address [ 431.527099][T10105] loop2: detected capacity change from 0 to 7 [ 431.535571][T10105] Dev loop2: unable to read RDB block 7 [ 431.541333][T10105] loop2: unable to read partition table [ 431.547190][T10105] loop2: partition table beyond EOD, truncated [ 431.553599][T10105] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 431.782249][T10095] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 434.439211][T10135] loop4: detected capacity change from 0 to 128 [ 434.448056][T10135] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 434.473961][T10135] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 435.463784][T10146] input: syz0 as /devices/virtual/input/input16 [ 435.684531][ T7392] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 436.108109][T10149] netlink: 'syz.4.1107': attribute type 10 has an invalid length. [ 436.220162][ T5907] usb 4-1: USB disconnect, device number 8 [ 436.220159][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 436.220221][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 436.243020][ C1] ================================================================== [ 436.251079][ C1] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x23b/0x260 [ 436.258887][ C1] Read of size 4 at addr ffff888053f9a05c by task kworker/1:0/24 [ 436.266601][ C1] [ 436.268942][ C1] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 436.269000][ C1] Tainted: [L]=SOFTLOCKUP [ 436.269015][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 436.269042][ C1] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker [ 436.269085][ C1] Call Trace: [ 436.269097][ C1] [ 436.269111][ C1] dump_stack_lvl+0x100/0x190 [ 436.269158][ C1] print_report+0x156/0x4c9 [ 436.269212][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.269267][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.269314][ C1] ? __phys_addr+0xe8/0x180 [ 436.269378][ C1] ? do_raw_spin_lock+0x23b/0x260 [ 436.269420][ C1] kasan_report+0xdf/0x1a0 [ 436.269461][ C1] ? do_raw_spin_lock+0x23b/0x260 [ 436.269510][ C1] do_raw_spin_lock+0x23b/0x260 [ 436.269554][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 436.269599][ C1] ? kcov_remote_stop+0x18d/0x540 [ 436.269655][ C1] ? kcov_remote_stop+0x18d/0x540 [ 436.269708][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.269762][ C1] _raw_spin_lock_irqsave+0x42/0x60 [ 436.269804][ C1] ? __wake_up+0x1c/0x60 [ 436.269872][ C1] __wake_up+0x1c/0x60 [ 436.269927][ C1] usb_anchor_resume_wakeups+0xc7/0xf0 [ 436.269973][ C1] __usb_hcd_giveback_urb+0x3d6/0x610 [ 436.270039][ C1] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 436.270103][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.270157][ C1] dummy_timer+0xd85/0x3670 [ 436.270225][ C1] ? do_raw_spin_lock+0x128/0x260 [ 436.270274][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.270322][ C1] ? find_held_lock+0x2b/0x80 [ 436.270369][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 436.270418][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 436.270466][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.270518][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 436.270562][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.270636][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 436.270693][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 436.270753][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.270822][ C1] ? mark_held_locks+0x40/0x70 [ 436.270884][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 436.270927][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 436.270988][ C1] __hrtimer_run_queues+0x516/0x990 [ 436.271037][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 436.271089][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.271134][ C1] ? ktime_get_update_offsets_now+0x2cd/0x4d0 [ 436.271182][ C1] hrtimer_run_softirq+0x17d/0x350 [ 436.271230][ C1] handle_softirqs+0x1ea/0x910 [ 436.271292][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 436.271347][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.271399][ C1] __irq_exit_rcu+0xef/0x150 [ 436.271450][ C1] irq_exit_rcu+0x9/0x30 [ 436.271502][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 436.271549][ C1] [ 436.271562][ C1] [ 436.271576][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 436.271620][ C1] RIP: 0010:sg_miter_stop+0x6a/0x350 [ 436.271667][ C1] Code: 00 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 80 3c 02 00 0f 85 9f 02 00 00 4c 8b 63 10 48 89 ef 4c 89 e6 e8 a9 d6 23 fd 49 39 ec <0f> 82 2f 02 00 00 e8 7b dc 23 fd 4c 8d 63 08 48 b8 00 00 00 00 00 [ 436.271707][ C1] RSP: 0018:ffffc900001e70f0 EFLAGS: 00000246 [ 436.271739][ C1] RAX: 0000000000000000 RBX: ffffc900001e71e8 RCX: ffffffff84e2fdb7 [ 436.271766][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88801dec0000 [ 436.271791][ C1] RBP: 0000000000000000 R08: 0000000000000006 R09: 0000000000000000 [ 436.271816][ C1] R10: 0000000000000000 R11: 0a7ab4c402bd5ece R12: 0000000000000000 [ 436.271842][ C1] R13: ffffc900001e7200 R14: ffffc900001e71f8 R15: 0000000000000000 [ 436.271875][ C1] ? sg_miter_stop+0x67/0x350 [ 436.271926][ C1] sg_miter_skip+0x25/0x410 [ 436.271970][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.272019][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.272066][ C1] ? __asan_memset+0x23/0x50 [ 436.272126][ C1] sg_copy_buffer+0xec/0x240 [ 436.272174][ C1] ? __pfx_sg_copy_buffer+0x10/0x10 [ 436.272233][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.272287][ C1] ? poly1305_update+0x237/0x400 [ 436.272333][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.272386][ C1] chacha20poly1305_crypt_sg_inplace+0xaca/0xc90 [ 436.272430][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.272478][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 436.272531][ C1] ? __pfx_chacha20poly1305_crypt_sg_inplace+0x10/0x10 [ 436.272581][ C1] ? __lock_acquire+0x4a5/0x2630 [ 436.272649][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.272697][ C1] ? rcu_is_watching+0x12/0xc0 [ 436.272746][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.272798][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.272847][ C1] ? __lock_acquire+0x4a5/0x2630 [ 436.272933][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.272981][ C1] ? __skb_to_sgvec+0x541/0xad0 [ 436.273033][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.273087][ C1] chacha20poly1305_encrypt_sg_inplace+0x3e/0x50 [ 436.273135][ C1] encrypt_packet+0x6ff/0x8f0 [ 436.273175][ C1] ? __pfx_encrypt_packet+0x10/0x10 [ 436.273278][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.273329][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.273377][ C1] ? do_raw_spin_lock+0x128/0x260 [ 436.273421][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.273471][ C1] ? __local_bh_enable_ip+0x9e/0x120 [ 436.273529][ C1] wg_packet_encrypt_worker+0x2c0/0xbd0 [ 436.273569][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 436.273624][ C1] ? __pfx_wg_packet_encrypt_worker+0x10/0x10 [ 436.273666][ C1] ? process_one_work+0x80b/0x1840 [ 436.273708][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.273756][ C1] ? rcu_is_watching+0x12/0xc0 [ 436.273809][ C1] process_one_work+0x9c2/0x1840 [ 436.273861][ C1] ? __pfx_process_one_work+0x10/0x10 [ 436.273905][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.273958][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.274007][ C1] ? assign_work+0x19c/0x250 [ 436.274046][ C1] worker_thread+0x5da/0xe40 [ 436.274097][ C1] ? kthread+0x17d/0x730 [ 436.274132][ C1] ? __pfx_worker_thread+0x10/0x10 [ 436.274174][ C1] kthread+0x3b3/0x730 [ 436.274211][ C1] ? __pfx_kthread+0x10/0x10 [ 436.274246][ C1] ? ret_from_fork+0x79/0xaf0 [ 436.274293][ C1] ? ret_from_fork+0x79/0xaf0 [ 