last executing test programs: 14.60496418s ago: executing program 3 (id=389): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x48) preadv2(0xffffffffffffffff, 0x0, 0x0, 0xd0d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000780), 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x44850) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x6, 0x185002) r5 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00", 0xffffffffffffffff}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) r6 = gettid() syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00') socket$inet6_sctp(0xa, 0x5, 0x84) socket$rds(0x15, 0x5, 0x0) r7 = socket$isdn(0x22, 0x2, 0x25) r8 = dup3(r7, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r6}, &(0x7f0000044000)=0x0) r10 = syz_open_dev$usbfs(0x0, 0x2000800000001f9, 0x190002) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x34, 0x3d, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x145}, @nested={0x1c, 0x9, 0x0, 0x1, [@nested={0x18, 0x1e, 0x0, 0x1, [@nested={0x11, 0x13b, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@local}, @generic="9a19a13bbc"]}]}]}]}, 0x34}}, 0x4040040) r12 = dup(r10) ioctl$USBDEVFS_CONTROL(r12, 0xc0185500, &(0x7f0000000300)={0x20, 0xc, 0xd9bf, 0xf, 0x0, 0x2, 0x0}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f00000000c0)={"1c9b63f10439cc8153e1e65aa400000000020000ec6e00", r3}) timer_delete(r9) timer_getoverrun(r9) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000080)=0x2) 11.709917707s ago: executing program 3 (id=400): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x3fa, 0x100, 0x70bd27, 0x25dfdbfb, {0x1, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x24008040}, 0x4048000) 10.458638943s ago: executing program 4 (id=401): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000400)={0x40, 0xd, 0x4c, "4b106fa17bde1e3a57483030c7fb69dbad9426cca88aa04d5faa58a2b114870b6c3a113c77672925c648755b50ebc5c5c1f0c084de433f7b4a081d97ad439f5d80170ca7f62ec5f7b3e5ff21"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.413959003s ago: executing program 2 (id=402): gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00", 0xffffffffffffffff}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x2, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}, {0x6, 0x7, 0x9}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r2}) r5 = gettid() syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00') socket$inet6_sctp(0xa, 0x5, 0x84) socket$rds(0x15, 0x5, 0x0) r6 = socket$isdn(0x22, 0x2, 0x25) r7 = dup3(r6, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r5}, &(0x7f0000044000)=0x0) r9 = syz_open_dev$usbfs(0x0, 0x2000800000001f9, 0x190002) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x34, 0x3d, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x145}, @nested={0x1c, 0x9, 0x0, 0x1, [@nested={0x18, 0x1e, 0x0, 0x1, [@nested={0x11, 0x13b, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@local}, @generic="9a19a13bbc"]}]}]}]}, 0x34}}, 0x4040040) r11 = dup(r9) ioctl$USBDEVFS_CONTROL(r11, 0xc0185500, &(0x7f0000000300)={0x20, 0xc, 0xd9bf, 0xf, 0x0, 0x2, 0x0}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f00000000c0)={"1c9b63f10439cc8153e1e65aa400000000020000ec6e00", r1}) timer_delete(r8) timer_getoverrun(r8) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000080)=0x2) 10.329872191s ago: executing program 3 (id=403): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x400, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0x3, 0xc}, {0xfff3, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_MPU={0x8, 0xe, 0xc3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000100)=0x3, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023"], 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x2000, 0x2}, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg2\x00'}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x14, r3, 0x1}, 0x14}}, 0x0) listen(0xffffffffffffffff, 0x1ff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0xf8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 9.967285915s ago: executing program 0 (id=406): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x48) preadv2(0xffffffffffffffff, 0x0, 0x0, 0xd0d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000780), 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x44850) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x6, 0x185002) r5 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, 0x0, 0x0, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", 0x0, 0x0, 0x14, 0x0, 0x0}) connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) r8 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f00000000c0)={@private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0xc}, 0xb, 0x3, 0x5, 0x100, 0xfa3d}) sendmmsg$inet6(r0, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 7.765897748s ago: executing program 1 (id=410): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00", 0xffffffffffffffff}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) r6 = gettid() syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00') socket$inet6_sctp(0xa, 0x5, 0x84) socket$rds(0x15, 0x5, 0x0) r7 = socket$isdn(0x22, 0x2, 0x25) r8 = dup3(r7, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r6}, &(0x7f0000044000)=0x0) r10 = syz_open_dev$usbfs(0x0, 0x2000800000001f9, 0x190002) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x34, 0x3d, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x145}, @nested={0x1c, 0x9, 0x0, 0x1, [@nested={0x18, 0x1e, 0x0, 0x1, [@nested={0x11, 0x13b, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@local}, @generic="9a19a13bbc"]}]}]}]}, 0x34}}, 0x4040040) r12 = dup(r10) ioctl$USBDEVFS_CONTROL(r12, 0xc0185500, &(0x7f0000000300)={0x20, 0xc, 0xd9bf, 0xf, 0x0, 0x2, 0x0}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f00000000c0)={"1c9b63f10439cc8153e1e65aa400000000020000ec6e00", r3}) timer_delete(r9) timer_getoverrun(r9) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000080)=0x2) 6.781991368s ago: executing program 3 (id=411): syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x1200010, &(0x7f0000000480)=ANY=[@ANYRES32], 0xff, 0x5a07, &(0x7f000000bbc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) fallocate(r0, 0x10, 0xcf7, 0x2c03) 6.090073898s ago: executing program 2 (id=412): preadv2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000002240)=""/148, 0x94}], 0x1, 0xd0d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000780), 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x6, 0x185002) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) 5.505571951s ago: executing program 4 (id=415): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x18) openat(0xffffffffffffff9c, 0x0, 0x88040, 0x0) 4.850099443s ago: executing program 4 (id=416): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x48) preadv2(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0xd0d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000780), 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x44850) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x6, 0x185002) syz_open_procfs(0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = gettid() tkill(r2, 0x12) r3 = syz_io_uring_setup(0x6148, &(0x7f0000000340)={0x0, 0x13ea, 0x2, 0x2, 0x3c6}, &(0x7f0000000040), &(0x7f0000000140)) io_uring_enter(r3, 0x2241, 0x1b86, 0x1, &(0x7f00000001c0), 0x8) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000040)={[{@dax_never}, {@dax}, {@dax}, {@cache_strategy_readaround}], [{@fsmagic={'fsmagic', 0x3d, 0x5}}]}, 0x1, 0x1a1, &(0x7f00000003c0)="$eJzsmL9OwlAUxr/bIg2GwckYF00kAU0sbVHD4sDgbqJo3CRSCVrEQAchMdHJV3Bx8Al8AQcHH8DBB0AnF92ca9pe6KX+QRKjGM5vOP0K595+Pdx8AyAIYmh5fHhtteyrFxlAHAko/PMnOeiRhP7xW7monK1MXN8fz13kz3Ph/RgAx/n+8yMAbnIybH7vON2rE/y6Dqmj85Awy/UmGFSutyFhg2sTDFtc74HhhOuq26+qu2XLVHeqVtEVmlt0txhuyYT9PZ8yFAV/TPi+3mjuFyzLrH0iHKV3Ty/x/lcI+ctJWBb8iZ3t2WjC/HRI0LnOgGGN6yyU9mz8kQjvPxkJ9pf7eP9fENm7r2wY7QPxhw6HRST7XRUHMCjm/6OIDfDBDvLJuWRICvkUEfIjbVcO0/VGc75cKZTMknlgGJklbUHTFo20F0R+FSOPdedfzMunUWH/kQ+TEoiyKI4Ktl3T/dq5N/waTlxvjZd/ElIzwcOjoX09Q2Ns2r2k5JBBgiAIgiAIgiAIgiAIgiCIH2MKzPsXtAfGqtf9FgAA//9x3G7G") 4.562487448s ago: executing program 2 (id=417): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00", 0xffffffffffffffff}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x2, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}, {0x6, 0x7, 0x9}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) r6 = gettid() syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00') socket$inet6_sctp(0xa, 0x5, 0x84) socket$rds(0x15, 0x5, 0x0) r7 = socket$isdn(0x22, 0x2, 0x25) r8 = dup3(r7, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r6}, &(0x7f0000044000)=0x0) r10 = syz_open_dev$usbfs(0x0, 0x2000800000001f9, 0x190002) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x34, 0x3d, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x145}, @nested={0x1c, 0x9, 0x0, 0x1, [@nested={0x18, 0x1e, 0x0, 0x1, [@nested={0x11, 0x13b, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@local}, @generic="9a19a13bbc"]}]}]}]}, 0x34}}, 0x4040040) r12 = dup(r10) ioctl$USBDEVFS_CONTROL(r12, 0xc0185500, &(0x7f0000000300)={0x20, 0xc, 0xd9bf, 0xf, 0x0, 0x2, 0x0}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f00000000c0)={"1c9b63f10439cc8153e1e65aa400000000020000ec6e00", r2}) timer_delete(r9) timer_getoverrun(r9) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000080)=0x2) 4.388544352s ago: executing program 0 (id=418): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x400, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0x3, 0xc}, {0xfff3, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_MPU={0x8, 0xe, 0xc3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000100)=0x3, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023"], 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x2000, 0x2}, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg2\x00'}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x14, r3, 0x1}, 0x14}}, 0x0) listen(0xffffffffffffffff, 0x1ff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0xf8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.91351972s ago: executing program 1 (id=419): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000003300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], 0x270}}], 0x2, 0x40) r1 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r1, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 3.162309238s ago: executing program 1 (id=420): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x48) preadv2(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0xd0d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000780), 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x44850) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x6, 0x185002) r5 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000040)={0x7ff, 0x7, 0x7, 0x8001, 0x10, "51ca78f98ea1e8c9"}) shutdown(r3, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) 2.909581537s ago: executing program 0 (id=422): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x48) preadv2(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0xd0d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000780), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x44850) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x6, 0x185002) syz_open_procfs(0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000180)="10", 0x1}], 0x1, 0x800000, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, 0xffffffffffffffff) sendfile(r4, r4, 0x0, 0x24002de8) 1.97755574s ago: executing program 4 (id=423): r0 = socket$inet6(0xa, 0x802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xaece, 0x2) preadv(r3, 0x0, 0x0, 0x43a, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", 0x0, 0x0, 0x14, 0x0, 0x0}) connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) r8 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f00000000c0)={@private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0xc}, 0xb, 0x3, 0x5, 0x100, 0xfa3d}) sendmmsg$inet6(r0, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 1.918582147s ago: executing program 2 (id=424): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000780), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x44850) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x6, 0x185002) r5 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00", 0xffffffffffffffff}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) r6 = gettid() syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00') socket$inet6_sctp(0xa, 0x5, 0x84) socket$rds(0x15, 0x5, 0x0) r7 = socket$isdn(0x22, 0x2, 0x25) r8 = dup3(r7, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r6}, &(0x7f0000044000)=0x0) r10 = syz_open_dev$usbfs(0x0, 0x2000800000001f9, 0x190002) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x34, 0x3d, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x145}, @nested={0x1c, 0x9, 0x0, 0x1, [@nested={0x18, 0x1e, 0x0, 0x1, [@nested={0x11, 0x13b, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@local}, @generic="9a19a13bbc"]}]}]}]}, 0x34}}, 0x4040040) r12 = dup(r10) ioctl$USBDEVFS_CONTROL(r12, 0xc0185500, &(0x7f0000000300)={0x20, 0xc, 0xd9bf, 0xf, 0x0, 0x2, 0x0}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f00000000c0)={"1c9b63f10439cc8153e1e65aa400000000020000ec6e00", r3}) timer_delete(r9) timer_getoverrun(r9) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000080)=0x2) 687.442169ms ago: executing program 0 (id=426): set_mempolicy(0x8006, &(0x7f0000000040)=0x400000fff, 0x9b) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$gfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x208c1b, &(0x7f0000012900)=ANY=[@ANYBLOB="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"], 0xff, 0x12754, &(0x7f0000000140)="$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") 458.179273ms ago: executing program 2 (id=427): r0 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="1e", 0x1}], 0x1) 0s ago: executing program 1 (id=428): preadv2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000002240)=""/148, 0x94}], 0x1, 0xd0d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000780), 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x6, 0x185002) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n 1 [ 