436.274333][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.274381][ C1] ? rcu_is_watching+0x12/0xc0 [ 436.274430][ C1] ? __pfx_kthread+0x10/0x10 [ 436.274468][ C1] ret_from_fork+0x754/0xaf0 [ 436.274510][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 436.274554][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.274602][ C1] ? __switch_to+0x7b9/0x10c0 [ 436.274654][ C1] ? __pfx_kthread+0x10/0x10 [ 436.274692][ C1] ret_from_fork_asm+0x1a/0x30 [ 436.274765][ C1] [ 436.274779][ C1] [ 436.935730][ C1] Allocated by task 24: [ 436.939889][ C1] kasan_save_stack+0x30/0x50 [ 436.944577][ C1] kasan_save_track+0x14/0x30 [ 436.949263][ C1] __kasan_kmalloc+0xaa/0xb0 [ 436.953862][ C1] xpad_probe+0x28e/0x1f60 [ 436.958267][ C1] usb_probe_interface+0x303/0x8f0 [ 436.963381][ C1] really_probe+0x241/0xa60 [ 436.967879][ C1] __driver_probe_device+0x1de/0x400 [ 436.973160][ C1] driver_probe_device+0x4c/0x1b0 [ 436.978182][ C1] __device_attach_driver+0x1df/0x340 [ 436.983554][ C1] bus_for_each_drv+0x159/0x1e0 [ 436.988411][ C1] __device_attach+0x1e4/0x4d0 [ 436.993167][ C1] device_initial_probe+0xaf/0xd0 [ 436.998194][ C1] bus_probe_device+0x64/0x160 [ 437.002952][ C1] device_add+0x11d9/0x1950 [ 437.007479][ C1] usb_set_configuration+0xd97/0x1c60 [ 437.012851][ C1] usb_generic_driver_probe+0xa1/0xe0 [ 437.018220][ C1] usb_probe_device+0xef/0x400 [ 437.022992][ C1] really_probe+0x241/0xa60 [ 437.027496][ C1] __driver_probe_device+0x1de/0x400 [ 437.032776][ C1] driver_probe_device+0x4c/0x1b0 [ 437.037796][ C1] __device_attach_driver+0x1df/0x340 [ 437.043168][ C1] bus_for_each_drv+0x159/0x1e0 [ 437.048028][ C1] __device_attach+0x1e4/0x4d0 [ 437.052784][ C1] device_initial_probe+0xaf/0xd0 [ 437.057807][ C1] bus_probe_device+0x64/0x160 [ 437.062559][ C1] device_add+0x11d9/0x1950 [ 437.067064][ C1] usb_new_device.cold+0x685/0x115c [ 437.072276][ C1] hub_event+0x314d/0x4af0 [ 437.076693][ C1] process_one_work+0x9c2/0x1840 [ 437.081621][ C1] worker_thread+0x5da/0xe40 [ 437.086201][ C1] kthread+0x3b3/0x730 [ 437.090266][ C1] ret_from_fork+0x754/0xaf0 [ 437.094857][ C1] ret_from_fork_asm+0x1a/0x30 [ 437.099631][ C1] [ 437.101936][ C1] Freed by task 5907: [ 437.105897][ C1] kasan_save_stack+0x30/0x50 [ 437.110586][ C1] kasan_save_track+0x14/0x30 [ 437.115278][ C1] kasan_save_free_info+0x3b/0x70 [ 437.120305][ C1] __kasan_slab_free+0x5f/0x80 [ 437.125058][ C1] kfree+0x1c7/0x690 [ 437.128948][ C1] xpad_disconnect+0x1cf/0x530 [ 437.133700][ C1] usb_unbind_interface+0x1dd/0x9e0 [ 437.138902][ C1] device_remove+0x12a/0x180 [ 437.143482][ C1] device_release_driver_internal+0x42e/0x600 [ 437.149546][ C1] bus_remove_device+0x22f/0x440 [ 437.154472][ C1] device_del+0x376/0x9b0 [ 437.158796][ C1] usb_disable_device+0x367/0x810 [ 437.163815][ C1] usb_disconnect+0x2e2/0x9a0 [ 437.168489][ C1] hub_event+0x1d0c/0x4af0 [ 437.172905][ C1] process_one_work+0x9c2/0x1840 [ 437.177835][ C1] worker_thread+0x5da/0xe40 [ 437.182416][ C1] kthread+0x3b3/0x730 [ 437.186472][ C1] ret_from_fork+0x754/0xaf0 [ 437.191054][ C1] ret_from_fork_asm+0x1a/0x30 [ 437.195824][ C1] [ 437.198127][ C1] The buggy address belongs to the object at ffff888053f9a000 [ 437.198127][ C1] which belongs to the cache kmalloc-1k of size 1024 [ 437.212166][ C1] The buggy address is located 92 bytes inside of [ 437.212166][ C1] freed 1024-byte region [ffff888053f9a000, ffff888053f9a400) [ 437.225953][ C1] [ 437.228256][ C1] The buggy address belongs to the physical page: [ 437.234645][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x53f98 [ 437.243394][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 437.251882][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 437.259415][ C1] page_type: f5(slab) [ 437.263386][ C1] raw: 00fff00000000040 ffff88813ff26dc0 ffffea0000bc5a00 dead000000000002 [ 437.271962][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 437.280539][ C1] head: 00fff00000000040 ffff88813ff26dc0 ffffea0000bc5a00 dead000000000002 [ 437.289197][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 437.297858][ C1] head: 00fff00000000003 ffffea00014fe601 00000000ffffffff 00000000ffffffff [ 437.306519][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 437.315170][ C1] page dumped because: kasan: bad access detected [ 437.321561][ C1] page_owner tracks the page as allocated [ 437.327253][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7373, tgid 7373 (kworker/u8:13), ts 280234647205, free_ts 280201478984 [ 437.346787][ C1] post_alloc_hook+0x1e1/0x250 [ 437.351561][ C1] get_page_from_freelist+0xe3d/0x2e10 [ 437.357030][ C1] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 437.362931][ C1] alloc_pages_mpol+0x1fb/0x550 [ 437.367774][ C1] new_slab+0x2c4/0x440 [ 437.371929][ C1] ___slab_alloc+0xda3/0x1ca0 [ 437.376607][ C1] __slab_alloc.isra.0+0x63/0x110 [ 437.381629][ C1] __kmalloc_noprof+0x618/0x9c0 [ 437.386477][ C1] ieee802_11_parse_elems_full+0x177/0x3720 [ 437.392366][ C1] ieee80211_ibss_rx_queued_mgmt+0xc8d/0x2f30 [ 437.398427][ C1] ieee80211_iface_work+0xbf1/0x1350 [ 437.403703][ C1] cfg80211_wiphy_work+0x3f7/0x560 [ 437.408817][ C1] process_one_work+0x9c2/0x1840 [ 437.413748][ C1] worker_thread+0x5da/0xe40 [ 437.418334][ C1] kthread+0x3b3/0x730 [ 437.422391][ C1] ret_from_fork+0x754/0xaf0 [ 437.426974][ C1] page last free pid 5807 tgid 5807 stack trace: [ 437.433284][ C1] __free_frozen_pages+0x822/0x1130 [ 437.438481][ C1] __folio_put+0x3b4/0x540 [ 437.442882][ C1] put_netmem+0x294/0x320 [ 437.447212][ C1] skb_release_data+0x4b2/0x700 [ 437.452073][ C1] skb_attempt_defer_free+0x1f5/0x700 [ 437.457446][ C1] tcp_recvmsg_locked+0x1189/0x28e0 [ 437.462644][ C1] tcp_recvmsg+0x138/0x630 [ 437.467055][ C1] inet_recvmsg+0x129/0x6a0 [ 437.471555][ C1] sock_recvmsg+0x1b2/0x250 [ 437.476051][ C1] sock_read_iter+0x2c6/0x3c0 [ 437.480718][ C1] vfs_read+0x957/0xb30 [ 437.484876][ C1] ksys_read+0x1f8/0x250 [ 437.489119][ C1] do_syscall_64+0xc9/0xf80 [ 437.493620][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.499512][ C1] [ 437.501814][ C1] Memory state around the buggy address: [ 437.507446][ C1] ffff888053f99f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 437.515498][ C1] ffff888053f99f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 437.523547][ C1] >ffff888053f9a000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 437.531601][ C1] ^ [ 437.538527][ C1] ffff888053f9a080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 437.546576][ C1] ffff888053f9a100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 437.554623][ C1] ================================================================== [ 437.562663][ C1] Disabling lock debugging due to kernel taint [ 437.568792][ C1] ================================================================== [ 437.576842][ C1] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x248/0x260 [ 437.584649][ C1] Read of size 8 at addr ffff888053f9a068 by task kworker/1:0/24 [ 437.592355][ C1] [ 437.594673][ C1] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Tainted: G B L syzkaller #0 PREEMPT(full) [ 437.594720][ C1] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 437.594732][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 437.594755][ C1] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker [ 437.594788][ C1] Call Trace: [ 437.594798][ C1] [ 437.594809][ C1] dump_stack_lvl+0x100/0x190 [ 437.594845][ C1] print_report+0x156/0x4c9 [ 437.594884][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.594919][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.594954][ C1] ? __phys_addr+0xe8/0x180 [ 437.595005][ C1] ? do_raw_spin_lock+0x248/0x260 [ 437.595036][ C1] kasan_report+0xdf/0x1a0 [ 437.595067][ C1] ? do_raw_spin_lock+0x248/0x260 [ 437.595102][ C1] do_raw_spin_lock+0x248/0x260 [ 