88.060446][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.068841][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.077160][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.085363][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.088865][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.093187][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.107541][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.115816][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.124150][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.133231][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.141465][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.147246][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.149119][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.164384][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.172072][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.179945][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.187159][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.195139][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.202570][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.215407][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.224021][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.234972][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.243348][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.259704][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.912275][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 88.980134][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 89.092327][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 89.188557][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 89.246776][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 89.267605][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.274978][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.284294][ T5843] bridge_slave_0: entered allmulticast mode [ 89.292753][ T5843] bridge_slave_0: entered promiscuous mode [ 89.365961][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.373540][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.381101][ T5843] bridge_slave_1: entered allmulticast mode [ 89.388276][ T5843] bridge_slave_1: entered promiscuous mode [ 89.416845][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.424144][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.431660][ T5830] bridge_slave_0: entered allmulticast mode [ 89.438893][ T5830] bridge_slave_0: entered promiscuous mode [ 89.507573][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.515121][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.522718][ T5830] bridge_slave_1: entered allmulticast mode [ 89.531425][ T5830] bridge_slave_1: entered promiscuous mode [ 89.584305][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.628742][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.636223][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.644520][ T5835] bridge_slave_0: entered allmulticast mode [ 89.652477][ T5835] bridge_slave_0: entered promiscuous mode [ 89.663306][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.707045][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.720444][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.730245][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.737371][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.745253][ T5835] bridge_slave_1: entered allmulticast mode [ 89.752858][ T5835] bridge_slave_1: entered promiscuous mode [ 89.785621][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.792893][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.800635][ T5833] bridge_slave_0: entered allmulticast mode [ 89.807819][ T5833] bridge_slave_0: entered promiscuous mode [ 89.815781][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.823010][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.830335][ T5833] bridge_slave_1: entered allmulticast mode [ 89.837580][ T5833] bridge_slave_1: entered promiscuous mode [ 89.901386][ T5843] team0: Port device team_slave_0 added [ 89.939172][ T5830] team0: Port device team_slave_0 added [ 89.948646][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.962144][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.973332][ T5843] team0: Port device team_slave_1 added [ 89.994878][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.002376][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.010439][ T5831] bridge_slave_0: entered allmulticast mode [ 90.017670][ T5831] bridge_slave_0: entered promiscuous mode [ 90.027418][ T5830] team0: Port device team_slave_1 added [ 90.065034][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.074717][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.083161][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.090761][ T5831] bridge_slave_1: entered allmulticast mode [ 90.097990][ T5831] bridge_slave_1: entered promiscuous mode [ 90.164161][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.202340][ T5835] team0: Port device team_slave_0 added [ 90.210245][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.217240][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.243930][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.258480][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.265975][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.292343][ T5840] Bluetooth: hci3: command tx timeout [ 90.292744][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.298155][ T5840] Bluetooth: hci0: command tx timeout [ 90.330407][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.339701][ T5153] Bluetooth: hci1: command tx timeout [ 90.340192][ T5153] Bluetooth: hci2: command tx timeout [ 90.345252][ T5840] Bluetooth: hci4: command tx timeout [ 90.360325][ T5835] team0: Port device team_slave_1 added [ 90.367008][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.374702][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.400886][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.420645][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.427634][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.454115][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.483425][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.536786][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.544159][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.570822][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.595199][ T5833] team0: Port device team_slave_0 added [ 90.618659][ T5831] team0: Port device team_slave_0 added [ 90.627105][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.634827][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.660880][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.693349][ T5833] team0: Port device team_slave_1 added [ 90.730704][ T5831] team0: Port device team_slave_1 added [ 90.772483][ T5843] hsr_slave_0: entered promiscuous mode [ 90.779004][ T5843] hsr_slave_1: entered promiscuous mode [ 90.865502][ T5830] hsr_slave_0: entered promiscuous mode [ 90.871970][ T5830] hsr_slave_1: entered promiscuous mode [ 90.878113][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.886635][ T5830] Cannot create hsr debugfs directory [ 90.892984][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.900984][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.927139][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.957749][ T5835] hsr_slave_0: entered promiscuous mode [ 90.964396][ T5835] hsr_slave_1: entered promiscuous mode [ 90.970826][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.978435][ T5835] Cannot create hsr debugfs directory [ 90.985492][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.992504][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.019500][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.031869][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.038865][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.065013][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.108678][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.115938][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.143170][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.422090][ T5831] hsr_slave_0: entered promiscuous mode [ 91.428586][ T5831] hsr_slave_1: entered promiscuous mode [ 91.435988][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.443669][ T5831] Cannot create hsr debugfs directory [ 91.477404][ T5833] hsr_slave_0: entered promiscuous mode [ 91.484119][ T5833] hsr_slave_1: entered promiscuous mode [ 91.490547][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.498136][ T5833] Cannot create hsr debugfs directory [ 91.866410][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.907794][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.940648][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.952812][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.022237][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.022245][ T24] cfg80211: failed to load regulatory.db [ 92.038685][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.060023][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.071734][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.163428][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.210113][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.246164][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.280681][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.340127][ T5840] Bluetooth: hci0: command tx timeout [ 92.340184][ T5153] Bluetooth: hci3: command tx timeout [ 92.356029][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.368032][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.385562][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.414940][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.420366][ T5153] Bluetooth: hci2: command tx timeout [ 92.422385][ T5840] Bluetooth: hci1: command tx timeout [ 92.427093][ T5848] Bluetooth: hci4: command tx timeout [ 92.443513][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.502238][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.521821][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.539607][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.546892][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.613710][ T1321] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.620935][ T1321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.668694][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.681213][ T5833] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.705696][ T5833] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.724328][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.731539][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.747326][ T5833] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.758697][ T5833] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.802510][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.809730][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.972409][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.095445][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.137135][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.191263][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.198472][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.254672][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.261969][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.323644][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.333627][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.384557][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.395734][ T3510] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.403011][ T3510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.417966][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.430747][ T3510] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.437918][ T3510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.465493][ T5835] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 93.476149][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.547382][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.604548][ T3510] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.611748][ T3510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.654326][ T3510] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.661603][ T3510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.693147][ T5831] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 93.711486][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.754561][ T5843] veth0_vlan: entered promiscuous mode [ 93.827096][ T5843] veth1_vlan: entered promiscuous mode [ 93.904840][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.944507][ T5830] veth0_vlan: entered promiscuous mode [ 94.014824][ T5830] veth1_vlan: entered promiscuous mode [ 94.036839][ T5843] veth0_macvtap: entered promiscuous mode [ 94.060540][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.083397][ T5843] veth1_macvtap: entered promiscuous mode [ 94.138330][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.180050][ T5830] veth0_macvtap: entered promiscuous mode [ 94.193147][ T5830] veth1_macvtap: entered promiscuous mode [ 94.219080][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.236735][ T5835] veth0_vlan: entered promiscuous mode [ 94.248007][ T5843] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.257823][ T5843] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.268745][ T5843] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.279428][ T5843] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.335277][ T5835] veth1_vlan: entered promiscuous mode [ 94.354251][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.374607][ T5831] veth0_vlan: entered promiscuous mode [ 94.398615][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.415404][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.419888][ T5848] Bluetooth: hci3: command tx timeout [ 94.425763][ T5840] Bluetooth: hci0: command tx timeout [ 94.445425][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.487107][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.497869][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.508029][ T5840] Bluetooth: hci4: command tx timeout [ 94.509897][ T5840] Bluetooth: hci1: command tx timeout [ 94.516800][ T5848] Bluetooth: hci2: command tx timeout [ 94.526574][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.540262][ T5831] veth1_vlan: entered promiscuous mode [ 94.570316][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.579071][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.589248][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.599039][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.662375][ T5835] veth0_macvtap: entered promiscuous mode [ 94.684382][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.692685][ T5835] veth1_macvtap: entered promiscuous mode [ 94.709174][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.790027][ T5831] veth0_macvtap: entered promiscuous mode [ 94.834232][ T3510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.857222][ T5831] veth1_macvtap: entered promiscuous mode [ 94.860460][ T3510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.868348][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.881897][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.891792][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.902789][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.914096][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.928616][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.940256][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.950240][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.960937][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.972371][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.004212][ T3510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.018236][ T5835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.029050][ T5835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.029486][ T3510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.041869][ T5835] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.058266][ T5835] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.090182][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.105851][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.116638][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.128438][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.138370][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.149662][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.161989][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.195460][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.202813][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.207738][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.232475][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.243551][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.253494][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.264197][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.275521][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.294212][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.307406][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.339910][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.359811][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.368580][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.395773][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.566936][ T5833] veth0_vlan: entered promiscuous mode [ 95.589072][ T5833] veth1_vlan: entered promiscuous mode [ 95.634458][ T5833] veth0_macvtap: entered promiscuous mode [ 95.666625][ T5833] veth1_macvtap: entered promiscuous mode [ 95.863307][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.876615][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.889571][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.908354][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.940204][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.951369][ T5924] loop2: detected capacity change from 0 to 16 [ 95.956445][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.969695][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.982748][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.994150][ T5924] erofs (device loop2): mounted with root inode @ nid 36. [ 96.007899][ T5924] syz.2.6: attempt to access beyond end of device [ 96.007899][ T5924] loop2: rw=0, sector=4282368000, nr_sectors = 8 limit=16 [ 96.016732][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.045546][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.066091][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.076118][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.086671][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.096728][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.107259][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.117614][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.128796][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.143106][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.158434][ T3510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.179729][ T3510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.213193][ T5833] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.245903][ T5833] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.256638][ T5833] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.269528][ T5833] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.451454][ T3510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.475084][ T3510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.490833][ T1205] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.500217][ T5848] Bluetooth: hci3: command tx timeout [ 96.505678][ T5848] Bluetooth: hci0: command tx timeout [ 96.538793][ T3510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.547968][ T3510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.580486][ T5848] Bluetooth: hci2: command tx timeout [ 96.580626][ T5840] Bluetooth: hci1: command tx timeout [ 96.585929][ T5848] Bluetooth: hci4: command tx timeout [ 96.677766][ T1205] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.715889][ T1205] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 96.738429][ T3510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.742388][ T1205] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.770517][ T3510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.813562][ T3510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.821104][ T1205] usb 3-1: config 0 descriptor?? [ 96.844652][ T3510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.028637][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.064217][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.075783][ T5936] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4'. [ 97.128700][ T5936] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4'. [ 97.190139][ T5939] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4'. [ 97.305858][ T1205] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 97.435677][ T1205] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0001/input/input5 [ 97.441760][ T5945] loop0: detected capacity change from 0 to 1024 [ 97.700603][ T1205] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 97.789178][ T5957] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10'. [ 97.824305][ T1205] usb 3-1: USB disconnect, device number 2 [ 97.852596][ T5957] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10'. [ 97.996250][ T5945] EXT4-fs (loop0): Test dummy encryption mode enabled [ 98.040226][ T5945] EXT4-fs (loop0): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 98.152393][ T5969] loop3: detected capacity change from 0 to 1024 [ 98.257198][ T5945] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.387915][ T5945] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 98.575813][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.638732][ T13] hfsplus: b-tree write err: -5, ino 4 [ 98.881120][ T5979] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 99.126809][ T30] audit: type=1326 audit(1744730329.073:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5983 comm="syz.0.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb4de985127 code=0x7ffc0000 [ 99.220083][ T9] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 99.253526][ T30] audit: type=1326 audit(1744730329.073:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5983 comm="syz.0.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb4de92a359 code=0x7ffc0000 [ 99.292321][ T30] audit: type=1326 audit(1744730329.073:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5983 comm="syz.0.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb4de985127 code=0x7ffc0000 [ 99.400300][ T30] audit: type=1326 audit(1744730329.073:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5983 comm="syz.0.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb4de92a359 code=0x7ffc0000 [ 99.455580][ T5987] loop0: detected capacity change from 0 to 512 [ 99.464222][ T30] audit: type=1326 audit(1744730329.103:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5983 comm="syz.0.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb4de985127 code=0x7ffc0000 [ 99.488831][ T30] audit: type=1326 audit(1744730329.103:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5983 comm="syz.0.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb4de92a359 code=0x7ffc0000 [ 99.512552][ T30] audit: type=1326 audit(1744730329.103:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5983 comm="syz.0.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb4de985127 code=0x7ffc0000 [ 99.555102][ T5968] loop1: detected capacity change from 0 to 32768 [ 99.555916][ T30] audit: type=1326 audit(1744730329.103:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5983 comm="syz.0.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb4de92a359 code=0x7ffc0000 [ 99.590029][ T30] audit: type=1326 audit(1744730329.103:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5983 comm="syz.0.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb4de985127 code=0x7ffc0000 [ 99.605807][ T5987] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 99.613603][ T30] audit: type=1326 audit(1744730329.103:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5983 comm="syz.0.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb4de92a359 code=0x7ffc0000 [ 99.709088][ T5987] EXT4-fs (loop0): 1 truncate cleaned up [ 99.743031][ T5987] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.765465][ T5968] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 99.781073][ T5968] bcachefs (loop1): initializing new filesystem [ 99.799921][ T5968] bcachefs (loop1): going read-write [ 99.854379][ T5987] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 99.878860][ T5968] bcachefs (loop1): marking superblocks [ 99.948538][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.988169][ T5968] bcachefs (loop1): initializing freespace [ 100.008755][ T5968] bcachefs (loop1): done initializing freespace [ 100.044296][ T5968] bcachefs (loop1): reading snapshots table [ 100.051917][ T5968] bcachefs (loop1): reading snapshots done [ 100.104191][ T5968] bcachefs (loop1): done starting filesystem [ 100.226908][ T5990] loop3: detected capacity change from 0 to 32768 [ 100.272321][ T5990] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.19 (5990) [ 100.300234][ T9] usb 3-1: device descriptor read/64, error -71 [ 100.345003][ T5990] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 100.355812][ T5990] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 100.367138][ T5990] BTRFS info (device loop3): using free-space-tree [ 100.444578][ T5968] syz.1.11 (5968) used greatest stack depth: 15152 bytes left [ 100.479770][ T5831] bcachefs (loop1): shutting down [ 100.501084][ T5831] bcachefs (loop1): going read-only [ 100.512914][ T5831] bcachefs (loop1): finished waiting for writes to stop [ 100.556521][ T5831] bcachefs (loop1): flushing journal and stopping allocators, journal seq 4 [ 100.559448][ T9] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 100.595896][ T6004] loop4: detected capacity change from 0 to 32768 [ 100.617240][ T6004] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.22 (6004) [ 100.644674][ T5831] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 4 [ 100.657273][ T6004] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 100.680432][ T5831] bcachefs (loop1): clean shutdown complete, journal seq 5 [ 100.683493][ T6004] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 100.718327][ T6004] BTRFS info (device loop4): using free-space-tree [ 100.727127][ T5831] bcachefs (loop1): marking filesystem clean [ 100.776819][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 100.818760][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.841343][ T5835] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 100.854469][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 100.879374][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.881611][ T5831] bcachefs (loop1): shutdown complete [ 101.097330][ T5833] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 101.128120][ T9] usb 3-1: GET_CAPABILITIES returned 0 [ 101.156840][ T9] usbtmc 3-1:16.0: can't read capabilities [ 101.413170][ T1205] usb 3-1: USB disconnect, device number 4 [ 101.636196][ T6079] loop3: detected capacity change from 0 to 512 [ 101.722564][ T6079] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.849069][ T5835] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.078042][ T6081] loop0: detected capacity change from 0 to 32768 [ 102.085500][ T6081] ======================================================= [ 102.085500][ T6081] WARNING: The mand mount option has been deprecated and [ 102.085500][ T6081] and is ignored by this kernel. Remove the mand [ 102.085500][ T6081] option from the mount to silence this warning. [ 102.085500][ T6081] ======================================================= [ 102.265372][ T6081] JBD2: Ignoring recovery information on journal [ 102.414413][ T6081] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 102.654834][ T5830] ocfs2: Unmounting device (7,0) on (node local) [ 102.685907][ T6086] loop3: detected capacity change from 0 to 32768 [ 102.802260][ T6088] loop2: detected capacity change from 0 to 32768 [ 102.950875][ T6098] loop0: detected capacity change from 0 to 64 [ 103.107163][ T6088] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 103.144919][ T6095] loop4: detected capacity change from 0 to 32768 [ 103.164632][ T6088] bcachefs (loop2): initializing new filesystem [ 103.180892][ T5830] hfs: node 4:3 still has 2 user(s)! [ 103.196378][ T6088] bcachefs (loop2): going read-write [ 103.292888][ T6088] bcachefs (loop2): marking superblocks [ 103.309582][ T6108] loop1: detected capacity change from 0 to 64 [ 103.354141][ T6088] bcachefs (loop2): initializing freespace [ 103.376472][ T6088] bcachefs (loop2): done initializing freespace [ 103.392908][ T6088] bcachefs (loop2): reading snapshots table [ 103.399165][ T6088] bcachefs (loop2): reading snapshots done [ 103.559640][ T6088] bcachefs (loop2): done starting filesystem [ 103.866857][ T6088] syz.2.31 (6088) used greatest stack depth: 14760 bytes left [ 103.892142][ T6118] loop4: detected capacity change from 0 to 4096 [ 103.907428][ T5843] bcachefs (loop2): shutting down [ 103.923220][ T5843] bcachefs (loop2): going read-only [ 103.939166][ T5843] bcachefs (loop2): finished waiting for writes to stop [ 103.969087][ T5843] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3 [ 103.996397][ T6118] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.054904][ T6118] EXT4-fs (loop4): shut down requested (2) [ 104.063207][ T5843] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3 [ 104.091626][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.101332][ T5843] bcachefs (loop2): clean shutdown complete, journal seq 4 [ 104.132154][ T5843] bcachefs (loop2): marking filesystem clean [ 104.199559][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 104.263377][ T6128] loop4: detected capacity change from 0 to 1024 [ 104.281589][ T5843] bcachefs (loop2): shutdown complete [ 104.301396][ T6128] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.369936][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.412295][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.447805][ T6121] loop3: detected capacity change from 0 to 40427 [ 104.453003][ T9] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 104.509242][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.527607][ T6121] F2FS-fs (loop3): invalid crc value [ 104.532116][ T9] usb 1-1: config 0 descriptor?? [ 104.536147][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.689041][ T6121] F2FS-fs (loop3): Start checkpoint disabled! [ 104.780077][ T6121] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 105.150049][ T6138] loop4: detected capacity change from 0 to 32768 [ 105.158750][ T6138] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.45 (6138) [ 105.181405][ T9] hid-led 0003:27B8:01ED.0002: probe with driver hid-led failed with error -71 [ 105.208287][ T9] usb 1-1: USB disconnect, device number 2 [ 105.218570][ T6138] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 105.234963][ T6138] BTRFS info (device loop4): using crc32c (crc32c-x86_64) checksum algorithm [ 105.252281][ T6138] BTRFS info (device loop4): using free-space-tree [ 105.743995][ T5833] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 105.787386][ T6162] loop1: detected capacity change from 0 to 2048 [ 105.849248][ T6162] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 106.138304][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 106.331343][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.363647][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 106.376633][ T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 106.402122][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 106.428579][ T9] usb 1-1: SerialNumber: syz [ 106.452348][ T6176] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 106.529243][ T6172] loop4: detected capacity change from 0 to 8192 [ 106.671272][ T9] usb 1-1: 0:2 : does not exist [ 106.768254][ T9] usb 1-1: USB disconnect, device number 3 [ 106.775345][ T6184] loop1: detected capacity change from 0 to 4096 [ 106.909543][ T6187] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.266476][ T6210] loop1: detected capacity change from 0 to 16 [ 108.351728][ T6210] erofs (device loop1): invalid checksum 0x9c078576, 0xeeaf74e0 expected [ 108.820271][ T6188] loop2: detected capacity change from 0 to 40427 [ 108.828857][ T6188] F2FS-fs (loop2): Invalid log blocks per segment (4278190089) [ 108.836652][ T6188] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 108.845205][ T5927] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 108.864179][ T6188] F2FS-fs (loop2): invalid crc value [ 109.002164][ T5927] usb 1-1: config 0 has an invalid interface number: 98 but max is 0 [ 109.020133][ T5927] usb 1-1: config 0 has no interface number 0 [ 109.027204][ T5927] usb 1-1: config 0 interface 98 has no altsetting 0 [ 109.037346][ T6188] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 109.047973][ T6188] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 109.059062][ T5927] usb 1-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 109.079557][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.087646][ T5927] usb 1-1: Product: syz [ 109.099417][ T5927] usb 1-1: Manufacturer: syz [ 109.104129][ T5927] usb 1-1: SerialNumber: syz [ 109.121923][ T5927] usb 1-1: config 0 descriptor?? [ 109.212859][ T5843] syz-executor: attempt to access beyond end of device [ 109.212859][ T5843] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 109.244993][ T5843] CPU: 0 UID: 0 PID: 5843 Comm: syz-executor Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 109.245027][ T5843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 109.245044][ T5843] Call Trace: [ 109.245053][ T5843] [ 109.245061][ T5843] dump_stack_lvl+0x241/0x360 [ 109.245106][ T5843] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.245134][ T5843] ? _raw_spin_unlock_irqrestore+0xd9/0x140 [ 109.245157][ T5843] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 109.245178][ T5843] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 109.245201][ T5843] ? f2fs_hw_is_readonly+0x3a3/0x470 [ 109.245238][ T5843] f2fs_handle_critical_error+0x392/0x5a0 [ 109.245279][ T5843] f2fs_write_end_io+0x58f/0x7d0 [ 109.245308][ T5843] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 109.245334][ T5843] ? bio_endio+0x7e4/0x890 [ 109.245368][ T5843] ? bio_endio+0x82a/0x890 [ 109.245403][ T5843] __submit_merged_bio+0x2a9/0x710 [ 109.245443][ T5843] ? f2fs_submit_merged_write_cond+0x101/0x380 [ 109.245478][ T5843] f2fs_submit_merged_write_cond+0x29f/0x380 [ 109.245519][ T5843] f2fs_write_data_pages+0x2f99/0x3910 [ 109.245579][ T5843] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 109.245614][ T5843] ? __pfx_stack_trace_save+0x10/0x10 [ 109.245640][ T5843] ? __bfs+0x14a/0x270 [ 109.245700][ T5843] ? __bfs+0x14a/0x270 [ 109.245739][ T5843] ? __lock_acquire+0xad5/0xd80 [ 109.245764][ T5843] ? do_raw_spin_lock+0x151/0x370 [ 109.245799][ T5843] ? do_raw_spin_unlock+0x13c/0x8b0 [ 109.245830][ T5843] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 109.245853][ T5843] do_writepages+0x38c/0x640 [ 109.245883][ T5843] ? __lock_acquire+0xad5/0xd80 [ 109.245906][ T5843] ? __pfx_do_writepages+0x10/0x10 [ 109.245933][ T5843] ? do_raw_spin_lock+0x151/0x370 [ 109.245972][ T5843] ? do_raw_spin_unlock+0x13c/0x8b0 [ 109.246007][ T5843] filemap_fdatawrite+0x1f2/0x2a0 [ 109.246032][ T5843] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 109.246096][ T5843] ? do_raw_spin_unlock+0x13c/0x8b0 [ 109.246132][ T5843] f2fs_sync_dirty_inodes+0x34f/0x860 [ 109.246171][ T5843] f2fs_write_checkpoint+0x857/0x1da0 [ 109.246214][ T5843] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 109.246286][ T5843] ? kill_f2fs_super+0x290/0x6d0 [ 109.246314][ T5843] kill_f2fs_super+0x2b8/0x6d0 [ 109.246343][ T5843] ? __pfx_kill_f2fs_super+0x10/0x10 [ 109.246373][ T5843] ? shrinker_free+0x2ca/0x3d0 [ 109.246401][ T5843] deactivate_locked_super+0xc4/0x130 [ 109.246425][ T5843] cleanup_mnt+0x422/0x4c0 [ 109.246447][ T5843] ? lockdep_hardirqs_on+0x9d/0x150 [ 109.246473][ T5843] task_work_run+0x251/0x310 [ 109.246509][ T5843] ? __pfx_task_work_run+0x10/0x10 [ 109.246541][ T5843] ? syscall_exit_to_user_mode+0xa3/0x340 [ 109.246568][ T5843] syscall_exit_to_user_mode+0x13f/0x340 [ 109.246595][ T5843] do_syscall_64+0x100/0x230 [ 109.246620][ T5843] ? clear_bhb_loop+0x45/0xa0 [ 109.246690][ T5843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.246716][ T5843] RIP: 0033:0x7f1f12f8f497 [ 109.246739][ T5843] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 109.246756][ T5843] RSP: 002b:00007ffc60cc9118 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 109.246779][ T5843] RAX: 0000000000000000 RBX: 00007f1f13010854 RCX: 00007f1f12f8f497 [ 109.246792][ T5843] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc60cc91d0 [ 109.246805][ T5843] RBP: 00007ffc60cc91d0 R08: 0000000000000000 R09: 0000000000000000 [ 109.246817][ T5843] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc60cca260 [ 109.246831][ T5843] R13: 00007f1f13010854 R14: 000000000001aa43 R15: 00007ffc60cca2a0 [ 109.246864][ T5843] [ 109.246897][ T5843] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 109.388740][ T6231] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 109.397431][ T5927] usb 1-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 109.605598][ T6221] loop1: detected capacity change from 0 to 40427 [ 109.659412][ T6221] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 109.684591][ T6221] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 109.723194][ T6234] loop4: detected capacity change from 0 to 1024 [ 109.756303][ T6234] syz.4.78: attempt to access beyond end of device [ 109.756303][ T6234] loop4: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 109.777395][ T6234] Buffer I/O error on dev loop4, logical block 100663296, async page read [ 109.793548][ T6234] syz.4.78: attempt to access beyond end of device [ 109.793548][ T6234] loop4: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 109.830550][ T6234] Buffer I/O error on dev loop4, logical block 100663296, async page read [ 109.889601][ T6238] syz.4.78: attempt to access beyond end of device [ 109.889601][ T6238] loop4: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 109.907201][ T6238] Buffer I/O error on dev loop4, logical block 100663296, async page read [ 109.919767][ T6238] hfsplus: unable to mark blocks free: error -5 [ 109.927392][ T6221] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 109.946380][ T6221] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 109.947278][ T6238] hfsplus: can't free extent [ 110.091502][ T5927] usb 1-1: reset high-speed USB device number 4 using dummy_hcd [ 110.175637][ T6229] loop3: detected capacity change from 0 to 32768 [ 110.183255][ T6229] XFS: ikeep mount option is deprecated. [ 110.267292][ T6229] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 110.276944][ T6247] loop2: detected capacity change from 0 to 2048 [ 110.325225][ T6254] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 110.378810][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 110.378832][ T30] audit: type=1800 audit(1744730340.323:54): pid=6247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.77" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 110.468044][ T6229] XFS (loop3): Ending clean mount [ 110.496725][ T5927] usb 1-1: [ueagle-atm] pre-firmware device, uploading firmware [ 110.516679][ T5927] usb 1-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 110.526869][ T6229] XFS (loop3): Quotacheck needed: Please wait. [ 110.537845][ T9] usb 1-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 110.576176][ T9] usb 1-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 110.627878][ T6229] XFS (loop3): Quotacheck: Done. [ 110.783250][ T5886] usb 1-1: USB disconnect, device number 4 [ 110.803280][ T5835] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 111.072599][ T6262] loop6: detected capacity change from 0 to 16384 [ 111.103403][ T6263] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 111.196734][ T6262] loop1: detected capacity change from 0 to 16 [ 111.247147][ T6262] erofs: Unknown parameter 'fsmagic' [ 111.328343][ T6256] loop4: detected capacity change from 0 to 32768 [ 111.489421][ T6256] ERROR: (device loop4): dbAllocNext: Corrupt dmap page [ 111.489421][ T6256] [ 111.511891][ T6256] ERROR: (device loop4): remounting filesystem as read-only [ 112.603747][ T6261] loop2: detected capacity change from 0 to 32768 [ 112.646413][ T6261] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.83 (6261) [ 112.720462][ T6261] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 112.764175][ T6261] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 112.801767][ T6261] BTRFS info (device loop2): using free-space-tree [ 112.823656][ T6266] loop0: detected capacity change from 0 to 32768 [ 112.954690][ T6270] loop1: detected capacity change from 0 to 32768 [ 112.977788][ T6266] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 113.012143][ T6261] BTRFS info (device loop2): rebuilding free space tree [ 113.027944][ T6270] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 113.105463][ T6270] XFS (loop1): Ending clean mount [ 113.115610][ T6270] XFS (loop1): Quotacheck needed: Please wait. [ 113.206600][ T6270] XFS (loop1): Quotacheck: Done. [ 113.224638][ T6266] XFS (loop0): Ending clean mount [ 113.296948][ T6266] XFS (loop0): Metadata CRC error detected at xfs_agfl_read_verify+0x16a/0x230, xfs_agfl block 0x3 [ 113.311081][ T6266] XFS (loop0): Unmount and run xfs_repair [ 113.324762][ T6266] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 113.333343][ T6266] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 113.343162][ T6266] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 113.344376][ T5831] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 113.352419][ T6266] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 113.375695][ T6266] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 113.388710][ T6266] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 113.398859][ T6266] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 113.408815][ T6266] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 113.419547][ T6266] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 113.430650][ T6266] XFS (loop0): metadata I/O error in "xfs_alloc_read_agfl+0x27a/0x4c0" at daddr 0x3 len 1 error 74 [ 113.449484][ T5901] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 113.465601][ T5843] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 113.503612][ T6266] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x639/0xa90 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 113.529199][ T6266] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 113.633286][ T5901] usb 4-1: Using ep0 maxpacket: 8 [ 113.666003][ T5901] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 113.762925][ T6320] loop4: detected capacity change from 0 to 16 [ 113.839483][ T5901] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 113.891694][ T6320] erofs: Unknown parameter 'fsmagic' [ 113.959428][ T5901] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 114.095112][ T5901] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.167950][ T5830] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 114.170521][ T5901] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 114.248024][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.491802][ T5901] usb 4-1: GET_CAPABILITIES returned 0 [ 114.518315][ T5901] usbtmc 4-1:16.0: can't read capabilities [ 114.741202][ T6332] loop0: detected capacity change from 0 to 512 [ 114.741527][ T5901] usb 4-1: USB disconnect, device number 2 [ 114.758878][ T6332] EXT4-fs: Ignoring removed nobh option [ 114.819268][ T6332] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.100: invalid indirect mapped block 256 (level 2) [ 114.917293][ T6332] EXT4-fs (loop0): 2 truncates cleaned up [ 114.955022][ T6332] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.474930][ T6338] EXT4-fs (loop0): shut down requested (1) [ 115.541622][ T6324] loop2: detected capacity change from 0 to 32768 [ 115.560915][ T30] audit: type=1800 audit(1744730345.513:55): pid=6332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.100" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 115.623866][ T5840] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 115.632811][ T5840] Bluetooth: hci3: Injecting HCI hardware error event [ 115.641304][ T5848] Bluetooth: hci3: hardware error 0x00 [ 115.683753][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.787758][ T6323] loop1: detected capacity change from 0 to 32768 [ 115.799455][ T6323] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.94 (6323) [ 115.847101][ T6323] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 115.861910][ T6323] BTRFS info (device loop1): using crc32c (crc32c-x86_64) checksum algorithm [ 115.875235][ T6323] BTRFS info (device loop1): disk space caching is enabled [ 115.886083][ T6323] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 115.913251][ T6342] netlink: 44 bytes leftover after parsing attributes in process `syz.0.103'. [ 116.082305][ T6323] BTRFS info (device loop1): rebuilding free space tree [ 116.134195][ T6323] BTRFS info (device loop1): disabling free space tree [ 116.149554][ T6323] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 116.172170][ T6323] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 116.418902][ T6340] loop3: detected capacity change from 0 to 32768 [ 116.469824][ T5831] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 116.652399][ T6372] xt_CT: You must specify a L4 protocol and not use inversions on it [ 116.757972][ T6340] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,str_hash=crc32c,fix_errors=no,norecovery,reconstruct_alloc,no_data_io [ 116.794140][ T6340] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 116.815267][ T6375] loop2: detected capacity change from 0 to 512 [ 116.830239][ T6340] bcachefs (loop3): Version upgrade required: [ 116.830239][ T6340] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 116.830239][ T6340] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 116.830239][ T6340] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 116.838770][ T6375] EXT4-fs (loop2): Test dummy encryption mode enabled [ 116.910735][ T6340] bcachefs (loop3): dropping and reconstructing all alloc info [ 116.929257][ T6375] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 116.998161][ T6340] bcachefs (loop3): accounting_read... done [ 117.016656][ T6340] bcachefs (loop3): alloc_read... done [ 117.023002][ T6375] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 117.038574][ T6340] bcachefs (loop3): snapshots_read... done [ 117.044553][ T6375] EXT4-fs (loop2): 1 truncate cleaned up [ 117.063892][ T6340] bcachefs (loop3): done starting filesystem [ 117.066683][ T6375] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.119543][ T6375] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 117.140180][ T6375] EXT4-fs (loop2): Online defrag not supported for encrypted files [ 117.197173][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.304690][ T5835] bcachefs (loop3): shutting down [ 117.346305][ T6382] netlink: 'syz.1.113': attribute type 4 has an invalid length. [ 117.459008][ T6388] mkiss: ax0: crc mode is auto. [ 117.471325][ T5835] bcachefs (loop3): shutdown complete [ 117.562536][ T6392] loop4: detected capacity change from 0 to 128 [ 117.592160][ T6392] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 117.629595][ T6392] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 117.669506][ T5927] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 117.705829][ T5848] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 117.819480][ T5927] usb 1-1: Using ep0 maxpacket: 32 [ 117.827317][ T5927] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 117.862611][ T5927] usb 1-1: config 0 has no interface number 0 [ 117.889051][ T5927] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 117.903111][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.919549][ T5927] usb 1-1: Product: syz [ 117.934249][ T5927] usb 1-1: Manufacturer: syz [ 117.951391][ T5927] usb 1-1: SerialNumber: syz [ 117.970781][ T5927] usb 1-1: config 0 descriptor?? [ 117.994885][ T5927] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 118.033334][ T6394] loop1: detected capacity change from 0 to 32768 [ 118.054277][ T6394] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.120 (6394) [ 118.159455][ T6399] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 118.166787][ T6394] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 118.271661][ T6394] BTRFS info (device loop1): using crc32c (crc32c-x86_64) checksum algorithm [ 118.358123][ T6394] BTRFS info (device loop1): using free-space-tree [ 118.420128][ T5927] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 118.565594][ T6386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.579844][ T5848] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 118.591382][ T5848] Bluetooth: hci2: Injecting HCI hardware error event [ 118.607563][ T5840] Bluetooth: hci2: hardware error 0x00 [ 118.608167][ T5927] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 118.618340][ T6386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.739408][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 118.879860][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 118.935128][ T6391] loop2: detected capacity change from 0 to 32768 [ 118.981519][ T6391] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 119.011210][ T6422] loop4: detected capacity change from 0 to 1024 [ 119.018427][ T6422] EXT4-fs: Ignoring removed orlov option [ 119.047984][ T6422] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.057040][ T5831] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 119.070923][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 119.075070][ T5886] usb 1-1: USB disconnect, device number 5 [ 119.144284][ T5886] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 119.174414][ T6391] XFS (loop2): Starting recovery (logdev: internal) [ 119.202092][ T5886] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 119.265455][ T5886] quatech2 1-1:0.51: device disconnected [ 119.285967][ T6391] XFS (loop2): Ending recovery (logdev: internal) [ 119.313750][ T5833] EXT4-fs error (device loop4): ext4_empty_dir:3107: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 119.372756][ T5833] EXT4-fs (loop4): Remounting filesystem read-only [ 119.465719][ T5843] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 119.479262][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.544292][ T6429] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 119.571850][ T6429] macvlan2: entered allmulticast mode [ 119.597490][ T6429] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 119.649981][ T6429] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 119.670326][ T6429] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 119.691226][ T6433] loop3: detected capacity change from 0 to 512 [ 119.701524][ T6433] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 119.748628][ T6433] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.900572][ T6439] ptrace attach of "./syz-executor exec"[6440] was attempted by "./syz-executor exec"[6439] [ 119.938776][ T6433] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.949656][ T5927] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 120.069564][ T5835] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.142237][ T5927] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 120.160143][ T5927] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 120.192938][ T5927] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 120.222493][ T5927] usb 5-1: config 220 has no interface number 2 [ 120.242198][ T5927] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 120.269456][ T5927] usb 5-1: config 220 interface 0 has no altsetting 0 [ 120.276299][ T5927] usb 5-1: config 220 interface 76 has no altsetting 0 [ 120.297045][ T5927] usb 5-1: config 220 interface 1 has no altsetting 0 [ 120.321574][ T5927] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 120.339410][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.347507][ T5927] usb 5-1: Product: syz [ 120.359360][ T5927] usb 5-1: Manufacturer: syz [ 120.364068][ T5927] usb 5-1: SerialNumber: syz [ 120.405332][ T6447] loop3: detected capacity change from 0 to 4096 [ 120.591554][ T5927] usb 5-1: selecting invalid altsetting 0 [ 120.622096][ T5927] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 120.628526][ T5927] usb 5-1: No valid video chain found. [ 120.686246][ T5927] usb 5-1: selecting invalid altsetting 0 [ 120.726130][ T5927] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 120.757967][ T5927] usb 5-1: USB disconnect, device number 2 [ 120.844132][ T5840] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 121.354218][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 121.560057][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 121.568386][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 121.764139][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 121.866211][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 121.968576][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 121.969022][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 122.143242][ T6462] netlink: 'syz.4.136': attribute type 2 has an invalid length. [ 122.250015][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 122.328603][ T6443] loop2: detected capacity change from 0 to 32768 [ 122.376349][ T6468] netlink: 'syz.3.138': attribute type 9 has an invalid length. [ 122.388530][ T6467] delete_channel: no stack [ 122.425109][ T6443] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.128 (6443) [ 122.529565][ T6443] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 122.578748][ T6443] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 123.055694][ T6471] loop0: detected capacity change from 0 to 32768 [ 123.065238][ T6471] BTRFS: device /dev/loop0 (7:0) using temp-fsid 9551b21c-f1f2-4dfe-8843-91b0f8d8f16a [ 123.078062][ T6471] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.139 (6471) [ 123.100419][ T6466] loop1: detected capacity change from 0 to 32768 [ 123.111261][ T6471] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 123.122599][ T6471] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 123.168992][ T5843] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 123.217910][ T6466] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 123.243062][ T6466] bcachefs (loop1): initializing new filesystem [ 123.295823][ T6471] BTRFS info (device loop0): rebuilding free space tree [ 123.317613][ T6466] bcachefs (loop1): going read-write [ 123.414127][ T6471] BTRFS info (device loop0): disabling free space tree [ 123.433881][ T6471] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 123.470793][ T6466] bcachefs (loop1): marking superblocks [ 123.482412][ T6471] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 123.585071][ T6466] bcachefs (loop1): initializing freespace [ 123.625920][ T6466] bcachefs (loop1): done initializing freespace [ 123.648046][ T6466] bcachefs (loop1): reading snapshots table [ 123.658184][ T6466] bcachefs (loop1): reading snapshots done [ 123.730666][ T6466] bcachefs (loop1): done starting filesystem [ 123.873691][ T6523] loop3: detected capacity change from 0 to 16 [ 123.882322][ T6523] erofs: Unknown parameter 'fsmagic' [ 123.948677][ T6476] loop4: detected capacity change from 0 to 32768 [ 123.977074][ T5830] BTRFS info (device loop0): last unmount of filesystem 9551b21c-f1f2-4dfe-8843-91b0f8d8f16a [ 124.027115][ T5831] bcachefs (loop1): shutting down [ 124.047069][ T5831] bcachefs (loop1): going read-only [ 124.063346][ T5831] bcachefs (loop1): finished waiting for writes to stop [ 124.084257][ T5831] bcachefs (loop1): flushing journal and stopping allocators, journal seq 2 [ 124.107354][ T6476] syz.4.142: attempt to access beyond end of device [ 124.107354][ T6476] loop4: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 124.124891][ T6476] metapage_write_end_io: I/O error [ 124.134200][ T6476] ERROR: (device loop4): release_metapage: metapage_write_one() failed [ 124.134200][ T6476] [ 124.155145][ T6476] ERROR: (device loop4): remounting filesystem as read-only [ 124.193697][ T5831] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3 [ 124.214387][ T5831] bcachefs (loop1): clean shutdown complete, journal seq 4 [ 124.226793][ T6476] blkno = 8ed2c, nblocks = 1 [ 124.243142][ T6526] loop2: detected capacity change from 0 to 256 [ 124.251994][ T6476] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map [ 124.251994][ T6476] [ 124.278113][ T6476] UFO tlock:0xffffc9000296a1b0 [ 124.288415][ T6476] ERROR: (device loop4): dtReadFirst: DT_GETPAGE: dtree