437.595133][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 437.595165][ C1] ? kcov_remote_stop+0x18d/0x540 [ 437.595204][ C1] ? kcov_remote_stop+0x18d/0x540 [ 437.595242][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.595280][ C1] _raw_spin_lock_irqsave+0x42/0x60 [ 437.595311][ C1] ? __wake_up+0x1c/0x60 [ 437.595350][ C1] __wake_up+0x1c/0x60 [ 437.595390][ C1] usb_anchor_resume_wakeups+0xc7/0xf0 [ 437.595424][ C1] __usb_hcd_giveback_urb+0x3d6/0x610 [ 437.595471][ C1] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 437.595516][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.595553][ C1] dummy_timer+0xd85/0x3670 [ 437.595603][ C1] ? do_raw_spin_lock+0x128/0x260 [ 437.595634][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.595668][ C1] ? find_held_lock+0x2b/0x80 [ 437.595703][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 437.595739][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 437.595774][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.595812][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 437.595844][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.595879][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 437.595918][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 437.595965][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.596005][ C1] ? mark_held_locks+0x40/0x70 [ 437.596051][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 437.596084][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 437.596130][ C1] __hrtimer_run_queues+0x516/0x990 [ 437.596168][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 437.596201][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.596236][ C1] ? ktime_get_update_offsets_now+0x2cd/0x4d0 [ 437.596271][ C1] hrtimer_run_softirq+0x17d/0x350 [ 437.596305][ C1] handle_softirqs+0x1ea/0x910 [ 437.596347][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 437.596386][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.596423][ C1] __irq_exit_rcu+0xef/0x150 [ 437.596460][ C1] irq_exit_rcu+0x9/0x30 [ 437.596496][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 437.596531][ C1] [ 437.596541][ C1] [ 437.596551][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 437.596583][ C1] RIP: 0010:sg_miter_stop+0x6a/0x350 [ 437.596617][ C1] Code: 00 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 80 3c 02 00 0f 85 9f 02 00 00 4c 8b 63 10 48 89 ef 4c 89 e6 e8 a9 d6 23 fd 49 39 ec <0f> 82 2f 02 00 00 e8 7b dc 23 fd 4c 8d 63 08 48 b8 00 00 00 00 00 [ 437.596645][ C1] RSP: 0018:ffffc900001e70f0 EFLAGS: 00000246 [ 437.596669][ C1] RAX: 0000000000000000 RBX: ffffc900001e71e8 RCX: ffffffff84e2fdb7 [ 437.596688][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88801dec0000 [ 437.596707][ C1] RBP: 0000000000000000 R08: 0000000000000006 R09: 0000000000000000 [ 437.596725][ C1] R10: 0000000000000000 R11: 0a7ab4c402bd5ece R12: 0000000000000000 [ 437.596743][ C1] R13: ffffc900001e7200 R14: ffffc900001e71f8 R15: 0000000000000000 [ 437.596767][ C1] ? sg_miter_stop+0x67/0x350 [ 437.596804][ C1] sg_miter_skip+0x25/0x410 [ 437.596835][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.596870][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.596905][ C1] ? __asan_memset+0x23/0x50 [ 437.596947][ C1] sg_copy_buffer+0xec/0x240 [ 437.596981][ C1] ? __pfx_sg_copy_buffer+0x10/0x10 [ 437.597026][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.597061][ C1] ? poly1305_update+0x237/0x400 [ 437.597093][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.597131][ C1] chacha20poly1305_crypt_sg_inplace+0xaca/0xc90 [ 437.597162][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.597197][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 437.597235][ C1] ? __pfx_chacha20poly1305_crypt_sg_inplace+0x10/0x10 [ 437.597271][ C1] ? __lock_acquire+0x4a5/0x2630 [ 437.597319][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.597354][ C1] ? rcu_is_watching+0x12/0xc0 [ 437.597388][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.597426][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.597460][ C1] ? __lock_acquire+0x4a5/0x2630 [ 437.597522][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.597556][ C1] ? __skb_to_sgvec+0x541/0xad0 [ 437.597595][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.597632][ C1] chacha20poly1305_encrypt_sg_inplace+0x3e/0x50 [ 437.597666][ C1] encrypt_packet+0x6ff/0x8f0 [ 437.597695][ C1] ? __pfx_encrypt_packet+0x10/0x10 [ 437.597763][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.597798][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.597833][ C1] ? do_raw_spin_lock+0x128/0x260 [ 437.597866][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.597901][ C1] ? __local_bh_enable_ip+0x9e/0x120 [ 437.597943][ C1] wg_packet_encrypt_worker+0x2c0/0xbd0 [ 437.597972][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 437.598016][ C1] ? __pfx_wg_packet_encrypt_worker+0x10/0x10 [ 437.598047][ C1] ? process_one_work+0x80b/0x1840 [ 437.598078][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.598112][ C1] ? rcu_is_watching+0x12/0xc0 [ 437.598149][ C1] process_one_work+0x9c2/0x1840 [ 437.598187][ C1] ? __pfx_process_one_work+0x10/0x10 [ 437.598217][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.598256][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.598291][ C1] ? assign_work+0x19c/0x250 [ 437.598319][ C1] worker_thread+0x5da/0xe40 [ 437.598355][ C1] ? kthread+0x17d/0x730 [ 437.598381][ C1] ? __pfx_worker_thread+0x10/0x10 [ 437.598410][ C1] kthread+0x3b3/0x730 [ 437.598437][ C1] ? __pfx_kthread+0x10/0x10 [ 437.598462][ C1] ? ret_from_fork+0x79/0xaf0 [ 437.598491][ C1] ? ret_from_fork+0x79/0xaf0 [ 437.598520][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.598555][ C1] ? rcu_is_watching+0x12/0xc0 [ 437.598591][ C1] ? __pfx_kthread+0x10/0x10 [ 437.598618][ C1] ret_from_fork+0x754/0xaf0 [ 437.598648][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 437.598679][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 437.598714][ C1] ? __switch_to+0x7b9/0x10c0 [ 437.598751][ C1] ? __pfx_kthread+0x10/0x10 [ 437.598778][ C1] ret_from_fork_asm+0x1a/0x30 [ 437.598831][ C1] [ 437.598841][ C1] [ 438.260983][ C1] Allocated by task 24: [ 438.265129][ C1] kasan_save_stack+0x30/0x50 [ 438.269839][ C1] kasan_save_track+0x14/0x30 [ 438.274526][ C1] __kasan_kmalloc+0xaa/0xb0 [ 438.279151][ C1] xpad_probe+0x28e/0x1f60 [ 438.283556][ C1] usb_probe_interface+0x303/0x8f0 [ 438.288672][ C1] really_probe+0x241/0xa60 [ 438.293168][ C1] __driver_probe_device+0x1de/0x400 [ 438.298450][ C1] driver_probe_device+0x4c/0x1b0 [ 438.303469][ C1] __device_attach_driver+0x1df/0x340 [ 438.308838][ C1] bus_for_each_drv+0x159/0x1e0 [ 438.313695][ C1] __device_attach+0x1e4/0x4d0 [ 438.318454][ C1] device_initial_probe+0xaf/0xd0 [ 438.323473][ C1] bus_probe_device+0x64/0x160 [ 438.328229][ C1] device_add+0x11d9/0x1950 [ 438.332738][ C1] usb_set_configuration+0xd97/0x1c60 [ 438.338134][ C1] usb_generic_driver_probe+0xa1/0xe0 [ 438.343500][ C1] usb_probe_device+0xef/0x400 [ 438.348265][ C1] really_probe+0x241/0xa60 [ 438.352759][ C1] __driver_probe_device+0x1de/0x400 [ 438.358042][ C1] driver_probe_device+0x4c/0x1b0 [ 438.363063][ C1] __device_attach_driver+0x1df/0x340 [ 438.368432][ C1] bus_for_each_drv+0x159/0x1e0 [ 438.373294][ C1] __device_attach+0x1e4/0x4d0 [ 438.378054][ C1] device_initial_probe+0xaf/0xd0 [ 438.383074][ C1] bus_probe_device+0x64/0x160 [ 438.387848][ C1] device_add+0x11d9/0x1950 [ 438.392350][ C1] usb_new_device.cold+0x685/0x115c [ 438.397555][ C1] hub_event+0x314d/0x4af0 [ 438.401973][ C1] process_one_work+0x9c2/0x1840 [ 438.406906][ C1] worker_thread+0x5da/0xe40 [ 438.411486][ C1] kthread+0x3b3/0x730 [ 438.415553][ C1] ret_from_fork+0x754/0xaf0 [ 438.420147][ C1] ret_from_fork_asm+0x1a/0x30 [ 438.424921][ C1] [ 438.427230][ C1] Freed by task 5907: [ 438.431191][ C1] kasan_save_stack+0x30/0x50 [ 438.435876][ C1] kasan_save_track+0x14/0x30 [ 438.440560][ C1] kasan_save_free_info+0x3b/0x70 [ 438.445584][ C1] __kasan_slab_free+0x5f/0x80 [ 438.450336][ C1] kfree+0x1c7/0x690 [ 438.454232][ C1] xpad_disconnect+0x1cf/0x530 [ 438.458990][ C1] usb_unbind_interface+0x1dd/0x9e0 [ 438.464199][ C1] device_remove+0x12a/0x180 [ 438.468783][ C1] device_release_driver_internal+0x42e/0x600 [ 438.474854][ C1] bus_remove_device+0x22f/0x440 [ 438.479783][ C1] device_del+0x376/0x9b0 [ 438.484106][ C1] usb_disable_device+0x367/0x810 [ 438.489128][ C1] usb_disconnect+0x2e2/0x9a0 [ 438.493801][ C1] hub_event+0x1d0c/0x4af0 [ 438.498229][ C1] process_one_work+0x9c2/0x1840 [ 438.503159][ C1] worker_thread+0x5da/0xe40 [ 438.507744][ C1] kthread+0x3b3/0x730 [ 438.511800][ C1] ret_from_fork+0x754/0xaf0 [ 438.516383][ C1] ret_from_fork_asm+0x1a/0x30 [ 438.521153][ C1] [ 438.523457][ C1] The buggy address belongs to the object at ffff888053f9a000 [ 438.523457][ C1] which belongs to the cache kmalloc-1k of size 1024 [ 438.537497][ C1] The buggy address is located 104 bytes inside of [ 438.537497][ C1] freed 1024-byte region [ffff888053f9a000, ffff888053f9a400) [ 438.551373][ C1] [ 438.553680][ C1] The buggy address belongs to the physical page: [ 438.560068][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x53f98 [ 438.568816][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 438.577305][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 438.584836][ C1] page_type: f5(slab) [ 438.588804][ C1] raw: 00fff00000000040 ffff88813ff26dc0 ffffea0000bc5a00 dead000000000002 [ 438.597378][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 438.605957][ C1] head: 00fff00000000040 ffff88813ff26dc0 ffffea0000bc5a00 dead000000000002 [ 438.614632][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 438.623293][ C1] head: 00fff00000000003 ffffea00014fe601 00000000ffffffff 00000000ffffffff [ 438.631952][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 438.640620][ C1] page dumped because: kasan: bad access detected [ 438.647014][ C1] page_owner tracks the page as allocated [ 438.652705][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7373, tgid 7373 (kworker/u8:13), ts 280234647205, free_ts 280201478984 [ 438.672259][ C1] post_alloc_hook+0x1e1/0x250 [ 438.677035][ C1] get_page_from_freelist+0xe3d/0x2e10 [ 438.682498][ C1] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 438.688398][ C1] alloc_pages_mpol+0x1fb/0x550 [ 438.693239][ C1] new_slab+0x2c4/0x440 [ 438.697394][ C1] ___slab_alloc+0xda3/0x1ca0 [ 438.702070][ C1] __slab_alloc.isra.0+0x63/0x110 [ 438.707097][ C1] __kmalloc_noprof+0x618/0x9c0 [ 438.711949][ C1] ieee802_11_parse_elems_full+0x177/0x3720 [ 438.717847][ C1] ieee80211_ibss_rx_queued_mgmt+0xc8d/0x2f30 [ 438.723908][ C1] ieee80211_iface_work+0xbf1/0x1350 [ 438.729191][ C1] cfg80211_wiphy_work+0x3f7/0x560 [ 438.734312][ C1] process_one_work+0x9c2/0x1840 [ 438.739246][ C1] worker_thread+0x5da/0xe40 [ 438.743832][ C1] kthread+0x3b3/0x730 [ 438.747892][ C1] ret_from_fork+0x754/0xaf0 [ 438.752471][ C1] page last free pid 5807 tgid 5807 stack trace: [ 438.758795][ C1] __free_frozen_pages+0x822/0x1130 [ 438.763998][ C1] __folio_put+0x3b4/0x540 [ 438.768400][ C1] put_netmem+0x294/0x320 [ 438.772745][ C1] skb_release_data+0x4b2/0x700 [ 438.777604][ C1] skb_attempt_defer_free+0x1f5/0x700 [ 438.782985][ C1] tcp_recvmsg_locked+0x1189/0x28e0 [ 438.788200][ C1] tcp_recvmsg+0x138/0x630 [ 438.792613][ C1] inet_recvmsg+0x129/0x6a0 [ 438.797116][ C1] sock_recvmsg+0x1b2/0x250 [ 438.801610][ C1] sock_read_iter+0x2c6/0x3c0 [ 438.806281][ C1] vfs_read+0x957/0xb30 [ 438.810445][ C1] ksys_read+0x1f8/0x250 [ 438.814697][ C1] do_syscall_64+0xc9/0xf80 [ 438.819200][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.825087][ C1] [ 438.827393][ C1] Memory state around the buggy address: [ 438.833006][ C1] ffff888053f99f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 438.841057][ C1] ffff888053f99f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 438.849106][ C1] >ffff888053f9a000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 438.857148][ C1] ^ [ 438.864587][ C1] ffff888053f9a080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 438.872634][ C1] ffff888053f9a100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 438.880685][ C1] ================================================================== [ 438.888726][ C1] ================================================================== [ 438.896767][ C1] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x231/0x260 [ 438.904571][ C1] Read of size 4 at addr ffff888053f9a060 by task kworker/1:0/24 [ 438.912277][ C1] [ 438.914591][ C1] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Tainted: G B L syzkaller #0 PREEMPT(full) [ 438.914635][ C1] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 438.914646][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 438.914667][ C1] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker [ 438.914698][ C1] Call Trace: [ 438.914709][ C1] [ 438.914721][ C1] dump_stack_lvl+0x100/0x190 [ 438.914755][ C1] print_report+0x156/0x4c9 [ 438.914794][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.914830][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.914864][ C1] ? __phys_addr+0xe8/0x180 [ 438.914910][ C1] ? do_raw_spin_lock+0x231/0x260 [ 438.914940][ C1] kasan_report+0xdf/0x1a0 [ 438.914971][ C1] ? do_raw_spin_lock+0x231/0x260 [ 438.915011][ C1] do_raw_spin_lock+0x231/0x260 [ 438.915043][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 438.915075][ C1] ? kcov_remote_stop+0x18d/0x540 [ 438.915114][ C1] ? kcov_remote_stop+0x18d/0x540 [ 438.915152][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.915190][ C1] _raw_spin_lock_irqsave+0x42/0x60 [ 438.915221][ C1] ? __wake_up+0x1c/0x60 [ 438.915261][ C1] __wake_up+0x1c/0x60 [ 438.915306][ C1] usb_anchor_resume_wakeups+0xc7/0xf0 [ 438.915339][ C1] __usb_hcd_giveback_urb+0x3d6/0x610 [ 438.915386][ C1] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 438.915430][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.915468][ C1] dummy_timer+0xd85/0x3670 [ 438.915518][ C1] ? do_raw_spin_lock+0x128/0x260 [ 438.915549][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.915584][ C1] ? find_held_lock+0x2b/0x80 [ 438.915622][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 438.915658][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 438.915693][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.915731][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 438.915763][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.915798][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 438.915837][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 438.915884][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.915918][ C1] ? mark_held_locks+0x40/0x70 [ 438.915962][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 438.915995][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 438.916045][ C1] __hrtimer_run_queues+0x516/0x990 [ 438.916082][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 438.916116][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.916154][ C1] ? ktime_get_update_offsets_now+0x2cd/0x4d0 [ 438.916188][ C1] hrtimer_run_softirq+0x17d/0x350 [ 438.916222][ C1] handle_softirqs+0x1ea/0x910 [ 438.916263][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 438.916303][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.916340][ C1] __irq_exit_rcu+0xef/0x150 [ 438.916381][ C1] irq_exit_rcu+0x9/0x30 [ 438.916418][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 438.916452][ C1] [ 438.916461][ C1] [ 438.916472][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 438.916505][ C1] RIP: 0010:sg_miter_stop+0x6a/0x350 [ 438.916539][ C1] Code: 00 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 80 3c 02 00 0f 85 9f 02 00 00 4c 8b 63 10 48 89 ef 4c 89 e6 e8 a9 d6 23 fd 49 39 ec <0f> 82 2f 02 00 00 e8 7b dc 23 fd 4c 8d 63 08 48 b8 00 00 00 00 00 [ 438.916567][ C1] RSP: 0018:ffffc900001e70f0 EFLAGS: 00000246 [ 438.916590][ C1] RAX: 0000000000000000 RBX: ffffc900001e71e8 RCX: ffffffff84e2fdb7 [ 438.916609][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88801dec0000 [ 438.916628][ C1] RBP: 0000000000000000 R08: 0000000000000006 R09: 0000000000000000 [ 438.916646][ C1] R10: 0000000000000000 R11: 0a7ab4c402bd5ece R12: 0000000000000000 [ 438.916664][ C1] R13: ffffc900001e7200 R14: ffffc900001e71f8 R15: 0000000000000000 [ 438.916688][ C1] ? sg_miter_stop+0x67/0x350 [ 438.916725][ C1] sg_miter_skip+0x25/0x410 [ 438.916756][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.916791][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.916826][ C1] ? __asan_memset+0x23/0x50 [ 438.916868][ C1] sg_copy_buffer+0xec/0x240 [ 438.916902][ C1] ? __pfx_sg_copy_buffer+0x10/0x10 [ 438.916942][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.916977][ C1] ? poly1305_update+0x237/0x400 [ 438.917013][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.917051][ C1] chacha20poly1305_crypt_sg_inplace+0xaca/0xc90 [ 438.917082][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.917117][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 438.917155][ C1] ? __pfx_chacha20poly1305_crypt_sg_inplace+0x10/0x10 [ 438.917191][ C1] ? __lock_acquire+0x4a5/0x2630 [ 438.917239][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.917274][ C1] ? rcu_is_watching+0x12/0xc0 [ 438.917309][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.917347][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.917382][ C1] ? __lock_acquire+0x4a5/0x2630 [ 438.917443][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.917478][ C1] ? __skb_to_sgvec+0x541/0xad0 [ 438.917515][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.917553][ C1] chacha20poly1305_encrypt_sg_inplace+0x3e/0x50 [ 438.917587][ C1] encrypt_packet+0x6ff/0x8f0 [ 438.917614][ C1] ? __pfx_encrypt_packet+0x10/0x10 [ 438.917683][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.917718][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.917753][ C1] ? do_raw_spin_lock+0x128/0x260 [ 438.917785][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.917823][ C1] ? __local_bh_enable_ip+0x9e/0x120 [ 438.917871][ C1] wg_packet_encrypt_worker+0x2c0/0xbd0 [ 438.917901][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 438.917941][ C1] ? __pfx_wg_packet_encrypt_worker+0x10/0x10 [ 438.917971][ C1] ? process_one_work+0x80b/0x1840 [ 438.918010][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.918044][ C1] ? rcu_is_watching+0x12/0xc0 [ 438.918081][ C1] process_one_work+0x9c2/0x1840 [ 438.918118][ C1] ? __pfx_process_one_work+0x10/0x10 [ 438.918149][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.918188][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.918222][ C1] ? assign_work+0x19c/0x250 [ 438.918250][ C1] worker_thread+0x5da/0xe40 [ 438.918286][ C1] ? kthread+0x17d/0x730 [ 438.918312][ C1] ? __pfx_worker_thread+0x10/0x10 [ 438.918341][ C1] kthread+0x3b3/0x730 [ 438.918369][ C1] ? __pfx_kthread+0x10/0x10 [ 438.918394][ C1] ? ret_from_fork+0x79/0xaf0 [ 438.918422][ C1] ? ret_from_fork+0x79/0xaf0 [ 438.918451][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.918486][ C1] ? rcu_is_watching+0x12/0xc0 [ 438.918520][ C1] ? __pfx_kthread+0x10/0x10 [ 438.918548][ C1] ret_from_fork+0x754/0xaf0 [ 438.918578][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 438.918614][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 438.918649][ C1] ? __switch_to+0x7b9/0x10c0 [ 438.918686][ C1] ? __pfx_kthread+0x10/0x10 [ 438.918713][ C1] ret_from_fork_asm+0x1a/0x30 [ 438.918766][ C1] [ 438.918775][ C1] [ 439.581054][ C1] Allocated by task 24: [ 439.585195][ C1] kasan_save_stack+0x30/0x50 [ 439.589894][ C1] kasan_save_track+0x14/0x30 [ 439.594577][ C1] __kasan_kmalloc+0xaa/0xb0 [ 439.599176][ C1] xpad_probe+0x28e/0x1f60 [ 439.603584][ C1] usb_probe_interface+0x303/0x8f0 [ 439.608720][ C1] really_probe+0x241/0xa60 [ 439.613218][ C1] __driver_probe_device+0x1de/0x400 [ 439.618501][ C1] driver_probe_device+0x4c/0x1b0 [ 439.623519][ C1] __device_attach_driver+0x1df/0x340 [ 439.628886][ C1] bus_for_each_drv+0x159/0x1e0 [ 439.633747][ C1] __device_attach+0x1e4/0x4d0 [ 439.638509][ C1] device_initial_probe+0xaf/0xd0 [ 439.643528][ C1] bus_probe_device+0x64/0x160 [ 439.648282][ C1] device_add+0x11d9/0x1950 [ 439.652784][ C1] usb_set_configuration+0xd97/0x1c60 [ 439.658157][ C1] usb_generic_driver_probe+0xa1/0xe0 [ 439.663520][ C1] usb_probe_device+0xef/0x400 [ 439.668286][ C1] really_probe+0x241/0xa60 [ 439.672784][ C1] __driver_probe_device+0x1de/0x400 [ 439.678066][ C1] driver_probe_device+0x4c/0x1b0 [ 439.683082][ C1] __device_attach_driver+0x1df/0x340 [ 439.688449][ C1] bus_for_each_drv+0x159/0x1e0 [ 439.693303][ C1] __device_attach+0x1e4/0x4d0 [ 439.698064][ C1] device_initial_probe+0xaf/0xd0 [ 439.703086][ C1] bus_probe_device+0x64/0x160 [ 439.707842][ C1] device_add+0x11d9/0x1950 [ 439.712345][ C1] usb_new_device.cold+0x685/0x115c [ 439.717548][ C1] hub_event+0x314d/0x4af0 [ 439.721961][ C1] process_one_work+0x9c2/0x1840 [ 439.726892][ C1] worker_thread+0x5da/0xe40 [ 439.731474][ C1] kthread+0x3b3/0x730 [ 439.735536][ C1] ret_from_fork+0x754/0xaf0 [ 439.740126][ C1] ret_from_fork_asm+0x1a/0x30 [ 439.744897][ C1] [ 439.747198][ C1] Freed by task 5907: [ 439.751159][ C1] kasan_save_stack+0x30/0x50 [ 439.755848][ C1] kasan_save_track+0x14/0x30 [ 439.760530][ C1] kasan_save_free_info+0x3b/0x70 [ 439.765554][ C1] __kasan_slab_free+0x5f/0x80 [ 439.770304][ C1] kfree+0x1c7/0x690 [ 439.774197][ C1] xpad_disconnect+0x1cf/0x530 [ 439.778953][ C1] usb_unbind_interface+0x1dd/0x9e0 [ 439.784152][ C1] device_remove+0x12a/0x180 [ 439.788734][ C1] device_release_driver_internal+0x42e/0x600 [ 439.794804][ C1] bus_remove_device+0x22f/0x440 [ 439.799736][ C1] device_del+0x376/0x9b0 [ 439.804075][ C1] usb_disable_device+0x367/0x810 [ 439.809098][ C1] usb_disconnect+0x2e2/0x9a0 [ 439.813773][ C1] hub_event+0x1d0c/0x4af0 [ 439.818191][ C1] process_one_work+0x9c2/0x1840 [ 439.823120][ C1] worker_thread+0x5da/0xe40 [ 439.827753][ C1] kthread+0x3b3/0x730 [ 439.831815][ C1] ret_from_fork+0x754/0xaf0 [ 439.836398][ C1] ret_from_fork_asm+0x1a/0x30 [ 439.841179][ C1] [ 439.843482][ C1] The buggy address belongs to the object at ffff888053f9a000 [ 439.843482][ C1] which belongs to the cache kmalloc-1k of size 1024 [ 439.857521][ C1] The buggy address is located 96 bytes inside of [ 439.857521][ C1] freed 1024-byte region [ffff888053f9a000, ffff888053f9a400) [ 439.871321][ C1] [ 439.873624][ C1] The buggy address belongs to the physical page: [ 439.880016][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x53f98 [ 439.888768][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 439.897252][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 439.904789][ C1] page_type: f5(slab) [ 439.908760][ C1] raw: 00fff00000000040 ffff88813ff26dc0 ffffea0000bc5a00 dead000000000002 [ 439.917337][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 439.925918][ C1] head: 00fff00000000040 ffff88813ff26dc0 ffffea0000bc5a00 dead000000000002 [ 439.934583][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 439.943245][ C1] head: 00fff00000000003 ffffea00014fe601 00000000ffffffff 00000000ffffffff [ 439.951906][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 439.960558][ C1] page dumped because: kasan: bad access detected [ 439.966950][ C1] page_owner tracks the page as allocated [ 439.972642][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7373, tgid 7373 (kworker/u8:13), ts 280234647205, free_ts 280201478984 [ 439.992176][ C1] post_alloc_hook+0x1e1/0x250 [ 439.996951][ C1] get_page_from_freelist+0xe3d/0x2e10 [ 440.002420][ C1] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 440.008324][ C1] alloc_pages_mpol+0x1fb/0x550 [ 440.013167][ C1] new_slab+0x2c4/0x440 [ 440.017342][ C1] ___slab_alloc+0xda3/0x1ca0 [ 440.022018][ C1] __slab_alloc.isra.0+0x63/0x110 [ 440.027047][ C1] __kmalloc_noprof+0x618/0x9c0 [ 440.031941][ C1] ieee802_11_parse_elems_full+0x177/0x3720 [ 440.037837][ C1] ieee80211_ibss_rx_queued_mgmt+0xc8d/0x2f30 [ 440.043896][ C1] ieee80211_iface_work+0xbf1/0x1350 [ 440.049176][ C1] cfg80211_wiphy_work+0x3f7/0x560 [ 440.054311][ C1] process_one_work+0x9c2/0x1840 [ 440.059255][ C1] worker_thread+0x5da/0xe40 [ 440.063839][ C1] kthread+0x3b3/0x730 [ 440.067894][ C1] ret_from_fork+0x754/0xaf0 [ 440.072475][ C1] page last free pid 5807 tgid 5807 stack trace: [ 440.078782][ C1] __free_frozen_pages+0x822/0x1130 [ 440.083980][ C1] __folio_put+0x3b4/0x540 [ 440.088388][ C1] put_netmem+0x294/0x320 [ 440.092714][ C1] skb_release_data+0x4b2/0x700 [ 440.097575][ C1] skb_attempt_defer_free+0x1f5/0x700 [ 440.102952][ C1] tcp_recvmsg_locked+0x1189/0x28e0 [ 440.108152][ C1] tcp_recvmsg+0x138/0x630 [ 440.112566][ C1] inet_recvmsg+0x129/0x6a0 [ 440.117068][ C1] sock_recvmsg+0x1b2/0x250 [ 440.121561][ C1] sock_read_iter+0x2c6/0x3c0 [ 440.126230][ C1] vfs_read+0x957/0xb30 [ 440.130390][ C1] ksys_read+0x1f8/0x250 [ 440.134638][ C1] do_syscall_64+0xc9/0xf80 [ 440.139135][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.145021][ C1] [ 440.147323][ C1] Memory state around the buggy address: [ 440.152930][ C1] ffff888053f99f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 440.160979][ C1] ffff888053f99f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 440.169031][ C1] >ffff888053f9a000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 440.177074][ C1] ^ [ 440.184247][ C1] ffff888053f9a080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 440.192298][ C1] ffff888053f9a100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 440.200340][ C1] ================================================================== [ 440.208382][ C1] ================================================================== [ 440.216428][ C1] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x119/0x260 [ 440.224234][ C1] Write of size 4 at addr ffff888053f9a058 by task kworker/1:0/24 [ 440.232028][ C1] [ 440.234341][ C1] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Tainted: G B L syzkaller #0 PREEMPT(full) [ 440.234388][ C1] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 440.234401][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 440.234421][ C1] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker [ 440.234453][ C1] Call Trace: [ 440.234464][ C1] [ 440.234475][ C1] dump_stack_lvl+0x100/0x190 [ 440.234510][ C1] print_report+0x156/0x4c9 [ 440.234549][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 440.234584][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 440.234620][ C1] ? __phys_addr+0xe8/0x180 [ 440.234666][ C1] ? do_raw_spin_lock+0x119/0x260 [ 440.234697][ C1] kasan_report+0xdf/0x1a0 [ 440.234728][ C1] ? do_raw_spin_lock+0x119/0x260 [ 440.234763][ C1] kasan_check_range+0x10f/0x1e0 [ 440.234799][ C1] do_raw_spin_lock+0x119/0x260 [ 440.234830][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 440.234862][ C1] ? kcov_remote_stop+0x18d/0x540 [ 440.234902][ C1] ? kcov_remote_stop+0x18d/0x540 [ 440.234940][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 440.234978][ C1] _raw_spin_lock_irqsave+0x42/0x60 [ 440.235013][ C1] ? __wake_up+0x1c/0x60 [ 440.235053][ C1] __wake_up+0x1c/0x60 [ 440.235094][ C1] usb_anchor_resume_wakeups+0xc7/0xf0 [ 440.235127][ C1] __usb_hcd_giveback_urb+0x3d6/0x610 [ 440.235174][ C1] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 440.235219][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 440.235256][ C1] dummy_timer+0xd85/0x3670 [ 440.235306][ C1] ? do_raw_spin_lock+0x128/0x260 [ 440.235337][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 440.235372][ C1] ? find_held_lock+0x2b/0x80 [ 440.235411][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 440.235448][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 440.235483][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 440.235521][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 440.235553][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 440.235588][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 440.235628][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 440.235674][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 440.235708][ C1] ? mark_held_locks+0x40/0x70 [ 440.235753][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 440.235785][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 440.235832][ C1] __hrtimer_run_queues+0x516/0x990 [ 440.235869][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 440.235902][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 440.235937][ C1] ? ktime_get_update_offsets_now+0x2cd/0x4d0 [ 440.235971][ C1] hrtimer_run_softirq+0x17d/0x350 [ 440.236011][ C1] handle_softirqs+0x1ea/0x910 [ 440.236053][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 440.236092][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 440.236129][ C1] __irq_exit_rcu+0xef/0x150 [ 440.236166][ C1] irq_exit_rcu+0x9/0x30 [ 440.236203][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 440.236238][ C1] [ 440.236248][ C1] [ 440.236258][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 440.236290][ C1] RIP: 0010:sg_miter_stop+0x6a/0x350 [ 440.236324][ C1] Code: 00 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 80 3c 02 00 0f 85 9f 02 00 00 4c 8b 63 10 48 89 ef 4c 89 e6 e8 a9 d6 23 fd 49 39 ec <0f> 82 2f 02 00 00 e8 7b dc 23 fd 4c 8d 63 08 48 b8 00 00 00 00 00 [ 440.236353][ C1] RSP: 0018:ffffc900001e70f0 EFLAGS: 00000246 [ 440.236376][ C1] RAX: 0000000000000000 RBX: ffffc900001e71e8 RCX: ffffffff84e2fdb7 [ 440.236396][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88801dec0000 [ 440.236415][ C1] RBP: 0000000000000000 R08: 0000000000000006 R09: 0000000000000000 [ 440.236433][ C1] R10: 0000000000000000 R11: 0a7ab4c402bd5ece R12: 0000000000000000 [ 440.236456][ C1] R13: ffffc900001e7200 R14: ffffc900001e71f8 R15: 0000000000000000 [ 440.236479][ C1] ? sg_miter_stop+0x67/0x350 [ 440.236516][ C1] sg_miter_skip+0x25/0x410 [ 440.236547][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 440.236583][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 440.236618][ C1] ? __asan_memset+0x23/0x50 [ 440.236660][ C1] sg_copy_buffer+0xec/0x240 [ 440.236695][ C1] ? __pfx_sg_copy_buffer+0x10/0x10 [ 440.236734][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 440.236769][ C1] ? poly1305_update+0x237/0x400 [ 440.236802][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 440.236840][ C1] chacha20poly1305_crypt_sg_inplace+0xaca/0xc90 [ 440.236870][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 440.236905][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 440.236943][ C1] ? __pfx_chacha20poly1305_crypt_sg_inplace+0x10/0x10 [ 440.236979][ C1] ? __lock_acquire+0x4a5/0x2630 [ 440.237033][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 440.237068][ C1] ? rcu_is_watching+0x12/0xc0 [ 440.237103][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 440.237140][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 440.237175][ C1] ? __lock_acquire+0x4a5/0x2630 [ 440.237236][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 440.237271][ C1] ? __skb_to_sgvec+0x541/0xad0 [ 440.237308][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 440.237346][ C1] chacha20poly1305_encrypt_sg_inplace+0x3e/0x50 [ 440.237380][ C1] encrypt_packet+0x6ff/0x8f0 [ 440.237408][ C1] ? __pfx_encrypt_packet+0x10/0x10 [ 440.237477][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 440.237513][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 440.237551][ C1] ? do_raw_spin_lock+0x128/0x260 [ 440.237584][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 440.237621][ C1] ? __local_bh_enable_ip+0x9e/0x120 [ 440.237662][ C1] wg_packet_encrypt_worker+0x2c0/0xbd0 [ 440.237692][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 440.237732][ C1] ? __pfx_wg_packet_encrypt_worker+0x10/0x10 [ 440.237763][ C1] ? process_one_work+0x80b/0x1840 [ 440.237794][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 440.237829][ C1] ? rcu_is_watching+0x12/0xc0 [ 440.237866][ C1] process_one_work+0x9c2/0x1840 [ 440.237903][ C1] ? __pfx_process_one_work+0x10/0x10 [ 440.237934][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 440.237974][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 440.238014][ C1] ? assign_work+0x19c/0x250 [ 440.238043][ C1] worker_thread+0x5da/0xe40 [ 440.238079][ C1] ? kthread+0x17d/0x730 [ 440.238105][ C1] ? __pfx_worker_thread+0x10/0x10 [ 440.238135][ C1] kthread+0x3b3/0x730 [ 440.238162][ C1] ? __pfx_kthread+0x10/0x10 [ 440.238188][ C1] ? ret_from_fork+0x79/0xaf0 [ 440.238217][ C1] ? ret_from_fork+0x79/0xaf0 [ 440.238246][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 440.238281][ C1] ? rcu_is_watching+0x12/0xc0 [ 440.238316][ C1] ? __pfx_kthread+0x10/0x10 [ 440.238344][ C1] ret_from_fork+0x754/0xaf0 [ 440.238374][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 440.238405][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 440.238440][ C1] ? __switch_to+0x7b9/0x10c0 [ 440.238478][ C1] ? __pfx_kthread+0x10/0x10 [ 440.238505][ C1] ret_from_fork_asm+0x1a/0x30 [ 440.238558][ C1] [ 440.238568][ C1] [ 440.906017][ C1] Allocated by task 24: [ 440.910154][ C1] kasan_save_stack+0x30/0x50 [ 440.914846][ C1] kasan_save_track+0x14/0x30 [ 440.919547][ C1] __kasan_kmalloc+0xaa/0xb0 [ 440.924159][ C1] xpad_probe+0x28e/0x1f60 [ 440.928566][ C1] usb_probe_interface+0x303/0x8f0 [ 440.933688][ C1] really_probe+0x241/0xa60 [ 440.938186][ C1] __driver_probe_device+0x1de/0x400 [ 440.943466][ C1] driver_probe_device+0x4c/0x1b0 [ 440.948486][ C1] __device_attach_driver+0x1df/0x340 [ 440.953853][ C1] bus_for_each_drv+0x159/0x1e0 [ 440.958714][ C1] __device_attach+0x1e4/0x4d0 [ 440.963482][ C1] device_initial_probe+0xaf/0xd0 [ 440.968503][ C1] bus_probe_device+0x64/0x160 [ 440.973344][ C1] device_add+0x11d9/0x1950 [ 440.977848][ C1] usb_set_configuration+0xd97/0x1c60 [ 440.983220][ C1] usb_generic_driver_probe+0xa1/0xe0 [ 440.988584][ C1] usb_probe_device+0xef/0x400 [ 440.993352][ C1] really_probe+0x241/0xa60 [ 440.997851][ C1] __driver_probe_device+0x1de/0x400 [ 441.003130][ C1] driver_probe_device+0x4c/0x1b0 [ 441.008150][ C1] __device_attach_driver+0x1df/0x340 [ 441.013516][ C1] bus_for_each_drv+0x159/0x1e0 [ 441.018374][ C1] __device_attach+0x1e4/0x4d0 [ 441.023134][ C1] device_initial_probe+0xaf/0xd0 [ 441.028155][ C1] bus_probe_device+0x64/0x160 [ 441.032908][ C1] device_add+0x11d9/0x1950 [ 441.037414][ C1] usb_new_device.cold+0x685/0x115c [ 441.042621][ C1] hub_event+0x314d/0x4af0 [ 441.047037][ C1] process_one_work+0x9c2/0x1840 [ 441.051967][ C1] worker_thread+0x5da/0xe40 [ 441.056552][ C1] kthread+0x3b3/0x730 [ 441.060609][ C1] ret_from_fork+0x754/0xaf0 [ 441.065193][ C1] ret_from_fork_asm+0x1a/0x30 [ 441.069961][ C1] [ 441.072287][ C1] Freed by task 5907: [ 441.076247][ C1] kasan_save_stack+0x30/0x50 [ 441.080933][ C1] kasan_save_track+0x14/0x30 [ 441.085616][ C1] kasan_save_free_info+0x3b/0x70 [ 441.090641][ C1] __kasan_slab_free+0x5f/0x80 [ 441.095395][ C1] kfree+0x1c7/0x690 [ 441.099289][ C1] xpad_disconnect+0x1cf/0x530 [ 441.104042][ C1] usb_unbind_interface+0x1dd/0x9e0 [ 441.109260][ C1] device_remove+0x12a/0x180 [ 441.113846][ C1] device_release_driver_internal+0x42e/0x600 [ 441.119910][ C1] bus_remove_device+0x22f/0x440 [ 441.124840][ C1] device_del+0x376/0x9b0 [ 441.129165][ C1] usb_disable_device+0x367/0x810 [ 441.134188][ C1] usb_disconnect+0x2e2/0x9a0 [ 441.138865][ C1] hub_event+0x1d0c/0x4af0 [ 441.143280][ C1] process_one_work+0x9c2/0x1840 [ 441.148261][ C1] worker_thread+0x5da/0xe40 [ 441.152929][ C1] kthread+0x3b3/0x730 [ 441.156996][ C1] ret_from_fork+0x754/0xaf0 [ 441.161579][ C1] ret_from_fork_asm+0x1a/0x30 [ 441.166354][ C1] [ 441.168656][ C1] The buggy address belongs to the object at ffff888053f9a000 [ 441.168656][ C1] which belongs to the cache kmalloc-1k of size 1024 [ 441.182693][ C1] The buggy address is located 88 bytes inside of [ 441.182693][ C1] freed 1024-byte region [ffff888053f9a000, ffff888053f9a400) [ 441.196481][ C1] [ 441.198787][ C1] The buggy address belongs to the physical page: [ 441.205177][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x53f98 [ 441.213930][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 441.222421][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 441.229952][ C1] page_type: f5(slab) [ 441.233929][ C1] raw: 00fff00000000040 ffff88813ff26dc0 ffffea0000bc5a00 dead000000000002 [ 441.242519][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 441.251116][ C1] head: 00fff00000000040 ffff88813ff26dc0 ffffea0000bc5a00 dead000000000002 [ 441.259784][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 441.268460][ C1] head: 00fff00000000003 ffffea00014fe601 00000000ffffffff 00000000ffffffff [ 441.277165][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 441.285832][ C1] page dumped because: kasan: bad access detected [ 441.292233][ C1] page_owner tracks the page as allocated [ 441.297932][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7373, tgid 7373 (kworker/u8:13), ts 280234647205, free_ts 280201478984 [ 441.317475][ C1] post_alloc_hook+0x1e1/0x250 [ 441.322251][ C1] get_page_from_freelist+0xe3d/0x2e10 [ 441.327714][ C1] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 441.333615][ C1] alloc_pages_mpol+0x1fb/0x550 [ 441.338475][ C1] new_slab+0x2c4/0x440 [ 441.342628][ C1] ___slab_alloc+0xda3/0x1ca0 [ 441.347306][ C1] __slab_alloc.isra.0+0x63/0x110 [ 441.352333][ C1] __kmalloc_noprof+0x618/0x9c0 [ 441.357186][ C1] ieee802_11_parse_elems_full+0x177/0x3720 [ 441.363081][ C1] ieee80211_ibss_rx_queued_mgmt+0xc8d/0x2f30 [ 441.369144][ C1] ieee80211_iface_work+0xbf1/0x1350 [ 441.374424][ C1] cfg80211_wiphy_work+0x3f7/0x560 [ 441.379554][ C1] process_one_work+0x9c2/0x1840 [ 441.384591][ C1] worker_thread+0x5da/0xe40 [ 441.389177][ C1] kthread+0x3b3/0x730 [ 441.393238][ C1] ret_from_fork+0x754/0xaf0 [ 441.397827][ C1] page last free pid 5807 tgid 5807 stack trace: [ 441.404135][ C1] __free_frozen_pages+0x822/0x1130 [ 441.409338][ C1] __folio_put+0x3b4/0x540 [ 441.413741][ C1] put_netmem+0x294/0x320 [ 441.418073][ C1] skb_release_data+0x4b2/0x700 [ 441.422927][ C1] skb_attempt_defer_free+0x1f5/0x700 [ 441.428295][ C1] tcp_recvmsg_locked+0x1189/0x28e0 [ 441.433491][ C1] tcp_recvmsg+0x138/0x630 [ 441.437904][ C1] inet_recvmsg+0x129/0x6a0 [ 441.442401][ C1] sock_recvmsg+0x1b2/0x250 [ 441.446894][ C1] sock_read_iter+0x2c6/0x3c0 [ 441.451560][ C1] vfs_read+0x957/0xb30 [ 441.455719][ C1] ksys_read+0x1f8/0x250 [ 441.459962][ C1] do_syscall_64+0xc9/0xf80 [ 441.464485][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.470373][ C1] [ 441.472675][ C1] Memory state around the buggy address: [ 441.478283][ C1] ffff888053f99f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 441.486329][ C1] ffff888053f99f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 441.494379][ C1] >ffff888053f9a000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 441.502421][ C1] ^ [ 441.509334][ C1] ffff888053f9a080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 441.517382][ C1] ffff888053f9a100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 441.525425][ C1] ================================================================== [ 441.533466][ C1] Kernel panic - not syncing: kasan.fault=panic_on_write set ... [ 441.541172][ C1] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Tainted: G B L syzkaller #0 PREEMPT(full) [ 441.551935][ C1] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 441.557458][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 441.567504][ C1] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker [ 441.574092][ C1] Call Trace: [ 441.577368][ C1] [ 441.580203][ C1] dump_stack_lvl+0x100/0x190 [ 441.584885][ C1] vpanic+0x20d/0x630 [ 441.588863][ C1] panic+0xd1/0xd1 [ 441.592576][ C1] ? __pfx_panic+0x10/0x10 [ 441.596988][ C1] ? end_report.part.0+0x23/0x90 [ 441.601949][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 441.607610][ C1] ? rcu_is_watching+0x12/0xc0 [ 441.612378][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 441.618164][ C1] ? lock_release+0x21e/0x2e0 [ 441.622869][ C1] end_report.part.0+0x68/0x90 [ 441.627648][ C1] kasan_report.cold+0xe/0x18 [ 441.632336][ C1] ? do_raw_spin_lock+0x119/0x260 [ 441.637366][ C1] kasan_check_range+0x10f/0x1e0 [ 441.642311][ C1] do_raw_spin_lock+0x119/0x260 [ 441.647162][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 441.652530][ C1] ? kcov_remote_stop+0x18d/0x540 [ 441.657561][ C1] ? kcov_remote_stop+0x18d/0x540 [ 441.662590][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 441.668226][ C1] _raw_spin_lock_irqsave+0x42/0x60 [ 441.673421][ C1] ? __wake_up+0x1c/0x60 [ 441.677668][ C1] __wake_up+0x1c/0x60 [ 441.681744][ C1] usb_anchor_resume_wakeups+0xc7/0xf0 [ 441.687204][ C1] __usb_hcd_giveback_urb+0x3d6/0x610 [ 441.692600][ C1] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 441.697807][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 441.703442][ C1] dummy_timer+0xd85/0x3670 [ 441.707960][ C1] ? do_raw_spin_lock+0x128/0x260 [ 441.712983][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 441.718619][ C1] ? find_held_lock+0x2b/0x80 [ 441.723298][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 441.728932][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 441.734562][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 441.740201][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 441.746178][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 441.751810][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 441.757452][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 441.762403][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 441.768036][ C1] ? mark_held_locks+0x40/0x70 [ 441.772811][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 441.778621][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 441.783603][ C1] __hrtimer_run_queues+0x516/0x990 [ 441.788806][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 441.794525][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 441.800227][ C1] ? ktime_get_update_offsets_now+0x2cd/0x4d0 [ 441.806295][ C1] hrtimer_run_softirq+0x17d/0x350 [ 441.811407][ C1] handle_softirqs+0x1ea/0x910 [ 441.816180][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 441.821469][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 441.827104][ C1] __irq_exit_rcu+0xef/0x150 [ 441.831696][ C1] irq_exit_rcu+0x9/0x30 [ 441.835946][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 441.841577][ C1] [ 441.844489][ C1] [ 441.847400][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 441.853376][ C1] RIP: 0010:sg_miter_stop+0x6a/0x350 [ 441.858665][ C1] Code: 00 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 80 3c 02 00 0f 85 9f 02 00 00 4c 8b 63 10 48 89 ef 4c 89 e6 e8 a9 d6 23 fd 49 39 ec <0f> 82 2f 02 00 00 e8 7b dc 23 fd 4c 8d 63 08 48 b8 00 00 00 00 00 [ 441.878266][ C1] RSP: 0018:ffffc900001e70f0 EFLAGS: 00000246 [ 441.884325][ C1] RAX: 0000000000000000 RBX: ffffc900001e71e8 RCX: ffffffff84e2fdb7 [ 441.892290][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88801dec0000 [ 441.900254][ C1] RBP: 0000000000000000 R08: 0000000000000006 R09: 0000000000000000 [ 441.908213][ C1] R10: 0000000000000000 R11: 0a7ab4c402bd5ece R12: 0000000000000000 [ 441.916171][ C1] R13: ffffc900001e7200 R14: ffffc900001e71f8 R15: 0000000000000000 [ 441.924136][ C1] ? sg_miter_stop+0x67/0x350 [ 441.928815][ C1] sg_miter_skip+0x25/0x410 [ 441.933315][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 441.938949][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 441.944581][ C1] ? __asan_memset+0x23/0x50 [ 441.949178][ C1] sg_copy_buffer+0xec/0x240 [ 441.953785][ C1] ? __pfx_sg_copy_buffer+0x10/0x10 [ 441.958992][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 441.964627][ C1] ? poly1305_update+0x237/0x400 [ 441.969561][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 441.975195][ C1] chacha20poly1305_crypt_sg_inplace+0xaca/0xc90 [ 441.981520][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 441.987152][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 441.992356][ C1] ? __pfx_chacha20poly1305_crypt_sg_inplace+0x10/0x10 [ 441.999205][ C1] ? __lock_acquire+0x4a5/0x2630 [ 442.004161][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.009790][ C1] ? rcu_is_watching+0x12/0xc0 [ 442.014565][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.020202][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.025833][ C1] ? __lock_acquire+0x4a5/0x2630 [ 442.030798][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.036432][ C1] ? __skb_to_sgvec+0x541/0xad0 [ 442.041285][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.046926][ C1] chacha20poly1305_encrypt_sg_inplace+0x3e/0x50 [ 442.053256][ C1] encrypt_packet+0x6ff/0x8f0 [ 442.057930][ C1] ? __pfx_encrypt_packet+0x10/0x10 [ 442.063163][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.068796][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.074434][ C1] ? do_raw_spin_lock+0x128/0x260 [ 442.079459][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.085093][ C1] ? __local_bh_enable_ip+0x9e/0x120 [ 442.090390][ C1] wg_packet_encrypt_worker+0x2c0/0xbd0 [ 442.095931][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 442.101568][ C1] ? __pfx_wg_packet_encrypt_worker+0x10/0x10 [ 442.107629][ C1] ? process_one_work+0x80b/0x1840 [ 442.112738][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.118372][ C1] ? rcu_is_watching+0x12/0xc0 [ 442.123138][ C1] process_one_work+0x9c2/0x1840 [ 442.128089][ C1] ? __pfx_process_one_work+0x10/0x10 [ 442.133460][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.139104][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.144739][ C1] ? assign_work+0x19c/0x250 [ 442.149329][ C1] worker_thread+0x5da/0xe40 [ 442.153940][ C1] ? kthread+0x17d/0x730 [ 442.158178][ C1] ? __pfx_worker_thread+0x10/0x10 [ 442.163304][ C1] kthread+0x3b3/0x730 [ 442.167369][ C1] ? __pfx_kthread+0x10/0x10 [ 442.171952][ C1] ? ret_from_fork+0x79/0xaf0 [ 442.176628][ C1] ? ret_from_fork+0x79/0xaf0 [ 442.181301][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.186936][ C1] ? rcu_is_watching+0x12/0xc0 [ 442.191704][ C1] ? __pfx_kthread+0x10/0x10 [ 442.196290][ C1] ret_from_fork+0x754/0xaf0 [ 442.200876][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 442.205983][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.211620][ C1] ? __switch_to+0x7b9/0x10c0 [ 442.216318][ C1] ? __pfx_kthread+0x10/0x10 [ 442.220902][ C1] ret_from_fork_asm+0x1a/0x30 [ 442.225683][ C1] [ 442.228988][ C1] Kernel Offset: disabled [ 442.233314][ C1] Rebooting in 86400 seconds..