page corrupt [ 124.288415][ T6476] [ 124.300481][ T5831] bcachefs (loop1): marking filesystem clean [ 124.301199][ T6476] jfs_readdir: unexpected rc = -5 from dtReadNext [ 124.372250][ T30] audit: type=1800 audit(1744730354.293:56): pid=6526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.144" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 124.473797][ T5831] bcachefs (loop1): shutdown complete [ 124.506167][ T117] blkno = 8ed2c, nblocks = 4 [ 124.518066][ T117] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map [ 124.518066][ T117] [ 124.565566][ T5833] syz-executor: attempt to access beyond end of device [ 124.565566][ T5833] loop4: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 124.607214][ T5833] metapage_write_end_io: I/O error [ 124.617904][ T5833] JFS: metapage_get_blocks failed [ 124.623399][ T5833] JFS: metapage_get_blocks failed [ 124.629649][ T5833] JFS: metapage_get_blocks failed [ 124.636676][ T5833] JFS: metapage_get_blocks failed [ 124.657119][ T6528] netlink: 'syz.0.146': attribute type 1 has an invalid length. [ 126.083784][ T6540] netlink: 'syz.0.153': attribute type 9 has an invalid length. [ 126.097310][ T6539] delete_channel: no stack [ 126.609587][ T6530] loop3: detected capacity change from 0 to 40427 [ 126.647920][ T6530] F2FS-fs (loop3): invalid crc value [ 127.899879][ T6542] loop0: detected capacity change from 0 to 32768 [ 127.928776][ T6542] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.154 (6542) [ 127.977402][ T6542] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 128.001496][ T6542] BTRFS info (device loop0): using crc32c (crc32c-x86_64) checksum algorithm [ 128.022778][ T6542] BTRFS info (device loop0): using free-space-tree [ 128.269394][ T5948] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 128.303388][ T6579] loop1: detected capacity change from 0 to 2048 [ 128.336471][ T6579] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 128.452281][ T5830] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 128.469532][ T5948] usb 3-1: Using ep0 maxpacket: 16 [ 128.536275][ T5948] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 128.559130][ T5948] usb 3-1: config 0 has no interface number 0 [ 128.589414][ T5948] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.621457][ T6552] loop4: detected capacity change from 0 to 32768 [ 128.639952][ T5948] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.659680][ T5948] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 128.669214][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.820448][ T5948] usb 3-1: config 0 descriptor?? [ 128.916977][ T6552] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc [ 128.965270][ T6586] netlink: 'syz.1.165': attribute type 9 has an invalid length. [ 128.981866][ T6585] delete_channel: no stack [ 129.012768][ T6552] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 129.064580][ T6552] bcachefs (loop4): Version upgrade required: [ 129.064580][ T6552] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 129.064580][ T6552] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 129.064580][ T6552] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 129.260603][ T6552] bcachefs (loop4): dropping and reconstructing all alloc info [ 129.772107][ T5948] uclogic 0003:28BD:0071.0003: pen parameters not found [ 129.820809][ T5948] uclogic 0003:28BD:0071.0003: interface is invalid, ignoring [ 129.883615][ T5948] usb 3-1: USB disconnect, device number 5 [ 129.892414][ T6552] bcachefs (loop4): accounting_read... done [ 129.907074][ T6552] bcachefs (loop4): alloc_read... done [ 129.907134][ T6552] bcachefs (loop4): snapshots_read... done [ 129.907991][ T6552] bcachefs (loop4): done starting filesystem [ 129.976439][ T5833] bcachefs (loop4): shutting down [ 130.124118][ T5833] bcachefs (loop4): shutdown complete [ 130.228736][ T6604] loop0: detected capacity change from 0 to 512 [ 130.440947][ T6604] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.518906][ T6604] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.769648][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.786058][ T6600] loop1: detected capacity change from 0 to 40427 [ 130.801681][ T6600] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 130.814760][ T6600] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 130.834295][ T6612] loop2: detected capacity change from 0 to 64 [ 131.010575][ T6600] F2FS-fs (loop1): build fault injection rate: 18446 [ 131.050158][ T6600] F2FS-fs (loop1): invalid crc value [ 131.370216][ T6600] F2FS-fs (loop1): Start checkpoint disabled! [ 131.813898][ T6600] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 132.067206][ T6600] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 132.165731][ T6600] syz.1.167: attempt to access beyond end of device [ 132.165731][ T6600] loop1: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 132.242224][ T6622] loop2: detected capacity change from 0 to 16 [ 132.243348][ T6600] syz.1.167: attempt to access beyond end of device [ 132.243348][ T6600] loop1: rw=2049, sector=53256, nr_sectors = 8 limit=40427 [ 132.266905][ T6600] syz.1.167: attempt to access beyond end of device [ 132.266905][ T6600] loop1: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 132.295245][ T6622] erofs: Unknown parameter 'fsmagic' [ 132.346427][ T3510] kworker/u8:8: attempt to access beyond end of device [ 132.346427][ T3510] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 132.363003][ T3510] CPU: 0 UID: 0 PID: 3510 Comm: kworker/u8:8 Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 132.363034][ T3510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 132.363048][ T3510] Workqueue: writeback wb_workfn (flush-7:1) [ 132.363083][ T3510] Call Trace: [ 132.363092][ T3510] [ 132.363102][ T3510] dump_stack_lvl+0x241/0x360 [ 132.363140][ T3510] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.363172][ T3510] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 132.363194][ T3510] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 132.363218][ T3510] ? f2fs_hw_is_readonly+0x3a3/0x470 [ 132.363257][ T3510] f2fs_handle_critical_error+0x392/0x5a0 [ 132.363299][ T3510] f2fs_write_end_io+0x58f/0x7d0 [ 132.363331][ T3510] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 132.363359][ T3510] ? bio_endio+0x7e4/0x890 [ 132.363393][ T3510] ? bio_endio+0x82a/0x890 [ 132.363468][ T3510] __submit_merged_bio+0x2a9/0x710 [ 132.363496][ T3510] ? f2fs_submit_merged_write_cond+0x101/0x380 [ 132.363534][ T3510] f2fs_submit_merged_write_cond+0x29f/0x380 [ 132.363579][ T3510] f2fs_write_data_pages+0x2f99/0x3910 [ 132.363652][ T3510] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 132.363687][ T3510] ? __lock_acquire+0xad5/0xd80 [ 132.363778][ T3510] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 132.363815][ T3510] ? kvm_sched_clock_read+0x11/0x20 [ 132.363834][ T3510] ? sched_clock+0x4a/0x70 [ 132.363865][ T3510] ? sched_clock_cpu+0x77/0x4d0 [ 132.363902][ T3510] ? update_curr_se+0x8f/0x240 [ 132.363920][ T3510] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 132.363944][ T3510] do_writepages+0x38c/0x640 [ 132.363985][ T3510] ? __pfx_do_writepages+0x10/0x10 [ 132.364014][ T3510] ? __lock_acquire+0xad5/0xd80 [ 132.364046][ T3510] ? reacquire_held_locks+0x12a/0x1e0 [ 132.364069][ T3510] ? writeback_sb_inodes+0x43f/0x1360 [ 132.364107][ T3510] __writeback_single_inode+0x14f/0x10d0 [ 132.364145][ T3510] writeback_sb_inodes+0x822/0x1360 [ 132.364177][ T3510] ? debug_object_assert_init+0x30e/0x4d0 [ 132.364243][ T3510] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 132.364323][ T3510] ? rcu_is_watching+0x15/0xb0 [ 132.364348][ T3510] ? queue_io+0x310/0x4d0 [ 132.364385][ T3510] wb_writeback+0x415/0xb90 [ 132.364427][ T3510] ? queue_io+0x271/0x4d0 [ 132.364455][ T3510] ? __pfx_wb_writeback+0x10/0x10 [ 132.364505][ T3510] wb_workfn+0x412/0x10b0 [ 132.364557][ T3510] ? __pfx_wb_workfn+0x10/0x10 [ 132.364576][ T3510] ? register_lock_class+0x54/0x330 [ 132.364615][ T3510] ? __lock_acquire+0xad5/0xd80 [ 132.364664][ T3510] ? process_scheduled_works+0x9cb/0x18e0 [ 132.364685][ T3510] process_scheduled_works+0xac3/0x18e0 [ 132.364745][ T3510] ? __pfx_process_scheduled_works+0x10/0x10 [ 132.364779][ T3510] ? assign_work+0x367/0x3d0 [ 132.364805][ T3510] worker_thread+0x870/0xd50 [ 132.364851][ T3510] ? __kthread_parkme+0x1a8/0x200 [ 132.364880][ T3510] ? __pfx_worker_thread+0x10/0x10 [ 132.364904][ T3510] kthread+0x7b7/0x940 [ 132.364934][ T3510] ? __pfx_worker_thread+0x10/0x10 [ 132.364959][ T3510] ? __pfx_kthread+0x10/0x10 [ 132.364982][ T3510] ? __pfx_kthread+0x10/0x10 [ 132.365008][ T3510] ? __pfx_kthread+0x10/0x10 [ 132.365034][ T3510] ? __pfx_kthread+0x10/0x10 [ 132.365060][ T3510] ? _raw_spin_unlock_irq+0x23/0x50 [ 132.365078][ T3510] ? lockdep_hardirqs_on+0x9d/0x150 [ 132.365101][ T3510] ? __pfx_kthread+0x10/0x10 [ 132.365130][ T3510] ret_from_fork+0x4b/0x80 [ 132.365149][ T3510] ? __pfx_kthread+0x10/0x10 [ 132.365176][ T3510] ret_from_fork_asm+0x1a/0x30 [ 132.365221][ T3510] [ 132.710196][ T3510] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 133.088625][ T6633] loop2: detected capacity change from 0 to 32768 [ 134.651274][ T6643] loop3: detected capacity change from 0 to 2048 [ 134.689249][ T6643] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 134.709740][ T24] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 134.734011][ T6648] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 134.906100][ T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 134.928930][ T24] usb 1-1: config 0 has no interface number 0 [ 134.955904][ T24] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 134.989600][ T24] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 135.403360][ T6657] loop1: detected capacity change from 0 to 16 [ 135.411919][ T6657] erofs: Unknown parameter 'fsmagic' [ 135.745994][ T24] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 135.757006][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.774355][ T24] usb 1-1: config 0 descriptor?? [ 135.783673][ T6641] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 136.257707][ T6661] loop4: detected capacity change from 0 to 2048 [ 136.293236][ T6661] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 136.316893][ T24] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 136.359012][ T6661] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 136.492947][ T6645] loop2: detected capacity change from 0 to 32768 [ 136.520713][ T5877] usb 1-1: USB disconnect, device number 6 [ 136.608763][ T6645] ERROR: (device loop2): dtSearch: DT_GETPAGE: dtree page corrupt [ 136.608763][ T6645] [ 136.644377][ T6645] ERROR: (device loop2): remounting filesystem as read-only [ 136.663012][ T6645] jfs_lookup: dtSearch returned -5 [ 136.689425][ T6645] ERROR: (device loop2): dtReadFirst: DT_GETPAGE: dtree page corrupt [ 136.689425][ T6645] [ 136.850202][ T6645] jfs_readdir: unexpected rc = -5 from dtReadNext [ 137.307238][ T6674] capability: warning: `syz.4.188' uses deprecated v2 capabilities in a way that may be insecure [ 138.171639][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.178223][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.922882][ T6687] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 140.036102][ T6705] loop4: detected capacity change from 0 to 16 [ 140.044651][ T6705] erofs: Unknown parameter 'fsmagic' [ 141.255228][ T6711] loop4: detected capacity change from 0 to 256 [ 141.280244][ T6711] exfat: Deprecated parameter 'utf8' [ 141.285752][ T6711] exfat: Deprecated parameter 'namecase' [ 141.355147][ T6711] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 142.352357][ T6703] loop0: detected capacity change from 0 to 32768 [ 142.439263][ T30] audit: type=1800 audit(1744730372.383:57): pid=6703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.200" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 142.540985][ T30] audit: type=1326 audit(1744730372.493:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6720 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1f12f85127 code=0x7ffc0000 [ 142.597830][ T6723] loop1: detected capacity change from 0 to 256 [ 142.636848][ T30] audit: type=1326 audit(1744730372.513:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6720 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1f12f2a359 code=0x7ffc0000 [ 142.721665][ T6723] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 142.739689][ T30] audit: type=1326 audit(1744730372.513:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6720 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1f12f85127 code=0x7ffc0000 [ 142.811550][ T30] audit: type=1326 audit(1744730372.513:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6720 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1f12f2a359 code=0x7ffc0000 [ 142.884739][ T30] audit: type=1326 audit(1744730372.513:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6720 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1f12f85127 code=0x7ffc0000 [ 142.886537][ T6716] loop4: detected capacity change from 0 to 32768 [ 142.978168][ T30] audit: type=1326 audit(1744730372.513:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6720 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1f12f2a359 code=0x7ffc0000 [ 143.016953][ T6714] loop3: detected capacity change from 0 to 32768 [ 143.039732][ T6716] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 143.050448][ T30] audit: type=1326 audit(1744730372.513:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6720 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1f12f85127 code=0x7ffc0000 [ 143.123305][ T6736] loop1: detected capacity change from 0 to 512 [ 143.138067][ T6736] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 143.146616][ T30] audit: type=1326 audit(1744730372.513:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6720 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1f12f2a359 code=0x7ffc0000 [ 143.146671][ T30] audit: type=1326 audit(1744730372.513:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6720 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1f12f85127 code=0x7ffc0000 [ 143.215120][ T6736] EXT4-fs (loop1): invalid journal inode [ 143.245615][ T6736] EXT4-fs (loop1): can't get journal size [ 143.294173][ T6736] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 143.304745][ T6714] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 143.331091][ T6716] XFS (loop4): Ending clean mount [ 143.337709][ T6736] System zones: 1-12, 13-13 [ 143.355935][ T6716] XFS (loop4): Quotacheck needed: Please wait. [ 143.366271][ T6736] EXT4-fs (loop1): 1 truncate cleaned up [ 143.376518][ T6736] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.455884][ T6752] loop0: detected capacity change from 0 to 64 [ 143.503982][ T6714] XFS (loop3): Ending clean mount [ 143.554322][ T5831] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.567363][ T6716] XFS (loop4): Quotacheck: Done. [ 143.674453][ T5835] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 144.030768][ T5833] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 144.048598][ T6758] loop0: detected capacity change from 0 to 1024 [ 144.163756][ T6758] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.190914][ T6758] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.392491][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.866117][ T6778] loop3: detected capacity change from 0 to 1024 [ 145.873661][ T6778] EXT4-fs: Ignoring removed orlov option [ 145.936075][ T6778] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.570175][ T6790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.624168][ T6766] loop1: detected capacity change from 0 to 32768 [ 146.663837][ T6766] jfs_unlink: dtDelete returned -5 [ 146.676431][ T6766] ERROR: (device loop1): jfs_unlink: [ 146.676431][ T6766] [ 146.702504][ T6766] ERROR: (device loop1): remounting filesystem as read-only [ 146.724056][ T6797] tap0: tun_chr_ioctl cmd 1074025677 [ 146.740752][ T6797] tap0: linktype set to 769 [ 148.730237][ T6816] loop1: detected capacity change from 0 to 4096 [ 149.062702][ T6823] loop3: detected capacity change from 0 to 128 [ 149.183180][ T6823] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 149.254181][ T6823] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.288851][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 149.288874][ T30] audit: type=1800 audit(1744730379.223:101): pid=6823 uid=0 auid=0 ses=1 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.237" name="bus" dev="loop3" ino=12 res=0 errno=0 [ 149.348815][ T5835] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 149.395151][ T6831] loop1: detected capacity change from 0 to 64 [ 151.733361][ T6869] loop2: detected capacity change from 0 to 512 [ 152.770341][ T6869] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.809500][ T6869] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 152.853647][ T6886] netlink: 32 bytes leftover after parsing attributes in process `syz.3.260'. [ 153.056470][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.959422][ T5901] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 154.134741][ T5901] usb 4-1: Using ep0 maxpacket: 32 [ 154.160930][ T5901] usb 4-1: config 0 interface 0 has no altsetting 0 [ 154.200830][ T5901] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 154.219376][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.228875][ T5901] usb 4-1: Product: syz [ 154.239348][ T5901] usb 4-1: Manufacturer: syz [ 154.244006][ T5901] usb 4-1: SerialNumber: syz [ 154.260504][ T6913] netlink: 'syz.2.271': attribute type 9 has an invalid length. [ 154.279820][ T5901] usb 4-1: config 0 descriptor?? [ 154.295148][ T6912] delete_channel: no stack [ 154.417272][ T6915] loop2: detected capacity change from 0 to 64 [ 154.540992][ T6901] loop1: detected capacity change from 0 to 32768 [ 154.597098][ T6905] loop0: detected capacity change from 0 to 32768 [ 154.608048][ T6901] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 154.632789][ T6903] loop4: detected capacity change from 0 to 32768 [ 154.648850][ T6903] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.268 (6903) [ 154.666824][ T6905] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 154.696735][ T6903] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 154.716985][ T5901] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 154.725377][ T6905] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 154.730554][ T6903] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 154.843725][ T6922] loop2: detected capacity change from 0 to 16 [ 154.860492][ T6922] erofs: Unknown parameter 'fsmagic' [ 154.924437][ T5901] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 154.992531][ T5901] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 155.032769][ T5901] usb 4-1: USB disconnect, device number 3 [ 155.093578][ T6903] BTRFS info (device loop4): rebuilding free space tree [ 155.095253][ T5831] (syz-executor,5831,1):ocfs2_inode_is_valid_to_delete:886 ERROR: Skipping delete of system file 72 [ 155.170023][ T6903] BTRFS info (device loop4): disabling free space tree [ 155.175726][ T5831] ocfs2: Unmounting device (7,1) on (node local) [ 155.177062][ T6903] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 155.194411][ T6903] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 155.226794][ T5830] ocfs2: Unmounting device (7,0) on (node local) [ 155.582142][ T5833] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 155.892946][ T6946] loop2: detected capacity change from 0 to 16 [ 155.902621][ T6946] erofs: Unknown parameter 'fsmagic' [ 156.229915][ T6941] loop1: detected capacity change from 0 to 16 [ 156.231735][ T6950] netlink: 'syz.3.278': attribute type 9 has an invalid length. [ 156.237337][ T6941] erofs: Unknown parameter 'fsmagic' [ 156.449623][ T6954] loop0: detected capacity change from 0 to 16 [ 156.456618][ T6954] erofs: Unknown parameter 'fsmagic' [ 156.713448][ T6949] delete_channel: no stack [ 156.866088][ T6962] No control pipe specified [ 158.076297][ T6970] loop4: detected capacity change from 0 to 16 [ 158.099058][ T6970] erofs: Unknown parameter 'fsmagic' [ 159.460089][ T6981] netlink: 'syz.3.286': attribute type 9 has an invalid length. [ 159.472459][ T6979] delete_channel: no stack [ 160.096720][ T6986] loop2: detected capacity change from 0 to 16 [ 160.120994][ T6986] erofs: Unknown parameter 'fsmagic' [ 160.525461][ T6999] loop1: detected capacity change from 0 to 16 [ 160.534054][ T6999] erofs: Unknown parameter 'fsmagic' [ 160.603095][ T7001] loop3: detected capacity change from 0 to 16 [ 160.611709][ T7001] erofs: Unknown parameter 'fsmagic' [ 162.302301][ T7016] autofs: Unknown parameter '' [ 163.019037][ T7027] loop4: detected capacity change from 0 to 16 [ 163.022344][ T7026] netlink: 'syz.2.299': attribute type 9 has an invalid length. [ 163.134746][ T7024] delete_channel: no stack [ 163.355901][ T7027] erofs: Unknown parameter 'fsmagic' [ 164.865070][ T7035] loop0: detected capacity change from 0 to 16 [ 164.872270][ T7035] erofs: Unknown parameter 'fsmagic' [ 165.287581][ T7046] loop3: detected capacity change from 0 to 16 [ 165.296218][ T7046] erofs: Unknown parameter 'fsmagic' [ 165.588617][ T7043] netlink: 'syz.1.303': attribute type 9 has an invalid length. [ 165.615374][ T7042] delete_channel: no stack [ 165.806675][ T7053] loop3: detected capacity change from 0 to 1024 [ 166.349690][ T7063] loop2: detected capacity change from 0 to 16 [ 166.356451][ T7063] erofs: Unknown parameter 'fsmagic' [ 166.654164][ T7057] delete_channel: no stack [ 166.766632][ T7005] hfsplus: b-tree write err: -5, ino 8 [ 166.994334][ T7072] loop0: detected capacity change from 0 to 16 [ 167.100216][ T7072] erofs: Unknown parameter 'fsmagic' [ 167.430735][ T7079] autofs: Bad value for 'fd' [ 169.187830][ T7091] loop3: detected capacity change from 0 to 16 [ 169.196843][ T7091] erofs: Unknown parameter 'fsmagic' [ 169.519467][ T7088] loop4: detected capacity change from 0 to 16 [ 169.579431][ T7088] erofs: Unknown parameter 'fsmagic' [ 170.348196][ T7099] loop3: detected capacity change from 0 to 16 [ 170.355036][ T7099] erofs: Unknown parameter 'fsmagic' [ 170.479105][ T7102] netlink: 'syz.1.320': attribute type 9 has an invalid length. [ 170.488763][ T7101] delete_channel: no stack [ 171.519246][ T7113] netlink: 'syz.2.323': attribute type 9 has an invalid length. [ 171.872633][ T7120] autofs: Bad value for 'fd' [ 172.462554][ T7112] delete_channel: no stack [ 173.631291][ T7133] loop2: detected capacity change from 0 to 16 [ 173.640199][ T7133] erofs: Unknown parameter 'fsmagic' [ 173.820239][ T7131] loop4: detected capacity change from 0 to 16 [ 173.827222][ T7131] erofs: Unknown parameter 'fsmagic' [ 173.941762][ T9] usb 1-1: [UEAGLE-ATM] firmware is not available [ 175.100766][ T7147] loop3: detected capacity change from 0 to 16 [ 175.110189][ T7147] erofs: Unknown parameter 'fsmagic' [ 175.635695][ T7155] loop4: detected capacity change from 0 to 16 [ 175.650029][ T7158] netlink: 'syz.1.336': attribute type 9 has an invalid length. [ 175.675400][ T7155] erofs: Unknown parameter 'fsmagic' [ 175.681303][ T7157] delete_channel: no stack [ 176.914844][ T7171] netlink: 'syz.0.340': attribute type 9 has an invalid length. [ 176.971301][ T7163] loop1: detected capacity change from 0 to 16 [ 176.978356][ T7163] erofs: Unknown parameter 'fsmagic' [ 177.453288][ T7177] autofs: Bad value for 'fd' [ 177.641674][ T7170] delete_channel: no stack [ 178.111107][ T7184] loop0: detected capacity change from 0 to 16 [ 178.120012][ T7184] erofs: Unknown parameter 'fsmagic' [ 178.959210][ T7190] loop1: detected capacity change from 0 to 16 [ 179.016704][ T7190] erofs: Unknown parameter 'fsmagic' [ 182.251398][ T7203] loop1: detected capacity change from 0 to 16 [ 182.258442][ T7203] erofs: Unknown parameter 'fsmagic' [ 182.508628][ T7220] netlink: 'syz.3.353': attribute type 9 has an invalid length. [ 182.513591][ T7216] netlink: 'syz.1.354': attribute type 9 has an invalid length. [ 182.518298][ T7217] delete_channel: no stack [ 182.644877][ T7221] loop0: detected capacity change from 0 to 16 [ 182.743265][ T7221] erofs: Unknown parameter 'fsmagic' [ 183.257456][ T7214] delete_channel: no stack [ 183.362381][ T7232] loop4: detected capacity change from 0 to 16 [ 183.370105][ T7232] erofs: Unknown parameter 'fsmagic' [ 183.815071][ T7235] loop3: detected capacity change from 0 to 16 [ 183.863466][ T7237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.359'. [ 183.885534][ T7235] erofs (device loop3): invalid checksum 0x9c078576, 0xeeaf74e0 expected [ 184.174423][ T7243] loop0: detected capacity change from 0 to 16 [ 184.524585][ T7243] erofs: Unknown parameter 'fsmagic' [ 187.224120][ T7261] loop2: detected capacity change from 0 to 16 [ 187.233071][ T7265] netlink: 'syz.4.367': attribute type 9 has an invalid length. [ 187.247032][ T7263] delete_channel: no stack [ 187.454989][ T7261] erofs: Unknown parameter 'fsmagic' [ 187.481923][ T7270] netlink: 'syz.4.370': attribute type 9 has an invalid length. [ 187.579783][ T7272] autofs: Unknown parameter '0x0000000000000000' [ 188.291921][ T7269] delete_channel: no stack [ 189.015542][ T7280] loop3: detected capacity change from 0 to 16 [ 189.036945][ T7280] erofs: Unknown parameter 'fsmagic' [ 189.387441][ T7288] loop2: detected capacity change from 0 to 16 [ 189.398590][ T7288] erofs: Unknown parameter 'fsmagic' [ 190.503728][ T7300] loop0: detected capacity change from 0 to 16 [ 190.527659][ T7300] erofs: Unknown parameter 'fsmagic' [ 191.743696][ T7305] netlink: 'syz.1.380': attribute type 9 has an invalid length. [ 191.791310][ T7304] delete_channel: no stack [ 192.286945][ T7311] loop0: detected capacity change from 0 to 256 [ 192.454615][ T7311] FAT-fs (loop0): Directory bread(block 1285) failed [ 192.490907][ T5848] Bluetooth: hci0: Invalid handle: 0x2627 > 0x0eff [ 192.579113][ T7316] loop4: detected capacity change from 0 to 16 [ 192.587679][ T7316] erofs: Unknown parameter 'fsmagic' [ 192.884672][ T7319] autofs: Unknown parameter '0x0000000000000000' [ 193.554991][ T7322] netlink: 'syz.2.385': attribute type 9 has an invalid length. [ 193.764713][ T7325] loop3: detected capacity change from 0 to 16 [ 193.897755][ T7325] erofs: Unknown parameter 'fsmagic' [ 194.406523][ T7321] delete_channel: no stack [ 194.891923][ T7342] loop3: detected capacity change from 0 to 16 [ 194.898960][ T7342] erofs: Unknown parameter 'fsmagic' [ 197.077307][ T7363] loop0: detected capacity change from 0 to 16 [ 197.101313][ T7363] erofs (device loop0): invalid checksum 0x9c078576, 0xeeaf74e0 expected [ 197.147581][ T7356] loop4: detected capacity change from 0 to 16 [ 197.161544][ T7356] erofs: Unknown parameter 'fsmagic' [ 197.182451][ T7358] netlink: 'syz.3.395': attribute type 9 has an invalid length. [ 197.262726][ T7351] delete_channel: no stack [ 197.579507][ T7372] loop2: detected capacity change from 0 to 16 [ 197.660743][ T7372] erofs: Unknown parameter 'fsmagic' [ 198.712939][ T7380] autofs: Unknown parameter '0x0000000000000000' [ 199.001435][ T7374] loop1: detected capacity change from 0 to 16 [ 199.008587][ T7374] erofs: Unknown parameter 'fsmagic' [ 199.173306][ T7387] netlink: 'syz.2.402': attribute type 9 has an invalid length. [ 199.359964][ T5877] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 199.591534][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.597993][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.914512][ T7396] loop0: detected capacity change from 0 to 16 [ 199.923016][ T7396] erofs: Unknown parameter 'fsmagic' [ 199.947075][ T5877] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 200.003104][ T7385] delete_channel: no stack [ 200.046271][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.108881][ T5877] usb 5-1: config 0 descriptor?? [ 200.237907][ T5877] cp210x 5-1:0.0: cp210x converter detected [ 201.389727][ T5877] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 201.416808][ T5877] usb 5-1: cp210x converter now attached to ttyUSB0 [ 202.100193][ T7405] loop2: detected capacity change from 0 to 16 [ 202.107268][ T7405] erofs: Unknown parameter 'fsmagic' [ 202.121393][ T5877] usb 5-1: USB disconnect, device number 3 [ 202.134718][ T5877] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 202.153744][ T5877] cp210x 5-1:0.0: device disconnected [ 203.028444][ T7414] netlink: 'syz.1.410': attribute type 9 has an invalid length. [ 203.073463][ T7407] delete_channel: no stack [ 203.307416][ T7421] loop2: detected capacity change from 0 to 16 [ 203.387711][ T7421] erofs: Unknown parameter 'fsmagic' [ 204.025766][ T7428] loop0: detected capacity change from 0 to 16 [ 204.034146][ T7428] erofs: Unknown parameter 'fsmagic' [ 204.495212][ T7434] autofs: Unknown parameter '0x0000000000000000' [ 205.314658][ T7440] loop4: detected capacity change from 0 to 16 [ 205.366085][ T7417] loop3: detected capacity change from 0 to 32768 [ 205.375838][ T7440] erofs (device loop4): invalid checksum 0x9c078576, 0xeeaf74e0 expected [ 205.377969][ T7443] netlink: 'syz.2.417': attribute type 9 has an invalid length. [ 206.120216][ T7442] delete_channel: no stack [ 206.231970][ T7417] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 206.249076][ T7417] bcachefs (loop3): initializing new filesystem [ 206.262930][ T7417] syz.3.411: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 206.291271][ T7417] CPU: 1 UID: 0 PID: 7417 Comm: syz.3.411 Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 206.291303][ T7417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 206.291317][ T7417] Call Trace: [ 206.291325][ T7417] [ 206.291334][ T7417] dump_stack_lvl+0x241/0x360 [ 206.291375][ T7417] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.291408][ T7417] ? __pfx__printk+0x10/0x10 [ 206.291437][ T7417] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 206.291472][ T7417] ? __rcu_read_unlock+0xa1/0x110 [ 206.291507][ T7417] warn_alloc+0x27c/0x410 [ 206.291547][ T7417] ? __pfx_warn_alloc+0x10/0x10 [ 206.291587][ T7417] ? bch2_fs_journal_start+0x50f/0x17a0 [ 206.291616][ T7417] ? __get_vm_area_node+0x1c8/0x2d0 [ 206.291644][ T7417] ? __get_vm_area_node+0x25c/0x2d0 [ 206.291682][ T7417] __vmalloc_node_range_noprof+0x634/0x1390 [ 206.291735][ T7417] ? six_unlock_ip+0x2f8/0x440 [ 206.291773][ T7417] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 206.291814][ T7417] ? bch2_fs_journal_start+0x50f/0x17a0 [ 206.291843][ T7417] __kvmalloc_node_noprof+0x3b2/0x5a0 [ 206.291874][ T7417] ? bch2_fs_journal_start+0x50f/0x17a0 [ 206.291901][ T7417] ? bch2_fs_journal_start+0x50f/0x17a0 [ 206.291937][ T7417] bch2_fs_journal_start+0x50f/0x17a0 [ 206.291994][ T7417] ? __pfx_bch2_fs_journal_start+0x10/0x10 [ 206.292022][ T7417] ? bch2_get_next_online_dev+0x6ca/0x6f0 [ 206.292049][ T7417] ? bch2_trans_put+0xa7f/0x1060 [ 206.292077][ T7417] ? bch2_get_next_online_dev+0x2e/0x6f0 [ 206.292114][ T7417] ? bch2_fs_journal_alloc+0x1bd/0x280 [ 206.292155][ T7417] bch2_fs_initialize+0x9c2/0x1620 [ 206.292197][ T7417] ? stack_trace_snprint+0x58/0xf0 [ 206.292230][ T7417] ? __pfx_bch2_fs_initialize+0x10/0x10 [ 206.292278][ T7417] ? __se_sys_mount+0x38c/0x400 [ 206.292308][ T7417] ? do_syscall_64+0xf3/0x230 [ 206.292331][ T7417] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.292433][ T7417] ? bch2_get_next_online_dev+0x4ab/0x4e0 [ 206.292452][ T7417] ? bch2_get_next_online_dev+0x2e/0x4e0 [ 206.292474][ T7417] ? __pfx_up_write+0x10/0x10 [ 206.292503][ T7417] ? llist_reverse_order+0x72/0x90 [ 206.292540][ T7417] bch2_fs_start+0x301/0x620 [ 206.292578][ T7417] bch2_fs_get_tree+0x1138/0x18e0 [ 206.292635][ T7417] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 206.292683][ T7417] ? vfs_parse_monolithic_sep+0x427/0x460 [ 206.292720][ T7417] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 206.292756][ T7417] ? rcu_is_watching+0x15/0xb0 [ 206.292785][ T7417] ? apparmor_capable+0x13b/0x1b0 [ 206.292821][ T7417] vfs_get_tree+0x90/0x2b0 [ 206.292851][ T7417] do_new_mount+0x2cf/0xb70 [ 206.292889][ T7417] ? __pfx_do_new_mount+0x10/0x10 [ 206.292931][ T7417] __se_sys_mount+0x38c/0x400 [ 206.292970][ T7417] ? __pfx___se_sys_mount+0x10/0x10 [ 206.293009][ T7417] ? __x64_sys_mount+0x20/0xc0 [ 206.293043][ T7417] do_syscall_64+0xf3/0x230 [ 206.293069][ T7417] ? clear_bhb_loop+0x45/0xa0 [ 206.293093][ T7417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.293115][ T7417] RIP: 0033:0x7fbe3798f90a [ 206.293153][ T7417] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.293171][ T7417] RSP: 002b:00007fbe38854e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 206.293194][ T7417] RAX: ffffffffffffffda RBX: 00007fbe38854ef0 RCX: 00007fbe3798f90a [ 206.293209][ T7417] RDX: 00002000000000c0 RSI: 0000200000000180 RDI: 00007fbe38854eb0 [ 206.293224][ T7417] RBP: 00002000000000c0 R08: 00007fbe38854ef0 R09: 0000000001200010 [ 206.293239][ T7417] R10: 0000000001200010 R11: 0000000000000246 R12: 0000200000000180 [ 206.293253][ T7417] R13: 00007fbe38854eb0 R14: 0000000000005a07 R15: 0000200000000480 [ 206.293287][ T7417] [ 206.709879][ T7417] Mem-Info: [ 206.778837][ T7455] loop1: detected capacity change from 0 to 16 [ 206.786157][ T7455] erofs: Unknown parameter 'fsmagic' [ 207.186226][ T7417] active_anon:8249 inactive_anon:0 isolated_anon:0 [ 207.186226][ T7417] active_file:11494 inactive_file:38365 isolated_file:0 [ 207.186226][ T7417] unevictable:768 dirty:139 writeback:0 [ 207.186226][ T7417] slab_reclaimable:10200 slab_unreclaimable:98677 [ 207.186226][ T7417] mapped:28693 shmem:5778 pagetables:765 [ 207.186226][ T7417] sec_pagetables:0 bounce:0 [ 207.186226][ T7417] kernel_misc_reclaimable:0 [ 207.186226][ T7417] free:1321559 free_pcp:3457 free_cma:0 [ 207.249428][ T7417] Node 0 active_anon:32896kB inactive_anon:0kB active_file:45976kB inactive_file:153384kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114772kB dirty:552kB writeback:0kB shmem:21576kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10752kB pagetables:3160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 207.296148][ T7417] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 207.331502][ T7417] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 207.395965][ T7417] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 207.777958][ T7417] Node 0 DMA32 free:1379260kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:33216kB inactive_anon:0kB active_file:45976kB inactive_file:153288kB unevictable:1536kB writepending:560kB present:3129332kB managed:2547036kB mlocked:0kB bounce:0kB free_pcp:868kB local_pcp:488kB free_cma:0kB [ 208.447722][ T7417] lowmem_reserve[]: 0 0 0 0 0 [ 208.467531][ T7466] loop2: detected capacity change from 0 to 16 [ 208.477598][ T7466] erofs: Unknown parameter 'fsmagic' [ 208.478710][ T7463] netlink: 'syz.1.425': attribute type 9 has an invalid length. [ 208.502934][ T7417] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:96kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 208.530502][ T7417] lowmem_reserve[]: 0 0 0 0 0 [ 208.535382][ T7417] Node 1 Normal free:3909784kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 208.564324][ T7417] lowmem_reserve[]: 0 0 0 0 0 [ 208.569094][ T7417] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 208.582667][ T7417] Node 0 DMA32: 97*4kB (UE) 438*8kB (UME) 151*16kB (UME) 249*32kB (UME) 371*64kB (UME) 96*128kB (UME) 65*256kB (UME) 48*512kB (UME) 26*1024kB (UM) 9*2048kB (UME) 302*4096kB (UM) = 1373572kB [ 208.626842][ T7417] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 208.645849][ T7461] delete_channel: no stack [ 208.652095][ T7417] Node 1 Normal: 202*4kB (UME) 56*8kB (UME) 35*16kB (UME) 182*32kB (UME) 95*64kB (UME) 30*128kB (UME) 12*256kB (UM) 8*512kB (UM) 2*1024kB (UM) 4*2048kB (U) 946*4096kB (ME) = 3909784kB [ 208.708637][ T7417] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 208.746265][ T7417] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 208.764515][ T7417] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 208.775162][ T7417] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 208.787867][ T7417] 56023 total pagecache pages [ 209.025899][ T7471] loop0: detected capacity change from 0 to 32768 [ 209.039431][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 209.067987][ T7417] 0 pages in swap cache [ 209.077528][ T7471] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 209.086073][ T7471] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 209.095640][ T7417] Free swap = 124996kB [ 209.102604][ T7417] Total swap = 124996kB [ 209.106829][ T7417] 2097051 pages RAM [ 209.111884][ T7417] 0 pages HighMem/MovableOnly [ 209.135299][ T7471] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 209.147974][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 209.153155][ T7417] 428634 pages reserved [ 209.159226][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 209.172395][ T7417] 0 pages cma reserved [ 209.203887][ T7417] bcachefs (loop3): error reallocating journal fifo (32768 open entries) [ 209.217137][ T7478] loop1: detected capacity change from 0 to 16 [ 209.219363][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 209.237435][ T7417] ------------[ cut here ]------------ [ 209.243079][ T7417] kernel BUG at fs/bcachefs/journal.h:442! [ 209.249447][ T7417] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 209.255740][ T7417] CPU: 1 UID: 0 PID: 7417 Comm: syz.3.411 Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 209.267132][ T7417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 209.277208][ T7417] RIP: 0010:bch2_fs_initialize+0x15f9/0x1620 [ 209.283201][ T7417] Code: ff e8 8b c6 a8 07 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 04 fe ff ff 4c 89 f7 e8 b2 55 a3 fd e9 f7 fd ff ff e8 08 1e 39 fd 90 <0f> 0b e8 00 1e 39 fd e8 fb 47 a3 fd 4c 89 ff 8b 74 24 38 e8 bf 3f [ 209.302814][ T7417] RSP: 0018:ffffc9000c3ef420 EFLAGS: 00010246 [ 209.308891][ T7417] RAX: ffffffff848a5c38 RBX: 0000000000000000 RCX: 0000000000080000 [ 209.316868][ T7417] RDX: ffffc9000c4d9000 RSI: 000000000007ffff RDI: 0000000000080000 [ 209.324862][ T7417] RBP: ffffc9000c3ef920 R08: ffffffff848a505e R09: 1ffff1100b4992c0 [ 209.332836][ T7417] R10: dffffc0000000000 R11: ffffed100b4992c1 R12: ffff88805a480000 [ 209.340834][ T7417] R13: ffff88805a480820 R14: ffff88805a4c9600 R15: ffff88805a4c95c0 [ 209.348806][ T7417] FS: 00007fbe388556c0(0000) GS:ffff888125080000(0000) knlGS:0000000000000000 [ 209.357734][ T7417] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 209.364312][ T7417] CR2: 00007f09fb897d58 CR3: 0000000061734000 CR4: 00000000003526f0 [ 209.372285][ T7417] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 209.380257][ T7417] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 209.388228][ T7417] Call Trace: [ 209.391516][ T7417] [ 209.394449][ T7417] ? stack_trace_snprint+0x58/0xf0 [ 209.399581][ T7417] ? __pfx_bch2_fs_initialize+0x10/0x10 [ 209.405142][ T7417] ? __se_sys_mount+0x38c/0x400 [ 209.409998][ T7417] ? do_syscall_64+0xf3/0x230 [ 209.414675][ T7417] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.420768][ T7417] ? bch2_get_next_online_dev+0x4ab/0x4e0 [ 209.426495][ T7417] ? bch2_get_next_online_dev+0x2e/0x4e0 [ 209.432132][ T7417] ? __pfx_up_write+0x10/0x10 [ 209.436849][ T7417] ? llist_reverse_order+0x72/0x90 [ 209.441990][ T7417] bch2_fs_start+0x301/0x620 [ 209.446620][ T7417] bch2_fs_get_tree+0x1138/0x18e0 [ 209.451768][ T7417] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 209.457160][ T7417] ? vfs_parse_monolithic_sep+0x427/0x460 [ 209.462935][ T7417] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 209.468584][ T7417] ? rcu_is_watching+0x15/0xb0 [ 209.473353][ T7417] ? apparmor_capable+0x13b/0x1b0 [ 209.478386][ T7417] vfs_get_tree+0x90/0x2b0 [ 209.482811][ T7417] do_new_mount+0x2cf/0xb70 [ 209.487338][ T7417] ? __pfx_do_new_mount+0x10/0x10 [ 209.492373][ T7417] __se_sys_mount+0x38c/0x400 [ 209.497068][ T7417] ? __pfx___se_sys_mount+0x10/0x10 [ 209.502281][ T7417] ? __x64_sys_mount+0x20/0xc0 [ 209.507054][ T7417] do_syscall_64+0xf3/0x230 [ 209.511588][ T7417] ? clear_bhb_loop+0x45/0xa0 [ 209.516299][ T7417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.522211][ T7417] RIP: 0033:0x7fbe3798f90a [ 209.526629][ T7417] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.546245][ T7417] RSP: 002b:00007fbe38854e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 209.554686][ T7417] RAX: ffffffffffffffda RBX: 00007fbe38854ef0 RCX: 00007fbe3798f90a [ 209.562693][ T7417] RDX: 00002000000000c0 RSI: 0000200000000180 RDI: 00007fbe38854eb0 [ 209.570681][ T7417] RBP: 00002000000000c0 R08: 00007fbe38854ef0 R09: 0000000001200010 [ 209.578669][ T7417] R10: 0000000001200010 R11: 0000000000000246 R12: 0000200000000180 [ 209.586645][ T7417] R13: 00007fbe38854eb0 R14: 0000000000005a07 R15: 0000200000000480 [ 209.594643][ T7417] [ 209.597663][ T7417] Modules linked in: [ 209.602388][ T7417] ---[ end trace 0000000000000000 ]--- [ 209.619710][ T7478] erofs: Unknown parameter 'fsmagic' [ 209.630316][ T24] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 209.649376][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 209.658436][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 499ms [ 209.659573][ T7417] RIP: 0010:bch2_fs_initialize+0x15f9/0x1620 [ 209.668426][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 209.678438][ T7471] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 209.688203][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 209.722848][ T7417] Code: ff e8 8b c6 a8 07 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 04 fe ff ff 4c 89 f7 e8 b2 55 a3 fd e9 f7 fd ff ff e8 08 1e 39 fd 90 <0f> 0b e8 00 1e 39 fd e8 fb 47 a3 fd 4c 89 ff 8b 74 24 38 e8 bf 3f [ 209.727076][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 209.778036][ T7417] RSP: 0018:ffffc9000c3ef420 EFLAGS: 00010246 [ 209.791230][ T7417] RAX: ffffffff848a5c38 RBX: 0000000000000000 RCX: 0000000000080000 [ 209.812878][ T7417] RDX: ffffc9000c4d9000 RSI: 000000000007ffff RDI: 0000000000080000 [ 209.848841][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 209.848893][ T7417] RBP: ffffc9000c3ef920 R08: ffffffff848a505e R09: 1ffff1100b4992c0 [ 209.882242][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 209.921665][ T7417] R10: dffffc0000000000 R11: ffffed100b4992c1 R12: ffff88805a480000 [ 209.978015][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.991302][ T7417] R13: ffff88805a480820 R14: ffff88805a4c9600 R15: ffff88805a4c95c0 [ 210.047737][ T7417] FS: 00007fbe388556c0(0000) GS:ffff888124f80000(0000) knlGS:0000000000000000 [ 210.099491][ T7417] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 210.106268][ T7417] CR2: 000000110c3b1ffd CR3: 0000000061734000 CR4: 00000000003526f0 [ 210.114584][ T7417] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 210.124729][ T7417] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 210.132935][ T7417] Kernel panic - not syncing: Fatal exception [ 210.139289][ T7417] Kernel Offset: disabled [ 210.143625][ T7417] Rebooting in 86400 seconds..